WO2021025061A1 - Battery management system, battery device, battery management method, and computer program - Google Patents

Battery management system, battery device, battery management method, and computer program Download PDF

Info

Publication number
WO2021025061A1
WO2021025061A1 PCT/JP2020/030002 JP2020030002W WO2021025061A1 WO 2021025061 A1 WO2021025061 A1 WO 2021025061A1 JP 2020030002 W JP2020030002 W JP 2020030002W WO 2021025061 A1 WO2021025061 A1 WO 2021025061A1
Authority
WO
WIPO (PCT)
Prior art keywords
battery
vehicle
battery device
information
battery information
Prior art date
Application number
PCT/JP2020/030002
Other languages
French (fr)
Japanese (ja)
Inventor
光司 荒井
Original Assignee
住友電気工業株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 住友電気工業株式会社 filed Critical 住友電気工業株式会社
Priority to JP2021537346A priority Critical patent/JPWO2021025061A1/ja
Publication of WO2021025061A1 publication Critical patent/WO2021025061A1/en

Links

Images

Classifications

    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
    • B60L3/00—Electric devices on electrically-propelled vehicles for safety purposes; Monitoring operating variables, e.g. speed, deceleration or energy consumption
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
    • B60L53/00—Methods of charging batteries, specially adapted for electric vehicles; Charging stations or on-board charging equipment therefor; Exchange of energy storage elements in electric vehicles
    • B60L53/60—Monitoring or controlling charging stations
    • B60L53/68—Off-site monitoring or control, e.g. remote control
    • B—PERFORMING OPERATIONS; TRANSPORTING
    • B60—VEHICLES IN GENERAL
    • B60L—PROPULSION OF ELECTRICALLY-PROPELLED VEHICLES; SUPPLYING ELECTRIC POWER FOR AUXILIARY EQUIPMENT OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRODYNAMIC BRAKE SYSTEMS FOR VEHICLES IN GENERAL; MAGNETIC SUSPENSION OR LEVITATION FOR VEHICLES; MONITORING OPERATING VARIABLES OF ELECTRICALLY-PROPELLED VEHICLES; ELECTRIC SAFETY DEVICES FOR ELECTRICALLY-PROPELLED VEHICLES
    • B60L58/00—Methods or circuit arrangements for monitoring or controlling batteries or fuel cells, specially adapted for electric vehicles
    • B60L58/10—Methods or circuit arrangements for monitoring or controlling batteries or fuel cells, specially adapted for electric vehicles for monitoring or controlling batteries
    • G—PHYSICS
    • G08—SIGNALLING
    • G08G—TRAFFIC CONTROL SYSTEMS
    • G08G1/00—Traffic control systems for road vehicles
    • G08G1/01—Detecting movement of traffic to be counted or controlled
    • H—ELECTRICITY
    • H01—ELECTRIC ELEMENTS
    • H01M—PROCESSES OR MEANS, e.g. BATTERIES, FOR THE DIRECT CONVERSION OF CHEMICAL ENERGY INTO ELECTRICAL ENERGY
    • H01M10/00—Secondary cells; Manufacture thereof
    • H01M10/42—Methods or arrangements for servicing or maintenance of secondary cells or secondary half-cells
    • H01M10/48—Accumulators combined with arrangements for measuring, testing or indicating the condition of cells, e.g. the level or density of the electrolyte
    • H—ELECTRICITY
    • H02—GENERATION; CONVERSION OR DISTRIBUTION OF ELECTRIC POWER
    • H02J—CIRCUIT ARRANGEMENTS OR SYSTEMS FOR SUPPLYING OR DISTRIBUTING ELECTRIC POWER; SYSTEMS FOR STORING ELECTRIC ENERGY
    • H02J7/00—Circuit arrangements for charging or depolarising batteries or for supplying loads from batteries
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02E—REDUCTION OF GREENHOUSE GAS [GHG] EMISSIONS, RELATED TO ENERGY GENERATION, TRANSMISSION OR DISTRIBUTION
    • Y02E60/00—Enabling technologies; Technologies with a potential or indirect contribution to GHG emissions mitigation
    • Y02E60/10—Energy storage using batteries
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02T—CLIMATE CHANGE MITIGATION TECHNOLOGIES RELATED TO TRANSPORTATION
    • Y02T10/00—Road transport of goods or passengers
    • Y02T10/60—Other road transportation technologies with climate change mitigation effect
    • Y02T10/70—Energy storage systems for electromobility, e.g. batteries
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02T—CLIMATE CHANGE MITIGATION TECHNOLOGIES RELATED TO TRANSPORTATION
    • Y02T10/00—Road transport of goods or passengers
    • Y02T10/60—Other road transportation technologies with climate change mitigation effect
    • Y02T10/7072—Electromobility specific charging systems or methods for batteries, ultracapacitors, supercapacitors or double-layer capacitors
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02T—CLIMATE CHANGE MITIGATION TECHNOLOGIES RELATED TO TRANSPORTATION
    • Y02T90/00—Enabling technologies or technologies with a potential or indirect contribution to GHG emissions mitigation
    • Y02T90/10—Technologies relating to charging of electric vehicles
    • Y02T90/12—Electric charging stations
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02T—CLIMATE CHANGE MITIGATION TECHNOLOGIES RELATED TO TRANSPORTATION
    • Y02T90/00—Enabling technologies or technologies with a potential or indirect contribution to GHG emissions mitigation
    • Y02T90/10—Technologies relating to charging of electric vehicles
    • Y02T90/16—Information or communication technologies improving the operation of electric vehicles

Definitions

  • This disclosure relates to a battery management system, a battery device, a battery management method, and a computer program.
  • This application claims priority based on Japanese Application No. 2019-145331 filed on August 7, 2019, and incorporates all the contents described in the Japanese application.
  • Patent Document 1 discloses a power supply device including a battery controller and a plurality of battery modules, and determining unauthorized use of the battery modules.
  • each battery module has a self-controller.
  • the self-controller calculates the SOC (State of Charge) and the degree of deterioration of the battery module, and transmits the battery information including the SOC and the degree of deterioration to the battery controller.
  • the self-controller also sends an authentication key to the battery controller, and determines unauthorized use of its own module according to the result of authentication using the authentication key by the battery controller.
  • the battery management system is a battery management system that manages a battery device mounted on a vehicle, and is based on communication processing between a plurality of vehicle-mounted devices mounted on the vehicle.
  • a determination unit for determining whether or not is mounted on a legitimate vehicle, a detection unit for detecting the state of the battery module included in the battery device, and a battery indicating the state of the battery module detected by the detection unit.
  • the determination unit determines that the battery device is mounted on the legitimate vehicle, it includes a transmission unit for transmitting the battery information in order to give information to a server outside the vehicle.
  • the transmitting unit transmits the battery information, and when the determination unit determines that the battery device is not mounted on the legitimate vehicle, the transmitting unit does not transmit the battery information.
  • the battery device is a battery device mounted on a vehicle, and the battery device is mounted on a regular vehicle based on communication processing between a plurality of in-vehicle devices mounted on the vehicle.
  • a server outside the vehicle that determines whether or not the battery module is in use, a battery module, a detection unit that detects the state of the battery module, and battery information indicating the state of the battery module detected by the detection unit.
  • the transmission unit transmits the battery information. Then, when the determination unit determines that the battery device is not mounted on the legitimate vehicle, the transmission unit does not transmit the battery information.
  • the battery management method is a battery management method for managing a battery device mounted on a vehicle, and the battery device is based on communication processing between a plurality of vehicle-mounted devices mounted on the vehicle. Is installed in a legitimate vehicle, a step of detecting the state of the battery module included in the battery device, and a battery information indicating the detected state of the battery module are provided outside the vehicle.
  • the step of transmitting the battery information has a step of transmitting the battery information in order to provide the battery information to the server, and the step of transmitting the battery information is the battery when it is determined that the battery device is mounted on the legitimate vehicle. It includes transmitting the information and not transmitting the battery information when it is determined that the battery device is not mounted on the legitimate vehicle.
  • the computer program is a computer program for a computer to manage a battery device mounted on a vehicle, and is used for communication processing between a plurality of vehicle-mounted devices mounted on the vehicle. Based on this, a step of determining whether or not the battery device is mounted in a legitimate vehicle, a step of detecting the state of the battery module included in the battery device, and a battery indicating the detected state of the battery module.
  • the step of transmitting the battery information and the step of transmitting the battery information are executed, and the step of transmitting the battery information determines that the battery device is mounted on the legitimate vehicle. If this is done, the battery information is transmitted, and if it is determined that the battery device is not mounted on the legitimate vehicle, the battery information is not transmitted.
  • the present disclosure can be realized not only as a battery device having a characteristic configuration as described above, but also as a detection method in which a characteristic process in the battery device is a step, or a computer is made to execute such a step. It can be realized as a computer program for. Further, a part or all of the battery device can be realized as a semiconductor integrated circuit, or can be realized as a battery management system including the battery device.
  • the battery management system is a battery management system that manages a battery device mounted on a vehicle, and is based on communication processing between a plurality of vehicle-mounted devices mounted on the vehicle.
  • a determination unit for determining whether or not the device is mounted on a legitimate vehicle, a detection unit for detecting the state of the battery module included in the battery device, and a state of the battery module detected by the detection unit are shown.
  • the determination unit determines that the battery device is mounted on the legitimate vehicle.
  • the transmitting unit transmits the battery information, and when the determination unit determines that the battery device is not mounted on the legitimate vehicle, the transmitting unit does not transmit the battery information. This prevents incorrect battery information from being transmitted if the battery device is not installed in a legitimate vehicle. Therefore, the reliability of the battery device can be ensured.
  • the "regular vehicle” is a vehicle defined by a formal engine (vehicle manufacturer, authorized dealer, etc.) as a mounting destination of the battery device.
  • the vehicle in which the battery device is first installed is the "regular vehicle” for the battery device.
  • the "regular vehicle” for the battery device installed in the new vehicle is the new vehicle.
  • the vehicle is a "genuine vehicle” for the battery device after the replacement.
  • the communication process is a message communication process between the battery device and an in-vehicle device different from the battery device, and the determination unit determines the message communication process. May be determined whether or not the battery device is mounted in the legitimate vehicle based on whether or not is normally executed. If the battery device is removed from the vehicle, the message communication process will not be executed normally. Therefore, the unauthorized removal of the battery device from the vehicle can be detected by utilizing the message communication processing between the battery device and the in-vehicle device.
  • the message communication process may be a process of communicating an authentication message generated by an authentication process using an authentication key between the battery device and the in-vehicle device.
  • the message communication process may be a process of communicating an authentication message generated by an authentication process using an authentication key between the battery device and the in-vehicle device.
  • the battery device may include the determination unit and the transmission unit.
  • the determination unit and the transmission unit By providing the determination unit and the transmission unit in the battery device, it is possible to realize a function of detecting unauthorized removal of the battery device without significantly modifying the configuration of the other in-vehicle device.
  • the in-vehicle device may include the determination unit.
  • the communication process is a communication process between a plurality of in-vehicle devices different from the battery device, the battery device includes the determination unit, and the determination unit includes the determination unit.
  • Communication between the plurality of vehicle-mounted devices may be monitored, and based on the monitoring result, it may be determined whether or not the battery device is mounted on the legitimate vehicle.
  • the determination unit can monitor the communication regarding the running of the vehicle between the plurality of in-vehicle devices. Communication monitoring fails when the battery device is removed from the vehicle. Therefore, it is possible to detect the unauthorized removal of the battery device from the vehicle by utilizing the communication processing between the in-vehicle devices.
  • the battery device is a battery device mounted on a vehicle, and the battery device is mounted on a regular vehicle based on communication processing between a plurality of in-vehicle devices mounted on the vehicle.
  • a determination unit for determining whether or not the battery module is installed, a battery module, a detection unit for detecting the state of the battery module, and battery information indicating the state of the battery module detected by the detection unit are provided outside the vehicle.
  • the transmission unit includes a transmission unit for transmitting the battery information in order to give the battery information to the server. If the determination unit determines that the battery device is not mounted on the legitimate vehicle, the transmission unit does not transmit the battery information. This prevents incorrect battery information from being transmitted if the battery device is not installed in a legitimate vehicle. Therefore, the reliability of the battery device can be ensured.
  • the battery management method is a battery management method for managing a battery device mounted on a vehicle, and is based on communication processing between a plurality of vehicle-mounted devices mounted on the vehicle.
  • the step of transmitting the battery information and the step of transmitting the battery information for giving to an external server are described. It includes transmitting the battery information and not transmitting the battery information when it is determined that the battery device is not mounted on the legitimate vehicle. This prevents incorrect battery information from being transmitted if the battery device is not installed in a legitimate vehicle. Therefore, the reliability of the battery device can be ensured.
  • the computer program according to the present embodiment is a computer program for the computer to manage the battery device mounted on the vehicle, and the computer performs communication processing between a plurality of vehicle-mounted devices mounted on the vehicle. Based on the above, a step of determining whether or not the battery device is mounted on a legitimate vehicle, a step of detecting the state of the battery module included in the battery device, and a step of detecting the state of the battery module to be detected are shown.
  • the step of transmitting the battery information and the step of transmitting the battery information are performed when the battery device is mounted on the legitimate vehicle.
  • the battery information is transmitted, and when it is determined that the battery device is not mounted on the legitimate vehicle, the battery information is not transmitted. This prevents incorrect battery information from being transmitted if the battery device is not installed in a legitimate vehicle. Therefore, the reliability of the battery device can be ensured.
  • the battery information management system is a system that collects and manages battery information of batteries (drive batteries) mounted on vehicles traveling by power such as electric vehicles, hybrid vehicles, and plug-in hybrid vehicles. is there.
  • FIG. 1 is a schematic diagram for explaining an example of the battery information management system according to the present embodiment.
  • the battery information management system 100 includes a plurality of vehicles 10 and a server 40.
  • the vehicle 10 is equipped with a wireless communication device (external communication device 211, which will be described later), and can perform wireless communication with the base station 20 (or roadside unit).
  • the base station 20 is connected to the Internet 30, and the server 40 is also connected to the Internet 30.
  • the vehicle 10 is capable of data communication with the server 40.
  • the server 40 has a database, and stores battery information for each vehicle 10 in association with a vehicle ID (for example, VIN: Vehicle Identification Number) and a battery ID.
  • the vehicle 10 periodically or irregularly uploads battery information indicating the state of the batteries mounted on the own vehicle to the server 40 together with the vehicle ID and the battery ID.
  • the server 40 collates the vehicle ID and the battery ID in the database, and stores the received battery information in the database in association with the vehicle ID and the battery ID. In this way, the battery information of each vehicle 10 is managed.
  • Battery information includes, for example, one or more information selected from current value, voltage value, battery internal resistance value, temperature, SOC (State of Charge), and SOH (State of Health).
  • FIG. 2 is a block diagram showing an example of the configuration of an in-vehicle system mounted on the vehicle according to the present embodiment.
  • the in-vehicle system 200 includes, for example, a vehicle control device 201, a motor 202, an inverter 204, a steering control device 205, a steering angle sensor 206, a motor 207, a braking device 208, a display device 209, and a relay device 210.
  • the vehicle includes an external communication device 211, a power supply control device 212, a power converter 213, a power receiving device 214, an automatic operation vehicle-mounted device 220, and a battery device 300.
  • the motor 202 is connected to the axle and generates the driving torque of the vehicle 10.
  • the battery device 300 includes a secondary battery which is a driving battery used for traveling the vehicle 10.
  • An inverter 204 is connected to the motor 202 and the battery device 300. The inverter 204 receives power from the battery device 300 and rotationally drives the motor 202. Further, the regenerative power generated by the motor 202 during braking is recovered by the battery device 300 through the inverter 204.
  • the steering control device 205 is connected to the steering angle sensor 206 and the motor 207.
  • the steering control device 205 receives a steering angle detection value from the steering angle sensor 206 and controls a motor 207 that drives a power steering device (not shown).
  • the steering control device 205 can change the steering angle of the steering wheels, that is, the tire angle in order to change the traveling direction of the vehicle.
  • the braking device 208 can drive a braking mechanism provided on an axle (not shown) of the vehicle to generate a braking force on the traveling vehicle 10.
  • the vehicle control device 201 receives a command from the autonomous driving vehicle-mounted device 220, controls the motor 202 according to the target tire angle and the target speed, and gives a control instruction to the steering control device 205 to drive the vehicle 10 or brake. Is necessary, the braking device 208 is controlled to generate a braking force in the vehicle 10. Specifically, when a command for the target tire angle is given from the autonomous driving vehicle-mounted device 220, a control instruction is given to the steering control device 205 according to this command, and the steering control device 205 gives a control instruction and a detection value of the steering angle sensor.
  • the motor 207 is controlled based on the above to set the tire angle of the vehicle 10 to the target tire angle.
  • the vehicle control device 201 controls the motor 202 according to this command to drive the vehicle 10 at the target traveling speed. Further, when a braking command is given from the autonomous driving vehicle-mounted device 220, the vehicle control device 201 controls the motor 202 and the braking device 208 in accordance with this command to generate a braking force.
  • the automatic operation control device 220 may not be provided, and the function of the automatic operation control device 220 may be incorporated into the relay device 210.
  • the display device 209 displays character information, an image, or the like in response to display instructions from the vehicle control device 201, the autonomous driving vehicle-mounted device 220, and other devices.
  • the power supply control device 212 is connected to the power converter 213, and the power converter 213 is connected to the power receiving device 214.
  • the power receiving device 214 includes an inlet (not shown).
  • the inlet can be connected to a charging connector (not shown) provided in a charging device installed in a parking lot or a house. Power is supplied from the charging device with the charging connector connected to the inlet.
  • the power supply control device 212 controls the power converter 213.
  • the power converter 213 includes, for example, an AC / DC converter and a DC / DC converter. That is, the power converter 213 converts the AC power received by the power receiving device 214 into DC power, or converts the voltage of the DC power received by the power receiving device 214.
  • the power receiving device 214 When the power receiving device 214 is connected to the charging device, the power receiving device 214 receives power from the charging device and outputs electric power to the power converter 213.
  • the power converter 213 converts the power given from the power receiving device 214 under the control of the power supply control device 212 into DC power having a predetermined voltage, and outputs the DC power to the battery device 300.
  • the vehicle control device 201, the inverter 204, the steering control device 205, the braking device 208, the display device 209, and the battery device 300 are connected to a bus 250 such as a CAN bus, and the bus 250 has a relay device 210. Be connected.
  • the automatic driving vehicle-mounted device 220 and the power supply control device 212 are connected to a bus 251 such as a CAN bus, and a relay device 210 is connected to the bus 251.
  • the relay device 210 relays communication between the in-vehicle devices through an in-vehicle network using buses 250, 251 and the like. That is, each of the vehicle control device 201, the inverter 204, the steering control device 205, the braking device 208, the display device 209, the autonomous driving vehicle-mounted device 220, and the battery device 300 can communicate with each other via the relay device 210. ..
  • the relay device 210 is connected to the out-of-vehicle communication device 211 via the communication line 252.
  • the out-of-vehicle communication device 211 is capable of performing wireless communication.
  • the out-of-vehicle communication device 211 wirelessly communicates with an out-of-vehicle device such as a roadside device, a terminal, a base station 20, a server 40, and the like.
  • FIG. 3 is a block diagram showing an example of the configuration of the battery management system according to the present embodiment.
  • the battery management system 400 is a part of the in-vehicle system 200.
  • the battery management system 400 includes a battery device 300.
  • the battery management system 400 includes a battery device 300, an in-vehicle control device 270, and an external communication device 211.
  • message communication is executed between the battery device 300 and the in-vehicle control device 270.
  • the message communication process is executed when the battery information is uploaded to the server 40.
  • the authentication message created by using the authentication key is transmitted between the vehicle-mounted control device 270 and the battery device 300.
  • the battery device 300 determines whether or not to transmit the battery information according to the authentication result. That is, the battery device 300 transmits the battery information when the authentication is successful, and does not transmit the battery information when the authentication fails.
  • the battery information transmitted from the battery device 300 is transmitted to the server 40 together with the vehicle ID and the battery ID by the external communication device 211.
  • the in-vehicle control device 270 is an in-vehicle device different from the battery device 300.
  • the vehicle-mounted control device 270 may be a vehicle control device 201, a steering control device 205, a relay device 210, or an autonomous driving vehicle-mounted device 220. ..
  • the battery device 300 includes a plurality of battery modules 301, a controller 310, and a sensor unit 320.
  • Each battery module 301 includes a plurality of secondary batteries.
  • the sensor unit 320 is an example of a detection unit.
  • the sensor unit 320 includes a current sensor 321, a plurality of voltage sensors 322, a plurality of temperature sensors 323, and a detection circuit 324.
  • the current sensor 321 detects the output current of the battery device 300.
  • the voltage sensor 322 is provided corresponding to each battery module 301.
  • the voltage sensor 322 detects the output voltage of the corresponding battery module 301.
  • the temperature sensor 323 is provided corresponding to each battery module 301.
  • the temperature sensor 323 detects the temperature of the corresponding battery module.
  • the detection circuit 324 is connected to the current sensor 321, the plurality of voltage sensors 322, and the plurality of temperature sensors 323 via signal lines.
  • the detection circuit 324 receives the output signals of the current sensor 321 and the plurality of voltage sensors 322, and the plurality of temperature sensors 323, respectively.
  • the detection circuit 324 is, for example, a hardware logic circuit such as an ASIC (Application Specific Integrated Circuit), a gate array, or an FPGA (Field Programmable Gate Array).
  • the detection circuit 324 uses the current value, voltage value, and temperature detected by each of the current sensor 321 and the plurality of voltage sensors 322, and the plurality of temperature sensors 323 to generate battery information. For example, the detection circuit 324 calculates the SOH of the battery device 300 and generates battery information including the SOH.
  • the detection circuit 324 is connected to the controller 310.
  • the detection circuit 324 inputs the generated battery information to the controller 310.
  • the controller 310 includes a processor 311, a non-transient memory 312, a transient memory 313, and a communication interface 314.
  • the transient memory 313 is, for example, a volatile memory such as SRAM (Static Random Access Memory) or DRAM (Dynamic Random Access Memory).
  • the non-transient memory 312 is, for example, a non-volatile memory such as a flash memory, a hard disk, or a ROM (Read Only Memory).
  • the non-transient memory 312 stores data used for executing the battery management program 315 and the battery management program 315, which are computer programs.
  • the battery device 300 is configured to include a computer, and each function of the battery device 300 is exhibited by executing a battery management program 315, which is a computer program stored in the storage device of the computer, by a processor 311 which is a CPU. Will be done.
  • the battery management program 315 can be stored in a recording medium such as a flash memory, ROM, or CD-ROM.
  • the processor 311 executes the battery management program 315 and provides the battery information to the server 40 as described later.
  • the processor 311 is not limited to the CPU.
  • the processor 311 may be, for example, a hardware logic circuit such as an ASIC, a gate array, or an FPGA.
  • the hardware logic circuit is configured to be able to execute the same processing as the battery management program 315.
  • the communication interface 314 is connected to the bus 250 of the in-vehicle network.
  • the battery device 300 can communicate with other devices such as the in-vehicle control device 270 and the external communication device 211 via the bus 250.
  • the non-transient memory 312 stores an authentication key 316 used for authentication message communication with the in-vehicle control device 270.
  • FIG. 4 is a functional block diagram showing an example of the function of the controller 310 of the battery device 300 according to the present embodiment.
  • the controller 310 has functions as an input unit 331, a transmission unit 332, a communication unit 333, and a determination unit 334.
  • the input unit 331 receives the battery information output from the sensor unit 320.
  • the transmission unit 332 transmits battery information.
  • the transmitted battery information is uploaded to the server 40 by the out-of-vehicle communication device 211.
  • the communication unit 333 performs authentication message communication with the in-vehicle control device 270.
  • the authentication message communication is a message communication by a common key cryptosystem.
  • the vehicle-mounted control device 270 and the controller 310 store the same authentication key 316.
  • the in-vehicle control device 270 uses the authentication key to encrypt the message.
  • the in-vehicle control device 270 transmits an encrypted message, and the communication unit 333 receives the message.
  • the communication unit 333 decodes the message using the authentication key 316.
  • the determination unit 334 determines whether or not the battery device 300 is mounted on the vehicle 10 based on the success or failure of the authentication in the authentication message communication. In a specific example, the determination unit 334 determines whether or not the authentication in the authentication message communication is successful. That is, the determination unit 334 determines that the authentication was successful if the message can be correctly decoded, and determines that the authentication has failed if the message cannot be decoded correctly.
  • the authentication key 316 stored in the battery device 300 and the authentication key stored in the in-vehicle control device 270 match. Therefore, if it is determined that the authentication is successful, it can be determined that the battery device 300 is mounted on the legitimate vehicle 10. On the other hand, for example, when the battery device 300 removed from the other vehicle 10 is mounted on the vehicle 10, the authentication key 316 stored in the battery device 300 and the authentication key stored in the vehicle-mounted control device 270 do not match. Therefore, if it is determined that the authentication has failed, it is determined that the battery device 300 is mounted on the non-genuine vehicle 10.
  • the battery device 300 When the battery device 300 is removed from the vehicle 10 and the battery device 300 is connected to a wireless communication device that is not mounted on the vehicle 10, the battery device 300 and the in-vehicle control device 270 are in a state where they cannot communicate with each other. Message communication is not executed between the 300 and the vehicle-mounted control device 270. In this case as well, the determination unit 334 determines that the authentication has failed.
  • the determination result of the determination unit 334 is given to the transmission unit 332.
  • the transmission unit 332 determines whether or not to transmit the battery information based on the determination result by the determination unit 334. That is, when the determination unit 334 determines that the battery device 300 is mounted on the vehicle 10, the transmission unit 332 transmits the battery information. On the other hand, the transmission unit 332 does not transmit the battery information when the determination unit 334 determines that the battery device 300 is not mounted on the vehicle 10. Therefore, it is possible to prevent unauthorized transmission of battery information.
  • the processor 311 of the battery device 300 executes the battery information providing process by activating the battery management program 315.
  • FIG. 5 is a flowchart showing an example of the procedure of the battery information providing process by the battery device 300 according to the present embodiment.
  • Battery information provision processing is executed regularly or irregularly.
  • the battery information providing process is executed in the activation process of the in-vehicle system 200.
  • the current sensor 321 detects the output current from the battery device 300
  • the plurality of voltage sensors 322 detect the output voltage of the battery module 301
  • the plurality of temperature sensors 323 detect the temperature of the battery module 301.
  • Each of the current sensor 321 and the plurality of voltage sensors 322 and the plurality of temperature sensors 323 output data indicating the detection result (hereinafter, referred to as “sensor data”).
  • the detection circuit 324 receives sensor data output from each of the current sensor 321 and the plurality of voltage sensors 322, and the plurality of temperature sensors 323 (step S101).
  • the detection circuit 324 generates battery information using sensor data (current value, voltage value, and temperature) received from the current sensor 321 and the plurality of voltage sensors 322, and the plurality of temperature sensors 323 (step S102). ..
  • the detection circuit 324 outputs the generated battery information as a signal.
  • the processor 311 receives the battery information output from the detection circuit 324.
  • the processor 311 stores the battery information in the non-transient memory 312 or the transient memory 313 (step S103).
  • the processor 311 executes authentication message communication with the in-vehicle control device 270 (step S104). In the authentication message communication, message authentication using the authentication key is executed. The processor 311 determines whether or not the authentication is successful (step S105). That is, the processor 311 determines whether or not the battery device 300 is mounted on the legitimate vehicle 10.
  • the processor 311 transmits the battery information to the external communication device 211 in order to give the battery information to the server 40 (step S106).
  • the battery ID is stored in the non-transient memory 312, and in step S106, for example, the battery information is transmitted together with the battery ID.
  • the vehicle outside communication device 211 receives the battery information and the battery ID, it transmits these data to the server 40 together with the vehicle ID.
  • the battery information is registered in the database of the server 40.
  • the battery information is uploaded to the server 40, the battery information providing process ends.
  • the processor 311 transmits data for outputting error information to the display device 209 (step S107).
  • the display device 209 displays a screen containing error information, for example, information indicating that the battery may have been illegally removed. This completes the battery information provision process.
  • the vehicle-mounted control device 270 determines whether or not the battery device 300 is mounted on the legitimate vehicle 10.
  • the same components as those of the battery management system according to the first embodiment are designated by the same reference numerals, and the description thereof will be omitted.
  • FIG. 6 is a block diagram showing an example of the configuration of the in-vehicle control device 270 according to the present embodiment.
  • the vehicle-mounted control device 270 includes a processor 271, a non-transient memory 272, a transient memory 273, and a communication interface 274.
  • the transient memory 273 is, for example, a volatile memory such as SRAM or DRAM.
  • the non-transient memory 272 is, for example, a non-volatile memory such as a flash memory, a hard disk, or a ROM.
  • the non-transient memory 272 stores data used for executing the fraud determination program 275 and the fraud determination program 275, which are computer programs.
  • the in-vehicle control device 270 is configured to include a computer, and each function of the in-vehicle control device 270 is executed by a processor 271 in which the fraud determination program 275, which is a computer program stored in the storage device of the computer, is a CPU. Demonstrated in.
  • the fraud determination program 275 can be stored in a recording medium such as a flash memory, a ROM, or a CD-ROM.
  • the processor 271 starts the fraud determination program 275 and executes the fraud removal determination process as described later.
  • the processor 271 is not limited to the CPU.
  • the processor 271 may be, for example, a hardware logic circuit such as an ASIC, a gate array, or an FPGA.
  • the hardware logic circuit is configured to be able to execute the same processing as the fraud determination program 275.
  • the communication interface 274 is connected to the buses 250 and 251 of the in-vehicle network.
  • the vehicle-mounted control device 270 can communicate with other vehicle-mounted devices such as the battery device 300 and the external communication device 211 via the bus 250.
  • the non-transient memory 272 stores an authentication key 276 used for authentication message communication with the battery device 300.
  • FIG. 7A is a functional block diagram showing an example of the functions of the in-vehicle control device 270 according to the present embodiment.
  • the in-vehicle control device 270 has functions as a communication unit 277, a determination unit 278, and an instruction unit 279.
  • the communication unit 277 performs authentication message communication with the battery device 300.
  • the authentication message communication is a message communication by a common key cryptosystem.
  • the vehicle-mounted controller 270 and the controller 310 store the same authentication key 276.
  • the battery device 300 uses the authentication key 316 to encrypt the message.
  • the battery device 300 transmits an encrypted message, and the communication unit 277 receives the message.
  • the communication unit 277 decodes the message using the authentication key 276.
  • the determination unit 278 determines whether or not the battery device 300 is mounted on the legitimate vehicle 10 based on the success or failure of the authentication in the authentication message communication. In a specific example, the determination unit 278 determines whether or not the authentication in the authentication message communication is successful. That is, the determination unit 278 determines that the authentication was successful if the message can be correctly decoded, and determines that the authentication has failed if the message cannot be decoded correctly. If it is determined that the authentication is successful, it can be determined that the battery device 300 is mounted on the legitimate vehicle 10. On the other hand, if it is determined that the authentication has failed, it is determined that the battery device 300 is mounted on the non-genuine vehicle 10. Even if the message communication is not executed between the battery device 300 and the vehicle-mounted control device 270, the determination unit 278 determines that the authentication has failed.
  • the determination result of the determination unit 278 is given to the instruction unit 279.
  • the instruction unit 279 gives an instruction regarding transmission of battery information to the battery device 300 based on the determination result by the determination unit 278. That is, when the determination unit 278 determines that the battery device 300 is mounted on the regular vehicle 10, the instruction unit 279 transmits a battery information transmission instruction to the battery device 300. On the other hand, when the determination unit 278 determines that the battery device 300 is not mounted on the regular vehicle 10, the instruction unit 279 transmits a battery information transmission prohibition instruction to the battery device 300.
  • FIG. 7B is a functional block diagram showing an example of the function of the controller 310 of the battery device 300 according to the present embodiment.
  • the controller 310 has functions as an input unit 331, a transmission unit 332, and an instruction reception unit 335.
  • the instruction receiving unit 335 receives the battery information transmission instruction or the battery information transmission prohibition instruction transmitted from the in-vehicle control device 270.
  • the instruction received by the instruction receiving unit 335 is given to the transmitting unit 332.
  • the transmission unit 332 determines whether or not to transmit the battery information based on the instruction given from the vehicle-mounted control device 270.
  • the transmission unit 332 transmits the battery information when the battery information transmission instruction is given. On the other hand, the transmission unit 332 does not transmit the battery information when the battery information transmission prohibition instruction is given.
  • the processor 271 of the in-vehicle control device 270 executes the fraud determination program 275 to execute the fraud removal determination process.
  • the processor 311 of the battery device 300 executes the battery information providing process by activating the battery management program 315.
  • FIG. 8A is a flowchart showing an example of a procedure for unauthorized removal determination processing by the in-vehicle control device 270 according to the present embodiment.
  • the illegal removal judgment process is executed regularly or irregularly.
  • the unauthorized removal determination process is executed in the activation process of the in-vehicle system 200.
  • the processor 271 first executes authentication message communication with the battery device 300 (step S201).
  • the authentication message communication message authentication using the authentication key is executed.
  • the processor 271 determines whether or not the authentication is successful (step S202). That is, the processor 311 determines whether or not the battery device 300 is mounted on the legitimate vehicle 10.
  • step S202 If the authentication is successful (YES in step S202), the processor 271 transmits the battery information transmission instruction to the battery device 300 (step S203). As a result, the illegal removal determination process is completed.
  • the processor 271 transmits a battery information transmission prohibition instruction to the battery device 300 (step S204). Further, the processor 271 transmits data for outputting the error information to the display device 209 (step S205). Upon receiving the data, the display device 209 displays a screen containing error information, for example, information indicating that the battery may have been illegally removed. This completes the illegal removal determination process.
  • FIG. 8B is a flowchart showing an example of the procedure of the battery information providing process by the battery device 300 according to the present embodiment.
  • steps S211 to S214 are the same as steps S101 to S104 described in the first embodiment, the description thereof will be omitted.
  • the battery information transmission instruction or the battery information transmission prohibition instruction transmitted from the in-vehicle controller 270 is received by the controller 310.
  • the processor 311 determines whether the received instruction is a battery information transmission instruction or a battery information transmission prohibition instruction (step S215).
  • the processor 311 transmits the battery information together with the battery ID to the external communication device 211 in order to give the battery information to the server 40 (step). S216).
  • the vehicle outside communication device 211 receives the battery information and the battery ID, it transmits these data to the server 40 together with the vehicle ID.
  • the battery information is registered in the database of the server 40.
  • the battery information is uploaded to the server 40, the battery information providing process ends.
  • the processor 311 ends the battery information provision process without transmitting the battery information.
  • the battery device 300 monitors communication between a plurality of in-vehicle devices different from the battery device 300, and based on the monitoring result, whether or not the battery device 300 is mounted on the legitimate vehicle 10. judge.
  • the same components as those of the battery management system according to the first embodiment are designated by the same reference numerals, and the description thereof will be omitted.
  • FIG. 9 is a block diagram showing an example of the configuration of the battery management system according to the present embodiment.
  • the battery management system 400 is a part of the in-vehicle system 200.
  • the battery management system 400 includes a battery device 300, in-vehicle control devices 270A and 270B, and an external communication device 211.
  • communication processing is executed between the in-vehicle control devices 270A and 270B.
  • the communication process may be a communication process dedicated to determining that the battery device 300 is mounted on the legitimate vehicle 10, or may be a normal communication process between the in-vehicle control devices 270A and 270B. ..
  • the communication process between the vehicle-mounted control devices 270A and 270B may be the communication process related to the traveling of the vehicle 10.
  • the battery device 300 monitors the communication process between the in-vehicle control devices 270A and 270B.
  • the battery device 300 determines whether or not to transmit the battery information according to the monitoring result. That is, the battery device 300 transmits the battery information when the normal communication process is monitored, and does not transmit the battery information when the normal communication process is not monitored.
  • the battery information transmitted from the battery device 300 is transmitted to the server 40 together with the vehicle ID and the battery ID by the external communication device 211.
  • the in-vehicle control devices 270A and 270B are in-vehicle devices different from the battery device 300.
  • the vehicle-mounted control devices 270A and 270B may be the vehicle control device 201 and the steering control device 205, the vehicle control device 201 and the braking device 208, the vehicle control device 201 and the automatic driving vehicle-mounted device. It may be 220.
  • FIG. 10 is a functional block diagram showing an example of the function of the controller 310 of the battery device 300 according to the present embodiment.
  • the controller 310 has functions as an input unit 331, a transmission unit 332, a determination unit 334, and a monitoring unit 336.
  • the monitoring unit 336 monitors the communication between the in-vehicle control devices 270A and 270B. In a specific example, the monitoring unit 336 monitors that normal communication is being performed between the vehicle-mounted control devices 270A and 270B. For example, when the in-vehicle control device 270A is the vehicle control device 201 and the in-vehicle control device 270B is the steering control device 205, a control instruction indicating a target steering angle is transmitted from the in-vehicle control device 270A to the in-vehicle control device 270B. It monitors the presence of the vehicle, and monitors that data indicating the current steering angle is transmitted from the vehicle-mounted control device 270B to the vehicle-mounted control device 270A.
  • the determination unit 334 determines whether or not the battery device 300 is mounted on the regular vehicle 10 according to the communication monitoring result. In a specific example, the determination unit 334 determines whether or not normal communication between the vehicle-mounted control devices 270A and 270B has been monitored.
  • the configuration of the in-vehicle system may differ, or the specifications of data communication between the in-vehicle control devices may differ depending on the manufacturer, vehicle type, etc. of the vehicle 10.
  • the battery device 300 When the battery device 300 is mounted on the legitimate vehicle 10, data communication having appropriate specifications suitable for the in-vehicle system of the vehicle 10 is monitored. Therefore, when normal communication is monitored, it can be determined that the battery device 300 is mounted on the legitimate vehicle 10.
  • the battery device 300 removed from the other vehicle 10 is mounted on the vehicle 10
  • data communication with (appropriate) specifications that should be monitored is not monitored. Therefore, if normal communication is not monitored, it is determined that the battery device 300 is mounted on the non-genuine vehicle 10.
  • the determination unit 334 determines that normal communication has not been monitored.
  • the processor 311 of the battery device 300 executes the battery information providing process by activating the battery management program 315.
  • FIG. 11 is a flowchart showing an example of the procedure of the battery information providing process by the battery device 300 according to the present embodiment.
  • steps S301 to S303 are the same as steps S101 to S103 described in the first embodiment, the description thereof will be omitted.
  • the processor 311 monitors the communication between the in-vehicle control devices 270A and 270B (step S304). Processor 311 determines whether correct data communication has been monitored (step S305). That is, the processor 311 determines whether or not the battery device 300 is mounted on the legitimate vehicle 10.
  • the processor 311 transmits the battery information to the external communication device 211 in order to give the battery information to the server 40 (step S306).
  • the battery ID is stored in the non-transient memory 312, and in step S306, for example, the battery information is transmitted together with the battery ID.
  • the vehicle outside communication device 211 receives the battery information and the battery ID, it transmits these data to the server 40 together with the vehicle ID.
  • the battery information is registered in the database of the server 40.
  • the battery information is uploaded to the server 40, the battery information providing process ends.
  • the processor 311 transmits data for outputting error information to the display device 209 (step S307).
  • the display device 209 displays a screen containing error information, for example, information indicating that the battery may have been illegally removed. This completes the battery information provision process.
  • the configuration and operation of the battery management system according to the present disclosure are not limited to the above embodiments.
  • the battery device 300 when it is determined that the battery device 300 is mounted on the legitimate vehicle 10, the battery device 300 transmits the battery information, and the battery device 300 is sent to the legitimate vehicle 10.
  • the configuration in which the battery device 300 does not transmit the battery information when it is determined that the battery device is not mounted, that is, the configuration in which the battery device determines whether or not the battery information can be transmitted has been described. However, it is not limited to such a configuration.
  • the out-of-vehicle communication device 211 may determine whether or not to transmit the battery information.
  • the battery device 300 transmits the battery information to the external communication device 211, and the battery device 300 is mounted on the regular vehicle 10. If it is determined, the external communication device 211 transmits the battery information to the server 40, and if it is determined that the battery device 300 is not mounted on the legitimate vehicle 10, the external communication device 211 does not transmit the battery information. It may be configured.
  • the battery information transmitted from the battery device 300 may be transmitted to the external communication device 211 via the in-vehicle control device 270.
  • the battery device 300 transmits the battery information to the in-vehicle control device 270, and the battery device 300 is mounted on the legitimate vehicle 10.
  • the vehicle-mounted control device 270 transmits the battery information to the external communication device 211, and when it is determined that the battery device 300 is not mounted on the legitimate vehicle 10, the vehicle-mounted control device 270 is installed. May not be configured to transmit battery information.
  • the communication performed between the battery device 300 and the vehicle-mounted control device 270 is an authentication message communication, but a message communication without authentication may be used.
  • the communication process performed between the battery device 300 and the vehicle-mounted control device 270 may be a communication process dedicated to determining that the battery device 300 is mounted on the legitimate vehicle 10, or the battery device 300 and It may be a normal communication process between the in-vehicle control devices 270.
  • the vehicle-mounted control device 270 may be the power supply control device 212 or the vehicle control device 201, and the above-mentioned communication process may be a notification of information (for example, SOC) about the battery from the battery device 300.
  • the battery management system 400 includes a determination unit 334,278, a sensor unit 320 which is a detection unit, and a transmission unit 332.
  • the determination units 334 and 278 determine whether or not the battery device 300 is mounted on the regular vehicle 10 based on the communication processing between the plurality of vehicle-mounted devices mounted on the vehicle 10.
  • the sensor unit 320 detects the state of the battery module 301 included in the battery device 300.
  • the transmission unit 332 transmits the battery information in order to give the battery information indicating the state of the battery module 301 detected by the sensor unit 320 to the server 40 outside the vehicle 10.
  • the transmission unit 332 transmits the battery information.
  • the transmission unit 332 does not transmit the battery information. As a result, when the battery device 300 is not mounted on the legitimate vehicle 10, it is possible to prevent incorrect battery information from being transmitted. Therefore, the reliability of the battery device 300 can be ensured.
  • the communication process may be a message communication process between the battery device 300 and the vehicle-mounted control device 270, which is an vehicle-mounted device different from the battery device 300.
  • the determination units 334 and 278 may determine whether or not the battery device 300 is mounted on the legitimate vehicle 10 based on whether or not the message communication process is normally executed. When the battery device 300 is removed from the vehicle 10, the message communication process is not normally executed. Therefore, the unauthorized removal of the battery device 300 from the vehicle 10 can be detected by utilizing the message communication process between the battery device 300 and the vehicle-mounted control device 270.
  • the message communication process may be a process of communicating an authentication message generated by the authentication process using the authentication key between the battery device 300 and the vehicle-mounted control device 270. For example, if one vehicle 10 is equipped with the battery device 300 removed from the other vehicle 10, the authentication may fail. Therefore, with the above configuration, it is possible to detect an illegal replacement of the battery device 300.
  • the battery device 300 may include a determination unit 334 and a transmission unit 332. By providing the battery device 300 with the determination unit 334 and the transmission unit 332, it is possible to realize a function of detecting unauthorized removal of the battery device 300 without significantly modifying the configuration of other in-vehicle devices.
  • the in-vehicle control device 270 may include a determination unit 278. As a result, it is possible to realize a function of detecting unauthorized removal of the battery device 300 while simplifying the configuration of the battery device 300.
  • the communication process may be a communication process between a plurality of in-vehicle control devices 270A and 270B different from the battery device 300.
  • the battery device 300 may include a determination unit 334.
  • the determination unit 334 may monitor the communication between the plurality of vehicle-mounted control devices 270A and 270B, and determine whether or not the battery device 300 is mounted on the regular vehicle 10 based on the monitoring result. For example, the determination unit can monitor the communication regarding the traveling of the vehicle 10 between the plurality of vehicle-mounted control devices 270A and 270B. If the battery device 300 is removed from the vehicle 10, communication monitoring will fail. Therefore, it is possible to detect the unauthorized removal of the battery device 300 from the vehicle 10 by utilizing the communication processing between the vehicle-mounted control devices 270A and 270B.
  • Vehicle 20 Base station 30 Internet 40 Server 100 Battery information management system 200 In-vehicle system 201 Vehicle control device 202 Motor 204 Inverter 205 Steering control device 206 Steering angle sensor 207 Motor 208 Braking device 209 Display device 210 Relay device 211 External communication device 212 Power supply Control device 213 Power converter 214 Power receiving device 220 Automatic operation In-vehicle device 250, 251 Bus 252 Communication line 270, 270A, 270B In-vehicle control device 271 Processor 272 Non-transient memory 273 Transient memory 274 Communication interface 275 Fraud judgment program 276 Authentication key 277 Communication unit 278, 334 Judgment unit 279 Indicator 300 Battery device 301 Battery module 310 Controller 311 Processor 312 Non-transient memory 313 Transient memory 314 Communication interface 315 Battery management program 316 Authentication key 320 Sensor unit 321 Current sensor 322 Voltage sensor 323 Temperature sensor 324 Detection circuit 331 Input unit 332 Transmission unit 333 Communication unit 335

Abstract

This battery management system for managing a battery device mounted in a vehicle is provided with a determining unit for determining, on the basis of communication processing between a plurality of vehicle-mounted devices that are mounted in the vehicle, whether the battery device is mounted in a proper vehicle, a detecting unit for detecting the state of a battery module contained in the battery device, and a transmitting unit for transmitting battery information indicating the state of the battery module detected by the detecting unit, in order to provide the battery information to a server outside the vehicle, wherein, if the determining unit determines that the battery device is mounted in the proper vehicle, the transmitting unit transmits the battery information, and if the determining unit determines that the battery device is not mounted in the proper vehicle, the transmitting unit does not transmit the battery information.

Description

電池管理システム、電池装置、電池管理方法、及びコンピュータプログラムBattery management system, battery device, battery management method, and computer program
　本開示は、電池管理システム、電池装置、電池管理方法、及びコンピュータプログラムに関する。本出願は、２０１９年８月７日出願の日本出願第２０１９－１４５３３１号に基づく優先権を主張し、前記日本出願に記載された全ての内容を援用するものである。 This disclosure relates to a battery management system, a battery device, a battery management method, and a computer program. This application claims priority based on Japanese Application No. 2019-145331 filed on August 7, 2019, and incorporates all the contents described in the Japanese application.
　電気自動車、ハイブリッド車、プラグインハイブリッド車等の車両に搭載される電池を当該車両から不正に取り外す行為が問題となっている。特許文献１には、バッテリコントローラと、複数の電池モジュールとを備え、電池モジュールの不正使用を判定する電源装置が開示されている。特許文献１に開示される電源装置において、各電池モジュールがセルフコントローラを有する。セルフコントローラは、電池モジュールのＳＯＣ（State of Charge）及び劣化度を算出し、ＳＯＣ及び劣化度を含む電池情報をバッテリコントローラへ送信する。セルフコントローラは、さらに、認証キーをバッテリコントローラに送信し、バッテリコントローラによる認証キーを用いた認証の結果に応じて、自モジュールの不正使用を判定する。 The problem is the illegal removal of batteries installed in vehicles such as electric vehicles, hybrid vehicles, and plug-in hybrid vehicles. Patent Document 1 discloses a power supply device including a battery controller and a plurality of battery modules, and determining unauthorized use of the battery modules. In the power supply device disclosed in Patent Document 1, each battery module has a self-controller. The self-controller calculates the SOC (State of Charge) and the degree of deterioration of the battery module, and transmits the battery information including the SOC and the degree of deterioration to the battery controller. The self-controller also sends an authentication key to the battery controller, and determines unauthorized use of its own module according to the result of authentication using the authentication key by the battery controller.
国際公開第２０１４／０２７５０９号International Publication No. 2014/027509
　本開示の一態様に係る電池管理システムは、車両に搭載される電池装置を管理する電池管理システムであって、前記車両に搭載される複数の車載装置間の通信処理に基づいて、前記電池装置が正規の車両に搭載されているか否かを判定する判定部と、前記電池装置に含まれる電池モジュールの状態を検出する検出部と、前記検出部によって検出される前記電池モジュールの状態を示す電池情報を前記車両の外部のサーバへ与えるために、前記電池情報を送信する送信部と、を備え、前記判定部によって前記電池装置が前記正規の車両に搭載されていると判定される場合、前記送信部は前記電池情報を送信し、前記判定部によって前記電池装置が前記正規の車両に搭載されていないと判定される場合、前記送信部は前記電池情報を送信しない。 The battery management system according to one aspect of the present disclosure is a battery management system that manages a battery device mounted on a vehicle, and is based on communication processing between a plurality of vehicle-mounted devices mounted on the vehicle. A determination unit for determining whether or not is mounted on a legitimate vehicle, a detection unit for detecting the state of the battery module included in the battery device, and a battery indicating the state of the battery module detected by the detection unit. When the determination unit determines that the battery device is mounted on the legitimate vehicle, it includes a transmission unit for transmitting the battery information in order to give information to a server outside the vehicle. The transmitting unit transmits the battery information, and when the determination unit determines that the battery device is not mounted on the legitimate vehicle, the transmitting unit does not transmit the battery information.
　本開示の一態様に係る電池装置は、車両に搭載される電池装置であって、前記車両に搭載される複数の車載装置間の通信処理に基づいて、前記電池装置が正規の車両に搭載されているか否かを判定する判定部と、電池モジュールと、前記電池モジュールの状態を検出する検出部と、前記検出部によって検出される前記電池モジュールの状態を示す電池情報を前記車両の外部のサーバへ与えるために、前記電池情報を送信する送信部と、を備え、前記判定部によって前記電池装置が前記正規の車両に搭載されていると判定される場合、前記送信部は前記電池情報を送信し、前記判定部によって前記電池装置が前記正規の車両に搭載されていないと判定される場合、前記送信部は前記電池情報を送信しない。 The battery device according to one aspect of the present disclosure is a battery device mounted on a vehicle, and the battery device is mounted on a regular vehicle based on communication processing between a plurality of in-vehicle devices mounted on the vehicle. A server outside the vehicle that determines whether or not the battery module is in use, a battery module, a detection unit that detects the state of the battery module, and battery information indicating the state of the battery module detected by the detection unit. When the determination unit determines that the battery device is mounted on the legitimate vehicle, the transmission unit transmits the battery information. Then, when the determination unit determines that the battery device is not mounted on the legitimate vehicle, the transmission unit does not transmit the battery information.
　本開示の一態様に係る電池管理方法は、車両に搭載される電池装置を管理する電池管理方法であって、前記車両に搭載される複数の車載装置間の通信処理に基づいて、前記電池装置が正規の車両に搭載されているか否かを判定するステップと、前記電池装置に含まれる電池モジュールの状態を検出するステップと、検出される前記電池モジュールの状態を示す電池情報を前記車両の外部のサーバへ与えるために、前記電池情報を送信するステップと、を有し、前記電池情報を送信するステップは、前記電池装置が前記正規の車両に搭載されていると判定される場合、前記電池情報を送信すること、及び、前記電池装置が前記正規の車両に搭載されていないと判定される場合、前記電池情報を送信しないこと、を含む。 The battery management method according to one aspect of the present disclosure is a battery management method for managing a battery device mounted on a vehicle, and the battery device is based on communication processing between a plurality of vehicle-mounted devices mounted on the vehicle. Is installed in a legitimate vehicle, a step of detecting the state of the battery module included in the battery device, and a battery information indicating the detected state of the battery module are provided outside the vehicle. The step of transmitting the battery information has a step of transmitting the battery information in order to provide the battery information to the server, and the step of transmitting the battery information is the battery when it is determined that the battery device is mounted on the legitimate vehicle. It includes transmitting the information and not transmitting the battery information when it is determined that the battery device is not mounted on the legitimate vehicle.
　本開示の一態様に係るコンピュータプログラムは、車両に搭載される電池装置をコンピュータが管理するためのコンピュータプログラムであって、前記コンピュータに、前記車両に搭載される複数の車載装置間の通信処理に基づいて、前記電池装置が正規の車両に搭載されているか否かを判定するステップと、前記電池装置に含まれる電池モジュールの状態を検出するステップと、検出される前記電池モジュールの状態を示す電池情報を前記車両の外部のサーバへ与えるために、前記電池情報を送信するステップと、を実行させ、前記電池情報を送信するステップは、前記電池装置が前記正規の車両に搭載されていると判定される場合、前記電池情報を送信すること、及び、前記電池装置が前記正規の車両に搭載されていないと判定される場合、前記電池情報を送信しないこと、を含む。 The computer program according to one aspect of the present disclosure is a computer program for a computer to manage a battery device mounted on a vehicle, and is used for communication processing between a plurality of vehicle-mounted devices mounted on the vehicle. Based on this, a step of determining whether or not the battery device is mounted in a legitimate vehicle, a step of detecting the state of the battery module included in the battery device, and a battery indicating the detected state of the battery module. In order to give the information to a server outside the vehicle, the step of transmitting the battery information and the step of transmitting the battery information are executed, and the step of transmitting the battery information determines that the battery device is mounted on the legitimate vehicle. If this is done, the battery information is transmitted, and if it is determined that the battery device is not mounted on the legitimate vehicle, the battery information is not transmitted.
　本開示は、上記のような特徴的な構成を備える電池装置として実現することができるだけでなく、電池装置における特徴的な処理をステップとする検出方法として実現したり、かかるステップをコンピュータに実行させるためのコンピュータプログラムとして実現したりすることができる。また、電池装置の一部又は全部を半導体集積回路として実現したり、電池装置を含む電池管理システムとして実現したりすることができる。 The present disclosure can be realized not only as a battery device having a characteristic configuration as described above, but also as a detection method in which a characteristic process in the battery device is a step, or a computer is made to execute such a step. It can be realized as a computer program for. Further, a part or all of the battery device can be realized as a semiconductor integrated circuit, or can be realized as a battery management system including the battery device.
第１実施形態に係る電池情報管理システムの一例を説明するための模式図である。It is a schematic diagram for demonstrating an example of the battery information management system which concerns on 1st Embodiment. 第１実施形態に係る車両に搭載される車載システムの構成の一例を示すブロック図である。It is a block diagram which shows an example of the structure of the in-vehicle system mounted on the vehicle which concerns on 1st Embodiment. 第１実施形態に係る電池管理システムの構成の一例を示すブロック図である。It is a block diagram which shows an example of the structure of the battery management system which concerns on 1st Embodiment. 第１実施形態に係る電池装置のコントローラの機能の一例を示す機能ブロック図である。It is a functional block diagram which shows an example of the function of the controller of the battery device which concerns on 1st Embodiment. 第１実施形態に係る電池装置による電池情報提供処理の手順の一例を示すフローチャートである。It is a flowchart which shows an example of the procedure of the battery information provision processing by the battery apparatus which concerns on 1st Embodiment. 第２実施形態に係る車載制御装置の構成の一例を示すブロック図である。It is a block diagram which shows an example of the structure of the vehicle-mounted control device which concerns on 2nd Embodiment. 第２実施形態に係る車載制御装置の機能の一例を示す機能ブロック図である。It is a functional block diagram which shows an example of the function of the vehicle-mounted control device which concerns on 2nd Embodiment. 第２実施形態に係る電池装置のコントローラの機能の一例を示す機能ブロック図である。It is a functional block diagram which shows an example of the function of the controller of the battery device which concerns on 2nd Embodiment. 第２実施形態に係る車載制御装置による不正取外し判定処理の手順の一例を示すフローチャートである。It is a flowchart which shows an example of the procedure of the illegal removal determination processing by the vehicle-mounted control device which concerns on 2nd Embodiment. 第２実施形態に係る電池装置による電池情報提供処理の手順の一例を示すフローチャートである。It is a flowchart which shows an example of the procedure of the battery information provision processing by the battery apparatus which concerns on 2nd Embodiment. 第３実施形態に係る電池管理システムの構成の一例を示すブロック図である。It is a block diagram which shows an example of the structure of the battery management system which concerns on 3rd Embodiment. 第３実施形態に係る電池装置のコントローラの機能の一例を示す機能ブロック図である。It is a functional block diagram which shows an example of the function of the controller of the battery device which concerns on 3rd Embodiment. 第３実施形態に係る電池装置による電池情報提供処理の手順の一例を示すフローチャートである。It is a flowchart which shows an example of the procedure of the battery information provision processing by the battery apparatus which concerns on 3rd Embodiment.
　＜本開示が解決しようとする課題＞
　特許文献１に開示される電源装置では、ＳＯＣ及び劣化度が変更された不正な電池情報が電池モジュールから送信されることには対策が講じられていない。このため、電池モジュールの信頼性が損なわれる可能性がある。 <Problems to be solved by this disclosure>
In the power supply device disclosed in Patent Document 1, no countermeasure is taken against the transmission of illegal battery information in which the SOC and the degree of deterioration are changed from the battery module. Therefore, the reliability of the battery module may be impaired.
　＜本開示の効果＞
　本開示によれば、不正な電池情報の送信を防止し、電池装置の信頼性を確保することができる。 <Effect of this disclosure>
According to the present disclosure, it is possible to prevent unauthorized transmission of battery information and ensure the reliability of the battery device.
　＜本開示の実施形態の概要＞
　以下、本開示の実施形態の概要を列記して説明する。 <Outline of Embodiments of the present disclosure>
Hereinafter, the outlines of the embodiments of the present disclosure will be listed and described.
　（１）　本実施形態に係る電池管理システムは、車両に搭載される電池装置を管理する電池管理システムであって、前記車両に搭載される複数の車載装置間の通信処理に基づいて、前記電池装置が正規の車両に搭載されているか否かを判定する判定部と、前記電池装置に含まれる電池モジュールの状態を検出する検出部と、前記検出部によって検出される前記電池モジュールの状態を示す電池情報を前記車両の外部のサーバへ与えるために、前記電池情報を送信する送信部と、を備え、前記判定部によって前記電池装置が前記正規の車両に搭載されていると判定される場合、前記送信部は前記電池情報を送信し、前記判定部によって前記電池装置が前記正規の車両に搭載されていないと判定される場合、前記送信部は前記電池情報を送信しない。これにより、電池装置が正規の車両に搭載されていない場合、不正な電池情報を送信することが防止される。したがって、電池装置の信頼性を確保することができる。なお、「正規の車両」とは、電池装置に対して、正式な機関（車両メーカー、正規ディーラー等）が当該電池装置の搭載先として定めた車両である。例えば電池装置が最初に搭載される車両が当該電池装置にとっての「正規の車両」である。つまり、新車に搭載される電池装置にとっての「正規の車両」とは当該新車である。さらに、車両メーカー又は正規ディーラー等において車両の電池装置が交換された場合は、当該車両が交換後の電池装置にとっての「正規の車両」である。 (1) The battery management system according to the present embodiment is a battery management system that manages a battery device mounted on a vehicle, and is based on communication processing between a plurality of vehicle-mounted devices mounted on the vehicle. A determination unit for determining whether or not the device is mounted on a legitimate vehicle, a detection unit for detecting the state of the battery module included in the battery device, and a state of the battery module detected by the detection unit are shown. When it is provided with a transmitting unit for transmitting the battery information in order to give the battery information to a server outside the vehicle, and the determination unit determines that the battery device is mounted on the legitimate vehicle. The transmitting unit transmits the battery information, and when the determination unit determines that the battery device is not mounted on the legitimate vehicle, the transmitting unit does not transmit the battery information. This prevents incorrect battery information from being transmitted if the battery device is not installed in a legitimate vehicle. Therefore, the reliability of the battery device can be ensured. The "regular vehicle" is a vehicle defined by a formal engine (vehicle manufacturer, authorized dealer, etc.) as a mounting destination of the battery device. For example, the vehicle in which the battery device is first installed is the "regular vehicle" for the battery device. In other words, the "regular vehicle" for the battery device installed in the new vehicle is the new vehicle. Further, when the battery device of the vehicle is replaced by a vehicle manufacturer or an authorized dealer, the vehicle is a "genuine vehicle" for the battery device after the replacement.
　（２）　本実施形態に係る電池管理システムにおいて、前記通信処理は、前記電池装置と、前記電池装置とは異なる車載装置との間におけるメッセージ通信処理であり、前記判定部は、前記メッセージ通信処理が正常に実行されているか否かに基づいて、前記電池装置が前記正規の車両に搭載されているか否かを判定してもよい。電池装置が車両から取り外されると、メッセージ通信処理は正常に実行されなくなる。したがって、電池装置と車載装置との間におけるメッセージ通信処理を利用して、車両からの電池装置の不正な取り外しを検出することができる。 (2) In the battery management system according to the present embodiment, the communication process is a message communication process between the battery device and an in-vehicle device different from the battery device, and the determination unit determines the message communication process. May be determined whether or not the battery device is mounted in the legitimate vehicle based on whether or not is normally executed. If the battery device is removed from the vehicle, the message communication process will not be executed normally. Therefore, the unauthorized removal of the battery device from the vehicle can be detected by utilizing the message communication processing between the battery device and the in-vehicle device.
　（３）　本実施形態に係る電池管理システムにおいて、前記メッセージ通信処理は、認証キーを用いる認証処理によって生成される認証メッセージを前記電池装置と前記車載装置との間で通信する処理であってもよい。例えば、１つの車両に、他の車両から取り外された電池装置が搭載される場合、認証が失敗し得る。したがって、上記構成により、電池装置の不正な取り替えを検出することができる。 (3) In the battery management system according to the present embodiment, the message communication process may be a process of communicating an authentication message generated by an authentication process using an authentication key between the battery device and the in-vehicle device. Good. For example, if one vehicle is equipped with a battery device that has been removed from another vehicle, authentication can fail. Therefore, with the above configuration, it is possible to detect an unauthorized replacement of the battery device.
　（４）　本実施形態に係る電池管理システムにおいて、前記電池装置は、前記判定部及び前記送信部を含んでもよい。電池装置に判定部及び送信部を設けることにより、他の車載装置の構成を大幅に改変することなく、電池装置の不正な取り外しの検出機能を実現することができる。 (4) In the battery management system according to the present embodiment, the battery device may include the determination unit and the transmission unit. By providing the determination unit and the transmission unit in the battery device, it is possible to realize a function of detecting unauthorized removal of the battery device without significantly modifying the configuration of the other in-vehicle device.
　（５）　本実施形態に係る電池管理システムにおいて、前記車載装置は、前記判定部を含んでもよい。これにより、電池装置の構成を簡素化しつつ、電池装置の不正な取り外しの検出機能を実現することができる。 (5) In the battery management system according to the present embodiment, the in-vehicle device may include the determination unit. As a result, it is possible to realize a function of detecting unauthorized removal of the battery device while simplifying the configuration of the battery device.
　（６）　本実施形態に係る電池管理システムにおいて、前記通信処理は、前記電池装置とは異なる複数の車載装置間における通信処理であり、前記電池装置は、前記判定部を含み、前記判定部は、前記複数の車載装置間の通信を監視し、監視結果に基づいて、前記電池装置が前記正規の車両に搭載されているか否かを判定してもよい。例えば、複数の車載装置間における車両の走行に関する通信を判定部が監視することができる。電池装置が車両から取り外されると、通信の監視が失敗する。したがって、車載装置間における通信処理を利用して、車両からの電池装置の不正な取り外しを検出することができる。 (6) In the battery management system according to the present embodiment, the communication process is a communication process between a plurality of in-vehicle devices different from the battery device, the battery device includes the determination unit, and the determination unit includes the determination unit. , Communication between the plurality of vehicle-mounted devices may be monitored, and based on the monitoring result, it may be determined whether or not the battery device is mounted on the legitimate vehicle. For example, the determination unit can monitor the communication regarding the running of the vehicle between the plurality of in-vehicle devices. Communication monitoring fails when the battery device is removed from the vehicle. Therefore, it is possible to detect the unauthorized removal of the battery device from the vehicle by utilizing the communication processing between the in-vehicle devices.
　（７）　本実施形態に係る電池装置は、車両に搭載される電池装置であって、前記車両に搭載される複数の車載装置間の通信処理に基づいて、前記電池装置が正規の車両に搭載されているか否かを判定する判定部と、電池モジュールと、前記電池モジュールの状態を検出する検出部と、前記検出部によって検出される前記電池モジュールの状態を示す電池情報を前記車両の外部のサーバへ与えるために、前記電池情報を送信する送信部と、を備え、前記判定部によって前記電池装置が前記正規の車両に搭載されていると判定される場合、前記送信部は前記電池情報を送信し、前記判定部によって前記電池装置が前記正規の車両に搭載されていないと判定される場合、前記送信部は前記電池情報を送信しない。これにより、電池装置が正規の車両に搭載されていない場合、不正な電池情報を送信することが防止される。したがって、電池装置の信頼性を確保することができる。 (7) The battery device according to the present embodiment is a battery device mounted on a vehicle, and the battery device is mounted on a regular vehicle based on communication processing between a plurality of in-vehicle devices mounted on the vehicle. A determination unit for determining whether or not the battery module is installed, a battery module, a detection unit for detecting the state of the battery module, and battery information indicating the state of the battery module detected by the detection unit are provided outside the vehicle. When the determination unit determines that the battery device is mounted on the legitimate vehicle, the transmission unit includes a transmission unit for transmitting the battery information in order to give the battery information to the server. If the determination unit determines that the battery device is not mounted on the legitimate vehicle, the transmission unit does not transmit the battery information. This prevents incorrect battery information from being transmitted if the battery device is not installed in a legitimate vehicle. Therefore, the reliability of the battery device can be ensured.
　（８）　本実施形態に係る電池管理方法は、車両に搭載される電池装置を管理する電池管理方法であって、前記車両に搭載される複数の車載装置間の通信処理に基づいて、前記電池装置が正規の車両に搭載されているか否かを判定するステップと、前記電池装置に含まれる電池モジュールの状態を検出するステップと、検出される前記電池モジュールの状態を示す電池情報を前記車両の外部のサーバへ与えるために、前記電池情報を送信するステップと、を有し、前記電池情報を送信するステップは、前記電池装置が前記正規の車両に搭載されていると判定される場合、前記電池情報を送信すること、及び、前記電池装置が前記正規の車両に搭載されていないと判定される場合、前記電池情報を送信しないこと、を含む。これにより、電池装置が正規の車両に搭載されていない場合、不正な電池情報を送信することが防止される。したがって、電池装置の信頼性を確保することができる。 (8) The battery management method according to the present embodiment is a battery management method for managing a battery device mounted on a vehicle, and is based on communication processing between a plurality of vehicle-mounted devices mounted on the vehicle. A step of determining whether or not the device is mounted on a legitimate vehicle, a step of detecting the state of the battery module included in the battery device, and battery information indicating the detected state of the battery module of the vehicle. When it is determined that the battery device is mounted on the legitimate vehicle, the step of transmitting the battery information and the step of transmitting the battery information for giving to an external server are described. It includes transmitting the battery information and not transmitting the battery information when it is determined that the battery device is not mounted on the legitimate vehicle. This prevents incorrect battery information from being transmitted if the battery device is not installed in a legitimate vehicle. Therefore, the reliability of the battery device can be ensured.
　（９）　本実施形態に係るコンピュータプログラムは、車両に搭載される電池装置をコンピュータが管理するためのコンピュータプログラムであって、前記コンピュータに、前記車両に搭載される複数の車載装置間の通信処理に基づいて、前記電池装置が正規の車両に搭載されているか否かを判定するステップと、前記電池装置に含まれる電池モジュールの状態を検出するステップと、検出される前記電池モジュールの状態を示す電池情報を前記車両の外部のサーバへ与えるために、前記電池情報を送信するステップと、を実行させ、前記電池情報を送信するステップは、前記電池装置が前記正規の車両に搭載されていると判定される場合、前記電池情報を送信すること、及び、前記電池装置が前記正規の車両に搭載されていないと判定される場合、前記電池情報を送信しないこと、を含む。これにより、電池装置が正規の車両に搭載されていない場合、不正な電池情報を送信することが防止される。したがって、電池装置の信頼性を確保することができる。 (9) The computer program according to the present embodiment is a computer program for the computer to manage the battery device mounted on the vehicle, and the computer performs communication processing between a plurality of vehicle-mounted devices mounted on the vehicle. Based on the above, a step of determining whether or not the battery device is mounted on a legitimate vehicle, a step of detecting the state of the battery module included in the battery device, and a step of detecting the state of the battery module to be detected are shown. In order to give the battery information to a server outside the vehicle, the step of transmitting the battery information and the step of transmitting the battery information are performed when the battery device is mounted on the legitimate vehicle. When it is determined, the battery information is transmitted, and when it is determined that the battery device is not mounted on the legitimate vehicle, the battery information is not transmitted. This prevents incorrect battery information from being transmitted if the battery device is not installed in a legitimate vehicle. Therefore, the reliability of the battery device can be ensured.
　＜本開示の実施形態の詳細＞
　以下、図面を参照しつつ、本発明の実施形態の詳細を説明する。なお、以下に記載する実施形態の少なくとも一部を任意に組み合わせてもよい。 <Details of Embodiments of the present disclosure>
Hereinafter, details of the embodiment of the present invention will be described with reference to the drawings. In addition, at least a part of the embodiments described below may be arbitrarily combined.
　［１．第１実施形態］
　［１－１．電池情報管理システム］
　本実施形態に係る電池情報管理システムは、電気自動車、ハイブリッド車、プラグインハイブリッド車等の電力を動力として走行する車両に搭載される電池（駆動用バッテリ）の電池情報を収集、管理するシステムである。 [1. First Embodiment]
[1-1. Battery information management system]
The battery information management system according to the present embodiment is a system that collects and manages battery information of batteries (drive batteries) mounted on vehicles traveling by power such as electric vehicles, hybrid vehicles, and plug-in hybrid vehicles. is there.
　図１は、本実施形態に係る電池情報管理システムの一例を説明するための模式図である。 FIG. 1 is a schematic diagram for explaining an example of the battery information management system according to the present embodiment.
　電池情報管理システム１００は、複数の車両１０と、サーバ４０とを含む。車両１０は、無線通信機（後述する車外通信機２１１）を搭載しており、基地局２０（又は路側機）との間での無線通信が可能である。基地局２０は、インターネット３０に接続され、サーバ４０もインターネット３０に接続されている。車両１０は、サーバ４０との間でのデータ通信が可能である。 The battery information management system 100 includes a plurality of vehicles 10 and a server 40. The vehicle 10 is equipped with a wireless communication device (external communication device 211, which will be described later), and can perform wireless communication with the base station 20 (or roadside unit). The base station 20 is connected to the Internet 30, and the server 40 is also connected to the Internet 30. The vehicle 10 is capable of data communication with the server 40.
　サーバ４０は、データベースを有し、車両１０毎に、車両ＩＤ（例えば、ＶＩＮ：Vehicle Identification Number）と、電池ＩＤとに関連付けて、電池情報を記憶する。車両１０は、定期的又は不定期的に、自車に搭載される電池の状態を示す電池情報を、車両ＩＤ及び電池ＩＤと共にサーバ４０にアップロードする。サーバ４０は、車両ＩＤ及び電池ＩＤをデータベースで照合し、受信された電池情報を、当該車両ＩＤ及び電池ＩＤに対応付けてデータベースに格納する。このようにして、各車両１０の電池情報が管理される。 The server 40 has a database, and stores battery information for each vehicle 10 in association with a vehicle ID (for example, VIN: Vehicle Identification Number) and a battery ID. The vehicle 10 periodically or irregularly uploads battery information indicating the state of the batteries mounted on the own vehicle to the server 40 together with the vehicle ID and the battery ID. The server 40 collates the vehicle ID and the battery ID in the database, and stores the received battery information in the database in association with the vehicle ID and the battery ID. In this way, the battery information of each vehicle 10 is managed.
　電池情報は、例えば、電流値、電圧値、電池の内部抵抗値、温度、ＳＯＣ（State of Charge）、ＳＯＨ（State of Health）から選択される１つ又は複数の情報を含む。 Battery information includes, for example, one or more information selected from current value, voltage value, battery internal resistance value, temperature, SOC (State of Charge), and SOH (State of Health).
　［１－２．車載システム］
　図２は、本実施形態に係る車両に搭載される車載システムの構成の一例を示すブロック図である。 [1-2. In-vehicle system]
FIG. 2 is a block diagram showing an example of the configuration of an in-vehicle system mounted on the vehicle according to the present embodiment.
　車載システム２００は、例えば、車両制御装置２０１と、モータ２０２と、インバータ２０４と、ステアリング制御装置２０５と、舵角センサ２０６と、モータ２０７と、制動装置２０８と、表示装置２０９と、中継装置２１０と、車外通信機２１１と、給電制御装置２１２と、電力変換器２１３と、受電装置２１４と、自動運転車載装置２２０と、電池装置３００とを備える。 The in-vehicle system 200 includes, for example, a vehicle control device 201, a motor 202, an inverter 204, a steering control device 205, a steering angle sensor 206, a motor 207, a braking device 208, a display device 209, and a relay device 210. The vehicle includes an external communication device 211, a power supply control device 212, a power converter 213, a power receiving device 214, an automatic operation vehicle-mounted device 220, and a battery device 300.
　モータ２０２は車軸に接続され、車両１０の駆動トルクを発生する。電池装置３００は車両１０の走行に用いられる駆動用バッテリである二次電池を含む。モータ２０２及び電池装置３００にはインバータ２０４が接続される。インバータ２０４は、電池装置３００から受電し、モータ２０２を回転駆動する。また、制動時におけるモータ２０２による回生電力は、インバータ２０４を通じて電池装置３００に回収される。 The motor 202 is connected to the axle and generates the driving torque of the vehicle 10. The battery device 300 includes a secondary battery which is a driving battery used for traveling the vehicle 10. An inverter 204 is connected to the motor 202 and the battery device 300. The inverter 204 receives power from the battery device 300 and rotationally drives the motor 202. Further, the regenerative power generated by the motor 202 during braking is recovered by the battery device 300 through the inverter 204.
　ステアリング制御装置２０５は、舵角センサ２０６とモータ２０７とに接続される。ステアリング制御装置２０５は、舵角センサ２０６から舵角の検出値を受信し、図示しないパワーステアリング装置を駆動するモータ２０７を制御する。ステアリング制御装置２０５は、モータ２０７を制御することにより、車両の進行方向を変更するために、操舵輪の舵角、即ちタイヤ角を変更することができる。制動装置２０８は、車両の図示しない車軸に設けられた制動機構を駆動し、進行している車両１０に制動力を発生させることができる。 The steering control device 205 is connected to the steering angle sensor 206 and the motor 207. The steering control device 205 receives a steering angle detection value from the steering angle sensor 206 and controls a motor 207 that drives a power steering device (not shown). By controlling the motor 207, the steering control device 205 can change the steering angle of the steering wheels, that is, the tire angle in order to change the traveling direction of the vehicle. The braking device 208 can drive a braking mechanism provided on an axle (not shown) of the vehicle to generate a braking force on the traveling vehicle 10.
　車両制御装置２０１は、自動運転車載装置２２０からの指令を受信し、目標タイヤ角及び目標速度にしたがってモータ２０２を制御し、ステアリング制御装置２０５に制御指示を与えて車両１０を走行させたり、制動が必要な場合には制動装置２０８を制御して車両１０に制動力を生じさせたりする。具体的には、自動運転車載装置２２０から、目標タイヤ角の指令が与えられると、この指令にしたがってステアリング制御装置２０５に制御指示を与え、ステアリング制御装置２０５が制御指示と舵角センサの検出値とに基づいてモータ２０７を制御して、車両１０のタイヤ角を目標タイヤ角に設定する。自動運転車載装置２２０から目標走行速度の指令が与えられると、車両制御装置２０１は、この指令にしたがってモータ２０２を制御して、車両１０を目標走行速度で走行させる。また、自動運転車載装置２２０から制動指令が与えられると、車両制御装置２０１は、この指令にしたがってモータ２０２及び制動装置２０８を制御して、制動力を発生させる。なお、自動運転制御装置２２０を設けず、自動運転制御装置２２０の機能を中継装置２１０に組み込んでもよい。 The vehicle control device 201 receives a command from the autonomous driving vehicle-mounted device 220, controls the motor 202 according to the target tire angle and the target speed, and gives a control instruction to the steering control device 205 to drive the vehicle 10 or brake. Is necessary, the braking device 208 is controlled to generate a braking force in the vehicle 10. Specifically, when a command for the target tire angle is given from the autonomous driving vehicle-mounted device 220, a control instruction is given to the steering control device 205 according to this command, and the steering control device 205 gives a control instruction and a detection value of the steering angle sensor. The motor 207 is controlled based on the above to set the tire angle of the vehicle 10 to the target tire angle. When a command for the target traveling speed is given from the autonomous driving vehicle-mounted device 220, the vehicle control device 201 controls the motor 202 according to this command to drive the vehicle 10 at the target traveling speed. Further, when a braking command is given from the autonomous driving vehicle-mounted device 220, the vehicle control device 201 controls the motor 202 and the braking device 208 in accordance with this command to generate a braking force. The automatic operation control device 220 may not be provided, and the function of the automatic operation control device 220 may be incorporated into the relay device 210.
　表示装置２０９は、車両制御装置２０１、自動運転車載装置２２０、及びその他の装置からの表示指示に応じて文字情報又は画像等を表示する。 The display device 209 displays character information, an image, or the like in response to display instructions from the vehicle control device 201, the autonomous driving vehicle-mounted device 220, and other devices.
　給電制御装置２１２は電力変換器２１３に接続され、電力変換器２１３は受電装置２１４に接続される。受電装置２１４は、図示しないインレットを含む。インレットは、駐車場又は住宅に設置された充電装置に設けられる充電コネクタ（図示せず）に接続可能である。インレットに充電コネクタが接続された状態で、充電装置から電力の供給を受ける。給電制御装置２１２は、電力変換器２１３を制御する。電力変換器２１３は、例えば、ＡＣ／ＤＣコンバータ及びＤＣ／ＤＣコンバータを含む。即ち、電力変換器２１３は、受電装置２１４によって受け付けられた交流電力を直流電力に変換したり、受電装置２１４によって受け付けられた直流電力の電圧を変換したりする。受電装置２１４が充電装置に接続されている場合、受電装置２１４は充電装置から給電を受け、電力を電力変換器２１３へ出力する。電力変換器２１３は、給電制御装置２１２の制御によって受電装置２１４から与えられた電力を所定電圧の直流電力に変換し、電池装置３００に直流電力を出力する。 The power supply control device 212 is connected to the power converter 213, and the power converter 213 is connected to the power receiving device 214. The power receiving device 214 includes an inlet (not shown). The inlet can be connected to a charging connector (not shown) provided in a charging device installed in a parking lot or a house. Power is supplied from the charging device with the charging connector connected to the inlet. The power supply control device 212 controls the power converter 213. The power converter 213 includes, for example, an AC / DC converter and a DC / DC converter. That is, the power converter 213 converts the AC power received by the power receiving device 214 into DC power, or converts the voltage of the DC power received by the power receiving device 214. When the power receiving device 214 is connected to the charging device, the power receiving device 214 receives power from the charging device and outputs electric power to the power converter 213. The power converter 213 converts the power given from the power receiving device 214 under the control of the power supply control device 212 into DC power having a predetermined voltage, and outputs the DC power to the battery device 300.
　車両制御装置２０１と、インバータ２０４と、ステアリング制御装置２０５と、制動装置２０８と、表示装置２０９と、電池装置３００とは、ＣＡＮバス等のバス２５０に接続され、バス２５０には中継装置２１０が接続される。自動運転車載装置２２０及び給電制御装置２１２は、ＣＡＮバス等のバス２５１に接続され、バス２５１には中継装置２１０が接続される。 The vehicle control device 201, the inverter 204, the steering control device 205, the braking device 208, the display device 209, and the battery device 300 are connected to a bus 250 such as a CAN bus, and the bus 250 has a relay device 210. Be connected. The automatic driving vehicle-mounted device 220 and the power supply control device 212 are connected to a bus 251 such as a CAN bus, and a relay device 210 is connected to the bus 251.
　中継装置２１０は、バス２５０，２５１等による車載ネットワークを通じて車載装置間の通信を中継する。即ち、車両制御装置２０１、インバータ２０４、ステアリング制御装置２０５、制動装置２０８、表示装置２０９、自動運転車載装置２２０、及び電池装置３００のそれぞれは、中継装置２１０を介して相互に通信が可能である。中継装置２１０は、通信線２５２を介して車外通信機２１１に接続される。 The relay device 210 relays communication between the in-vehicle devices through an in-vehicle network using buses 250, 251 and the like. That is, each of the vehicle control device 201, the inverter 204, the steering control device 205, the braking device 208, the display device 209, the autonomous driving vehicle-mounted device 220, and the battery device 300 can communicate with each other via the relay device 210. .. The relay device 210 is connected to the out-of-vehicle communication device 211 via the communication line 252.
　車外通信機２１１は、無線通信を行うことが可能である。車外通信機２１１は、無線によって車外の装置、例えば路側機、端末、基地局２０、サーバ４０等と通信を行う。 The out-of-vehicle communication device 211 is capable of performing wireless communication. The out-of-vehicle communication device 211 wirelessly communicates with an out-of-vehicle device such as a roadside device, a terminal, a base station 20, a server 40, and the like.
　［１－３．電池管理システム］
　図３は、本実施形態に係る電池管理システムの構成の一例を示すブロック図である。電池管理システム４００は、車載システム２００の一部である。 [1-3. Battery management system]
FIG. 3 is a block diagram showing an example of the configuration of the battery management system according to the present embodiment. The battery management system 400 is a part of the in-vehicle system 200.
　本実施形態に係る電池管理システム４００は、電池装置３００を含む。例えば、電池管理システム４００は、電池装置３００と、車載制御装置２７０と、車外通信機２１１とを含む。 The battery management system 400 according to this embodiment includes a battery device 300. For example, the battery management system 400 includes a battery device 300, an in-vehicle control device 270, and an external communication device 211.
　本実施形態に係る電池管理システム４００において、電池装置３００と、車載制御装置２７０との間でメッセージ通信が実行される。メッセージ通信処理は、電池情報のサーバ４０へのアップロードの際に実行される。メッセージ通信では、認証キーを用いて作成された認証メッセージが車載制御装置２７０と電池装置３００との間で伝送される。電池装置３００は、認証結果に応じて、電池情報を送信するか否かを判定する。つまり、電池装置３００は、認証が成功した場合に電池情報を送信し、認証が失敗した場合に電池情報を送信しない。電池装置３００から送信された電池情報は、車外通信機２１１によって車両ＩＤ及び電池ＩＤと共にサーバ４０へ送信される。 In the battery management system 400 according to the present embodiment, message communication is executed between the battery device 300 and the in-vehicle control device 270. The message communication process is executed when the battery information is uploaded to the server 40. In the message communication, the authentication message created by using the authentication key is transmitted between the vehicle-mounted control device 270 and the battery device 300. The battery device 300 determines whether or not to transmit the battery information according to the authentication result. That is, the battery device 300 transmits the battery information when the authentication is successful, and does not transmit the battery information when the authentication fails. The battery information transmitted from the battery device 300 is transmitted to the server 40 together with the vehicle ID and the battery ID by the external communication device 211.
　車載制御装置２７０は、電池装置３００とは異なる車載装置である。例えば、車載制御装置２７０は、車両制御装置２０１であってもよいし、ステアリング制御装置２０５であってもよいし、中継装置２１０であってもよいし、自動運転車載装置２２０であってもよい。 The in-vehicle control device 270 is an in-vehicle device different from the battery device 300. For example, the vehicle-mounted control device 270 may be a vehicle control device 201, a steering control device 205, a relay device 210, or an autonomous driving vehicle-mounted device 220. ..
　以下、本実施形態に係る電池装置３００の構成について説明する。電池装置３００は、複数の電池モジュール３０１と、コントローラ３１０と、センサ部３２０とを含む。各電池モジュール３０１は、複数の二次電池を含む。 Hereinafter, the configuration of the battery device 300 according to the present embodiment will be described. The battery device 300 includes a plurality of battery modules 301, a controller 310, and a sensor unit 320. Each battery module 301 includes a plurality of secondary batteries.
　センサ部３２０は、検出部の一例である。センサ部３２０は、電流センサ３２１と、複数の電圧センサ３２２と、複数の温度センサ３２３と、検出回路３２４とを含む。電流センサ３２１は、電池装置３００の出力電流を検出する。電圧センサ３２２は、各電池モジュール３０１に対応して設けられる。電圧センサ３２２は、対応する電池モジュール３０１の出力電圧を検出する。温度センサ３２３は、各電池モジュール３０１に対応して設けられる。温度センサ３２３は、対応する電池モジュールの温度を検出する。 The sensor unit 320 is an example of a detection unit. The sensor unit 320 includes a current sensor 321, a plurality of voltage sensors 322, a plurality of temperature sensors 323, and a detection circuit 324. The current sensor 321 detects the output current of the battery device 300. The voltage sensor 322 is provided corresponding to each battery module 301. The voltage sensor 322 detects the output voltage of the corresponding battery module 301. The temperature sensor 323 is provided corresponding to each battery module 301. The temperature sensor 323 detects the temperature of the corresponding battery module.
　検出回路３２４は、電流センサ３２１と、複数の電圧センサ３２２と、複数の温度センサ３２３とに信号線を介して接続される。検出回路３２４は、電流センサ３２１、複数の電圧センサ３２２、及び複数の温度センサ３２３のそれぞれの出力信号を受信する。検出回路３２４は、例えば、ＡＳＩＣ（Application Specific Integrated Circuit）、ゲートアレイ、ＦＰＧＡ（Field Programmable Gate Array）等のハードウェアロジック回路である。検出回路３２４は、電流センサ３２１、複数の電圧センサ３２２、及び複数の温度センサ３２３のそれぞれによって検出された電流値、電圧値、及び温度を用いて、電池情報を生成する。例えば、検出回路３２４は、電池装置３００のＳＯＨを算出し、ＳＯＨを含む電池情報を生成する。検出回路３２４は、コントローラ３１０に接続されている。検出回路３２４は、生成された電池情報をコントローラ３１０に入力する。 The detection circuit 324 is connected to the current sensor 321, the plurality of voltage sensors 322, and the plurality of temperature sensors 323 via signal lines. The detection circuit 324 receives the output signals of the current sensor 321 and the plurality of voltage sensors 322, and the plurality of temperature sensors 323, respectively. The detection circuit 324 is, for example, a hardware logic circuit such as an ASIC (Application Specific Integrated Circuit), a gate array, or an FPGA (Field Programmable Gate Array). The detection circuit 324 uses the current value, voltage value, and temperature detected by each of the current sensor 321 and the plurality of voltage sensors 322, and the plurality of temperature sensors 323 to generate battery information. For example, the detection circuit 324 calculates the SOH of the battery device 300 and generates battery information including the SOH. The detection circuit 324 is connected to the controller 310. The detection circuit 324 inputs the generated battery information to the controller 310.
　具体的な一例では、コントローラ３１０は、プロセッサ３１１と、非一過性メモリ３１２と、一過性メモリ３１３と、通信インタフェース３１４とを備える。 In a specific example, the controller 310 includes a processor 311, a non-transient memory 312, a transient memory 313, and a communication interface 314.
　一過性メモリ３１３は、例えばＳＲＡＭ（Static Random Access Memory）、ＤＲＡＭ（Dynamic Random Access Memory）等の揮発性メモリである。非一過性メモリ３１２は、例えばフラッシュメモリ、ハードディスク、ＲＯＭ（Read Only Memory）等の不揮発性メモリである。非一過性メモリ３１２には、コンピュータプログラムである電池管理プログラム３１５及び電池管理プログラム３１５の実行に使用されるデータが格納される。電池装置３００は、コンピュータを備えて構成され、電池装置３００の各機能は、前記コンピュータの記憶装置に記憶されたコンピュータプログラムである電池管理プログラム３１５がＣＰＵであるプロセッサ３１１によって実行されることで発揮される。電池管理プログラム３１５は、フラッシュメモリ、ＲＯＭ、ＣＤ－ＲＯＭなどの記録媒体に記憶させることができる。プロセッサ３１１は、電池管理プログラム３１５を実行し、後述するようなサーバ４０への電池情報の提供を行う。 The transient memory 313 is, for example, a volatile memory such as SRAM (Static Random Access Memory) or DRAM (Dynamic Random Access Memory). The non-transient memory 312 is, for example, a non-volatile memory such as a flash memory, a hard disk, or a ROM (Read Only Memory). The non-transient memory 312 stores data used for executing the battery management program 315 and the battery management program 315, which are computer programs. The battery device 300 is configured to include a computer, and each function of the battery device 300 is exhibited by executing a battery management program 315, which is a computer program stored in the storage device of the computer, by a processor 311 which is a CPU. Will be done. The battery management program 315 can be stored in a recording medium such as a flash memory, ROM, or CD-ROM. The processor 311 executes the battery management program 315 and provides the battery information to the server 40 as described later.
　なお、プロセッサ３１１は、ＣＰＵに限られない。プロセッサ３１１は、例えば、ＡＳＩＣ、ゲートアレイ、ＦＰＧＡ等のハードウェアロジック回路であってもよい。この場合、ハードウェアロジック回路は、電池管理プログラム３１５と同様の処理を実行可能に構成される。 The processor 311 is not limited to the CPU. The processor 311 may be, for example, a hardware logic circuit such as an ASIC, a gate array, or an FPGA. In this case, the hardware logic circuit is configured to be able to execute the same processing as the battery management program 315.
　通信インタフェース３１４は車内ネットワークのバス２５０に接続される。電池装置３００は、バス２５０を介して他の装置、例えば車載制御装置２７０及び車外通信機２１１と通信することができる。 The communication interface 314 is connected to the bus 250 of the in-vehicle network. The battery device 300 can communicate with other devices such as the in-vehicle control device 270 and the external communication device 211 via the bus 250.
　非一過性メモリ３１２には、車載制御装置２７０との認証メッセージ通信に用いられる認証キー３１６が記憶される。 The non-transient memory 312 stores an authentication key 316 used for authentication message communication with the in-vehicle control device 270.
　図４は、本実施形態に係る電池装置３００のコントローラ３１０の機能の一例を示す機能ブロック図である。コントローラ３１０は、入力部３３１、送信部３３２、通信部３３３、及び判定部３３４としての機能を有する。 FIG. 4 is a functional block diagram showing an example of the function of the controller 310 of the battery device 300 according to the present embodiment. The controller 310 has functions as an input unit 331, a transmission unit 332, a communication unit 333, and a determination unit 334.
　入力部３３１は、センサ部３２０から出力される電池情報を受け付ける。 The input unit 331 receives the battery information output from the sensor unit 320.
　送信部３３２は、電池情報を送信する。送信された電池情報は、車外通信機２１１によってサーバ４０へアップロードされる。 The transmission unit 332 transmits battery information. The transmitted battery information is uploaded to the server 40 by the out-of-vehicle communication device 211.
　通信部３３３は、車載制御装置２７０との間で認証メッセージ通信を行う。具体的な一例では、認証メッセージ通信は、共通鍵暗号方式によるメッセージ通信である。例えば、車載制御装置２７０と、コントローラ３１０とが同じ認証キー３１６を記憶する。車載制御装置２７０は、認証キーを用いてメッセージを暗号化する。車載制御装置２７０は暗号化されたメッセージを送信し、通信部３３３が当該メッセージを受信する。通信部３３３は、認証キー３１６を用いてメッセージを復号化する。 The communication unit 333 performs authentication message communication with the in-vehicle control device 270. In a specific example, the authentication message communication is a message communication by a common key cryptosystem. For example, the vehicle-mounted control device 270 and the controller 310 store the same authentication key 316. The in-vehicle control device 270 uses the authentication key to encrypt the message. The in-vehicle control device 270 transmits an encrypted message, and the communication unit 333 receives the message. The communication unit 333 decodes the message using the authentication key 316.
　判定部３３４は、認証メッセージ通信における認証の成否に基づいて、電池装置３００が車両１０に搭載されているか否かを判定する。具体的な一例では、判定部３３４は、認証メッセージ通信における認証が成功したか否かを判定する。つまり、判定部３３４は、正しくメッセージを復号化できる場合は、認証が成功したと判定し、正しくメッセージを復号化できない場合は、認証が失敗したと判定する。 The determination unit 334 determines whether or not the battery device 300 is mounted on the vehicle 10 based on the success or failure of the authentication in the authentication message communication. In a specific example, the determination unit 334 determines whether or not the authentication in the authentication message communication is successful. That is, the determination unit 334 determines that the authentication was successful if the message can be correctly decoded, and determines that the authentication has failed if the message cannot be decoded correctly.
　正規の車両１０に電池装置３００が搭載される場合、電池装置３００に記憶される認証キー３１６と、車載制御装置２７０に記憶される認証キーは整合する。したがって、認証が成功したと判定された場合は、電池装置３００が正規の車両１０に搭載されていると判断することができる。他方、例えば、他の車両１０から取り外された電池装置３００が車両１０に搭載される場合、電池装置３００に記憶される認証キー３１６と、車載制御装置２７０に記憶される認証キーが整合しない。したがって、認証が失敗したと判定された場合は、電池装置３００が非正規の車両１０に搭載されていると判断される。 When the battery device 300 is mounted on the regular vehicle 10, the authentication key 316 stored in the battery device 300 and the authentication key stored in the in-vehicle control device 270 match. Therefore, if it is determined that the authentication is successful, it can be determined that the battery device 300 is mounted on the legitimate vehicle 10. On the other hand, for example, when the battery device 300 removed from the other vehicle 10 is mounted on the vehicle 10, the authentication key 316 stored in the battery device 300 and the authentication key stored in the vehicle-mounted control device 270 do not match. Therefore, if it is determined that the authentication has failed, it is determined that the battery device 300 is mounted on the non-genuine vehicle 10.
　電池装置３００が車両１０から取り外され、車両１０に搭載されない無線通信機に当該電池装置３００が接続された場合、電池装置３００と車載制御装置２７０とが互いに通信不能な状態にあるので、電池装置３００と車載制御装置２７０との間でメッセージ通信が実行されない。この場合も、判定部３３４は認証が失敗したと判定する。 When the battery device 300 is removed from the vehicle 10 and the battery device 300 is connected to a wireless communication device that is not mounted on the vehicle 10, the battery device 300 and the in-vehicle control device 270 are in a state where they cannot communicate with each other. Message communication is not executed between the 300 and the vehicle-mounted control device 270. In this case as well, the determination unit 334 determines that the authentication has failed.
　判定部３３４の判定結果は、送信部３３２に与えられる。送信部３３２は、判定部３３４による判定結果に基づいて、電池情報を送信するか否かを決定する。つまり、送信部３３２は、電池装置３００が車両１０に搭載されていると判定部３３４により判定された場合には、電池情報を送信する。他方、送信部３３２は、電池装置３００が車両１０に搭載されていないと判定部３３４により判定された場合には、電池情報を送信しない。したがって、不正な電池情報の送信を防止することができる。 The determination result of the determination unit 334 is given to the transmission unit 332. The transmission unit 332 determines whether or not to transmit the battery information based on the determination result by the determination unit 334. That is, when the determination unit 334 determines that the battery device 300 is mounted on the vehicle 10, the transmission unit 332 transmits the battery information. On the other hand, the transmission unit 332 does not transmit the battery information when the determination unit 334 determines that the battery device 300 is not mounted on the vehicle 10. Therefore, it is possible to prevent unauthorized transmission of battery information.
　［１－４．電池管理システムの動作］
　以下、本実施形態に係る電池管理システム４００の動作について説明する。電池装置３００のプロセッサ３１１は、電池管理プログラム３１５を起動することにより、電池情報提供処理を実行する。 [1-4. Battery management system operation]
Hereinafter, the operation of the battery management system 400 according to the present embodiment will be described. The processor 311 of the battery device 300 executes the battery information providing process by activating the battery management program 315.
　図５は、本実施形態に係る電池装置３００による電池情報提供処理の手順の一例を示すフローチャートである。 FIG. 5 is a flowchart showing an example of the procedure of the battery information providing process by the battery device 300 according to the present embodiment.
　電池情報提供処理は、定期的又は不定期的に実行される。具体的な一例では、電池情報提供処理は、車載システム２００の起動処理において実行される。電池情報提供処理において、まず電流センサ３２１は電池装置３００からの出力電流を検出し、複数の電圧センサ３２２は電池モジュール３０１の出力電圧を検出し、複数の温度センサ３２３は電池モジュール３０１の温度を検出する。電流センサ３２１、複数の電圧センサ３２２、及び複数の温度センサ３２３のそれぞれは、検出結果を示すデータ（以下、「センサデータ」という）を出力する。検出回路３２４は、電流センサ３２１、複数の電圧センサ３２２、及び複数の温度センサ３２３のそれぞれから出力されるセンサデータを受信する（ステップＳ１０１）。 Battery information provision processing is executed regularly or irregularly. In a specific example, the battery information providing process is executed in the activation process of the in-vehicle system 200. In the battery information providing process, first, the current sensor 321 detects the output current from the battery device 300, the plurality of voltage sensors 322 detect the output voltage of the battery module 301, and the plurality of temperature sensors 323 detect the temperature of the battery module 301. To detect. Each of the current sensor 321 and the plurality of voltage sensors 322 and the plurality of temperature sensors 323 output data indicating the detection result (hereinafter, referred to as “sensor data”). The detection circuit 324 receives sensor data output from each of the current sensor 321 and the plurality of voltage sensors 322, and the plurality of temperature sensors 323 (step S101).
　検出回路３２４は、電流センサ３２１、複数の電圧センサ３２２、及び複数の温度センサ３２３から受信されたセンサデータ（電流値、電圧値、及び温度）を用いて、電池情報を生成する（ステップＳ１０２）。検出回路３２４は、生成された電池情報を信号として出力する。 The detection circuit 324 generates battery information using sensor data (current value, voltage value, and temperature) received from the current sensor 321 and the plurality of voltage sensors 322, and the plurality of temperature sensors 323 (step S102). .. The detection circuit 324 outputs the generated battery information as a signal.
　プロセッサ３１１は、検出回路３２４から出力された電池情報を受信する。プロセッサ３１１は、非一過性メモリ３１２又は一過性メモリ３１３に電池情報を記憶する（ステップＳ１０３）。 The processor 311 receives the battery information output from the detection circuit 324. The processor 311 stores the battery information in the non-transient memory 312 or the transient memory 313 (step S103).
　プロセッサ３１１は、車載制御装置２７０との認証メッセージ通信を実行する（ステップＳ１０４）。認証メッセージ通信において、認証キーを用いたメッセージ認証が実行される。プロセッサ３１１は、認証が成功したか否かを判定する（ステップＳ１０５）。つまり、プロセッサ３１１は、電池装置３００が正規の車両１０に搭載されているか否かを判定する。 The processor 311 executes authentication message communication with the in-vehicle control device 270 (step S104). In the authentication message communication, message authentication using the authentication key is executed. The processor 311 determines whether or not the authentication is successful (step S105). That is, the processor 311 determines whether or not the battery device 300 is mounted on the legitimate vehicle 10.
　認証が成功した場合（ステップＳ１０５においてＹＥＳ）、プロセッサ３１１は、電池情報をサーバ４０に与えるために、車外通信機２１１へ電池情報を送信する（ステップＳ１０６）。例えば、非一過性メモリ３１２には、電池ＩＤが記憶されており、ステップＳ１０６では、例えば、電池情報が電池ＩＤと共に送信される。車外通信機２１１は、電池情報及び電池ＩＤを受信すると、これらのデータを車両ＩＤと共にサーバ４０へ送信する。これにより、サーバ４０のデータベースに電池情報が登録される。電池情報がサーバ４０へアップロードされると、電池情報提供処理が終了する。 If the authentication is successful (YES in step S105), the processor 311 transmits the battery information to the external communication device 211 in order to give the battery information to the server 40 (step S106). For example, the battery ID is stored in the non-transient memory 312, and in step S106, for example, the battery information is transmitted together with the battery ID. When the vehicle outside communication device 211 receives the battery information and the battery ID, it transmits these data to the server 40 together with the vehicle ID. As a result, the battery information is registered in the database of the server 40. When the battery information is uploaded to the server 40, the battery information providing process ends.
　認証が失敗した場合（ステップＳ１０５においてＮＯ）、プロセッサ３１１は、エラー情報を出力するためのデータを表示装置２０９に送信する（ステップＳ１０７）。表示装置２０９は、当該データを受信すると、エラー情報、例えば、電池が不正に取り外された可能性があることを示す情報を含む画面を表示する。以上で、電池情報提供処理が終了する。 If the authentication fails (NO in step S105), the processor 311 transmits data for outputting error information to the display device 209 (step S107). Upon receiving the data, the display device 209 displays a screen containing error information, for example, information indicating that the battery may have been illegally removed. This completes the battery information provision process.
　［２．第２実施形態］
　第２実施形態では、車載制御装置２７０が、電池装置３００が正規の車両１０に搭載されているか否かを判定する。なお、以下の説明において、第１実施形態に係る電池管理システムと同一の構成要素については、同一符号を付し、その説明を省略する。 [2. Second Embodiment]
In the second embodiment, the vehicle-mounted control device 270 determines whether or not the battery device 300 is mounted on the legitimate vehicle 10. In the following description, the same components as those of the battery management system according to the first embodiment are designated by the same reference numerals, and the description thereof will be omitted.
　［２－１．車載制御装置］
　図６は、本実施形態に係る車載制御装置２７０の構成の一例を示すブロック図である。具体的な一例では、車載制御装置２７０は、プロセッサ２７１と、非一過性メモリ２７２と、一過性メモリ２７３と、通信インタフェース２７４とを備える。 [2-1. In-vehicle control device]
FIG. 6 is a block diagram showing an example of the configuration of the in-vehicle control device 270 according to the present embodiment. In a specific example, the vehicle-mounted control device 270 includes a processor 271, a non-transient memory 272, a transient memory 273, and a communication interface 274.
　一過性メモリ２７３は、例えばＳＲＡＭ、ＤＲＡＭ等の揮発性メモリである。非一過性メモリ２７２は、例えばフラッシュメモリ、ハードディスク、ＲＯＭ等の不揮発性メモリである。非一過性メモリ２７２には、コンピュータプログラムである不正判定プログラム２７５及び不正判定プログラム２７５の実行に使用されるデータが格納される。車載制御装置２７０は、コンピュータを備えて構成され、車載制御装置２７０の各機能は、前記コンピュータの記憶装置に記憶されたコンピュータプログラムである不正判定プログラム２７５がＣＰＵであるプロセッサ２７１によって実行されることで発揮される。不正判定プログラム２７５は、フラッシュメモリ、ＲＯＭ、ＣＤ－ＲＯＭなどの記録媒体に記憶させることができる。プロセッサ２７１は、不正判定プログラム２７５を起動し、後述するような不正取外し判定処理を実行する。 The transient memory 273 is, for example, a volatile memory such as SRAM or DRAM. The non-transient memory 272 is, for example, a non-volatile memory such as a flash memory, a hard disk, or a ROM. The non-transient memory 272 stores data used for executing the fraud determination program 275 and the fraud determination program 275, which are computer programs. The in-vehicle control device 270 is configured to include a computer, and each function of the in-vehicle control device 270 is executed by a processor 271 in which the fraud determination program 275, which is a computer program stored in the storage device of the computer, is a CPU. Demonstrated in. The fraud determination program 275 can be stored in a recording medium such as a flash memory, a ROM, or a CD-ROM. The processor 271 starts the fraud determination program 275 and executes the fraud removal determination process as described later.
　なお、プロセッサ２７１は、ＣＰＵに限られない。プロセッサ２７１は、例えば、ＡＳＩＣ、ゲートアレイ、ＦＰＧＡ等のハードウェアロジック回路であってもよい。この場合、ハードウェアロジック回路は、不正判定プログラム２７５と同様の処理を実行可能に構成される。 The processor 271 is not limited to the CPU. The processor 271 may be, for example, a hardware logic circuit such as an ASIC, a gate array, or an FPGA. In this case, the hardware logic circuit is configured to be able to execute the same processing as the fraud determination program 275.
　通信インタフェース２７４は車内ネットワークのバス２５０，２５１に接続される。車載制御装置２７０は、バス２５０，を介して他の車載装置、例えば電池装置３００及び車外通信機２１１と通信することができる。 The communication interface 274 is connected to the buses 250 and 251 of the in-vehicle network. The vehicle-mounted control device 270 can communicate with other vehicle-mounted devices such as the battery device 300 and the external communication device 211 via the bus 250.
　非一過性メモリ２７２には、電池装置３００との認証メッセージ通信に用いられる認証キー２７６が記憶される。 The non-transient memory 272 stores an authentication key 276 used for authentication message communication with the battery device 300.
　図７Ａは、本実施形態に係る車載制御装置２７０の機能の一例を示す機能ブロック図である。車載制御装置２７０は、通信部２７７、判定部２７８、及び指示部２７９としての機能を有する。 FIG. 7A is a functional block diagram showing an example of the functions of the in-vehicle control device 270 according to the present embodiment. The in-vehicle control device 270 has functions as a communication unit 277, a determination unit 278, and an instruction unit 279.
　通信部２７７は、電池装置３００との間で認証メッセージ通信を行う。具体的な一例では、認証メッセージ通信は、共通鍵暗号方式によるメッセージ通信である。例えば、車載制御装置２７０と、コントローラ３１０とが同じ認証キー２７６を記憶する。電池装置３００は、認証キー３１６を用いてメッセージを暗号化する。電池装置３００は暗号化されたメッセージを送信し、通信部２７７が当該メッセージを受信する。通信部２７７は、認証キー２７６を用いてメッセージを復号化する。 The communication unit 277 performs authentication message communication with the battery device 300. In a specific example, the authentication message communication is a message communication by a common key cryptosystem. For example, the vehicle-mounted controller 270 and the controller 310 store the same authentication key 276. The battery device 300 uses the authentication key 316 to encrypt the message. The battery device 300 transmits an encrypted message, and the communication unit 277 receives the message. The communication unit 277 decodes the message using the authentication key 276.
　判定部２７８は、認証メッセージ通信における認証の成否に基づいて、電池装置３００が正規の車両１０に搭載されているか否かを判定する。具体的な一例では、判定部２７８は、認証メッセージ通信における認証が成功したか否かを判定する。つまり、判定部２７８は、正しくメッセージを復号化できる場合は、認証が成功したと判定し、正しくメッセージを復号化できない場合は、認証が失敗したと判定する。認証が成功したと判定された場合は、電池装置３００が正規の車両１０に搭載されていると判断することができる。他方、認証が失敗したと判定された場合は、電池装置３００が非正規の車両１０に搭載されていると判断される。なお、電池装置３００と車載制御装置２７０との間でメッセージ通信が実行されない場合も、判定部２７８は認証が失敗したと判定する。 The determination unit 278 determines whether or not the battery device 300 is mounted on the legitimate vehicle 10 based on the success or failure of the authentication in the authentication message communication. In a specific example, the determination unit 278 determines whether or not the authentication in the authentication message communication is successful. That is, the determination unit 278 determines that the authentication was successful if the message can be correctly decoded, and determines that the authentication has failed if the message cannot be decoded correctly. If it is determined that the authentication is successful, it can be determined that the battery device 300 is mounted on the legitimate vehicle 10. On the other hand, if it is determined that the authentication has failed, it is determined that the battery device 300 is mounted on the non-genuine vehicle 10. Even if the message communication is not executed between the battery device 300 and the vehicle-mounted control device 270, the determination unit 278 determines that the authentication has failed.
　判定部２７８の判定結果は、指示部２７９に与えられる。指示部２７９は、判定部２７８による判定結果に基づいて、電池情報の送信に関する指示を電池装置３００に与える。つまり、指示部２７９は、電池装置３００が正規の車両１０に搭載されていると判定部２７８により判定された場合には、電池情報の送信指示を電池装置３００へ送信する。他方、指示部２７９は、電池装置３００が正規の車両１０に搭載されていないと判定部２７８により判定された場合には、電池情報の送信禁止指示を電池装置３００へ送信する。 The determination result of the determination unit 278 is given to the instruction unit 279. The instruction unit 279 gives an instruction regarding transmission of battery information to the battery device 300 based on the determination result by the determination unit 278. That is, when the determination unit 278 determines that the battery device 300 is mounted on the regular vehicle 10, the instruction unit 279 transmits a battery information transmission instruction to the battery device 300. On the other hand, when the determination unit 278 determines that the battery device 300 is not mounted on the regular vehicle 10, the instruction unit 279 transmits a battery information transmission prohibition instruction to the battery device 300.
　［２－２．電池装置］
　図７Ｂは、本実施形態に係る電池装置３００のコントローラ３１０の機能の一例を示す機能ブロック図である。コントローラ３１０は、入力部３３１、送信部３３２、及び指示受付部３３５としての機能を有する。 [2-2. Battery device]
FIG. 7B is a functional block diagram showing an example of the function of the controller 310 of the battery device 300 according to the present embodiment. The controller 310 has functions as an input unit 331, a transmission unit 332, and an instruction reception unit 335.
　指示受付部３３５は、車載制御装置２７０から送信された電池情報送信指示又は電池情報送信禁止指示を受信する。 The instruction receiving unit 335 receives the battery information transmission instruction or the battery information transmission prohibition instruction transmitted from the in-vehicle control device 270.
　指示受付部３３５によって受け付けられた指示は、送信部３３２に与えられる。送信部３３２は、車載制御装置２７０から与えられた指示に基づいて、電池情報を送信するか否かを決定する。送信部３３２は、電池情報送信指示が与えられた場合には、電池情報を送信する。他方、送信部３３２は、電池情報送信禁止指示が与えられた場合には、電池情報を送信しない。 The instruction received by the instruction receiving unit 335 is given to the transmitting unit 332. The transmission unit 332 determines whether or not to transmit the battery information based on the instruction given from the vehicle-mounted control device 270. The transmission unit 332 transmits the battery information when the battery information transmission instruction is given. On the other hand, the transmission unit 332 does not transmit the battery information when the battery information transmission prohibition instruction is given.
　［２－３．電池管理システムの動作］
　以下、本実施形態に係る電池管理システム４００の動作について説明する。車載制御装置２７０のプロセッサ２７１は、不正判定プログラム２７５を起動することにより、不正取外し判定処理を実行する。電池装置３００のプロセッサ３１１は、電池管理プログラム３１５を起動することにより、電池情報提供処理を実行する。 [2-3. Battery management system operation]
Hereinafter, the operation of the battery management system 400 according to the present embodiment will be described. The processor 271 of the in-vehicle control device 270 executes the fraud determination program 275 to execute the fraud removal determination process. The processor 311 of the battery device 300 executes the battery information providing process by activating the battery management program 315.
　図８Ａは、本実施形態に係る車載制御装置２７０による不正取外し判定処理の手順の一例を示すフローチャートである。 FIG. 8A is a flowchart showing an example of a procedure for unauthorized removal determination processing by the in-vehicle control device 270 according to the present embodiment.
　不正取外し判定処理は、定期的又は不定期的に実行される。具体的な一例では、不正取外し判定処理は、車載システム２００の起動処理において実行される。不正取外し判定処理において、まずプロセッサ２７１は、電池装置３００との認証メッセージ通信を実行する（ステップＳ２０１）。認証メッセージ通信において、認証キーを用いたメッセージ認証が実行される。プロセッサ２７１は、認証が成功したか否かを判定する（ステップＳ２０２）。つまり、プロセッサ３１１は、電池装置３００が正規の車両１０に搭載されているか否かを判定する。 The illegal removal judgment process is executed regularly or irregularly. In a specific example, the unauthorized removal determination process is executed in the activation process of the in-vehicle system 200. In the illegal removal determination process, the processor 271 first executes authentication message communication with the battery device 300 (step S201). In the authentication message communication, message authentication using the authentication key is executed. The processor 271 determines whether or not the authentication is successful (step S202). That is, the processor 311 determines whether or not the battery device 300 is mounted on the legitimate vehicle 10.
　認証が成功した場合（ステップＳ２０２においてＹＥＳ）、プロセッサ２７１は、電池情報送信指示を電池装置３００へ送信する（ステップＳ２０３）。これにより、不正取外し判定処理が終了する。 If the authentication is successful (YES in step S202), the processor 271 transmits the battery information transmission instruction to the battery device 300 (step S203). As a result, the illegal removal determination process is completed.
　認証が失敗した場合（ステップＳ２０２においてＮＯ）、プロセッサ２７１は、電池情報送信禁止指示を電池装置３００へ送信する（ステップＳ２０４）。さらにプロセッサ２７１は、エラー情報を出力するためのデータを表示装置２０９に送信する（ステップＳ２０５）。表示装置２０９は、当該データを受信すると、エラー情報、例えば、電池が不正に取り外された可能性があることを示す情報を含む画面を表示する。以上で、不正取外し判定処理が終了する。 If the authentication fails (NO in step S202), the processor 271 transmits a battery information transmission prohibition instruction to the battery device 300 (step S204). Further, the processor 271 transmits data for outputting the error information to the display device 209 (step S205). Upon receiving the data, the display device 209 displays a screen containing error information, for example, information indicating that the battery may have been illegally removed. This completes the illegal removal determination process.
　図８Ｂは、本実施形態に係る電池装置３００による電池情報提供処理の手順の一例を示すフローチャートである。 FIG. 8B is a flowchart showing an example of the procedure of the battery information providing process by the battery device 300 according to the present embodiment.
　ステップＳ２１１～Ｓ２１４は、第１実施形態において説明したステップＳ１０１～Ｓ１０４と同様であるので説明を省略する。 Since steps S211 to S214 are the same as steps S101 to S104 described in the first embodiment, the description thereof will be omitted.
　車載制御装置２７０から送信された電池情報送信指示又は電池情報送信禁止指示は、コントローラ３１０によって受信される。プロセッサ３１１は、受信された指示が、電池情報送信指示であるか、電池情報送信禁止指示であるかを判定する（ステップＳ２１５）。 The battery information transmission instruction or the battery information transmission prohibition instruction transmitted from the in-vehicle controller 270 is received by the controller 310. The processor 311 determines whether the received instruction is a battery information transmission instruction or a battery information transmission prohibition instruction (step S215).
　電池情報送信指示が受信された場合（ステップＳ２１５において「電池情報送信指示」）、プロセッサ３１１は、電池情報をサーバ４０に与えるために、車外通信機２１１へ電池情報を電池ＩＤと共に送信する（ステップＳ２１６）。車外通信機２１１は、電池情報及び電池ＩＤを受信すると、これらのデータを車両ＩＤと共にサーバ４０へ送信する。これにより、サーバ４０のデータベースに電池情報が登録される。電池情報がサーバ４０へアップロードされると、電池情報提供処理が終了する。 When the battery information transmission instruction is received (“battery information transmission instruction” in step S215), the processor 311 transmits the battery information together with the battery ID to the external communication device 211 in order to give the battery information to the server 40 (step). S216). When the vehicle outside communication device 211 receives the battery information and the battery ID, it transmits these data to the server 40 together with the vehicle ID. As a result, the battery information is registered in the database of the server 40. When the battery information is uploaded to the server 40, the battery information providing process ends.
　電池情報送信禁止指示が受信された場合（ステップＳ２１５において「電池情報送信禁止指示」）、プロセッサ３１１は、電池情報を送信することなく、電池情報提供処理を終了する。 When the battery information transmission prohibition instruction is received (“battery information transmission prohibition instruction” in step S215), the processor 311 ends the battery information provision process without transmitting the battery information.
　［３．第３実施形態］
　第３実施形態では、電池装置３００が、電池装置３００とは異なる複数の車載装置間の通信を監視し、監視結果に基づいて、電池装置３００が正規の車両１０に搭載されているか否かを判定する。なお、以下の説明において、第１実施形態に係る電池管理システムと同一の構成要素については、同一符号を付し、その説明を省略する。 [3. Third Embodiment]
In the third embodiment, the battery device 300 monitors communication between a plurality of in-vehicle devices different from the battery device 300, and based on the monitoring result, whether or not the battery device 300 is mounted on the legitimate vehicle 10. judge. In the following description, the same components as those of the battery management system according to the first embodiment are designated by the same reference numerals, and the description thereof will be omitted.
　［３－１．電池管理システム］
　図９は、本実施形態に係る電池管理システムの構成の一例を示すブロック図である。電池管理システム４００は、車載システム２００の一部である。 [3-1. Battery management system]
FIG. 9 is a block diagram showing an example of the configuration of the battery management system according to the present embodiment. The battery management system 400 is a part of the in-vehicle system 200.
　本実施形態に係る電池管理システム４００は、電池装置３００と、車載制御装置２７０Ａ，２７０Ｂと、車外通信機２１１とを含む。 The battery management system 400 according to the present embodiment includes a battery device 300, in- vehicle control devices 270A and 270B, and an external communication device 211.
　本実施形態に係る電池管理システム４００において、車載制御装置２７０Ａ，２７０Ｂ間において通信処理が実行される。通信処理は、電池装置３００が正規の車両１０に搭載されていることの判定に専用の通信処理であってもよいし、車載制御装置２７０Ａ及び２７０Ｂ間での通常の通信処理であってもよい。例えば、車載制御装置２７０Ａ，２７０Ｂ間の通信処理は、車両１０の走行に関する通信処理であってもよい。 In the battery management system 400 according to the present embodiment, communication processing is executed between the in- vehicle control devices 270A and 270B. The communication process may be a communication process dedicated to determining that the battery device 300 is mounted on the legitimate vehicle 10, or may be a normal communication process between the in- vehicle control devices 270A and 270B. .. For example, the communication process between the vehicle-mounted control devices 270A and 270B may be the communication process related to the traveling of the vehicle 10.
　電池装置３００は、車載制御装置２７０Ａ，２７０Ｂ間の通信処理を監視する。電池装置３００は、監視結果に応じて、電池情報を送信するか否かを判定する。つまり、電池装置３００は、正常な通信処理が監視された場合に電池情報を送信し、正常な通信処理が監視されなかった場合に電池情報を送信しない。電池装置３００から送信された電池情報は、車外通信機２１１によって車両ＩＤ及び電池ＩＤと共にサーバ４０へ送信される。 The battery device 300 monitors the communication process between the in- vehicle control devices 270A and 270B. The battery device 300 determines whether or not to transmit the battery information according to the monitoring result. That is, the battery device 300 transmits the battery information when the normal communication process is monitored, and does not transmit the battery information when the normal communication process is not monitored. The battery information transmitted from the battery device 300 is transmitted to the server 40 together with the vehicle ID and the battery ID by the external communication device 211.
　車載制御装置２７０Ａ，２７０Ｂは、電池装置３００とは異なる車載装置である。例えば、車載制御装置２７０Ａ，２７０Ｂは、車両制御装置２０１及びステアリング制御装置２０５であってもよいし、車両制御装置２０１及び制動装置２０８であってもよいし、車両制御装置２０１及び自動運転車載装置２２０であってもよい。 The in- vehicle control devices 270A and 270B are in-vehicle devices different from the battery device 300. For example, the vehicle-mounted control devices 270A and 270B may be the vehicle control device 201 and the steering control device 205, the vehicle control device 201 and the braking device 208, the vehicle control device 201 and the automatic driving vehicle-mounted device. It may be 220.
　図１０は、本実施形態に係る電池装置３００のコントローラ３１０の機能の一例を示す機能ブロック図である。コントローラ３１０は、入力部３３１、送信部３３２、判定部３３４、及び監視部３３６としての機能を有する。 FIG. 10 is a functional block diagram showing an example of the function of the controller 310 of the battery device 300 according to the present embodiment. The controller 310 has functions as an input unit 331, a transmission unit 332, a determination unit 334, and a monitoring unit 336.
　監視部３３６は、車載制御装置２７０Ａ，２７０Ｂ間の通信を監視する。具体的な一例では、監視部３３６は、車載制御装置２７０Ａ，２７０Ｂ間において、正常な通信が行われていることを監視する。例えば、車載制御装置２７０Ａが車両制御装置２０１であり、車載制御装置２７０Ｂがステアリング制御装置２０５である場合、車載制御装置２７０Ａから車載制御装置２７０Ｂへ、目標の舵角を示す制御指示が伝送されていることを監視したり、車載制御装置２７０Ｂから車載制御装置２７０Ａへ、現在の舵角を示すデータが伝送されていることを監視したりする。 The monitoring unit 336 monitors the communication between the in- vehicle control devices 270A and 270B. In a specific example, the monitoring unit 336 monitors that normal communication is being performed between the vehicle-mounted control devices 270A and 270B. For example, when the in-vehicle control device 270A is the vehicle control device 201 and the in-vehicle control device 270B is the steering control device 205, a control instruction indicating a target steering angle is transmitted from the in-vehicle control device 270A to the in-vehicle control device 270B. It monitors the presence of the vehicle, and monitors that data indicating the current steering angle is transmitted from the vehicle-mounted control device 270B to the vehicle-mounted control device 270A.
　判定部３３４は、通信の監視結果に応じて、電池装置３００が正規の車両１０に搭載されているか否かを判定する。具体的な一例では、判定部３３４は、車載制御装置２７０Ａ，２７０Ｂ間における正常な通信が監視されたか否かを判定する。 The determination unit 334 determines whether or not the battery device 300 is mounted on the regular vehicle 10 according to the communication monitoring result. In a specific example, the determination unit 334 determines whether or not normal communication between the vehicle-mounted control devices 270A and 270B has been monitored.
　例えば、車両１０のメーカー、車種等によって、車載システムの構成は異なったり、車載制御装置間におけるデータ通信の仕様が異なったりする。正規の車両１０に電池装置３００が搭載される場合、当該車両１０の車載システムに適合した適切な仕様のデータ通信が監視される。したがって、正常な通信が監視される場合は、電池装置３００が正規の車両１０に搭載されていると判断することができる。他方、例えば、他の車両１０から取り外された電池装置３００が車両１０に搭載される場合、監視されるはずの（適切な）仕様のデータ通信が監視されない。したがって、正常な通信が監視されない場合、電池装置３００が非正規の車両１０に搭載されていると判断される。 For example, the configuration of the in-vehicle system may differ, or the specifications of data communication between the in-vehicle control devices may differ depending on the manufacturer, vehicle type, etc. of the vehicle 10. When the battery device 300 is mounted on the legitimate vehicle 10, data communication having appropriate specifications suitable for the in-vehicle system of the vehicle 10 is monitored. Therefore, when normal communication is monitored, it can be determined that the battery device 300 is mounted on the legitimate vehicle 10. On the other hand, for example, when the battery device 300 removed from the other vehicle 10 is mounted on the vehicle 10, data communication with (appropriate) specifications that should be monitored is not monitored. Therefore, if normal communication is not monitored, it is determined that the battery device 300 is mounted on the non-genuine vehicle 10.
　電池装置３００が車両１０から取り外され、車両１０に搭載されない無線通信機に当該電池装置３００が接続された場合、電池装置３００からは車載制御装置間における通信そのものが監視不能な状態にある。この場合も、判定部３３４は正常な通信が監視されなかったと判定する。 When the battery device 300 is removed from the vehicle 10 and the battery device 300 is connected to a wireless communication device that is not mounted on the vehicle 10, the communication itself between the vehicle-mounted control devices cannot be monitored from the battery device 300. In this case as well, the determination unit 334 determines that normal communication has not been monitored.
　［３－２．電池管理システムの動作］
　以下、本実施形態に係る電池管理システム４００の動作について説明する。電池装置３００のプロセッサ３１１は、電池管理プログラム３１５を起動することにより、電池情報提供処理を実行する。 [3-2. Battery management system operation]
Hereinafter, the operation of the battery management system 400 according to the present embodiment will be described. The processor 311 of the battery device 300 executes the battery information providing process by activating the battery management program 315.
　図１１は、本実施形態に係る電池装置３００による電池情報提供処理の手順の一例を示すフローチャートである。 FIG. 11 is a flowchart showing an example of the procedure of the battery information providing process by the battery device 300 according to the present embodiment.
　ステップＳ３０１～Ｓ３０３は、第１実施形態において説明したステップＳ１０１～Ｓ１０３と同様であるので説明を省略する。 Since steps S301 to S303 are the same as steps S101 to S103 described in the first embodiment, the description thereof will be omitted.
　プロセッサ３１１は、車載制御装置２７０Ａ，２７０Ｂ間の通信を監視する（ステップＳ３０４）。プロセッサ３１１は、正しいデータ通信が監視されたか否かを判定する（ステップＳ３０５）。つまり、プロセッサ３１１は、電池装置３００が正規の車両１０に搭載されているか否かを判定する。 The processor 311 monitors the communication between the in- vehicle control devices 270A and 270B (step S304). Processor 311 determines whether correct data communication has been monitored (step S305). That is, the processor 311 determines whether or not the battery device 300 is mounted on the legitimate vehicle 10.
　正しいデータ通信が監視された場合（ステップＳ３０５においてＹＥＳ）、プロセッサ３１１は、電池情報をサーバ４０に与えるために、車外通信機２１１へ電池情報を送信する（ステップＳ３０６）。例えば、非一過性メモリ３１２には、電池ＩＤが記憶されており、ステップＳ３０６では、例えば、電池情報が電池ＩＤと共に送信される。車外通信機２１１は、電池情報及び電池ＩＤを受信すると、これらのデータを車両ＩＤと共にサーバ４０へ送信する。これにより、サーバ４０のデータベースに電池情報が登録される。電池情報がサーバ４０へアップロードされると、電池情報提供処理が終了する。 When the correct data communication is monitored (YES in step S305), the processor 311 transmits the battery information to the external communication device 211 in order to give the battery information to the server 40 (step S306). For example, the battery ID is stored in the non-transient memory 312, and in step S306, for example, the battery information is transmitted together with the battery ID. When the vehicle outside communication device 211 receives the battery information and the battery ID, it transmits these data to the server 40 together with the vehicle ID. As a result, the battery information is registered in the database of the server 40. When the battery information is uploaded to the server 40, the battery information providing process ends.
　正しいデータ通信が監視されなかった場合（ステップＳ３０５においてＮＯ）、プロセッサ３１１は、エラー情報を出力するためのデータを表示装置２０９に送信する（ステップＳ３０７）。表示装置２０９は、当該データを受信すると、エラー情報、例えば、電池が不正に取り外された可能性があることを示す情報を含む画面を表示する。以上で、電池情報提供処理が終了する。 If the correct data communication is not monitored (NO in step S305), the processor 311 transmits data for outputting error information to the display device 209 (step S307). Upon receiving the data, the display device 209 displays a screen containing error information, for example, information indicating that the battery may have been illegally removed. This completes the battery information provision process.
　［４．変形例］
　本開示に係る電池管理システムの構成及び動作は、上記の実施形態に限定されない。第１実施形態～第３実施形態では、電池装置３００が正規の車両１０に搭載されていると判定された場合に、電池装置３００が電池情報を送信し、電池装置３００が正規の車両１０に搭載されていないと判定された場合に、電池装置３００が電池情報を送信しない構成、すなわち、電池装置が電池情報の送信の可否を決定する構成について述べた。しかし、このような構成に限定されない。車外通信機２１１が、電池情報の送信の可否を決定してもよい。つまり、電池装置３００が正規の車両１０に搭載されているか否かにかかわらず、電池装置３００は電池情報を車外通信機２１１へ送信し、電池装置３００が正規の車両１０に搭載されていると判定された場合に、車外通信機２１１が電池情報をサーバ４０へ送信し、電池装置３００が正規の車両１０に搭載されていないと判定された場合に、車外通信機２１１が電池情報を送信しない構成としてもよい。 [4. Modification example]
The configuration and operation of the battery management system according to the present disclosure are not limited to the above embodiments. In the first to third embodiments, when it is determined that the battery device 300 is mounted on the legitimate vehicle 10, the battery device 300 transmits the battery information, and the battery device 300 is sent to the legitimate vehicle 10. The configuration in which the battery device 300 does not transmit the battery information when it is determined that the battery device is not mounted, that is, the configuration in which the battery device determines whether or not the battery information can be transmitted has been described. However, it is not limited to such a configuration. The out-of-vehicle communication device 211 may determine whether or not to transmit the battery information. That is, regardless of whether or not the battery device 300 is mounted on the regular vehicle 10, the battery device 300 transmits the battery information to the external communication device 211, and the battery device 300 is mounted on the regular vehicle 10. If it is determined, the external communication device 211 transmits the battery information to the server 40, and if it is determined that the battery device 300 is not mounted on the legitimate vehicle 10, the external communication device 211 does not transmit the battery information. It may be configured.
　電池装置３００から送出された電池情報が、車載制御装置２７０を経由して車外通信機２１１へ伝送されてもよい。具体的な一例では、電池装置３００が正規の車両１０に搭載されているか否かにかかわらず、電池装置３００は電池情報を車載制御装置２７０へ送信し、電池装置３００が正規の車両１０に搭載されていると判定された場合に、車載制御装置２７０が電池情報を車外通信機２１１へ送信し、電池装置３００が正規の車両１０に搭載されていないと判定された場合に、車載制御装置２７０が電池情報を送信しない構成としてもよい。 The battery information transmitted from the battery device 300 may be transmitted to the external communication device 211 via the in-vehicle control device 270. In a specific example, regardless of whether or not the battery device 300 is mounted on the legitimate vehicle 10, the battery device 300 transmits the battery information to the in-vehicle control device 270, and the battery device 300 is mounted on the legitimate vehicle 10. When it is determined that the vehicle-mounted control device 270 transmits the battery information to the external communication device 211, and when it is determined that the battery device 300 is not mounted on the legitimate vehicle 10, the vehicle-mounted control device 270 is installed. May not be configured to transmit battery information.
　第１実施形態及び第２実施形態において、電池装置３００と車載制御装置２７０との間で行われる通信を認証メッセージ通信としたが、認証を伴わないメッセージ通信であってもよい。電池装置３００と車載制御装置２７０との間で行われる通信処理は、電池装置３００が正規の車両１０に搭載されていることの判定に専用の通信処理であってもよいし、電池装置３００及び車載制御装置２７０間での通常の通信処理であってもよい。例えば、車載制御装置２７０が給電制御装置２１２又は車両制御装置２０１であり、上記の通信処理は、電池装置３００からの電池に関する情報（例えば、ＳＯＣ）の通知であってもよい。 In the first embodiment and the second embodiment, the communication performed between the battery device 300 and the vehicle-mounted control device 270 is an authentication message communication, but a message communication without authentication may be used. The communication process performed between the battery device 300 and the vehicle-mounted control device 270 may be a communication process dedicated to determining that the battery device 300 is mounted on the legitimate vehicle 10, or the battery device 300 and It may be a normal communication process between the in-vehicle control devices 270. For example, the vehicle-mounted control device 270 may be the power supply control device 212 or the vehicle control device 201, and the above-mentioned communication process may be a notification of information (for example, SOC) about the battery from the battery device 300.
　［５．効果］
　以上のように、電池管理システム４００は、判定部３３４，２７８と、検出部であるセンサ部３２０と、送信部３３２とを備える。判定部３３４，２７８は、車両１０に搭載される複数の車載装置間の通信処理に基づいて、電池装置３００が正規の車両１０に搭載されているか否かを判定する。センサ部３２０は、電池装置３００に含まれる電池モジュール３０１の状態を検出する。送信部３３２は、センサ部３２０によって検出される電池モジュール３０１の状態を示す電池情報を車両１０の外部のサーバ４０へ与えるために、電池情報を送信する。判定部３３４，２７８によって電池装置３００が正規の車両１０に搭載されていると判定される場合、送信部３３２は電池情報を送信する。判定部３３４，２７８によって電池装置３００が正規の車両１０に搭載されていないと判定される場合、送信部３３２は電池情報を送信しない。これにより、電池装置３００が正規の車両１０に搭載されていない場合、不正な電池情報を送信することが防止される。したがって、電池装置３００の信頼性を確保することができる。 [5. effect]
As described above, the battery management system 400 includes a determination unit 334,278, a sensor unit 320 which is a detection unit, and a transmission unit 332. The determination units 334 and 278 determine whether or not the battery device 300 is mounted on the regular vehicle 10 based on the communication processing between the plurality of vehicle-mounted devices mounted on the vehicle 10. The sensor unit 320 detects the state of the battery module 301 included in the battery device 300. The transmission unit 332 transmits the battery information in order to give the battery information indicating the state of the battery module 301 detected by the sensor unit 320 to the server 40 outside the vehicle 10. When the determination units 334 and 278 determine that the battery device 300 is mounted on the legitimate vehicle 10, the transmission unit 332 transmits the battery information. When the determination units 334 and 278 determine that the battery device 300 is not mounted on the legitimate vehicle 10, the transmission unit 332 does not transmit the battery information. As a result, when the battery device 300 is not mounted on the legitimate vehicle 10, it is possible to prevent incorrect battery information from being transmitted. Therefore, the reliability of the battery device 300 can be ensured.
　通信処理は、電池装置３００と、電池装置３００とは異なる車載装置である車載制御装置２７０との間におけるメッセージ通信処理であってもよい。判定部３３４，２７８は、メッセージ通信処理が正常に実行されているか否かに基づいて、電池装置３００が正規の車両１０に搭載されているか否かを判定してもよい。電池装置３００が車両１０から取り外されると、メッセージ通信処理は正常に実行されなくなる。したがって、電池装置３００と車載制御装置２７０との間におけるメッセージ通信処理を利用して、車両１０からの電池装置３００の不正な取り外しを検出することができる。 The communication process may be a message communication process between the battery device 300 and the vehicle-mounted control device 270, which is an vehicle-mounted device different from the battery device 300. The determination units 334 and 278 may determine whether or not the battery device 300 is mounted on the legitimate vehicle 10 based on whether or not the message communication process is normally executed. When the battery device 300 is removed from the vehicle 10, the message communication process is not normally executed. Therefore, the unauthorized removal of the battery device 300 from the vehicle 10 can be detected by utilizing the message communication process between the battery device 300 and the vehicle-mounted control device 270.
　メッセージ通信処理は、認証キーを用いる認証処理によって生成される認証メッセージを電池装置３００と車載制御装置２７０との間で通信する処理であってもよい。例えば、１つの車両１０に、他の車両１０から取り外された電池装置３００が搭載される場合、認証が失敗し得る。したがって、上記構成により、電池装置３００の不正な取り替えを検出することができる。 The message communication process may be a process of communicating an authentication message generated by the authentication process using the authentication key between the battery device 300 and the vehicle-mounted control device 270. For example, if one vehicle 10 is equipped with the battery device 300 removed from the other vehicle 10, the authentication may fail. Therefore, with the above configuration, it is possible to detect an illegal replacement of the battery device 300.
　電池装置３００は、判定部３３４及び送信部３３２を含んでもよい。電池装置３００に判定部３３４及び送信部３３２を設けることにより、他の車載装置の構成を大幅に改変することなく、電池装置３００の不正な取り外しの検出機能を実現することができる。 The battery device 300 may include a determination unit 334 and a transmission unit 332. By providing the battery device 300 with the determination unit 334 and the transmission unit 332, it is possible to realize a function of detecting unauthorized removal of the battery device 300 without significantly modifying the configuration of other in-vehicle devices.
　車載制御装置２７０は、判定部２７８を含んでもよい。これにより、電池装置３００の構成を簡素化しつつ、電池装置３００の不正な取り外しの検出機能を実現することができる。 The in-vehicle control device 270 may include a determination unit 278. As a result, it is possible to realize a function of detecting unauthorized removal of the battery device 300 while simplifying the configuration of the battery device 300.
　通信処理は、電池装置３００とは異なる複数の車載制御装置２７０Ａ，２７０Ｂ間における通信処理であってもよい。電池装置３００は、判定部３３４を含んでもよい。判定部３３４は、複数の車載制御装置２７０Ａ，２７０Ｂ間の通信を監視し、監視結果に基づいて、電池装置３００が正規の車両１０に搭載されているか否かを判定してもよい。例えば、複数の車載制御装置２７０Ａ，２７０Ｂ間における車両１０の走行に関する通信を判定部が監視することができる。電池装置３００が車両１０から取り外されると、通信の監視が失敗する。したがって、車載制御装置２７０Ａ，２７０Ｂ間における通信処理を利用して、車両１０からの電池装置３００の不正な取り外しを検出することができる。 The communication process may be a communication process between a plurality of in- vehicle control devices 270A and 270B different from the battery device 300. The battery device 300 may include a determination unit 334. The determination unit 334 may monitor the communication between the plurality of vehicle-mounted control devices 270A and 270B, and determine whether or not the battery device 300 is mounted on the regular vehicle 10 based on the monitoring result. For example, the determination unit can monitor the communication regarding the traveling of the vehicle 10 between the plurality of vehicle-mounted control devices 270A and 270B. If the battery device 300 is removed from the vehicle 10, communication monitoring will fail. Therefore, it is possible to detect the unauthorized removal of the battery device 300 from the vehicle 10 by utilizing the communication processing between the vehicle-mounted control devices 270A and 270B.
　［６．補記］
　今回開示された実施の形態はすべての点で例示であって、制限的ではない。本発明の権利範囲は、上述の実施形態ではなく請求の範囲によって示され、請求の範囲と均等の意味及びその範囲内でのすべての変更が含まれる。 [6. Supplement]
The embodiments disclosed this time are exemplary in all respects and are not restrictive. The scope of rights of the present invention is indicated by the scope of claims rather than the above-described embodiment, and includes the meaning equivalent to the scope of claims and all modifications within the scope thereof.
　１０　車両
　２０　基地局
　３０　インターネット
　４０　サーバ
　１００　電池情報管理システム
　２００　車載システム
　２０１　車両制御装置
　２０２　モータ
　２０４　インバータ
　２０５　ステアリング制御装置
　２０６　舵角センサ
　２０７　モータ
　２０８　制動装置
　２０９　表示装置
　２１０　中継装置
　２１１　車外通信機
　２１２　給電制御装置
　２１３　電力変換器
　２１４　受電装置
　２２０　自動運転車載装置
　２５０，２５１　バス
　２５２　通信線
　２７０，２７０Ａ，２７０Ｂ　車載制御装置
　２７１　プロセッサ
　２７２　非一過性メモリ
　２７３　一過性メモリ
　２７４　通信インタフェース
　２７５　不正判定プログラム
　２７６　認証キー
　２７７　通信部
　２７８，３３４　判定部
　２７９　指示部
　３００　電池装置
　３０１　電池モジュール
　３１０　コントローラ
　３１１　プロセッサ
　３１２　非一過性メモリ
　３１３　一過性メモリ
　３１４　通信インタフェース
　３１５　電池管理プログラム
　３１６　認証キー
　３２０　センサ部
　３２１　電流センサ
　３２２　電圧センサ
　３２３　温度センサ
　３２４　検出回路
　３３１　入力部
　３３２　送信部
　３３３　通信部
　３３５　指示受付部
　３３６　監視部
　４００　電池管理システム
 
  10 Vehicle 20 Base station 30 Internet 40 Server 100 Battery information management system 200 In-vehicle system 201 Vehicle control device 202 Motor 204 Inverter 205 Steering control device 206 Steering angle sensor 207 Motor 208 Braking device 209 Display device 210 Relay device 211 External communication device 212 Power supply Control device 213 Power converter 214 Power receiving device 220 Automatic operation In- vehicle device 250, 251 Bus 252 Communication line 270, 270A, 270B In-vehicle control device 271 Processor 272 Non-transient memory 273 Transient memory 274 Communication interface 275 Fraud judgment program 276 Authentication key 277 Communication unit 278, 334 Judgment unit 279 Indicator 300 Battery device 301 Battery module 310 Controller 311 Processor 312 Non-transient memory 313 Transient memory 314 Communication interface 315 Battery management program 316 Authentication key 320 Sensor unit 321 Current sensor 322 Voltage sensor 323 Temperature sensor 324 Detection circuit 331 Input unit 332 Transmission unit 333 Communication unit 335 Instruction reception unit 336 Monitoring unit 400 Battery management system

Claims (9)

  1. 　車両に搭載される電池装置を管理する電池管理システムであって、
    　前記車両に搭載される複数の車載装置間の通信処理に基づいて、前記電池装置が正規の車両に搭載されているか否かを判定する判定部と、
    　前記電池装置に含まれる電池モジュールの状態を検出する検出部と、
    　前記検出部によって検出される前記電池モジュールの状態を示す電池情報を前記車両の外部のサーバへ与えるために、前記電池情報を送信する送信部と、
    　を備え、
    　前記判定部によって前記電池装置が前記正規の車両に搭載されていると判定される場合、前記送信部は前記電池情報を送信し、
    　前記判定部によって前記電池装置が前記正規の車両に搭載されていないと判定される場合、前記送信部は前記電池情報を送信しない、
    　電池管理システム。     A battery management system that manages battery devices installed in vehicles.
    A determination unit that determines whether or not the battery device is mounted on a legitimate vehicle based on communication processing between a plurality of in-vehicle devices mounted on the vehicle.
    A detector that detects the state of the battery module included in the battery device, and
    A transmission unit that transmits the battery information in order to give battery information indicating the state of the battery module detected by the detection unit to a server outside the vehicle.
    With
    When the determination unit determines that the battery device is mounted on the legitimate vehicle, the transmission unit transmits the battery information.
    When the determination unit determines that the battery device is not mounted on the legitimate vehicle, the transmission unit does not transmit the battery information.
    Battery management system.
  2. 　前記通信処理は、前記電池装置と、前記電池装置とは異なる車載装置との間におけるメッセージ通信処理であり、
    　前記判定部は、前記メッセージ通信処理が正常に実行されているか否かに基づいて、前記電池装置が前記正規の車両に搭載されているか否かを判定する、
    　請求項１に記載の電池管理システム。     The communication process is a message communication process between the battery device and an in-vehicle device different from the battery device.
    The determination unit determines whether or not the battery device is mounted on the legitimate vehicle based on whether or not the message communication process is normally executed.
    The battery management system according to claim 1.
  3. 　前記メッセージ通信処理は、認証キーを用いる認証処理によって生成される認証メッセージを前記電池装置と前記車載装置との間で通信する処理である、
    　請求項２に記載の電池管理システム。     The message communication process is a process of communicating an authentication message generated by an authentication process using an authentication key between the battery device and the vehicle-mounted device.
    The battery management system according to claim 2.
  4. 　前記電池装置は、前記判定部及び前記送信部を含む、
    　請求項２又は請求項３に記載の電池管理システム。     The battery device includes the determination unit and the transmission unit.
    The battery management system according to claim 2 or 3.
  5. 　前記車載装置は、前記判定部を含む、
    　請求項２又は請求項３に記載の電池管理システム。     The in-vehicle device includes the determination unit.
    The battery management system according to claim 2 or 3.
  6. 　前記通信処理は、前記電池装置とは異なる複数の車載装置間における通信処理であり、
    　前記電池装置は、前記判定部を含み、
    　前記判定部は、前記複数の車載装置間の通信を監視し、監視結果に基づいて、前記電池装置が前記正規の車両に搭載されているか否かを判定する、
    　請求項１に記載の電池管理システム。     The communication process is a communication process between a plurality of in-vehicle devices different from the battery device.
    The battery device includes the determination unit.
    The determination unit monitors communication between the plurality of in-vehicle devices, and determines whether or not the battery device is mounted on the legitimate vehicle based on the monitoring result.
    The battery management system according to claim 1.
  7. 　車両に搭載される電池装置であって、
    　前記車両に搭載される複数の車載装置間の通信処理に基づいて、前記電池装置が正規の車両に搭載されているか否かを判定する判定部と、
    　電池モジュールと、
    　前記電池モジュールの状態を検出する検出部と、
    　前記検出部によって検出される前記電池モジュールの状態を示す電池情報を前記車両の外部のサーバへ与えるために、前記電池情報を送信する送信部と、
    　を備え、
    　前記判定部によって前記電池装置が前記正規の車両に搭載されていると判定される場合、前記送信部は前記電池情報を送信し、
    　前記判定部によって前記電池装置が前記正規の車両に搭載されていないと判定される場合、前記送信部は前記電池情報を送信しない、
    　電池装置。     A battery device installed in a vehicle
    A determination unit that determines whether or not the battery device is mounted on a legitimate vehicle based on communication processing between a plurality of in-vehicle devices mounted on the vehicle.
    Battery module and
    A detector that detects the state of the battery module and
    A transmission unit that transmits the battery information in order to give battery information indicating the state of the battery module detected by the detection unit to a server outside the vehicle.
    With
    When the determination unit determines that the battery device is mounted on the legitimate vehicle, the transmission unit transmits the battery information.
    When the determination unit determines that the battery device is not mounted on the legitimate vehicle, the transmission unit does not transmit the battery information.
    Battery device.
  8. 　車両に搭載される電池装置を管理する電池管理方法であって、
    　前記車両に搭載される複数の車載装置間の通信処理に基づいて、前記電池装置が正規の車両に搭載されているか否かを判定するステップと、
    　前記電池装置に含まれる電池モジュールの状態を検出するステップと、
    　検出される前記電池モジュールの状態を示す電池情報を前記車両の外部のサーバへ与えるために、前記電池情報を送信するステップと、
    　を有し、
    　前記電池情報を送信するステップは、
    　前記電池装置が前記正規の車両に搭載されていると判定される場合、前記電池情報を送信すること、及び、
    　前記電池装置が前記正規の車両に搭載されていないと判定される場合、前記電池情報を送信しないこと、
    　を含む、
    　電池管理方法。     It is a battery management method that manages the battery device installed in the vehicle.
    A step of determining whether or not the battery device is mounted on a legitimate vehicle based on communication processing between a plurality of in-vehicle devices mounted on the vehicle, and
    A step of detecting the state of the battery module included in the battery device, and
    A step of transmitting the battery information in order to give the detected battery information indicating the state of the battery module to a server outside the vehicle, and
    Have,
    The step of transmitting the battery information is
    When it is determined that the battery device is mounted on the legitimate vehicle, the battery information is transmitted and the battery information is transmitted.
    If it is determined that the battery device is not installed in the legitimate vehicle, the battery information should not be transmitted.
    including,
    Battery management method.
  9. 　車両に搭載される電池装置をコンピュータが管理するためのコンピュータプログラムであって、
    　前記コンピュータに、
    　前記車両に搭載される複数の車載装置間の通信処理に基づいて、前記電池装置が正規の車両に搭載されているか否かを判定するステップと、
    　前記電池装置に含まれる電池モジュールの状態を検出するステップと、
    　検出される前記電池モジュールの状態を示す電池情報を前記車両の外部のサーバへ与えるために、前記電池情報を送信するステップと、
    　を実行させ、
    　前記電池情報を送信するステップは、
    　前記電池装置が前記正規の車両に搭載されていると判定される場合、前記電池情報を送信すること、及び、
    　前記電池装置が前記正規の車両に搭載されていないと判定される場合、前記電池情報を送信しないこと、
    　を含む、
    　コンピュータプログラム。
          A computer program for a computer to manage a battery device installed in a vehicle.
    On the computer
    A step of determining whether or not the battery device is mounted on a legitimate vehicle based on communication processing between a plurality of in-vehicle devices mounted on the vehicle, and
    A step of detecting the state of the battery module included in the battery device, and
    A step of transmitting the battery information in order to give the detected battery information indicating the state of the battery module to a server outside the vehicle, and
    To execute,
    The step of transmitting the battery information is
    When it is determined that the battery device is mounted on the legitimate vehicle, the battery information is transmitted and the battery information is transmitted.
    If it is determined that the battery device is not installed in the legitimate vehicle, the battery information should not be transmitted.
    including,
    Computer program.
PCT/JP2020/030002 2019-08-07 2020-08-05 Battery management system, battery device, battery management method, and computer program WO2021025061A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
JP2021537346A JPWO2021025061A1 (en) 2019-08-07 2020-08-05

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2019-145331 2019-08-07
JP2019145331 2019-08-07

Publications (1)

Publication Number Publication Date
WO2021025061A1 true WO2021025061A1 (en) 2021-02-11

Family

ID=74502727

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2020/030002 WO2021025061A1 (en) 2019-08-07 2020-08-05 Battery management system, battery device, battery management method, and computer program

Country Status (2)

Country Link
JP (1) JPWO2021025061A1 (en)
WO (1) WO2021025061A1 (en)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114650517A (en) * 2022-02-24 2022-06-21 中通客车股份有限公司 Vehicle remote monitoring communication method and system

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2012222945A (en) * 2011-04-07 2012-11-12 Honda Motor Co Ltd Battery authentication system of vehicle
JP2015122704A (en) * 2013-12-25 2015-07-02 住友電工システムソリューション株式会社 Communication system, communication method, communication adapter, and server

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP2012222945A (en) * 2011-04-07 2012-11-12 Honda Motor Co Ltd Battery authentication system of vehicle
JP2015122704A (en) * 2013-12-25 2015-07-02 住友電工システムソリューション株式会社 Communication system, communication method, communication adapter, and server

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114650517A (en) * 2022-02-24 2022-06-21 中通客车股份有限公司 Vehicle remote monitoring communication method and system

Also Published As

Publication number Publication date
JPWO2021025061A1 (en) 2021-02-11

Similar Documents

Publication Publication Date Title
US11283601B2 (en) Update management method, update management system, and non-transitory recording medium
CN110316013B (en) Carrier, carrier charging system and carrier charging method
CN107925600B (en) Security processing method and server
US11861951B2 (en) Driving management system, vehicle, and information processing method
WO2019142458A1 (en) Vehicle monitoring device, fraud detection server, and control method
KR102471498B1 (en) Electronic apparatus and method for diagnosing of vehicle
CN110406485B (en) Illegal detection method and vehicle-mounted network system
CN108725203B (en) System and method for maintaining high voltage battery charge in the event of detection of auxiliary battery failure
CN112367318A (en) Security processing method and computer
CN111373701B (en) Abnormality detection device, abnormality detection system, and control method
JP7116204B2 (en) UPDATE MANAGEMENT METHOD, UPDATE MANAGEMENT DEVICE AND CONTROL PROGRAM
WO2021025061A1 (en) Battery management system, battery device, battery management method, and computer program
CN108297825A (en) VATS Vehicle Anti-Theft System, intelligent key system and anti-stealing method for vehicles
JP6191397B2 (en) Communication relay device, communication relay processing
WO2013051122A1 (en) In-vehicle network system
JP6184575B1 (en) Program rewriting and verification system
JP6783578B2 (en) Vehicle control system
JP2020141318A (en) In-vehicle control device
US20220281348A1 (en) Battery management system, battery device, battery management method, and computer program
JP6662657B2 (en) Vehicle monitoring system
JP2021165891A (en) Vehicle management system
JP2020035180A (en) Information processor, information processing method, and information processing program
JP2019028634A (en) Alteration detection device of on-vehicle memory

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 20851106

Country of ref document: EP

Kind code of ref document: A1

ENP Entry into the national phase

Ref document number: 2021537346

Country of ref document: JP

Kind code of ref document: A

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 20851106

Country of ref document: EP

Kind code of ref document: A1