JPWO2019181661A1 - Management equipment, batteries, vehicles and management systems - Google Patents

Abstract

The first authentication key is written in the returned battery, which is the battery returned to the station, and the management device that manages the battery assigned to the battery exchange station reads the first authentication key from the returned battery. And a storage unit that stores the second authentication key, a collation unit that collates the first authentication key read by the reading unit with the second authentication key stored in the storage unit, and a collation unit. A generator that generates two new authentication keys that can be mutually authenticated when the first authentication key and the second authentication key collated in the above can mutually authenticate, and one generated by the generator. A document that stores the new authentication key of the above in the storage unit, erases the second authentication key stored in the storage unit, and writes the other new authentication key generated by the generation unit to the rental battery. It has a built-in part.

Description

The present invention relates to management devices, batteries, vehicles and management systems.

There is a system that collates the battery pack ID stored in each of the memory of the electric vehicle and the memory of the battery pack and permits the start of the electric vehicle if they match (see, for example, Patent Document 1). In the system, the management server receives a plurality of IDs including the serial number of the battery pack main body from the dealer store, and issues a new battery pack ID when it is determined that all the IDs are genuine.
[Prior art literature]
[Patent Document]
[Patent Document 1] Japanese Unexamined Patent Publication No. 2012-222945

The problem to be solved

However, in the above system, if the serial number of the battery pack body or the like is copied and written in a counterfeit product whose quality is not guaranteed, the counterfeit product may be judged as genuine by the management server. A user who unintentionally borrows a counterfeit product cannot obtain the quality expected of a genuine product, and is dissatisfied with running with low horsepower or severe battery consumption, for example.

General disclosure

In one aspect of the present invention, a management device is provided. The management device may be located at a station for replacing the removable battery for an electrically driven vehicle to manage the battery. A first authentication key may be written on the returned battery, which is the battery returned to the station. The management device may include a reading unit that reads the first authentication key from the returned battery. The management device may include a storage unit for storing the second authentication key. The management device may include a collating unit that collates the first authentication key read by the reading unit with the second authentication key stored in the storage unit. The management device includes a generation unit that generates two new authentication keys that can be mutually authenticated when the first authentication key and the second authentication key collated by the collation unit can be mutually authenticated. May be good. The management device stores the new authentication key of one of the two new authentication keys generated by the generation unit in the storage unit, and erases the second authentication key stored in the storage unit. May be provided. The management device may include a writing unit that writes the new authentication key of the other of the two new authentication keys generated by the generation unit to the rented battery, which is the battery rented from the station.

The writing unit may write the other new authentication key to the rented battery and output an instruction to rent the rented battery to the station. When the first authentication key and the second authentication key can mutually authenticate, the collating unit may output an instruction to read the information written in the return battery to the reading unit. The information written on the return battery includes battery information about the return battery, usage history information showing how the return battery was used in the vehicle from the time it was attached to the vehicle to the time it was removed, and the return battery is installed. It may include at least one of the related information including at least one of the vehicle-related information related to the vehicle and the user-related information related to the user who uses the vehicle.

The first authentication key may be mutually authenticateable with the third authentication key possessed by the vehicle. The writing unit may write the other new authentication key to the rental battery together with the first authentication key read by the reading unit. When the erasing unit detects that the rental battery is installed in the vehicle and the first authentication key written in the rental battery and the third authentication key of the vehicle can be mutually authenticated, the rental battery is written in the rental battery. The first authentication key may be erased.

When the first authentication key and the second authentication key collated by the collation unit can mutually authenticate, the generation unit can mutually authenticate with two new authentication keys together with two new authentication keys. You may generate another new authentication key. The writing unit may write another new authentication key generated by the generating unit to the rental battery together with the other new authentication key. In the erasing unit, the rental battery is attached to the vehicle, and another new authentication key is used for the vehicle because the first authentication key written in the rental battery and the third authentication key of the vehicle can be mutually authenticated. When it is detected that it has been provided to the rental battery, the first authentication key written on the rental battery may be erased. When the erasing unit detects that another new authentication key has been provided to the vehicle, the erasing unit may erase the third authentication key possessed by the vehicle.

The other new authentication key may be an authentication key unique to the rented battery. The other new authentication key may be a rental battery-specific authentication key, and another new authentication key may be a vehicle-specific authentication key.

In one aspect of the invention, a battery is provided. The battery may be removable to an electrically driven vehicle. The battery may include a storage unit that stores a first authentication key and two new authentication keys that can be mutually authenticated. The battery may include a reading unit that reads out a second authentication key possessed by the vehicle. The battery may include a collating unit that collates the second authentication key read by the reading unit with the first authentication key stored in the storage unit. The battery includes an erasing unit that erases the first authentication key stored in the storage unit when the first authentication key and the second authentication key collated by the collating unit can mutually authenticate each other. May be good.

When the first authentication key and the second authentication key collated by the collating unit can mutually authenticate, the battery is a new one of the two new authentication keys stored in the storage unit. It may further include a provider that provides the authentication key to the vehicle. The erasing unit may erase the first authentication key stored in the storage unit when the providing unit provides one of the new authentication keys to the vehicle.

The erasing unit may erase the second authentication key of the vehicle when the providing unit provides the vehicle with one of the new authentication keys. Of the two new authentication keys, one new authentication key may be a vehicle-specific authentication key and the other new authentication key may be a battery-specific authentication key.

The erasing unit has a management device that is arranged at a station for replacing the battery and manages the battery when the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated. , Erase the third authentication key of the first authentication key and the third authentication key that can be mutually authenticated, and another new authentication key that can be mutually authenticated with the two new authentication keys. May be good.

When the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated, the battery reads the information stored in the storage unit by the vehicle and sends it to the storage unit. When at least one of the information writing processes of the above is possible and the first authentication key and the second authentication key collated by the collating unit cannot be mutually authenticated, the reading process and the writing process by the vehicle are performed. An information processing unit that makes it impossible to perform any of the above processes may be further provided.

In one aspect of the invention, a vehicle is provided. The vehicle may be driven by electricity. The vehicle may include a storage unit for storing the first authentication key. The vehicle may include a reading unit that reads out a second authentication key written in a battery that is removable from the vehicle. The vehicle may include a collating unit that collates the second authentication key read by the reading unit with the first authentication key stored in the storage unit. When the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated, the vehicle has two new authentications written in the reading unit that can be mutually authenticated. An erasing unit may be provided in which one of the keys, a new authentication key, is read out and stored in the storage unit, and the first authentication key stored in the storage unit is erased.

When the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated, the erasing unit causes the reading unit to read one new authentication key and stores it in the storage unit. , Erases the second authentication key of the battery, the second authentication key that can mutually authenticate with the first authentication key, and the other new authentication key of the two new authentication keys. You may.

When the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated, the erasing unit causes the reading unit to read one new authentication key and stores it in the storage unit. , A third authentication key that can be mutually authenticated with the second authentication key, and a mutual authentication with two new authentication keys, that the management device that manages the battery is located at the station for replacing the battery. Of the other possible new authentication keys, the third authentication key may be erased.

Of the two new authentication keys, one new authentication key may be a vehicle-specific authentication key and the other new authentication key may be a battery-specific authentication key. The collating unit may output an instruction to read the information written in the battery to the reading unit when the first authentication key and the second authentication key can mutually authenticate each other.

In one aspect of the invention, a management system is provided. The management system may include a battery. The battery may be removable to an electrically driven vehicle. The management system may include a management device. The management device may be located at a station for battery replacement to manage the battery. A first authentication key may be written on the returned battery, which is the battery returned to the station. The management device may have a reading unit that reads the first authentication key from the returned battery. The management device may have a storage unit for storing the second authentication key. The management device may have a collating unit that collates the first authentication key read by the reading unit with the second authentication key stored in the storage unit. The management device has a generation unit that generates two new authentication keys that can be mutually authenticated when the first authentication key and the second authentication key collated by the collation unit can be mutually authenticated. You may. The management device stores the new authentication key of one of the two new authentication keys generated by the generation unit in the storage unit, and erases the second authentication key stored in the storage unit. May have. The management device may have a writing unit that writes the new authentication key of the other of the two new authentication keys generated by the generation unit to the rented battery, which is the battery rented from the station.

In one aspect of the invention, a management system is provided. The management system may include a plurality of management devices. A plurality of management devices may be arranged at a station for exchanging removable batteries for an electrically driven vehicle to manage the batteries and share information with each other. A first authentication key may be written on the returned battery, which is the battery returned to the station. Each of the plurality of management devices may have a reading unit that reads the first authentication key from the returned battery. Each of the plurality of management devices may have a storage unit for storing the second authentication key. Each of the plurality of management devices may have a collating unit that collates the first authentication key read by the reading unit with the second authentication key stored in the storage unit. Each of the plurality of management devices generates two new authentication keys that can be mutually authenticated when the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated. It may have a part. Each of the plurality of management devices stores the new authentication key of one of the two new authentication keys generated by the generation unit in the storage unit, and stores the second authentication key stored in the storage unit. It may have an erasing unit to be erased. Each of the plurality of management devices may have a writing unit that writes the new authentication key of the other of the two new authentication keys generated by the generation unit to the rented battery, which is the battery rented from the station. .. Each of the plurality of management devices has a transmission unit that transmits a new authentication key of one of the two new authentication keys generated by the generation unit to the other management device.

In one aspect of the invention, a management system is provided. The management system may include a vehicle. The vehicle may be driven by electricity. The management system may include a battery. The battery may be removable to the vehicle. The management system may include a management device. The management device may be located at a station for battery replacement to manage the battery. A first authentication key may be written on the returned battery, which is the battery returned to the station. The management device may have a reading unit that reads the first authentication key from the returned battery. The management device may have a storage unit for storing the second authentication key. The management device may have a collating unit that collates the first authentication key read by the reading unit with the second authentication key stored in the storage unit. The management device has a generation unit that generates three new authentication keys that can be mutually authenticated when the first authentication key and the second authentication key collated by the collation unit can be mutually authenticated. You may. The management device stores a new authentication key of one of the three new authentication keys generated by the generation unit in the storage unit, and erases the second authentication key stored in the storage unit. May have. The management device is a battery that rents out the other two new authentication keys out of the three new authentication keys generated by the generation unit together with the first authentication key read by the reading unit from the station. It may have a writing unit that writes to the battery. The vehicle may have a vehicle storage unit that stores a first authentication key and a third authentication key that can be mutually authenticated. The vehicle may have a vehicle reading unit that reads out the first authentication key written in the rental battery. The vehicle may have a vehicle collation unit that collates the first authentication key read by the vehicle reading unit with the third authentication key stored in the vehicle storage unit. Even if the vehicle has a transmission unit that transmits an authentication notification to that effect when the first authentication key and the third authentication key collated by the vehicle verification unit can mutually authenticate each other. Good. When the erasing unit of the management device receives the authentication notification from the transmitting unit of the vehicle, the erasing unit may erase the first authentication key written in the rental battery.

When the first authentication key and the third authentication key can mutually authenticate, the vehicle verification unit of the vehicle has the vehicle reading unit among the other two new authentication keys written in the rental battery. One of the new authentication keys may be read out and stored in the vehicle storage unit. When the erasing unit of the management device receives the authentication notification from the transmitting unit of the vehicle, the erasing unit may erase the third authentication key stored in the vehicle storage unit of the vehicle.

In one aspect of the invention, a management system is provided. The management device may include a vehicle. The vehicle may be driven by electricity. The management system may include a battery. The battery may be removable to the vehicle. The battery may have a storage unit that stores a first authentication key and two new authentication keys that can be mutually authenticated. The battery may have a reading unit that reads out a second authentication key that the vehicle has. The battery may have a collating unit that collates the second authentication key read by the reading unit with the first authentication key stored in the storage unit. The battery has an erasing unit that erases the first authentication key stored in the storage unit when the first authentication key and the second authentication key collated by the collating unit can mutually authenticate each other. You may.

In one aspect of the invention, a management system is provided. The management system may include a vehicle. The vehicle may be driven by electricity. The management system may include a battery. The battery may be removable to the vehicle. The management system may include a management device. The management device may be located at a station for battery replacement to manage the battery. The management device may generate three new authentication keys that can be mutually authenticated and write two new authentication keys out of the three new authentication keys to the battery. The battery may have a storage unit that stores a first authentication key and two new authentication keys generated by the management device. The battery may have a reading unit that reads out a second authentication key that the vehicle has. The battery may have a collating unit that collates the second authentication key read by the reading unit with the first authentication key stored in the storage unit. The battery has an erasing unit that erases the first authentication key stored in the storage unit when the first authentication key and the second authentication key collated by the collating unit can mutually authenticate each other. You may.

When the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated, the erasing unit has a third authentication key possessed by the management device and can be mutually authenticated with the first authentication key. The authentication key and the third authentication key of the other one of the three new authentication keys may be erased.

In one aspect of the invention, a management system is provided. The management system may include a vehicle. The vehicle may be driven by electricity. The management system may include a battery. The battery may be removable to the vehicle. The vehicle may have a storage unit for storing the first authentication key. The vehicle may have a reading unit that reads out a second authentication key written on the battery. The vehicle may have a collating unit that collates the second authentication key read by the reading unit with the first authentication key stored in the storage unit. When the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated, the vehicle has two new authentications written in the reading unit that can be mutually authenticated. It may have an erasing unit that reads a new authentication key from one of the keys, stores it in the storage unit, and erases the first authentication key stored in the storage unit.

In one aspect of the invention, a management system is provided. The management system may include a vehicle. The vehicle may be driven by electricity. The management system may include a battery. The battery may be removable to the vehicle. The management system may include a management device. The management device may be located at a station for battery replacement to manage the battery. The management device may generate three new authentication keys that can be mutually authenticated and write two new authentication keys out of the three new authentication keys to the battery. A first authentication key and two new authentication keys may be written to the battery. The vehicle may have a storage unit for storing a second authentication key. The vehicle may have a reading unit that reads out the first authentication key written in the battery. The vehicle may have a collating unit that collates the first authentication key read by the reading unit with the second authentication key stored in the storage unit. When the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated, the vehicle has one of the two new authentication keys written in the battery in the reading unit. The new authentication key may be read out and stored in the storage unit, and may have an erasing unit for erasing the second authentication key stored in the storage unit.

In one aspect of the invention, a management system is provided. The management system may include a vehicle. The vehicle may be driven by electricity. The management system may include a battery. The battery may be removable to the vehicle. The management system may include a management device. The management device may be located at a station for battery replacement to manage the battery. A first authentication key may be written on the returned battery, which is the battery returned to the station. The management device may have a reading unit that reads the first authentication key from the returned battery. The management device may have a storage unit for storing the second authentication key. The management device may have a collating unit that collates the first authentication key read by the reading unit with the second authentication key stored in the storage unit. The management device has a generation unit that generates three new authentication keys that can be mutually authenticated when the first authentication key and the second authentication key collated by the collation unit can be mutually authenticated. You may. The management device stores a new authentication key of one of the three new authentication keys generated by the generation unit in the storage unit, and erases the second authentication key stored in the storage unit. May have. The management device is a battery that rents out the other two new authentication keys out of the three new authentication keys generated by the generation unit together with the first authentication key read by the reading unit from the station. It may have a writing unit that writes to the battery. The vehicle may have a vehicle storage unit that stores a first authentication key and a third authentication key that can be mutually authenticated. The vehicle may have a vehicle reading unit that reads out the first authentication key written in the rental battery. The vehicle may have a vehicle collation unit that collates the first authentication key read by the vehicle reading unit with the third authentication key stored in the vehicle storage unit. When the first authentication key and the third authentication key collated by the vehicle collation unit can mutually authenticate, the vehicle has two other new authentications written in the rental battery in the vehicle reading unit. A new authentication key of one of the keys is read out and stored in the vehicle storage unit, the third authentication key stored in the vehicle storage unit is erased, and the first authentication possessed by the rental battery is further performed. It may have a vehicle erasing unit that erases the key and the first authentication key of the other new authentication keys of the two new authentication keys.

The outline of the above invention does not list all the necessary features of the present invention. Sub-combinations of these feature groups can also be inventions.

It is the schematic of the management system 20 by 1st Embodiment. It is a block diagram of the vehicle 100 according to 1st Embodiment. It is a block diagram of the battery 200 by 1st Embodiment. This is an example of a table of operation information history information stored in the operation history storage unit 213. An example of the usage status history information table stored in the usage status history storage unit 215 is shown. It is a block diagram of the station 300 according to 1st Embodiment. It is a block diagram of the management apparatus 400 according to 1st Embodiment. It is a flow chart by 1st Embodiment. It is the schematic of the management system 21 by 2nd Embodiment. It is a block diagram of the vehicle 500 according to the 2nd Embodiment. It is a block diagram of the management apparatus 600 according to 2nd Embodiment. It is a flow chart by 2nd Embodiment. It is a block diagram of the management apparatus 800 according to 3rd Embodiment. It is a flow chart by 3rd Embodiment. It is a figure which shows the example of the computer 1200 which can embody a plurality of aspects of this invention in whole or in part.

Hereinafter, the present invention will be described through embodiments of the invention, but the following embodiments do not limit the invention according to the claims. Also, not all combinations of features described in the embodiments are essential to the means of solving the invention. In the drawings, the same or similar parts may be given the same reference number to omit duplicate explanations.

FIG. 1 is a schematic view of the management system 20 according to the first embodiment. The management system 20 manages a battery 200 that can be attached to and detached from the electrically driven vehicle 100.

The management system 20 includes a battery 200 that charges and discharges electric power between the vehicle 100 used by the user 60 and the vehicle 100 when mounted on the vehicle 100, and a station 300 that accommodates and charges and discharges a plurality of batteries 200. And. The management system 20 further includes a management device 400 that manages the battery 200. The station 300 and the vehicle 100 communicate with the battery 200 by wireless communication means or wired communication means. The management device 400 acquires the information of the vehicle 100 via the battery 200 and the station 300.

The station 300 accommodates and charges the battery 200 used in the vehicle 100. Further, the station 300 lends the battery 200 to the user 60. The management device 400 is, for example, a PC, which manages the station 300 either distributed to the station 300 or remotely. Specifically, the management device 400 controls charging, renting, and discharging the battery 200 housed in the station 300 to an external electric power company.

When the authentication is successful with the authentication key read from the battery 200 returned to the station 300, the management system 20 generates and writes a new authentication key to the battery 200 to be rented to the vehicle 100 next. By updating the authentication key, it is possible to prevent the user 60 from being dissatisfied with the use of counterfeit products whose quality is not guaranteed.

In this embodiment, the vehicle 100 is a motorcycle. Alternatively or additionally, the vehicle 100 may be a motorcycle, an electric bicycle, or the like.

FIG. 2 is a block diagram of the vehicle 100. The vehicle 100 includes a battery accommodating unit 101 accommodating the battery 200, a communication unit 102 communicating with the battery 200 to read and write information, and a writing unit 125 writing a plurality of information to the battery 200 via the communication unit 102. It includes a condition storage unit 121, a vehicle ID storage unit 123, a user-related information storage unit 122, a vehicle-related information storage unit 126, and a storage unit 120 including an authentication key storage unit 124. The vehicle 100 further includes a collating unit 127 for collating the authentication key, an erasing unit 129 for transmitting an erasing signal for erasing the old authentication key to the battery 200 via the communication unit 102, and an arbitrary message, for example, an authentication error. A display unit 131 for displaying a message is provided.

The battery accommodating unit 101 accommodates the battery 200 and is electrically connected. The authentication key storage unit 124 stores the authentication key. The authentication key storage unit 124 is a third authentication key for the vehicle 100 that can be mutually authenticated with the first authentication key for the battery 200 and the second authentication key for the management device 400 written in the battery 200. To store.

When the battery 200 is accommodated in the battery accommodating unit 101, the communication unit 102 reads out the first authentication key written in the battery 200 by wireless communication or wired communication and outputs the first authentication key to the collation unit 127. The communication unit 102 also writes the information input from the writing unit 125 to the battery 200. The communication unit 102 is an example of a vehicle reading unit.

When the first authentication key is input from the communication unit 102, the collation unit 127 acquires the third authentication key stored in the authentication key storage unit 124, and obtains the first authentication key and the third authentication. Match with the key. When the first authentication key and the third authentication key can mutually authenticate, the collating unit 127 outputs the authentication information indicating that fact to the erasing unit 129. When the first authentication key and the third authentication key cannot mutually authenticate, the collation unit 127 outputs an instruction to display an authentication error message to the display unit 131 to display the message.

When the authentication information is input from the collation unit 127, the erasing unit 129 causes the communication unit 102 to read a new third authentication key written in the battery 200 housed in the battery accommodating unit 101. It is stored in the authentication key storage unit 124. The erasing unit 129 further erases the old third authentication key stored in the authentication key storage unit 124. The erasing unit 129 further erases the old first authentication key written in the battery 200 via the communication unit 102. Although a new first authentication key is also written in the battery 200, the erasing unit 129 does not selectively erase the new first authentication key.

The condition storage unit 121 includes a driving propensity determination condition for determining the driving propensity of the user 60 of the vehicle 100, an SOC (Systems of Charge) condition within an appropriate range of the battery 200, and a temperature condition within an appropriate range of the battery 200. To store. The SOC condition within the appropriate range includes not falling below a predetermined appropriate lower limit SOC. The temperature condition within the appropriate range includes not exceeding a predetermined appropriate upper limit temperature and not falling below a predetermined appropriate lower limit temperature.

The vehicle ID storage unit 123 stores a vehicle ID for identifying an individual of the vehicle 100. The vehicle ID includes, for example, VIN (Vehicle Identification Number).

The user-related information storage unit 122 stores user-related information related to the user 60 who uses the vehicle 100. The vehicle-related information storage unit 126 stores vehicle-related information related to the vehicle 100.

The vehicle-related information includes a vehicle ID, a vehicle class information indicating the vehicle class of the vehicle 100, a base position information indicating the position of the base where the vehicle 100 is used, and the like. The user-related information includes a user ID, user address information indicating the user address of the user 60, and the like.

The vehicle 100 further includes a charge / discharge amount measuring unit 103 and a battery temperature measuring unit 107. The charge / discharge amount measuring unit 103 measures the current entering and exiting the battery 200 and the voltage of the battery 200, integrates the current and the voltage to calculate the electric energy, and outputs the power amount to the writing unit 125. The battery temperature measuring unit 107 measures the temperature of the battery 200 and outputs it to the writing unit 125.

The vehicle 100 further includes a regenerative power charging unit 109 that charges the battery 200 with the regenerative power generated by the vehicle 100 by operating the brake of the battery 200.

The vehicle 100 further includes an SOC calculation unit 105 that calculates SOC. The SOC calculation unit 105 calculates the SOC of the battery 200 when the voltage of the battery 200 is input from the charge / discharge amount measurement unit 103 and the temperature of the battery 200 is input from the battery temperature measurement unit 107.

More specifically, the SOC calculation unit 105 determines the pre-measured no-load discharge characteristics (OCV [Open Circuit Voltage]) of the battery 200, the temperature characteristics, and the SOC- of the battery 200 pre-measured under specific conditions. Assuming that the measurement data such as the OCV curve is written in the battery 200 as a reference, the measurement data written in the battery 200 is read out via the communication unit 102. The SOC calculation unit 105 uses the voltage and temperature of the battery 200 input from the charge / discharge amount measurement unit 103 and the battery temperature measurement unit 107, and the measurement data read from the battery 200, to use the impedance track method of the battery 200. The impedance is constantly supplemented, and the SOC-OCV curve read from the battery 200 is updated, that is, written to the battery 200 via the communication unit 102. The SOC calculation unit 105 calculates the current SOC of the battery 200 based on the updated SOC-OCV curve and the current voltage of the battery 200 input from the charge / discharge amount measurement unit 103, and outputs the current SOC to the writing unit 125. To do. The SOC calculation unit 105 also refers to the condition storage unit 121 to determine whether or not the SOC of the battery 200 is within an appropriate range during the installation period, which is the period from the installation of the battery 200 to the vehicle 100 to the removal of the battery 200. Is determined and output to the writing unit 125.

The vehicle 100 further includes a date / time measurement unit 112 that measures the current date and time and outputs the current date and time to the writing unit 125, and a position information acquisition unit 111 that acquires the current position information of the vehicle 100 and outputs the current position information to the writing unit 125. It includes an acceleration measuring unit 113 that measures the acceleration of the vehicle 100 and outputs it to the writing unit 125.

The position information acquisition unit 111 acquires GPS data representing the latitude and longitude of the position of the vehicle 100 from, for example, GPS (Global Positioning System), and the above-mentioned area including the position of the vehicle 100 shown in the GPS data, for example, an area. A, area B, etc. are output as the current position information of the vehicle 100. Further, the position information acquisition unit 111 outputs the acquired GPS data itself as the current position information of the vehicle 100.

The date / time measurement unit 112 measures and outputs, for example, the time zone and the day of the week of one drive cycle from when the ignition switch of the vehicle 100 is turned on to when it is turned off.

The vehicle 100 further measures and writes the running time measuring unit 115 that measures the continuous running time per drive cycle of the vehicle 100 and outputs it to the writing unit 125, and measures the continuous running distance per drive cycle of the vehicle 100. It is provided with a mileage measuring unit 117 that outputs to the inclusion unit 125.

The vehicle 100 further determines the driving propensity of the user 60 of the vehicle 100 based on the information input from the writing unit 125 and the driving propensity determination condition stored in the condition storage unit 121, and causes the writing unit 125 to determine the driving propensity. A driving propensity determination unit 119 for output is provided. Based on the driving propensity determination condition, the driving propensity determination unit 119 determines whether the vehicle corresponds to acceleration-oriented type, energy saving-oriented type, long-distance driving-oriented, long-distance driving-oriented, short-distance driving-oriented, or short-time driving-oriented. to decide.

The writing unit 125 inputs a plurality of information input from each configuration of the vehicle 100 to the vehicle ID stored in the vehicle ID storage unit 123, the user-related information stored in the user-related information storage unit 122, and the user-related information. Along with the vehicle-related information stored in the vehicle-related information storage unit 126, the information is written to the battery 200 via the communication unit 102.

FIG. 3 is a block diagram of the battery 200. The battery 200 is a so-called mobile battery that can be carried by the user 60 in a state of being removed from the vehicle 100.

The battery 200 includes a storage unit 210 that stores a plurality of types of information input from the vehicle 100, and a communication unit 230 that communicates with the station 300 and the vehicle 100.

The storage unit 210 includes a usage history information storage unit 211 that stores usage history information of the battery 200, a battery information storage unit 217 that stores battery information related to the battery 200, an authentication key storage unit 218 that stores an authentication key, and a vehicle. It includes a related information storage unit 219 that stores related information of the battery 200 used in 100. The authentication key storage unit 218 stores the first authentication key and the third authentication key.

The usage history information indicates how the battery 200 was used in the vehicle 100 during the installation period of the battery 200. The usage history information includes driving history information indicating the driving history of the vehicle 100 and usage status history information indicating the usage status history of the battery 200. Correspondingly, the usage history information storage unit 211 includes an operation history storage unit 213 for storing the operation history information and a usage status history storage unit 215 for storing the usage status history information.

The driving history information includes, for example, route history information indicating the history of the route traveled by the vehicle 100 during the installation period of the battery 200. Further, the driving history information includes, for example, historical information such as the continuous mileage per drive cycle of the vehicle 100, the continuous running time, the number of rapid acceleration / deceleration, the running time zone, the running day of the week, and the running area during the installation period of the battery 200. In addition, the cumulative mileage and cumulative mileage of the entire drive cycle during the installation period of the battery 200 are included. The driving history information further includes the driving propensity described above.

The usage history information includes, for example, the installation date and time of the battery 200, the SOC of the battery 200, the charge amount and the discharge amount, and the number of times the temperature of the battery 200 becomes equal to or higher than a predetermined appropriate upper limit temperature during the installation period of the battery 200. Includes historical information such as the number of times the temperature of the battery 200 has fallen below a predetermined appropriate lower limit temperature. The usage status history information includes information on whether or not the SOC of the battery 200 is within an appropriate range during the installation period of the battery 200, and as described above, the information is determined and written by the vehicle 100.

The usage history information may include the temperature history of the battery 200 itself during the installation period of the battery 200. Further, the usage status history information is caused not only by information during the running of the vehicle 100 during the installation period of the battery 200, but also by information other than when the vehicle 100 is running during the period, such as natural discharge of the battery 200 and deterioration over time. Information may be included. Further, the usage status history information includes a degree of deterioration (SOH [States of Health]) indicating the degree of deterioration of the battery 200 during the installation period of the battery 200, a deterioration grade indicating the degree of deterioration in stages, a change in the deterioration grade, and the like. Information may be included, and the information is determined and written by the management device 400. Alternatively, the deterioration degree information may be calculated by the vehicle 100 while the vehicle 100 is traveling.

Here, the degree of deterioration (SOH) of the battery 200 is represented by a capacity retention rate which is a percentage of the capacity of the battery 200 in the current state of the battery 200 with respect to the capacity of the battery 200 in the unused state of the battery 200. .. Degradation (SOH) can also be defined as a percentage of the current capacity of the battery 200 to its nominal capacity.

Further, the usage status history information may include information on whether or not the degree of deterioration of the battery 200 during the installation period of the battery 200 is within an appropriate range, and the information is determined and written by the management device 400.

The battery information stored in the battery information storage unit 217 includes a battery ID for identifying an individual battery 200. The battery information further includes measurement data such as pre-measured no-load discharge characteristics (OCV) of the battery 200, temperature characteristics, and pre-measured SOC-OCV curve of the battery 200 under certain conditions. Battery information may also include the nominal capacity of the battery 200 measured under certain conditions. Further, the battery information may further include information on the type of the battery 200, information on the current maximum allowable current of the battery 200, maximum allowable voltage, maximum allowable temperature, and the like. Information such as the current maximum allowable current, maximum allowable voltage, and maximum allowable temperature of the battery 200 is preferably measured by the vehicle 100 while the vehicle 100 is traveling. Further, the SOC information of the battery 200 stored in the usage status history storage unit 215 and the current deterioration degree information of the battery 200 are also used as the battery information.

The related information storage unit 219 is a user-related information storage unit 221 that stores user-related information related to the user 60 who uses the vehicle 100 equipped with the battery 200, and a vehicle-related vehicle related to the vehicle 100 equipped with the battery 200. Includes a vehicle-related information storage unit 223 that stores information. The user-related information and the vehicle-related information are written by the vehicle 100.

When the communication unit 230 receives an instruction to read and write the information stored in the storage unit 210 from the management device 400 via the station 300, the communication unit 230 reads and writes the information according to the instruction, and reads the information. Sends to station 300. When the communication unit 230 receives the erasure signal from the vehicle 100, the communication unit 230 also erases the old first authentication key stored in, for example, the authentication key storage unit 218 according to the erasure signal.

FIG. 4 is an example of a table of operation information history information stored in the operation history storage unit 213. In the table, "reference number", "continuous mileage [km]", "continuous mileage [h]", "rapid acceleration / deceleration count [times]", "cumulative mileage [km]", "cumulative mileage" [H] ”,“ time zone [hour] ”,“ day of the week ”, and“ traveling area ”are recorded in association with each other. The table is recorded for each user ID (or for each vehicle ID), and the "driving tendency" is recorded for each table.

For example, in the line of reference number 1, the continuous mileage is 3 km, the continuous mileage is 0.4 h, the number of sudden accelerations and decelerations is 2, the cumulative mileage is 3 km, the cumulative mileage is 0.4 h, and the time zone is 8. ~ 9 o'clock, the day of the week is Friday, and the driving area is recorded as A. Further, based on the driving history data for three drive cycles from reference numbers 1 to 3, it is determined that the driving propensity of the user 60 who borrows the battery 200 and uses it in the vehicle 100 is short-distance driving oriented and acceleration-oriented. The result is remembered.

FIG. 5 shows an example of a table of usage status history information stored in the usage status history storage unit 215. In the table, "reference number", "SOC", "charge amount [kWh]", "discharge amount [kWh]", "battery temperature ≥ appropriate upper limit temperature [times]" and "battery temperature ≤ appropriate lower limit temperature [times]". ] ”Is recorded in association with each other.

For example, in the line of reference number 1, the SOC is 98, the charge amount is 0.03 kWh, the discharge amount is 0.3 kWh, the number of times that the battery temperature ≥ the appropriate upper limit temperature is once, and the battery temperature ≤ the appropriate lower limit temperature. The number of times that became is recorded as 0 times. The reference numbers shown at the left ends of the tables of FIGS. 4 and 5 correspond to each other. That is, the data shown by the same reference number is the data in the same one drive cycle.

FIG. 6 is a block diagram of the station 300. The station 300 is instructed by the battery accommodating unit 301 accommodating the plurality of batteries 200, the communication unit 303 that reads and writes to the plurality of batteries 200 accommodated in the battery accommodating unit 301, and the management device 400. A charge / discharge unit 305 that controls the charge / discharge of the battery 200 according to the above is provided.

Based on the instruction from the management device 400, the battery accommodating unit 301 brings the accommodating specific battery 200 into a rentable state, that is, a state in which it can be taken out from the outside. The battery accommodating unit 301 is provided, for example, in the accommodating location so that the accommodating specific battery 200 can be taken out from the outside and the accommodating location of the battery 200 can be easily identified from the outside. The LED may be blinked.

When the communication unit 303 detects that the battery 200 is housed in the battery housing unit 301, it receives the information of the battery 200 and outputs it to the management device 400. Further, the communication unit 303 transmits the information input from the management device 400 to the battery 200 based on the instruction from the management device 400.

The station 300 further includes a display unit 307 that displays information input from the management device 400, and an input unit 309 that accepts input by the user 60. The display unit 307 and the input unit 309 may be an integrated touch panel. Further, the input unit 309 may be a push button arranged independently of the display unit 307.

The display unit 307 may display, for example, a list of deterioration grades and prices of a plurality of batteries 200 to the user 60 who has returned the battery 200. The display unit 307 visually displays to the user 60 the storage location of the battery 200 recommended or selected by the management device 400 by displaying an image of the battery storage unit 301 and blinking a specific storage location in the image. You may inform.

The input unit 309 outputs the information input from the user 60 who returned the battery 200 to the management device 400. The input unit 309 may accept the rental of a specific battery 200 housed in the battery storage unit 301.

FIG. 7 is a block diagram of the management device 400. The management device 400 includes a communication unit 403 that communicates with the station 300, a reading unit 401 that reads out information on the battery 200 stocked in the station 300 via the communication unit 403, and a storage unit 420 that stores a plurality of types of information. To be equipped. The reading unit 401 outputs an instruction to read the information of the battery 200 returned from the user 60 to the station 300 via the communication unit 403.

The storage unit 420 includes an authentication key storage unit 430 that stores the authentication key. The authentication key storage unit 430 stores, for example, a second authentication key.

The storage unit 420 further includes a charge / discharge pattern storage unit 423 for storing the charge / discharge pattern corresponding to the battery information, and a condition storage unit 425 for storing a plurality of determination conditions.

The condition storage unit 425 stores the deterioration grade condition for determining the deterioration grade indicating the deterioration degree of the battery 200 stepwise from the deterioration degree of the battery 200. The deterioration grade condition is, for example, that the relationship between the degree of deterioration (SOH) and the deterioration grade is deterioration grade 1 when SOH = 91 to 100, deterioration grade 2 when SOH = 81 to 90, and SOH = 71 to 80. It sometimes includes deterioration grade 3, deterioration grade 4 when SOH = 61 to 70, deterioration grade 5 when SOH = 51 to 60, and unusability when SOH ≦ 50. The management device 400 may determine that the unusable battery 200 is the recovery target. The condition storage unit 425 further stores the deterioration degree condition within an appropriate range of the battery 200. The deterioration degree condition within an appropriate range includes not falling below a predetermined appropriate lower limit deterioration degree.

The storage unit 420 further stores the cumulative usage history information, which is the cumulative information of the usage history information read by the reading unit 401 from the battery 200 returned to the station 300, in association with the battery ID of the battery 200. Includes part 427. The history storage unit 427 may store the vehicle ID of the vehicle 100 equipped with the battery 200 and the usage history information during the period used by the vehicle 100 in association with the battery ID.

The management device 400 further includes a collation unit 441 for collating the authentication key, a generation unit 443 for generating a new authentication key, and an erasing unit 445 for erasing the old authentication key stored in the authentication key storage unit 430. ..

When the first authentication key and the third authentication key are input from the reading unit 401, the collation unit 441 acquires the second authentication key stored in the authentication key storage unit 430 and obtains the first authentication. The key and the third authentication key are collated with the second authentication key, respectively. When the first authentication key, the third authentication key, and the second authentication key can be mutually authenticated, the collation unit 441 outputs authentication information indicating that fact to the generation unit 443. The collation unit 441 gives an instruction to display an authentication error message when at least one of the first authentication key, the third authentication key, and the second authentication key cannot be mutually authenticated. Output to 307 to display the message. The message may indicate which authentication key pair could not be mutually authenticated.

When the authentication information is input from the collation unit 441, the generation unit 443 generates three new authentication keys that can be mutually authenticated. Specifically, the generation unit 443 generates a new second authentication key, a new first authentication key, and a new third authentication key. The generation unit 443 outputs a new second authentication key to the erasing unit 445, and writes the new first authentication key and the new third authentication key together with the old first authentication key in the writing unit 417. Output to.

When a new second authentication key is input from the generation unit 443, the erasing unit 445 stores the new second authentication key in the authentication key storage unit 430 and stores the new second authentication key in the authentication key storage unit 430 in advance. Erase the old second authentication key, that is, the old second authentication key. The storage of the new second authentication key in the authentication key storage unit 430 and the deletion of the old second authentication key stored in the authentication key storage unit 430 are performed in a predetermined order. It may be in no particular order.

As described above, the authentication key that existed before the authentication key was generated by the generation unit 443 may be called an old authentication key, and the authentication key generated by the generation unit 443 may be called a new authentication key. There is.

The management device 400 further includes a charge / discharge instruction unit 409 that instructs the station 300 to charge / discharge the specific battery 200 stocked in the station 300, and information input from each configuration of the management device 400. Is provided with a writing unit 417 instructing the station 300 to write via the communication unit 403.

The charge / discharge instruction unit 409 instructs the charge / discharge unit 305 of the station 300 to charge the battery 200. In this case, the charge / discharge instruction unit 409 reads the battery information from each battery 200 stocked in the station 300 via the read unit 401, and refers to the charge / discharge pattern storage unit 423 to indicate the charge / discharge pattern corresponding to the battery information. To identify. The charge / discharge instruction unit 409 instructs the charge / discharge unit 305 to charge the battery 200 from the power system with the specified charge / discharge pattern.

The charge / discharge instruction unit 409 manages, for example, the number of batteries 200 stocked in the station 300 and the amount of charge, and when it is determined that the battery 200 is in a surplus state, the charge / discharge unit 305 is charged with a battery. You may instruct the discharge from 200 to the power system. In this case, the charge / discharge instruction unit 409 reads the battery information from each battery 200 stocked in the station 300 via the read unit 401, and refers to the charge / discharge pattern storage unit 423 to indicate the charge / discharge pattern corresponding to the battery information. To identify. Further, the charge / discharge instruction unit 409 instructs the charge / discharge unit 305 to discharge the battery 200 to the power system in the specified charge / discharge pattern.

The writing unit 417 outputs an instruction to read the usage history information read from the battery 200 returned to the station 300 by the user 60 by the reading unit 401 and write the usage history information stored in the history storage unit 427 to the battery 200 lent to the user 60. .. In this case, the writing unit 417 may output an instruction to write the cumulative usage history information stored in the history storage unit 427 to the battery 200 lent to the user 60.

The writing unit 417 has returned the battery 200 when the new first authentication key generated by the generation unit 443 and the new third authentication key are input together with the old first authentication key. An instruction to write to the battery 200 rented from the station 300 is output to the user 60.

The management device 400 further refers to the deterioration degree calculation unit 411 for calculating the deterioration degree of the battery 200 returned to the station 300 and the display mode condition stored in the condition storage unit 425 from the deterioration degree calculation unit 411. A display determination unit 413 for determining the display mode of the deterioration grade in the battery 200 based on the input deterioration grade is provided. The management device 400 further includes a price determination unit 415 that determines the price of the battery 200 based on the deterioration grade input from the deterioration degree calculation unit 411 by referring to the price condition stored in the condition storage unit 425. ..

When the battery ID read by the reading unit 401 is input, the deterioration degree calculation unit 411 extracts the cumulative usage history information stored in the history storage unit 427 by the battery ID, and uses the extracted cumulative usage history information as the extracted cumulative usage history information. Based on this, the degree of deterioration indicating the degree of deterioration of the battery 200 is calculated and output. To calculate the degree of deterioration of the battery 200 based on the cumulative usage history information, the degree of deterioration can be calculated based on the accumulated operation history information, or the degree of deterioration can be calculated based on the accumulated usage status history information. It also includes doing.

The deterioration degree calculation unit 411 further determines the deterioration grade of the battery 200 from the calculated deterioration degree of the battery 200 by referring to the deterioration grade condition stored in the condition storage unit 425, and determines the deterioration grade of the battery 200, and displays the display judgment unit 413 and the price judgment unit. Output to 415 and writing unit 417. The deterioration degree calculation unit 411 further determines the change in the deterioration grade of the battery 200 and outputs the change to the writing unit 417. The deterioration degree calculation unit 411 further determines whether or not the deterioration degree of the battery 200 during the mounting period of the battery 200 is within an appropriate range by referring to the condition storage unit 425, and outputs the data to the writing unit 417. The display determination unit 413 and the price determination unit 415 output the determined display mode of the battery 200 and the battery price to the writing unit 417.

FIG. 8 is a flow chart according to the first embodiment. The explanation of the flow of FIG. 8 starts when a specific user 60 returns the battery 200 used in his / her vehicle 100 to the station 300.

When the battery 200 is mounted on the vehicle 100, the vehicle 100 writes a third authentication key to the battery 200 in advance (S101). When the battery 200 is removed from the vehicle 100 (S103) and returned to the station 300, the management device 400 receives the first authentication key and the third authentication key written in the battery 200 via the station 300. Is read out (S105).

The management device 400 collates each of the read first authentication key and the third authentication key with the second authentication key held by the management device 400 (S107).

If either the first authentication key or the third authentication key cannot mutually authenticate with the second authentication key (S109: NO), an authentication error display instruction is output to the station 300 (S111). The flow ends. If both the first authentication key and the third authentication key can be mutually authenticated with the second authentication key (S109: YES), the information of the battery 200 returned to the station 300 is read out (S112). If mutual authentication cannot be performed, the station 300 cannot read the information of the battery 200.

The management device 400 generates a new first authentication key, a new second authentication key, and a new third authentication key (S113), and uses the old second authentication key stored in the management device 400. Erase and store a new second authentication key (S115).

The management device 400 writes the new first authentication key and the new third authentication key together with the old first authentication key to the battery 200 to be rented to the user 60, and gives an instruction to the station 300 to perform the rent processing. Output (S117). In this case, even if the other first authentication key and the third authentication key are stored in the rented battery 200 in advance, the first authentication key and the third authentication key are updated. The management device 400 preferably rents out the fully charged battery 200.

When the user 60 attaches the battery 200 lent out from the station 300 to the vehicle 100 (S119), the vehicle 100 reads the old first authentication key from the battery 200 (S121), and the old first authentication key is read by itself. It is collated with the old third authentication key held (S123).

If the old first authentication key and the old third authentication key cannot be mutually authenticated (S125: NO), the vehicle 100 displays an authentication error message (S127), and the flow ends. When the first authentication key and the third authentication key can be mutually authenticated (S125: YES), the vehicle 100 reads a new third authentication key from the battery 200 and stores it (S129). , Erase the old third authentication key that it owns (S131). Along with this, the vehicle 100 transmits an erasing signal to the battery 200 (S133) to erase the old first authentication key and the new third authentication key written in the battery 200 (S135), and the flow is finish. As described above, the flow of FIG. 8 is repeatedly executed while each device such as the management device 400 is operating.

In the above embodiment, the vehicle 100 arbitrarily performs a writing process and a reading process of information on the rented battery 200 on the condition that the mutual authentication of the authentication key can be performed with the rented battery 200 in S125. You may.

As described above, according to the management system 20 of the present embodiment, even if a malicious third party illegally obtains the first authentication key from the battery 200 and writes it in a low-priced counterfeit product whose quality is not guaranteed, the first authentication key is concerned. If the genuine battery 200 in which the authentication key of 1 is stored has already been returned to the station 300, it has been updated with a new authentication key, so that the counterfeit product does not succeed in authentication. Therefore, the counterfeit product cannot be applied to either the management device 400 or the vehicle 100. As a result, it is possible to prevent the user 60 from unintentionally borrowing a counterfeit product from the station 300, and borrowing a counterfeit product thinking that it is a genuine battery 200, for example, running with low horsepower or severe battery consumption. You can also prevent dissatisfaction with the battery.

Further, according to the above configuration, if neither the management device 400 nor the vehicle 100 can mutually authenticate the authentication key with the housed battery 200, neither the writing process nor the reading process of the information to the battery 200 can be performed. Since this is not done, it is possible to prevent unauthorized leakage of information via counterfeit products.

FIG. 9 is a schematic view of the management system 21 according to the second embodiment. In the management system 21, the same configuration as the management system 20 of the first embodiment is assigned the same number and the description thereof will be omitted.

In the management system 21, the vehicle 500, the battery 200, and the management device 600 communicate with each other via the communication network 40. The communication network 40 may be wired or wireless.

FIG. 10 is a block diagram of the vehicle 500. The vehicle 500 is different in that it does not have the erasing unit 129 and that the communication unit 502 communicates with the management device 600. In addition, the description of the same configuration as that of the vehicle 100 of the first embodiment will be omitted.

FIG. 11 is a block diagram of the management device 600. The management device 600 is different in that the communication unit 603 also communicates with the vehicle 500, and the erasing unit 645 instructs the vehicle 500 to erase the authentication key. In addition, description of the same configuration as that of the management device 400 of the first embodiment will be omitted.

FIG. 12 is a flow chart of the operation of the management system 21 of the second embodiment. FIG. 12 shows the flow of the operation after step S123 in the operation of FIG. When mutual authentication cannot be performed in the collation in step S123 of FIG. 8 (S225: No), the vehicle 500 displays an authentication error on the display unit 131 (S227) and ends the flow.

If mutual authentication is possible (S225: YES), the vehicle 500 reads a new third authentication key from the battery 200 and stores it (S129). Further, the vehicle 500 transmits an authentication notification indicating that the mutual authentication is successful to the management device 600 (S231).

When the management device 600 receives the authentication notification, it sends an erasing signal for erasing the old first authentication key to the battery 200 (S233). When the battery 200 receives the erase signal via the station 300, it erases the old first authentication key (S235).

Similarly, when the management device 600 receives the authentication notification, the management device 600 sends an erasing signal for erasing the old third authentication key to the vehicle 500 (S237). When the vehicle 500 receives the erase signal, it erases the old third authentication key (S239). This is the end of the flow. As described above, the flow of FIG. 12 is repeatedly executed while each device such as the management device 600 is operating.

This embodiment also has the same effect as that of the first embodiment. Further, the old authentication key of the vehicle 500 and the battery 200 can be erased without providing the erasing unit in the vehicle 500.

FIG. 13 is a block diagram of the management device 800 of the third embodiment. The management device 800 is different from the management device 400 of the first embodiment in that it does not have the erasing unit 445 and that the communication unit 803 communicates with the vehicle 700. In addition, the description of the same configuration of the management device 400 of the first embodiment will be omitted.

The vehicle 700 is different from the vehicle 100 of the first embodiment in that it communicates with the management device 400 and transmits an erasing signal for erasing the authentication key to the erasing unit 129. Since the other parts are the same as those of the vehicle 100 of the first embodiment, the block diagram and description will be omitted.

FIG. 14 is a flow chart of the operation of the third embodiment. FIG. 14 shows the flow of the operation after step S113 in the operation of FIG. First, in step S315, the management device 800 stores a new second authentication key. However, since the management device 800 does not have an erasing unit, the old authentication key remains. Hereinafter, steps S317 to S335 are the same as steps S117 to S135 in FIG. 8, and thus description thereof will be omitted.

The vehicle 700 sends an erasure signal to the management device 800 (S337) on condition that the mutual authentication can be performed in step S325, and erases the old second authentication key recorded in the management device 800 (S339). This is the end of the flow. As described above, the flow of FIG. 14 is repeatedly executed while each device such as the management device 800 is operating.

This embodiment also has the same effect as that of the first embodiment. Further, after the vehicle 700 succeeds in authenticating with the battery 200, the old authentication key of the management device 800 is erased. Therefore, if the authentication between the vehicle 700 and the battery 200 is not successful for some reason despite the fact that the battery is a regular battery 200, the operation can be restarted from step S107 with the old authentication key.

As described above, in the first embodiment, the management device and the vehicle have an erasing unit, in the second embodiment, only the management device has an erasing unit, and in the third embodiment, only the vehicle has an erasing unit. Instead, only the battery may have an eraser.

In this case, the battery may be provided with a collation unit to read the third authentication key from the vehicle and collate it with its own first authentication key. If the collating unit succeeds in authenticating, a new third authentication is transmitted to the vehicle, and the battery disappearing unit erases the old second authentication key of the vehicle.

Further, the collating unit may read the second authentication key from the management device on the battery and collate it with its own first authentication key. If the collating unit succeeds in authenticating, the battery vanishing unit erases the old second authentication key of the management device.

It should be noted that the process of reading and writing the battery information becomes impossible when the authentication is not successful, as in the other embodiments.

The management device, the battery, and the vehicle may each have an erasing unit. Further, none of them has an erasing unit, and a new authentication key may be programmed to erase the old authentication key by some trigger.

In any of the above embodiments, the authentication keys are not particularly limited as long as they can be authenticated by collating with each other. For example, it is determined that the authentication is successful when at least a part of the authentication keys are the same character string, a sequence, or a combination thereof and the same parts match. It may be determined that the authentication is successful by deriving a known solution when a specific operation such as adding the numerical values of each place is performed because the authentication keys are different sequences.

In the first to third embodiments described above, the management device stores the authentication key for the management device generated each time the battery is returned, as many as the number of rented batteries, until the batteries are returned. Instead, the management device generates only the authentication key for the battery and the vehicle each time the battery is returned, holds a common hash value for all the generated authentication keys, and the battery returns. When this is done, it may be determined that the battery and the vehicle are genuine by using the authentication key for the battery and the vehicle obtained from the battery and the hash value without performing mutual authentication of the authentication keys.

In the first to third embodiments described above, when the battery is returned to the station, the management device generates a new mutually authenticateable authentication key unique to each of the management device, the battery, and the vehicle. , The user is supposed to return the battery to the same station as the one that rented it. However, by distributing the new authentication key generated by one management device to a plurality of other management devices and sharing the new authentication key among the plurality of management devices assigned to different stations, the user can use the new authentication key. , The battery may be returned to a different station than the borrowed station, or mutual authentication of the authentication key between the battery and the management device of the different station may be possible. In addition, the management system additionally has a server that receives newly generated authentication keys from multiple management devices and centrally manages them, and when the user returns the battery to a different station from the one that rented the battery, the different station. By inquiring the server and acquiring a new authentication key, the management device of the above may enable mutual authentication of the authentication key between the battery returned by the user and the management device of the different station.

In the first to third embodiments described above, when the battery is returned to the station, the management device generates a new mutually authenticateable authentication key unique to each of the management device, the battery, and the vehicle. Instead, the battery will be returned to the station on a predetermined date and time, for example, after midnight on January 1st and before midnight on January 1st of the following year. Each time, the management device repeatedly generates one authentication key common to the management device, the battery and the vehicle, and after midnight on January 1st of the following year, a new one common to the management device, the battery and the vehicle You may change to one authentication key and repeatedly generate the new one authentication key each time the battery is returned to the station, as in last year.

In any of the above embodiments, the SOC calculation unit updates the SOC-OCV curve read from the battery, and is based on the updated SOC-OCV curve and the current voltage of the battery input from the charge / discharge amount measurement unit. To calculate the current SOC of the battery, instead, the SOC calculator reads the nominal capacity of the battery measured under certain conditions from the battery and the current discharge of the battery under the same specific conditions. The capacitance may be measured and the SOC calculated as the ratio of the current discharge capacitance to the nominal capacitance. Alternatively, the SOC calculation unit reads the SOC-OCV curve of the battery measured in advance under a specific condition from the battery, measures the current voltage of the battery under the same specific condition, and obtains the SOC-OCV curve. SOC may be roughly measured by comparing with each other.

In any of the above embodiments, the battery may be any type of battery that can be charged and discharged, such as an all-solid-state battery and a lithium-ion battery. Further, in any of the above embodiments, the station may be provided with an emergency battery as a buffer. The emergency battery may be, for example, an old battery that has a high degree of deterioration and cannot be used as a rental battery. Further, the station may be provided with a power generation device that generates power with renewable energy such as solar power.

In any of the above embodiments, the battery accommodating portion of the station may be configured to hold the battery in a movable state inside and discharge the battery from the outlet based on an external input.

Further, in any of the above embodiments, the authentication key of the battery may be updated when the battery is returned. Further, in any of the above embodiments, the authentication key may be updated at a predetermined timing instead of updating the authentication key every time the battery is rented out. An example of a predetermined timing is the number of times of authentication with the authentication key at regular intervals.

In any of the above embodiments, when a new vehicle is introduced, there is no stage in which the battery is returned, and the battery is rented out. Therefore, it is preferable that the management company controls the vehicle at the first time when the battery is installed in the vehicle, and the vehicle reads out a new third authentication key from the battery and stores it without performing the collation process. Further, when the authentication is not successful in step S109 or the like in FIG. 8 and a new battery is rented out, the same control may be performed.

Various embodiments of the present invention may be described with reference to flowcharts and block diagrams, wherein the block is (1) a stage of the process in which the operation is performed or (2) a device responsible for performing the operation. May represent a section of. Specific stages and sections are implemented by dedicated circuits, programmable circuits supplied with computer-readable instructions stored on a computer-readable medium, and / or processors supplied with computer-readable instructions stored on a computer-readable medium. You can. Dedicated circuits may include digital and / or analog hardware circuits, and may include integrated circuits (ICs) and / or discrete circuits. Programmable circuits are memory elements such as logical AND, logical OR, logical XOR, logical NAND, logical NOR, and other logical operations, flip-flops, registers, field programmable gate arrays (FPGA), programmable logic arrays (PLA), etc. May include reconfigurable hardware circuits, including, etc.

The computer-readable medium may include any tangible device capable of storing instructions executed by the appropriate device, so that the computer-readable medium having the instructions stored therein is specified in a flowchart or block diagram. It will be equipped with a product that contains instructions that can be executed to create a means for performing the operation. Examples of computer-readable media may include electronic storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, and the like. More specific examples of computer-readable media include floppy® disks, diskettes, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), Electrically erasable programmable read-only memory (EEPROM), static random access memory (SRAM), compact disc read-only memory (CD-ROM), digital versatile disc (DVD), Blu-ray (RTM) disc, memory stick, integrated A circuit card or the like may be included.

Computer-readable instructions are assembler instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state-setting data, or object-oriented programming such as Smalltalk, JAVA®, C ++, etc. Contains either source code or object code written in any combination of one or more programming languages, including languages and traditional procedural programming languages such as the "C" programming language or similar programming languages. Good.

Computer-readable instructions are applied to a general-purpose computer, a special purpose computer, or the processor or programmable circuit of another programmable data processing device, either locally or in a wide area network (WAN) such as the local area network (LAN), the Internet, etc. ) May be executed to create a means for performing the operation specified in the flowchart or block diagram. Examples of processors include computer processors, processing units, microprocessors, digital signal processors, controllers, microcontrollers and the like.

FIG. 15 shows an example of a computer 1200 in which a plurality of aspects of the present invention can be embodied in whole or in part. The program installed on the computer 1200 causes the computer 1200 to function as an operation associated with the device according to an embodiment of the present invention or as one or more "parts" of the device, or the operation or the one or more "parts". A unit can be run and / or a computer 1200 can be made to perform a process according to an embodiment of the present invention or a stage of the process. Such a program may be executed by the CPU 1212 to cause the computer 1200 to perform a specific operation associated with some or all of the blocks of the flowcharts and block diagrams described herein.

The computer 1200 according to this embodiment includes a CPU 1212, a RAM 1214, a graphic controller 1216, and a display device 1218, which are interconnected by a host controller 1210. The computer 1200 also includes input / output units such as a communication interface 1222, a hard disk drive 1224, a DVD-ROM drive 1226, and an IC card drive, which are connected to the host controller 1210 via the input / output controller 1220. The computer also includes legacy I / O units such as the ROM 1230 and keyboard 1242, which are connected to the I / O controller 1220 via the I / O chip 1240.

The CPU 1212 operates according to the programs stored in the ROM 1230 and the RAM 1214, thereby controlling each unit. The graphic controller 1216 acquires image data generated by the CPU 1212 in a frame buffer or the like provided in the RAM 1214 or in the graphic controller 1216 itself, and displays the image data on the display device 1218.

The communication interface 1222 communicates with other electronic devices via a network. The hard disk drive 1224 stores programs and data used by the CPU 1212 in the computer 1200. The DVD-ROM drive 1226 reads the program or data from the DVD-ROM 1201 and provides the program or data to the hard disk drive 1224 via the RAM 1214. The IC card drive reads the program and data from the IC card and / or writes the program and data to the IC card.

The ROM 1230 internally stores a boot program or the like executed by the computer 1200 at the time of activation, and / or a program depending on the hardware of the computer 1200. The input / output chip 1240 may also connect various input / output units to the input / output controller 1220 via a parallel port, a serial port, a keyboard port, a mouse port, and the like.

The program is provided by a computer-readable storage medium such as a DVD-ROM 1201 or an IC card. The program is read from a computer-readable storage medium, installed on a hard disk drive 1224, RAM 1214, or ROM 1230, which is also an example of a computer-readable storage medium, and executed by the CPU 1212. The information processing described in these programs is read by the computer 1200 and provides a link between the program and the various types of hardware resources described above. The device or method may be configured to implement the operation or processing of information in accordance with the use of the computer 1200.

For example, when communication is executed between the computer 1200 and an external device, the CPU 1212 executes a communication program loaded in the RAM 1214, and performs communication processing on the communication interface 1222 based on the processing described in the communication program. You may order. Under the control of the CPU 1212, the communication interface 1222 reads and reads transmission data stored in a transmission buffer area provided in a recording medium such as a RAM 1214, a hard disk drive 1224, a DVD-ROM 1201, or an IC card. The data is transmitted to the network, or the received data received from the network is written to the reception buffer area or the like provided on the recording medium.

Further, the CPU 1212 makes the RAM 1214 read all or necessary parts of a file or a database stored in an external recording medium such as a hard disk drive 1224, a DVD-ROM drive 1226 (DVD-ROM1201), or an IC card. Various types of processing may be performed on the data on the RAM 1214. The CPU 1212 may then write back the processed data to an external recording medium.

Various types of information, such as various types of programs, data, tables, and databases, may be stored on recording media for information processing. The CPU 1212 describes various types of operations, information processing, conditional judgment, conditional branching, unconditional branching, and information retrieval described in various parts of the present disclosure with respect to the data read from the RAM 1214. Various types of processing may be performed, including / replacement, etc., and the results are written back to the RAM 1214. Further, the CPU 1212 may search for information in a file, a database, or the like in the recording medium. For example, when a plurality of entries each having an attribute value of the first attribute associated with the attribute value of the second attribute are stored in the recording medium, the CPU 1212 is the first of the plurality of entries. The attribute value of the attribute of is searched for the entry that matches the specified condition, the attribute value of the second attribute stored in the entry is read, and the first attribute satisfying the predetermined condition is selected. You may get the attribute value of the associated second attribute.

The program or software module described above may be stored on a computer 1200 or in a computer-readable storage medium near the computer 1200. In addition, a recording medium such as a hard disk or RAM provided in a dedicated communication network or a server system connected to the Internet can be used as a computer-readable storage medium, whereby the program can be sent to the computer 1200 via the network. provide.

Although the present invention has been described above using the embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments. It will be apparent to those skilled in the art that various changes or improvements can be made to the above embodiments. Further, to the extent that there is no technical contradiction, the matters described for the specific embodiment can be applied to other embodiments. Further, each component may have the same characteristics as other components having the same name but different reference numerals. It is clear from the claims that the form with such modifications or improvements may also be included in the technical scope of the invention.

The order of execution of operations, procedures, steps, steps, etc. in the devices, systems, programs, and methods shown in the claims, specifications, and drawings is particularly "before" and "prior to". It should be noted that it can be realized in any order unless the output of the previous process is used in the subsequent process. Even if the claims, the specification, and the operation flow in the drawings are explained using "first", "next", etc. for convenience, it means that it is essential to carry out in this order. is not it.

20 management system, 40 communication network, 60 users, 100, 500, 700 vehicles, 101 battery accommodating unit, 102, 502 communication unit, 103 charge / discharge amount measurement unit, 105 SOC calculation unit, 107 battery temperature measurement unit, 109 regenerative power Charging unit, 111 position information acquisition unit, 112 date and time measurement unit, 113 acceleration measurement unit, 115 travel time measurement unit, 117 mileage measurement unit, 119 driving tendency judgment unit, 120 storage unit, 121 condition storage unit, 122 user-related information Storage unit, 123 Vehicle ID storage unit, 124 Authentication key storage unit, 125 Writing unit, 126 Vehicle-related information storage unit, 127 Verification unit, 129 Erasing unit, 131 Display unit, 200 Battery, 210 Storage unit, 211 Usage history information Storage unit, 213 Operation history storage unit, 215 Usage status history storage unit, 217 Battery information storage unit, 218 Authentication key storage unit, 219 Related information storage unit, 221 User-related information storage unit, 223 Vehicle-related information storage unit, 230 Communication Unit, 300 stations, 301 battery accommodating unit, 303 communication unit, 305 charging / discharging unit, 307 display unit, 309 input unit, 400, 600, 800 management device, 401 reading unit, 403, 603, 803 communication unit, 409 charging / discharging unit. Indicator, 411 Deterioration calculation unit, 413 Display judgment unit, 415 Price judgment unit, 417 Writing unit, 420 storage unit, 423 Charge / discharge pattern storage unit, 425 Condition storage unit, 427 History storage unit, 430 Authentication key storage unit , 441 collation unit, 443 generator unit, 445, 645 eraser unit, 1200 computer, 1201 DVD-ROM, 1210 host controller, 1212 CPU, 1214 RAM, 1216 graphic controller, 1218 display device, 1220 input / output controller, 1222 communication interface, 1224 hard disk drive, 1226 DVD-ROM drive, 1230 ROM, 1240 input / output chip, 1242 keyboard

Claims (31)

It is a management device that manages the battery by being arranged at a station for replacing a battery that can be attached to and detached from an electrically driven vehicle.
A first authentication key is written on the returned battery, which is the battery returned to the station.
The management device is
A reading unit that reads the first authentication key from the returned battery,
A storage unit that stores the second authentication key,
A collating unit that collates the first authentication key read by the reading unit with the second authentication key stored in the storage unit.
When the first authentication key and the second authentication key collated by the collation unit can be mutually authenticated, a generation unit that generates two new authentication keys that can be mutually authenticated, and a generation unit.
The new authentication key of one of the two new authentication keys generated by the generation unit is stored in the storage unit, and the second authentication key stored in the storage unit is erased. Eraser and
A management device including a writing unit that writes the new authentication key of the other of the two new authentication keys generated by the generation unit to the rented battery, which is the battery rented from the station. The writing unit writes the other new authentication key to the rented battery and outputs an instruction to rent the rented battery to the station.
The management device according to claim 1. When the first authentication key and the second authentication key can mutually authenticate, the collation unit outputs an instruction to read the information written in the return battery to the reading unit.
The management device according to claim 1 or 2. The information written in the returned battery includes battery information regarding the returned battery, usage history information indicating how the returned battery was used in the vehicle from the time it is attached to the vehicle to the time it is removed, and the usage history information indicating how the returned battery was used in the vehicle. Includes at least one of the relevant information, including at least one of the vehicle-related information related to the vehicle fitted with the return battery and the user-related information related to the user using the vehicle.
The management device according to claim 3. The first authentication key can be mutually authenticated with the third authentication key possessed by the vehicle.
The writing unit writes the other new authentication key to the rental battery together with the first authentication key read by the reading unit.
The management device according to any one of claims 1 to 4. The erasing unit detects that the rental battery is mounted on the vehicle and that the first authentication key written in the rental battery and the third authentication key of the vehicle can be mutually authenticated. Then, the first authentication key written in the rental battery is erased.
The management device according to claim 5. When the first authentication key and the second authentication key collated by the collation unit can be mutually authenticated, the generation unit together with the two new authentication keys, the two new authentications. Generate another new authentication key that can be mutually authenticated with the key,
The writing unit writes the other new authentication key generated by the generating unit to the rental battery together with the other new authentication key.
The erasing unit is said to be able to mutually authenticate the first authentication key written in the rental battery and the third authentication key possessed by the vehicle when the rental battery is mounted on the vehicle. When it is detected that another new authentication key has been provided to the vehicle, the first authentication key written in the rental battery is erased.
The management device according to claim 6. When the erasing unit detects that another new authentication key has been provided to the vehicle, the erasing unit erases the third authentication key possessed by the vehicle.
The management device according to claim 7. The other new authentication key is an authentication key unique to the rental battery.
The management device according to any one of claims 1 to 6. The other new authentication key is an authentication key unique to the rental battery, and the other new authentication key is an authentication key unique to the vehicle.
The management device according to claim 7 or 8. A battery that can be attached to and detached from an electrically driven vehicle.
A storage unit that stores a first authentication key and two new authentication keys that can be mutually authenticated.
A reading unit that reads out the second authentication key of the vehicle,
A collating unit that collates the second authentication key read by the reading unit with the first authentication key stored in the storage unit.
An erasing unit that erases the first authentication key stored in the storage unit when the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated. Battery with. When the first authentication key and the second authentication key collated by the collation unit can mutually authenticate, one of the two new authentication keys stored in the storage unit. Further provided with a providing unit that provides the new authentication key to the vehicle.
The erasing unit erases the first authentication key stored in the storage unit when the providing unit provides the vehicle with one of the new authentication keys.
The battery according to claim 11. The erasing unit erases the second authentication key of the vehicle when the providing unit provides the vehicle with one of the new authentication keys.
The battery according to claim 12. Of the two new authentication keys, one of the new authentication keys is a vehicle-specific authentication key, and the other new authentication key is a battery-specific authentication key.
The battery according to claim 12 or 13. The erasing unit is arranged at a station for replacing the battery when the first authentication key and the second authentication key collated by the collating unit can mutually authenticate, and the battery is used. Of the third authentication key that the management device to manage has and can mutually authenticate with the first authentication key, and another new authentication key that can mutually authenticate with the two new authentication keys. Erase the third authentication key,
The battery according to any one of claims 11 to 14. When the first authentication key and the second authentication key collated by the collation unit can mutually authenticate, the vehicle reads the information stored in the storage unit, and the above-mentioned. When at least one of the processing of writing information to the storage unit is possible and the first authentication key and the second authentication key collated by the collation unit cannot be mutually authenticated, the vehicle. Further includes an information processing unit that makes it impossible to perform both the read process and the write process.
The battery according to any one of claims 11 to 15. It ’s an electrically driven vehicle.
A storage unit that stores the first authentication key,
A reading unit that reads out the second authentication key written in the battery that can be attached to and detached from the vehicle.
A collating unit that collates the second authentication key read by the reading unit with the first authentication key stored in the storage unit.
When the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated, two new authentication keys written in the battery are written in the reading unit and can be mutually authenticated. A vehicle including an erasing unit that reads out one of the new authentication keys, stores the new authentication key in the storage unit, and erases the first authentication key stored in the storage unit. When the first authentication key and the second authentication key collated by the collation unit can be mutually authenticated, the erasing unit reads the one new authentication key to the reading unit. A second authentication key that is stored in the storage unit and can be mutually authenticated with the first authentication key of the battery, and another new authentication of the two new authentication keys. Of the keys, the second authentication key is erased.
The vehicle according to claim 17. When the first authentication key and the second authentication key collated by the collation unit can be mutually authenticated, the erasing unit reads the one new authentication key to the reading unit. A third authentication key that can be mutually authenticated with the second authentication key, which is stored in the storage unit and is arranged in a station for replacing the battery and has a management device that manages the battery, and a third authentication key. , Of the two new authentication keys and another new authentication key that can mutually authenticate, the third authentication key is deleted.
The vehicle according to claim 17 or 18. Of the two new authentication keys, one of the new authentication keys is a vehicle-specific authentication key, and the other new authentication key is a battery-specific authentication key.
The vehicle according to any one of claims 17 to 19. When the first authentication key and the second authentication key can mutually authenticate, the collating unit outputs an instruction to read the information written in the battery to the reading unit.
The vehicle according to any one of claims 17 to 20. A battery that can be attached to and detached from an electrically driven vehicle,
It is provided with a management device that is arranged at a station for replacing the battery and manages the battery.
A first authentication key is written on the returned battery, which is the battery returned to the station.
The management device is
A reading unit that reads the first authentication key from the returned battery,
A storage unit that stores the second authentication key,
A collating unit that collates the first authentication key read by the reading unit with the second authentication key stored in the storage unit.
When the first authentication key and the second authentication key collated by the collation unit can be mutually authenticated, a generation unit that generates two new authentication keys that can be mutually authenticated, and a generation unit.
The new authentication key of one of the two new authentication keys generated by the generation unit is stored in the storage unit, and the second authentication key stored in the storage unit is erased. Eraser and
It has a writing unit that writes the new authentication key of the other of the two new authentication keys generated by the generation unit to the rented battery, which is the battery rented from the station.
Management system. It is a management system provided with a plurality of management devices arranged at a station for exchanging removable batteries for an electrically driven vehicle to manage the batteries and share information with each other.
A first authentication key is written on the returned battery, which is the battery returned to the station.
Each of the plurality of management devices
A reading unit that reads the first authentication key from the returned battery,
A storage unit that stores the second authentication key,
A collating unit that collates the first authentication key read by the reading unit with the second authentication key stored in the storage unit.
When the first authentication key and the second authentication key collated by the collation unit can be mutually authenticated, a generation unit that generates two new authentication keys that can be mutually authenticated, and a generation unit.
The new authentication key of one of the two new authentication keys generated by the generation unit is stored in the storage unit, and the second authentication key stored in the storage unit is erased. Eraser and
A writing unit that writes the new authentication key of the other of the two new authentication keys generated by the generation unit to the rented battery, which is the battery rented from the station.
It has a transmission unit that transmits one of the two new authentication keys generated by the generation unit to another management device.
Management system. Vehicles driven by electricity and
A battery that can be attached to and detached from the vehicle,
It is provided with a management device that is arranged at a station for replacing the battery and manages the battery.
A first authentication key is written on the returned battery, which is the battery returned to the station.
The management device is
A reading unit that reads the first authentication key from the returned battery,
A storage unit that stores the second authentication key,
A collating unit that collates the first authentication key read by the reading unit with the second authentication key stored in the storage unit.
When the first authentication key and the second authentication key collated by the collation unit can be mutually authenticated, a generation unit that generates three new authentication keys that can be mutually authenticated, and a generation unit.
The new authentication key of one of the three new authentication keys generated by the generation unit is stored in the storage unit, and the second authentication key stored in the storage unit is erased. Eraser and
The battery that rents out the other two of the three new authentication keys generated by the generation unit together with the first authentication key read by the reading unit from the station. It has a writing unit that writes to the rental battery, which is
The vehicle
A vehicle storage unit that stores a third authentication key that can be mutually authenticated with the first authentication key, and a vehicle storage unit.
A vehicle reading unit that reads out the first authentication key written in the rental battery, and
A vehicle collation unit that collates the first authentication key read by the vehicle reading unit with the third authentication key stored in the vehicle storage unit.
It has a transmission unit that transmits an authentication notification indicating that when the first authentication key and the third authentication key collated by the vehicle verification unit can mutually authenticate to each other. ,
When the erasing unit of the management device receives the authentication notification from the transmitting unit of the vehicle, the erasing unit erases the first authentication key written in the rental battery.
Management system. When the first authentication key and the third authentication key can be mutually authenticated, the vehicle collation unit of the vehicle has the other two written in the rental battery in the vehicle reading unit. The new authentication key of one of the two new authentication keys is read out and stored in the vehicle storage unit.
When the erasing unit of the management device receives the authentication notification from the transmitting unit of the vehicle, the erasing unit erases the third authentication key stored in the vehicle storage unit of the vehicle.
The management system according to claim 24. Vehicles driven by electricity and
It is equipped with a battery that can be attached to and detached from the vehicle.
The battery is
A storage unit that stores a first authentication key and two new authentication keys that can be mutually authenticated.
A reading unit that reads out the second authentication key of the vehicle,
A collating unit that collates the second authentication key read by the reading unit with the first authentication key stored in the storage unit.
An erasing unit that erases the first authentication key stored in the storage unit when the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated. Have,
Management system. Vehicles driven by electricity and
A battery that can be attached to and detached from the vehicle,
It is provided with a management device that is arranged at a station for replacing the battery and manages the battery.
The management device generates three new authentication keys that can be mutually authenticated, and writes two of the three new authentication keys to the battery.
The battery is
A storage unit for storing the first authentication key and the two new authentication keys generated by the management device.
A reading unit that reads out the second authentication key of the vehicle,
A collating unit that collates the second authentication key read by the reading unit with the first authentication key stored in the storage unit.
An erasing unit that erases the first authentication key stored in the storage unit when the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated. Have,
Management system. Vehicles driven by electricity and
It is equipped with a battery that can be attached to and detached from the vehicle.
The vehicle
A storage unit that stores the first authentication key,
A reading unit that reads out the second authentication key written in the battery,
A collating unit that collates the second authentication key read by the reading unit with the first authentication key stored in the storage unit.
When the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated, two new authentication keys written in the battery are written in the reading unit and can be mutually authenticated. The new authentication key is read out and stored in the storage unit, and the first authentication key stored in the storage unit is erased.
Management system. Vehicles driven by electricity and
A battery that can be attached to and detached from the vehicle,
It is provided with a management device that is arranged at a station for replacing the battery and manages the battery.
The management device generates three new authentication keys that can be mutually authenticated, and writes two of the three new authentication keys to the battery.
The first authentication key and the two new authentication keys are written on the battery.
The vehicle
A storage unit that stores the second authentication key,
A reading unit that reads out the first authentication key written in the battery,
A collating unit that collates the first authentication key read by the reading unit with the second authentication key stored in the storage unit.
When the first authentication key and the second authentication key collated by the collation unit can mutually authenticate, the two new authentication keys written in the battery are stored in the reading unit. It has an erasing unit that reads out one of the new authentication keys, stores the new authentication key in the storage unit, and erases the second authentication key stored in the storage unit.
Management system. The erasing unit mutually authenticates with the first authentication key possessed by the management device when the first authentication key and the second authentication key collated by the collating unit can be mutually authenticated. Of the third authentication key that can be authenticated and the other one new authentication key among the three new authentication keys, the third authentication key is erased.
The management system according to claim 27 or 29. Vehicles driven by electricity and
A battery that can be attached to and detached from the vehicle,
It is provided with a management device that is arranged at a station for replacing the battery and manages the battery.
A first authentication key is written on the returned battery, which is the battery returned to the station.
The management device is
A reading unit that reads the first authentication key from the returned battery,
A storage unit that stores the second authentication key,
A collating unit that collates the first authentication key read by the reading unit with the second authentication key stored in the storage unit.
When the first authentication key and the second authentication key collated by the collation unit can be mutually authenticated, a generation unit that generates three new authentication keys that can be mutually authenticated, and a generation unit.
The new authentication key of one of the three new authentication keys generated by the generation unit is stored in the storage unit, and the second authentication key stored in the storage unit is erased. Eraser and
The battery that rents out the other two of the three new authentication keys generated by the generation unit together with the first authentication key read by the reading unit from the station. It has a writing unit that writes to the rental battery, which is
The vehicle
A vehicle storage unit that stores a third authentication key that can be mutually authenticated with the first authentication key, and a vehicle storage unit.
A vehicle reading unit that reads out the first authentication key written in the rental battery, and
A vehicle collation unit that collates the first authentication key read by the vehicle reading unit with the third authentication key stored in the vehicle storage unit.
When the first authentication key and the third authentication key collated by the vehicle matching unit can be mutually authenticated, the other two items written in the rental battery are written in the vehicle reading unit. The new authentication key of one of the new authentication keys is read out and stored in the vehicle storage unit, the third authentication key stored in the vehicle storage unit is erased, and the rental is further performed. It has the first authentication key of the battery, and a vehicle erasing unit that erases the first authentication key of the other new authentication keys of the other two new authentication keys. ,
Management system.

Images