Information system, data acquisition device and information terminal

By setting up data classification and driver approval mechanisms on vehicles, the problem of unauthorized data transmission has been solved, achieving secure and controllable data transmission and cost optimization.

CN116472548BActive Publication Date: 2026-05-22ASTEMO LTD
View PDF 3 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
ASTEMO LTD
Filing Date
2021-09-07
Publication Date
2026-05-22

AI Technical Summary

Technical Problem

In existing technologies, the collection and use of vehicle data lacks a mechanism for explicit consent from the driver when the data is sent to the data center. Especially in the context of increasingly stringent data protection rules, there is a risk that data may be sent without the driver's approval.

Method used

An information system is provided, including a data acquisition device mounted on a vehicle, an information terminal operated by a driver, and a data center. The system categorizes vehicle data into first data that requires driver approval and second data that does not require approval based on pre-set classification criteria. The first data is displayed on the information terminal to obtain driver approval before being sent to the data center.

Benefits of technology

This ensures that drivers approve the transmission of primary data, preventing unauthorized data transmission and reducing the time and labor burden on drivers. At the same time, by rationally classifying data transmission, it reduces data communication costs and storage management costs.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116472548B_ABST
    Figure CN116472548B_ABST
Patent Text Reader

Abstract

The present application provides a technology in which a driver can approve transmission of vehicle data to a data center. An information system of the present application includes a first device (101-a) mounted on a vehicle, a second device (102-a) operated by a driver, and a third device (103). The first device classifies vehicle data into first data and second data according to a predetermined classification condition. The first data is data for which an approval operation of the driver is requested. The second data is data for which an approval operation of the driver is not requested. The first device transmits the first data to the second device and transmits the second data to the third device. The second device receives the first data from the first device and transmits the first data to the third device according to an approval operation of the driver.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This disclosure relates to an information system, data acquisition device, and information terminal for vehicles. Background Technology

[0002] In recent years, vehicles have gained access to various services (such as telematics services) by connecting to external networks. Telematics services involve collecting various data from within the vehicle and using that data to provide various services.

[0003] For example, the system described in Patent Document 1 collects data from a vehicle according to predetermined data collection conditions in order to provide telematics services.

[0004] Existing technical documents

[0005] Patent documents

[0006] Patent Document 1: Japanese Patent Application Publication No. 2018-55191 Summary of the Invention

[0007] The problem the invention aims to solve

[0008] It is expected that the types of data collected from vehicles will increase in the future. For example, video captured by onboard cameras and information detected by onboard sensors may be collected from vehicles.

[0009] Furthermore, with the collection and use of data, rules concerning the use of personal data are implemented. For example, the European Union (EU) has a law aimed at protecting personal data, namely the General Data Protection Regulation (GDPR). This regulation stipulates that the collection and use of personal data without the explicit consent of the data subject is a violation.

[0010] Regarding data collected from vehicles, drivers typically agree to the terms of use when purchasing the vehicle or starting to use the telematics service. Systems providing telematics services (such as data centers) collect data from vehicles based on this agreement. However, data protection measures are expected to become stricter in the future. The method of obtaining driver consent to the terms of use upon vehicle purchase or starting to use the telematics service is sometimes insufficient from a data protection perspective. Considering this issue, a system is needed where the driver provides consent / approval when data is sent to the data center.

[0011] Therefore, this disclosure provides a technology that allows drivers to consent / approval when data is sent to a data center.

[0012] Technical means to solve the problem

[0013] In one or more embodiments, an information system is provided. The information system includes a first device mounted on a vehicle, a second device operated by a driver of the vehicle, and a third device. The first device is configured to classify various types of vehicle data acquired in the vehicle into first data and second data according to pre-set classification criteria. The first data is data requiring the driver's approval. The second data is data not requiring the approval operation. The first device is configured to send the first data to the second device and to the third device. The second device is configured to receive the first data from the first device and send the first data to the third device according to the approval operation.

[0014] In one or more embodiments, a data acquisition device mounted on a vehicle is provided. The data acquisition device includes a memory storing a program and a processor. The processor is configured to acquire various types of vehicle data in the vehicle by executing the program, classify the vehicle data into first data and second data according to preset classification criteria, and send the first data and the second data based on instructions provided from data received from an external source. The first data is data requiring the driver's approval. The second data is data not requiring the approval operation.

[0015] In one or more embodiments, an information terminal operated by a driver of a vehicle is provided. The information terminal includes a memory storing a program, a processor, and a display unit. The processor is configured to display a setting screen for setting classification conditions on the display unit by executing the program, and to send the classification conditions to the vehicle based on the operation on the setting screen. The classification conditions are conditions for classifying vehicle data acquired in the vehicle into first data and second data. The first data is data requiring the driver's approval. The second data is data not requiring the driver's approval.

[0016] The effects of the invention

[0017] Based on the above configuration, the driver can approve the transmission of the first data. This prevents the transmission of the first data without the driver's approval. Attached Figure Description

[0018] Figure 1 A diagram illustrating the overall information system in Embodiment 1.

[0019] Figure 2 This diagram illustrates the configuration of the first device in Embodiment 1.

[0020] Figure 3 This is an example of a classification condition table.

[0021] Figure 4 A diagram showing the first and second data areas in a storage unit.

[0022] Figure 5 This diagram illustrates the configuration of the second device in Embodiment 1.

[0023] Figure 6 This is a diagram illustrating the process of setting up a classification criteria table.

[0024] Figure 7 This is a diagram illustrating the process of requesting approval from a driver.

[0025] Figure 8 This diagram illustrates the configuration of the third device in Embodiment 1.

[0026] Figure 9 This is a flowchart for setting the classification conditions in Example 1.

[0027] Figure 10 This is a flowchart for classifying the vehicle data in Example 1.

[0028] Figure 11 This is a flowchart of the transmission of the first and second data in Example 1.

[0029] Figure 12 This is a flowchart of sending the first data in Example 1.

[0030] Figure 13 This diagram illustrates the configuration of the first device in Embodiment 2.

[0031] Figure 14 This is a flowchart of the transmission of the first and second data in Example 2.

[0032] Figure 15 This diagram illustrates the configuration of the second device in Embodiment 3.

[0033] Figure 16 This is a flowchart of sending the first data in Example 3.

[0034] Figure 17 This is a diagram illustrating a variation of the first device in Embodiment 3.

[0035] Figure 18 This diagram illustrates the configuration of the first device in Embodiment 4.

[0036] Figure 19A diagram illustrating the process of modifying the classification condition table in Example 4.

[0037] Figure 20 This is a flowchart for modifying the classification condition table in Example 4.

[0038] Figure 21 This is a diagram illustrating a variation of the second device in Embodiment 4.

[0039] Figure 22 This diagram illustrates the configuration of the first device in Embodiment 5.

[0040] Figure 23 The diagram illustrates the process of setting the final classification conditions in Example 5.

[0041] Figure 24 A diagram illustrating the overall information system in Embodiment 5.

[0042] Figure 25 A flowchart for setting the final classification conditions in Example 5. Detailed Implementation

[0043] Several embodiments will now be described with reference to the accompanying drawings. The drawings illustrate specific embodiments and are not intended to limit the scope of the invention.

[0044] <Example 1>

[0045] Figure 1 This is a diagram illustrating the overall information system in Embodiment 1. (Using...) Figure 1 The basic concepts of this embodiment will be explained. The information system 100 includes a plurality of first devices 101-a to 101-c, a plurality of second devices 102-a to 102-c, and a third device 103.

[0046] The first devices 101-a to 101-c are respectively mounted on vehicles 110-a to 110-c. Multiple second devices 102-a to 102-c are carried by the drivers of vehicles 110-a to 110-c. The second devices 102-a to 102-c are, for example, information terminals such as smartphones. The third device 103 is a data center. The third device 103 can use data collected from vehicles 110-a to 110-c to provide telematics services.

[0047] Multiple first devices 101-a to 101-c have the same configuration, so the first device 101-a will be described below. The first device 101-a collects various data from the vehicle 110-a. In the following text, the various data collected from the vehicle 110-a will be collectively referred to as "vehicle data".

[0048] Vehicle data includes image and video data acquired by onboard cameras, information detected by onboard sensors (hereinafter referred to as "sensor information"), control information, and identification information. Sensor information includes, for example, vehicle speed, steering angle, vehicle position, acceleration, accelerator pedal opening, brake pedal opening, engine speed, and information related to white lines around the vehicle. Control information includes information related to automatic control systems such as inter-vehicle distance control (e.g., ACC: Adaptive Cruise Control) and collision damage mitigation braking control (e.g., AEB: Advanced Emergency Braking System). Identification information includes the driver's personal data and information identifying the vehicle.

[0049] The first device 101-a classifies vehicle data into first data and second data according to preset classification conditions. The first data is data that requests the driver's approval for transmission to the third device 103. The second data is data that does not request the driver's approval for transmission to the third device 103.

[0050] The first device 101-a receives a data provision instruction 130 from the third device 103. The first device 101-a transmits first data to the second device 102-a according to the data provision instruction 130. Then, the first device 101-a transmits second data to the third device 103 via a communication network 170. The communication network 170 is, for example, one or a combination of two or more of a mobile phone network, the Internet, and short-range wireless communication.

[0051] The multiple second devices 102-a to 102-c each have the same configuration, so the second device 102-a will be described below. The second device 102-a receives first data from the first device 101-a. The second device 102-a presents the content of the first data to the driver and requests the driver's approval for operation. Based on the approved operation, the second device 102-a transmits the first data to the third device 103 via the communication network 170.

[0052] The third device 103 receives the first data and the second data via the communication network 170. Then, the third device 103 stores the first data and the second data. Thus, the third device 103 can collect vehicle data (the first data and the second data) from each of the vehicles 110-a to 110-c. Furthermore, the third device 103 provides the collected vehicle data to the user 190 of the telematics service.

[0053] Based on the above configuration, the information system 100 can classify vehicle data into first data and second data. The first data is sent to the second device 102-a. The driver can confirm the content of the first data on the second device 102-a. Then, based on the driver's approval operation, the first data is sent to the third device 103. Therefore, it is possible to prevent the first data from being accidentally sent to the third device 103. On the other hand, the second data is sent to the third device 103 without the driver's approval operation. Since the second data, which does not require the driver's approval operation, is sent directly to the third device 103, the driver's time and effort can be saved.

[0054] (The structure of the first device)

[0055] Next, the specific configuration of the first device 101-a will be described. Figure 2 This diagram illustrates the configuration of the first device 101-a. The first device 101-a includes a data acquisition device 210, a communication unit (e.g., TCU: Telematics Control Unit) 220, a control unit 230, and a camera 240. They are interconnected via a CAN bus 250.

[0056] The data acquisition device 210 includes at least a processor such as a CPU (Central Processing Unit), a memory, and a known storage device (storage unit) capable of reading and writing information. The processor implements the various functions described below by executing instructions (programs) stored in the memory.

[0057] The data acquisition device 210 acquires vehicle data according to the data provision instruction 130 and classifies the vehicle data into first data and second data. The data acquisition device 210 stores the first data and the second data.

[0058] The communication unit 220 receives data from the third device 103 and provides instruction 130. Furthermore, the communication unit 220 receives the second data from the data acquisition device 210 and sends the second data to the third device 103.

[0059] The control unit 230 includes one or more ECUs (Electronic Control Units). An ECU includes a CPU, ROM, and RAM, etc. For example, the control unit 230 includes an ECU connected to sensors (such as radar sensors) that detect the vehicle's surroundings, an ECU that controls the drive system (such as the engine), an ECU that controls the braking system, an ECU that detects the vehicle's position (such as GPS signals), and an ECU that controls the vehicle's navigation, etc.

[0060] Furthermore, the control unit 230 is connected to the camera 240. The camera 240 may include, for example, a camera (monocular or stereo camera) that captures images of the vehicle's surroundings, a dashcam, or a camera that captures images of the vehicle's interior. The control unit 230 can acquire video footage captured by the camera 240. The data acquisition device 210 can collect vehicle data from the control unit 230.

[0061] Next, the configuration of the data acquisition device 210 will be described in more detail. The data acquisition device 210 includes a short-range communication unit 211, an external device monitoring unit 212, a classification condition specification unit 213, a classification processing execution unit 214, a storage unit 215, and a transmission control unit 216 as its constituent elements.

[0062] The near-field communication unit 211 uses a prescribed wireless method (such as Blue Tooth (registered trademark)) to perform communication processing with the second device 102-a.

[0063] The external device monitoring unit 212 performs connection-related setting processing for the second device 102-a in a manner where the data acquisition device 210 is not connected to any device other than the second device 102-a. Furthermore, the external device monitoring unit 212 monitors the storage unit 513 of the second device 102-a (see reference). Figure 5 Monitor the remaining capacity of ).

[0064] The classification condition designation unit 213 receives classification conditions from the second device 102-a and stores the classification conditions in the classification condition designation unit 213. The classification conditions are used to classify vehicle data into first data and second data. Furthermore, the classification conditions can also be stored in the storage unit 215.

[0065] Figure 3 Here is an example of a classification criteria table 300. The classification criteria table 300 includes vehicle data type 301, availability 302, first data 303, and second data 304 as constituent items.

[0066] The "Provide / Deny" option 302 indicates whether the data is provided to the third device 103. In "Provide / Deny" 302, "○" indicates that the data is provided to the third device 103, and "×" indicates that the data is not provided to the third device 103. "First Data" 303 represents vehicle data classified as first data. In this example, external camera images, destination information, and location information are classified as first data. "Second Data" 304 represents vehicle data classified as second data. In this example, vehicle identification number, vehicle model, and ABS (Anti-lock Braking System) logs are classified as second data.

[0067] The classification processing execution unit 214 receives a data provision instruction 130 from the third device 103 via the communication unit 220. Based on the data provision instruction 130, the classification processing execution unit 214 refers to the classification condition table 300 and classifies the vehicle data into first data and second data. The classification processing execution unit 214 stores the first data and second data in the storage unit 215. Furthermore, the classification processing execution unit 214 can also delete data other than the first data and second data in the vehicle data (that is, data where the availability 302 is "×").

[0068] The classification processing execution unit 214 assigns identifiers to the first data and the second data respectively, for identifying the first data and the second data as a group of data. The identifier is, for example, the date and time when the vehicle data was acquired. The identifier can be any information that allows grouping the first data and the second data acquired at the same time; for example, it can be other information such as the vehicle's location. According to this configuration, the third device 103 can treat the first data and the second data with the same identifier (that is, vehicle data acquired at the same date and time) as a group and perform various processing steps.

[0069] like Figure 2 As shown, the storage unit 215 includes a logically separated first data area 215a and a second data area 215b.

[0070] Figure 4 This diagram illustrates the first data area 215a and the second data area 215b in storage unit 215. The first data area 215a is the area where the first data is stored. The classification processing execution unit 214 assigns an identifier to the first data. The classification processing execution unit 214 stores the combination 401 of the first data and the identifier into the first data area 215a. Hereinafter, "the combination 401 of the first data and the identifier" will be abbreviated as "the first data 401".

[0071] The second data area 215b is the area for storing the second data. The classification processing execution unit 214 assigns an identifier to the second data. The classification processing execution unit 214 stores the combination 402 of the second data and the identifier into the second data area 215b. Hereinafter, "the combination 402 of the second data and the identifier" will be abbreviated as "the second data 402".

[0072] Furthermore, the classification processing execution unit 214 can also compress large-sized data (such as images from exterior cameras) and store the compressed data in the storage unit 215. In another example, the compression processing of exterior camera images can also be performed by the camera 240.

[0073] Refer again Figure 2The transmission control unit 216 includes a data processing unit 216a and a bus monitoring unit 216b. The data processing unit 216a acquires first data 401 from the first data area 215a and transmits the first data 401 to the second device 102-a via the short-range communication unit 211. Furthermore, the data processing unit 216a acquires second data 402 from the second data area 215b and transmits the second data 402 to the third device 103 via the communication unit 220. When the transmission processing of the first data 401 and the transmission processing of the second data 402 are completed, the data processing unit 216a deletes the first data 401 from the first data area 215a and deletes the second data 402 from the second data area 215b.

[0074] The bus monitoring unit 216b monitors the communication traffic (e.g., bus utilization) of the in-vehicle network (CAN bus 250 in this example). When the communication traffic falls below a predetermined value, the bus monitoring unit 216b sends a transmission permission command to the data processing unit 216a. The data processing unit 216a then transmits the second data 402 to the third device 103 via the communication unit 220 according to the transmission permission command. Furthermore, the data processing unit 216a can also adjust the amount of second data 402 transmitted per unit time when the communication traffic falls below a predetermined value.

[0075] (The structure of the second device)

[0076] Next, the configuration of the second device 102-a will be described. Figure 5 This diagram illustrates the configuration of the second device 102-a. In this example, the second device 102-a is a smartphone capable of receiving input from the driver on a display unit (shower).

[0077] The second device 102-a includes at least a processor such as a CPU, a memory, and a known storage device (storage unit) capable of reading and writing information. The processor implements the various functions described below by executing instructions (programs) stored in the memory.

[0078] The second device 102-a includes a short-range communication unit 511, a data management application 512, a storage unit 513, and a communication unit 514 as constituent elements.

[0079] The near-field communication unit 511 uses a specified wireless method (such as Bluetooth) to perform communication processing with the data acquisition device 210.

[0080] The data management application 512 includes a classification condition setting unit 512a, a data management unit 512b, and a data processing unit 512c.

[0081] The classification condition setting unit 512a sets the classification condition table 300. Figure 6 This is a diagram illustrating the process of setting the classification condition table 300. The classification condition setting unit 512a displays a setting screen for setting the classification condition table 300 on the display unit 112 of the second device 102-a. The setting screen includes a first screen 601 and a second screen 602.

[0082] The classification condition setting unit 512a first displays the first screen 601 on the display unit 112. The first screen 601 is used to select data from vehicle data that can be provided to the third device 103. In this example, the external camera image, destination information, and vehicle identification number (VIN) are selected on the first screen 601.

[0083] Next, the classification condition setting unit 512a displays a second screen 602 on the display unit 112. The second screen 602 is used to select the first data (i.e., the data requiring driver approval) from the data selected on the first screen 601. In this example, the external camera image and destination information are selected on the second screen 602. Therefore, the classification condition setting unit 512a sets... Figure 6 The classification condition table 300 is shown at the bottom. The external camera image and destination information are set as the first data, and the vehicle identification number (VIN) is set as the second data. The classification condition setting unit 512a transmits the classification condition table 300 to the data acquisition device 210 via the short-range communication unit 511.

[0084] Refer again Figure 5 The storage unit 513 includes a first data area 513a. The first data area 513a is the area for storing the first data 401. Furthermore, the storage unit 513 is also used for other functions of the smartphone.

[0085] The data management unit 512b receives the first data 401 from the data acquisition device 210. The data management unit 512b stores the first data 401 into the first data area 513a of the storage unit 513.

[0086] Subsequently, the data management unit 512b requests the driver's approval for the first data 401. Figure 7 This is a diagram illustrating the process of requesting approval from a driver. The data management unit 512b displays an approval screen on the display unit 112 for accepting the approval request for the first data 401. The approval screen includes a third screen 603 and a fourth screen 604.

[0087] The data management unit 512b first retrieves information related to the first data 401 stored in the first data area 513a. In this example, the first data area 513a stores images from the vehicle's external camera and destination information. The data management unit 512b then displays the third screen 603 on the display unit 112. The third screen 603 is a screen used to display an overview of the first data 401 stored in the first data area 513a.

[0088] The driver can check the contents of the first data 401 on the third screen 603. For example, when the driver taps the icon 603a representing the image from the external camera on the third screen 603, the image from the external camera is displayed on the display unit 112.

[0089] When the display of the external camera image ends, the data management unit 512b displays the fourth screen 604 on the display unit 112. The fourth screen 604 is used to approve the provision of the first data (here, the external camera image) 401 to the third device 103. The fourth screen 604 includes a first button 604a and a second button 604b. The first button 604a is the button to approve the provision of the first data 401 to the third device 103, and the second button 604b is the button to disapprove the provision of the first data 401 to the third device 103.

[0090] When the driver presses the first button 604a, the data management unit 512b sends the first data 401 to the third device 103 via the communication unit 514. The data management unit 512b then deletes the first data 401, which has been sent to the third device 103, from the first data area 513a. On the other hand, when the driver presses the second button 604b, the data management unit 512b deletes the first data 401 from the first data area 513a without sending it to the third device 103. The data management unit 512b repeats this process until the first data 401 disappears from the first data area 513a.

[0091] Before the data management unit 512b sends the first data 401 to the third device 103, the data processing unit 512c performs a prescribed processing on the first data 401 (e.g., compression and / or mosaic processing).

[0092] (The structure of the third device)

[0093] Next, the configuration of the third device 103 will be described. Figure 8 This diagram illustrates the configuration of the third device 103. The third device 103 includes at least a processor such as a CPU, a memory, and a known storage device (storage unit) capable of reading and writing information. The processor executes instructions (programs) stored in the memory to implement the various functions described below.

[0094] The third device 103 includes a communication unit 701, a data processing unit 702, a storage unit 703, and a data providing unit 704 as constituent elements.

[0095] The communication unit 701 performs communication processing with the first device 101-a and with the second device 102-a.

[0096] The data processing unit 702 receives first data 401 from the first device 101-a. Then, the data processing unit 702 receives second data 402 from the second device 102-a. The data processing unit 702 stores the first data 401 and the second data 402 as vehicle data 710 in the storage unit 703. Because the first data 401 and the second data 402 are assigned identifiers, the third device 103 can easily manage the first data 401 and the second data 402 acquired on the same date and time.

[0097] The data providing unit 704 can treat vehicle data 710 with the same identifier (i.e., vehicle data acquired on the same date and time) as a group and perform various processes. For example, the data providing unit 704 sends vehicle data 710 with the same identifier to user 190. User 190 includes various public utilities, such as police stations, hospitals, road utility companies, and insurance companies. The vehicle data 710 is used in various services operated by these public utilities. Furthermore, the vehicle data 710 can also be used as map information.

[0098] Next, the specific processing procedure will be explained. In the following explanation, Figure 2 and Figure 5 The various constituent elements shown are referred to as subjects, but the processor can also be used as the subject in the description.

[0099] (Setting classification criteria)

[0100] Figure 9 The flowchart for setting classification conditions is as follows. First, the classification condition designation unit 213 of the first device 101-a detects that the vehicle 110-a is in a parked state (S901). Specifically, when the gear of the vehicle 110-a is in the parking position (P) and the parking brake is engaged, the classification condition designation unit 213 determines that the vehicle 110-a is in a parked state. Next, the classification condition designation unit 213 sends a condition setting instruction to the second device 102-a (S902). The condition setting instruction is an instruction for the second device 102-a to perform the process of displaying the above-mentioned setting screen (first screen 601 and second screen 602).

[0101] The classification condition setting unit 512a of the second device 102-a displays the first screen 601 on the display unit 112 according to the condition setting instruction (S903). The driver selects data from the vehicle data on the first screen 601 that can be provided to the third device 103. Next, the classification condition setting unit 512a displays the second screen 602 on the display unit 112 (S904). The driver selects the first data (i.e., the data requiring driver approval) on the second screen 602. When the driver's operation on the second screen 602 ends, the classification condition setting unit 512a sets the classification condition table 300. Then, the classification condition setting unit 512a sends the classification condition table 300 to the first device 101-a (S905).

[0102] The classification condition designation unit 213 of the first device 101-a receives the classification condition table 300 and saves the classification condition table 300 (S906).

[0103] (Classification of vehicle data)

[0104] Figure 10 A flowchart for classifying vehicle data. Figure 10 The flowchart is in Figure 9 Execute after the flowchart.

[0105] The classification processing execution unit 214 of the first device 101-a receives a data provision instruction 130 from the third device 103 via the communication unit 220 (S1001). Next, the classification processing execution unit 214 obtains a classification condition table 300 from the classification condition specification unit 213. Then, the classification processing execution unit 214 classifies the vehicle data into first data and second data with reference to the classification condition table 300 (S1002).

[0106] Next, the classification processing execution unit 214 assigns identifiers to the first data and the second data respectively (S1003). Then, the classification processing execution unit 214 stores the first data 401 in the first data area 215a and stores the second data 402 in the second data area 215b (S1004).

[0107] (Sending of the first and second data)

[0108] Figure 11 This is a flowchart for sending the first and second data. Figure 11 The flowchart is in Figure 10 Execute after the flowchart.

[0109] The bus monitoring unit 216b of the first device 101-a monitors the communication traffic of the CAN bus 250 (S1101). The bus monitoring unit 216b determines whether the communication traffic is below a specified value (S1102). If the communication traffic is not below the specified value, the process returns to S1101.

[0110] When the communication traffic volume is below a specified value, the bus monitoring unit 216b sends a transmission permission command to the data processing unit 216a. The data processing unit 216a then sends the second data 402 to the third device 103 via the communication unit 220 according to the transmission permission command (S1103). Next, the external device monitoring unit 212 queries the second device 102-a for the remaining capacity of the storage unit 513 (S1104).

[0111] The data management unit 512b of the second device 102-a sends the remaining capacity of the storage unit 513 to the external device monitoring unit 212.

[0112] The external device monitoring unit 212 determines whether the remaining capacity of the storage unit 513 is above a predetermined threshold. If the remaining capacity of the storage unit 513 is less than the predetermined threshold, it may be impossible to ensure sufficient first data area 513a for storing the first data 401. Therefore, the external device monitoring unit 212 sends a data deletion instruction to the second device 102-a (S1107). The data deletion instruction is an instruction for the second device 102-a to delete the data in the storage unit 513.

[0113] The data management unit 512b deletes old data (such as old data used by other functions of the smartphone) in the storage unit 513 according to the data deletion instruction (S1108). After that, the data management unit 512b returns to the processing in S1105.

[0114] On the other hand, when the remaining capacity of the storage unit 513 is above a predetermined threshold, the external device monitoring unit 212 instructs the data processing unit 216a to send the first data 401. The data processing unit 216a then sends the first data 401 to the second device 102-a (S1109).

[0115] Data management unit 512b receives first data 401 and stores it in first data area 513a (S1110). Next, data management unit 512b sends a completion notification to first device 101-a (S1111). The completion notification informs first device 101-a that the storage of first data 401 has been completed. Data processing unit 216a deletes first data 401 from first data area 215a and deletes second data 402 from second data area 215b based on the completion notification (S1112).

[0116] (Sending the first data)

[0117] Figure 12 This is a flowchart for sending the first data. Figure 12 The flowchart is in Figure 11 Execute after the flowchart.

[0118] First, the data processing unit 216a of the first device 101-a detects that the vehicle 110-a is in a parked state (S1201). Next, the data processing unit 216a sends an approval operation instruction to the second device 102-a (S1202). The approval operation instruction is an instruction for the second device 102-a to perform the process of displaying the above-mentioned approval screen (screen 3 603 and screen 4 604).

[0119] The data management unit 512b of the second device 102-a displays the third screen 603 on the display unit 112 according to the approval operation instruction (S1203). Next, the data management unit 512b displays the fourth screen 604 on the display unit 112 according to the driver's operation (S1204). Then, the data management unit 512b determines whether the driver has performed an approval operation (S1205). Specifically, as described above, the data management unit 512b determines whether the driver has pressed the first button 604a on the fourth screen 604. If the driver has pressed the first button 604a, the data management unit 512b retrieves the corresponding first data 401 from the first data area 513a and sends the first data 401 to the third device 103 (S1206). Afterwards, the data management unit 512b deletes the corresponding first data 401 from the first data area 513a (S1207).

[0120] Furthermore, if the driver presses the second button 604b on the fourth screen 604, the data management unit 512b deletes the corresponding first data 401 from the first data area 513a without performing the processing of S1206 (S1207).

[0121] Subsequently, the data management unit 512b determines whether the first data 401 is no longer present in the first data area 513a. If the first data 401 is not present in the first data area 513a, the data management unit 512b terminates the process. On the other hand, if the first data 401 is present in the first data area 513a, the data management unit 512b returns to the process in S1203.

[0122] (Effect)

[0123] According to the above configuration, the first device 101-a classifies vehicle data into first data 401 and second data 402 according to the classification condition table 300. First data 401 is data for which the driver's approval is requested before transmission to the third device 103. Second data 402 is data for which the driver's approval is not requested before transmission to the third device 103. The first device 101-a transmits first data 401 to the second device 102-a. The driver can view the content of first data 401 on the display unit 112 of the second device 102-a. Furthermore, when the driver performs an approval operation on the second device 102-a, the second device 102-a transmits first data 401 to the third device 103. In this way, the driver can approve transmission to the third device 103 for each type of first data 401. This prevents vehicle data, including the driver's personal data, from being accidentally transmitted to the third device 103.

[0124] On the other hand, the first device 101-a directly transmits the second data 402 to the third device 103. Since the second data 402 is transmitted directly to the third device 103 without requesting the driver's approval, the driver's time and effort can be reduced.

[0125] Furthermore, the driver can set the classification condition table 300 by operating the display unit 112 of the second device 102-a. That is, the driver can freely select the first data that requires their approval.

[0126] When data is transmitted via the communication unit (TCU) 220, the data communication fee is usually charged on a pay-as-you-go basis. Therefore, the data communication fee may be high when transmitting a large amount of data. According to the above configuration, the first device 101-a transmits only the second data 402 to the third device 103 via the communication unit 220f, thus suppressing the data communication fee.

[0127] Furthermore, the first device 101-a monitors the remaining capacity of the storage unit 513 of the second device 102-a. The first device 101-a may send the first data 401 to the second device 102-a only if the second device 102-a can ensure sufficient area for storing the first data 401. Furthermore, the first device 101-a can also instruct the second device 102-a to delete data in the storage unit 513 to ensure sufficient area for storing the first data 401.

[0128] <Example 2>

[0129] Figure 13 This diagram illustrates the configuration of the first device 101-a in Embodiment 2. The same symbols are used for configurations identical to those in Embodiment 1, and their descriptions are omitted.

[0130] The first device 101-a includes a CGW (Central Gateway) 260. The CGW 260 has relay functions for relaying multiple communication networks within the vehicle 110-a and managing communication processing between these networks. In this example, the CGW 260 relays communication between multiple CAN buses 250-252 and adjusts the communication processing between these multiple CAN buses 250-252. A data acquisition device 210 and a communication unit 220 are connected to CAN bus 250. On the other hand, various ECUs (not shown) are connected to CAN buses 251 and 252.

[0131] The CGW 260 includes a bus monitoring unit 216b. The bus monitoring unit 216b monitors the communication traffic for each of the multiple CAN buses 250 to 252. The bus monitoring unit 216b determines whether the communication traffic is below a specified value.

[0132] (Sending of the first and second data)

[0133] Figure 14 This is a flowchart for sending the first and second data. Figure 14 The flowchart is a replacement Figure 11 The flowchart is executed.

[0134] The bus monitoring unit 216b of the CGW 260 monitors the communication traffic of each of the multiple CAN buses 250-252 (S1401). The bus monitoring unit 216b determines whether the communication traffic of each of the multiple CAN buses 250-252 is below a predetermined value (S1402). If the communication traffic of each of the multiple CAN buses 250-252 is below the predetermined value, it performs the following... Figure 11 The same processing as S1120.

[0135] Based on the above configuration, the first device 101-a can take into account the communication traffic of each of the multiple CAN buses 250 to 252 within the vehicle 110-a and send the second data 402 to the third device 103. As a result, the impact on communication processing on other CAN buses 251 and 252 can also be reduced.

[0136] <Example 3>

[0137] Figure 15 This diagram illustrates the configuration of the second device 102-a in Embodiment 3. The same symbols are used for configurations identical to those in Embodiment 1, and their descriptions are omitted.

[0138] In this example, the second device 102-a is an in-vehicle infotainment (IVI). The IVI is a touch-panel-type information terminal installed within the vehicle 110-a. The IVI has functions such as navigation, location information services, voice communication, internet connectivity, and multimedia playback and retrieval. In this example, the IVI is configured to connect to external network devices (Wi-Fi device 180 (Wi-Fi is a registered trademark)).

[0139] The second device 102-a includes an in-vehicle network connection unit 521 and a Wi-Fi connection unit 522. The in-vehicle network connection unit 521 is connected to the CAN bus 250. The in-vehicle network connection unit 521 performs communication processing with the data acquisition device 210 via the CAN bus 250. Furthermore, the first device 101-a and the second device 102-a (IVI) can also be directly connected without using the CAN bus 250.

[0140] The Wi-Fi connection unit 522 is a communication module used to perform connection processing with Wi-Fi devices 180 installed in the home or office. The Wi-Fi connection unit 522 notifies the driver that a connection has been established with the Wi-Fi device 180. Furthermore, when multiple Wi-Fi devices 180 are present, the Wi-Fi connection unit 522 can also display a screen on the touch panel to select a connection target from the multiple Wi-Fi devices 180. The Wi-Fi connection unit 522 can also store information related to previously connected Wi-Fi devices 180.

[0141] In addition, the Wi-Fi connection unit 522 can be built into the IVI or placed outside the IVI.

[0142] (Sending the first data)

[0143] Figure 16 This is a flowchart for sending the first data. Figure 16 The flowchart is a replacement Figure 12 The flowchart is executed.

[0144] First, the data processing unit 216a of the first device 101-a detects that the vehicle 110-a is in a parked state (S1601). Next, the data processing unit 216a sends an approval operation instruction to the second device 102-a (S1602).

[0145] The Wi-Fi connection unit 522 of the second device 102-a receives an approval operation instruction via the in-vehicle network connection unit 521. The Wi-Fi connection unit 522 performs connection processing with the Wi-Fi device 180 installed at home or office according to the approval operation instruction (S1603). Next, the Wi-Fi connection unit 522 determines whether a connection with the Wi-Fi device 180 has been established (S1604). If a connection with the Wi-Fi device 180 has been established, it performs connection processing... Figure 12 The same process as S1210. Furthermore, if no connection is established with the Wi-Fi device 180, the Wi-Fi connection unit 522 returns to the process in S1603. According to this configuration, the first device 101-a can send the first data 401 to the third device 103 after a communication environment for sending the first data 401 has been established.

[0146] (Effect)

[0147] When the second device 102-a sends the first data 401 to the third device 103, the data communication cost may be high. According to the above configuration, the second device 102-a sends the first data 401 to the third device 103 via the Wi-Fi device 180, so the data communication cost can be suppressed.

[0148] Furthermore, the second device 102-a can also connect to a communication device other than the Wi-Fi device 180 (such as a public wireless LAN device) to send the first data 401 to the third device 103.

[0149] Figure 17 This diagram illustrates a modified configuration of the first device 101-a in Embodiment 3. The first device 101-a may include a driver management unit 217. The driver management unit 217 authenticates the driver via a password or biometric authentication when the driver begins driving the vehicle 110-a. The driver management unit 217 then stores current driver-related information. The Wi-Fi connection unit 522 can obtain the current driver-related information from the driver management unit 217. The Wi-Fi connection unit 522 pre-stores information related to the combination of the driver and Wi-Fi devices 180 (e.g., the driver's own home Wi-Fi device). The Wi-Fi connection unit 522 may only allow connections to Wi-Fi devices 180 associated with the current driver.

[0150] <Example 4>

[0151] Figure 18 This diagram illustrates the configuration of the first device 101-a in Embodiment 4. The same symbols are used for configurations identical to those in Embodiment 1, and their descriptions are omitted.

[0152] For example, consider a scenario where the rules governing the use of personal data differ by region (country). Therefore, the first device 101-a modifies the classification criteria table 300 in a manner corresponding to the region.

[0153] In this example, the classification condition specification unit 213 includes a table comparison unit 213a. The table comparison unit 213a can receive region information from the roadside unit 181 via the communication unit 220. The region information indicates which region (country) the vehicle 110-a is traveling in.

[0154] The comparison table 213a pre-stores the classification criteria table 300a for each region (see reference). Figure 19 The contents of classification condition table 300a are preset according to the rules of each region (rules related to the use of personal data). The table comparison unit 213a compares the classification condition table 300 set in the second device 102-a with the classification condition table 300a of the region where the vehicle 110-a is traveling. The table comparison unit 213a corrects for differences between the two tables 300 and 300a as needed.

[0155] Figure 19 This diagram illustrates the process of modifying classification criteria table 300. In the following text, it is assumed that vehicle 110-a travels within country A.

[0156] The second device 102-a sets the classification condition table 300 according to the driver's operation and sends the classification condition table 300 to the first device 101-a. The classification condition specification unit 213 stores the classification condition table 300.

[0157] The table comparison unit 213a receives region information from the roadside unit 181 and determines that vehicle 110-a is traveling in country A. The table comparison unit 213a selects the classification condition table 300a corresponding to country A. The table comparison unit 213a compares the classification condition table 300 with the classification condition table 300a. Then, the table comparison unit 213a sets the final classification condition table 300b.

[0158] like Figure 19 As shown, the availability of "Name" in category condition table 300 is "○", while the availability of "Name" in category condition table 300a is "×". In this case, the table comparison unit 213a sets the availability of "Name" in category condition table 300b to "×".

[0159] In classification condition table 300, the second data 304 of "exterior camera image" is "○", while in classification condition table 300a, the first data 303 of "exterior camera image" is "○". In this case, the table comparison unit 213a sets the first data 303 of "exterior camera image" to "○" in classification condition table 300b.

[0160] In classification condition table 300, the first data 303 of "Vehicle Identification Number" is "○", and in classification condition table 300a, the first data 303 of "Vehicle Identification Number" is also "○". In this case, the settings in classification condition table 300 and classification condition table 300a are consistent, so the table comparison unit 213a does not modify the settings in classification condition table 300. That is, the table comparison unit 213a sets the first data 303 of "Vehicle Identification Number" to "○" in classification condition table 300b.

[0161] The classification condition specification unit 213 stores the classification condition table 300b instead of the classification condition table 300. Therefore, the classification processing execution unit 214 refers to the classification condition table 300b to classify the vehicle data into first data and second data.

[0162] (Revision of the classification criteria table)

[0163] Figure 20 A flowchart for revising classification condition table 300. Figure 20 The flowchart is in Figure 9 After the flowchart and Figure 10 The process is executed before the flowchart.

[0164] The table comparison unit 213a receives area information from the roadside unit 181 (S2001). Next, the table comparison unit 213a selects a classification condition table 300a corresponding to the area information (S2002). Next, the table comparison unit 213a compares the classification condition table 300 set in the second device 102-a with the classification condition table 300a corresponding to the area information (S2003). Then, the table comparison unit 213a sets the final classification condition table 300b as described above (S2004).

[0165] (Effect)

[0166] Consider a scenario where the rules regarding the use of personal data differ by region. Based on the above configuration, if there is a difference between the classification condition table 300 set in the second device 102-a and the classification condition table 300a corresponding to region information, the table comparison unit 213a corrects the difference and sets the final classification condition table 300b. The table comparison unit 213a can set the availability and classification conditions for providing vehicle data based on the region. This prevents prohibited vehicle data from being accidentally sent to the third device 103 in each region.

[0167] Furthermore, although the example described is the roadside unit 181 as a device for delivering area information, it can also be any other device as long as it can receive area information.

[0168] The table comparison section 213a can also correct this setting only if there is a difference in the availability 302.

[0169] Figure 21 This diagram illustrates a modified example of the configuration of the second device 102-a in Embodiment 4. The second device 102-a can display screen 2101 on the display unit 112 before driving of the vehicle 110-a begins. The driver selects a planned country to visit on screen 2101. The second device 102-a sends information related to the planned country to the first device 101-a. The table comparison unit 213a can compare the information related to the planned country with the regional information received from the roadside unit 181. The table comparison unit 213a can be configured not to correct the classification condition table 300 if the planned country differs from the regional information received from the roadside unit 181.

[0170] <Example 5>

[0171] Figure 22 This diagram illustrates the configuration of the first device 101-a in Embodiment 5. The same reference numerals are used for configurations identical to those in Embodiment 1, and their descriptions are omitted. In this example, the first device 101-a is configured to perform communication processing using either vehicle-to-infrastructure (V2I) or vehicle-to-vehicle (V2V) communication methods. This configuration will now be described.

[0172] The first device 101-a includes an instruction transmitting unit 260. The instruction transmitting unit 260 is a device for providing data instructions to surrounding vehicles. The data instructions transmitted by the instruction transmitting unit 260 include at least a first instruction and a second instruction. The first instruction is sent when vehicle 110-a is involved in a traffic accident. The second instruction is sent when vehicle 110-a is injured by dangerous driving (road rage). The instruction transmitting unit 260 can be configured to automatically transmit data instructions to surrounding vehicles. For example, the instruction transmitting unit 260 can automatically transmit the first instruction when triggered by the deployment of an airbag. The instruction transmitting unit 260 can automatically transmit the second instruction by using sensors mounted on the vehicle to detect dangerous driving.

[0173] In another example, the instruction transmitting unit 260 may include buttons corresponding to the first instruction and the second instruction, respectively. The driver can manually operate the buttons to send the first instruction and / or the second instruction to surrounding vehicles. The buttons may be located near the driver or be buttons displayed on the touch panel of the IVI.

[0174] Furthermore, the data acquisition device 210 includes an instruction interpretation unit 218. The instruction interpretation unit 218 receives data from other first devices (via the communication unit 220) Figure 22 The instruction sending unit 260 sends a data provision instruction in 101-b). The instruction interpretation unit 218 determines whether the data provision instruction is the first instruction or the second instruction.

[0175] The instruction interpretation unit 218 has pre-stored the following: Figure 23 The table 2300 shows the classification criteria table. In the classification criteria table 2300, classification criteria are set for each indicated category. The classification criteria table 2300 includes the indicated category 2301, classification criteria 2302, and transmission method 2303 as constituent items.

[0176] The category 2301 of the instruction indicates the category of data provision instruction (first instruction or second instruction). The classification condition 2302 contains information related to whether vehicle data provision is possible, as well as information related to the classification conditions used to classify vehicle data as first data or second data. In classification condition 2302, "0" indicates data not provided to the third device 103, "1" indicates first data, and "2" indicates second data. The transmission method 2303 contains information related to whether driver approval is required or not.

[0177] The instruction interpretation unit 218 compares the classification condition table 300 set in the second device 102-a with the classification condition table 2300. The instruction interpretation unit 218 modifies the classification condition 2302 of the classification condition table 2300 according to the classification condition table 300 and sets the final classification condition 2302a.

[0178] For example, suppose instruction interpretation unit 218 receives a first instruction from another first device. The availability 302 of "Vehicle control information" in classification condition table 300 is "×", and the vehicle control information in classification condition 2302 is "1". In this case, instruction interpretation unit 218 sets the value corresponding to the vehicle control information to "0" in classification condition 2302a.

[0179] Furthermore, the first data 303 of the "white line detection information" in classification condition table 300 is "○", while the "white line detection information" in classification condition 2302 is "2". In this case, the instruction interpretation unit 218 corrects the value corresponding to the "white line detection information" to "1" in classification condition 2302a. Thus, the instruction interpretation unit 218 prioritizes the settings in classification condition table 300 when setting classification condition 2302a.

[0180] The data processing unit 216a classifies the vehicle data into first data 401 and second data 402 according to the classification condition 2302a. Then, the data processing unit 216a sends the first data 401 to the second device 102-a and the second data 402 to the third device 103.

[0181] The following provides a more specific example of how vehicle 110-a receives data from other vehicles 110-b and 110-c and provides instructions. Figure 24 A diagram illustrating the overall information system in Embodiment 5.

[0182] Figure 24 In the diagram, dashed arrows indicate road-to-road communication. Dotted-line arrows indicate vehicle-to-vehicle communication. Other vehicle 110-b was involved in the traffic accident. Subsequently, other vehicle 110-c suffered injuries from dangerous driving by following vehicles.

[0183] Next, the instruction provided for the data transmitted from vehicle 110-b will be explained. The instruction transmitting unit 260 of the first device 101-b of vehicle 110-b transmits the first instruction 2401 to the first device 101-a of vehicle 110-a via vehicle-to-vehicle communication. The instruction interpretation unit 218 of the first device 101-a receives the first instruction 2401. The instruction interpretation unit 218 sets the final classification condition 2302a as described above. Subsequently, the data processing unit 216a of the first device 101-a transmits the first data 401 to the second device 102-a according to the classification condition 2302a, and transmits the second data 402 to the third device 103.

[0184] Next, instructions for the data transmitted from vehicle 110-c will be explained. The instruction transmitting unit 260 of the first device 101-c of vehicle 110-c transmits the second instruction 2402 to the first device 101-a of vehicle 110-a via inter-vehicle communication. The instruction interpretation unit 218 of the first device 101-a receives the second instruction 2402. The instruction interpretation unit 218 sets the final classification condition 2302a as described above. Subsequently, the data processing unit 216a of the first device 101-a transmits the first data 401 to the second device 102-a according to the classification condition 2302a, and transmits the second data 402 to the third device 103.

[0185] In addition, such as Figure 24 As shown, the first instruction 2401 and the second instruction 2402 can also be sent to the first device 101-a of the vehicle 110-a via the roadside unit 2410.

[0186] (Sending of the first and second data)

[0187] Figure 25 A flowchart for sending the first data and the second data according to the first instruction 2401 or the second instruction 2402.

[0188] The instruction interpretation unit 218 receives a data provision instruction via the communication unit 220 (S2501). Next, the instruction interpretation unit 218 determines whether the data provision instruction is a first instruction 2401 or a second instruction 2402. Subsequently, the instruction interpretation unit 218 obtains the classification condition 2302 corresponding to the category of the data provision instruction from the classification condition table 2300 (S2502).

[0189] The instruction interpretation unit 218 determines whether the classification condition specification unit 213 stores the classification condition table 300 (S2503). If the classification condition specification unit 213 does not store the classification condition table 300, the data processing unit 216a sends the first data 401 to the second device 102-a according to the classification condition 2302 obtained in S2502, and sends the second data 402 to the third device 103 (S2507).

[0190] On the other hand, if a classification condition table 300 exists in the classification condition specification unit 213, the instruction interpretation unit 218 compares the classification condition 2302 with the classification condition table 300 (S2504). Next, the instruction interpretation unit 218 sets the final classification condition 2302a, prioritizing the settings in the classification condition table 300, as described above (S2505). The data processing unit 216a sends the first data 401 to the second device 102-a according to the classification condition 2302a set in S2505, and sends the second data 402 to the third device 103 (S2506).

[0191] (Effect)

[0192] According to the above configuration, in the event of a traffic accident or dangerous driving near vehicle 110-a, the first device 101-a can transmit vehicle data to the third device 103. For example, the first device 101-a can transmit data related to the traffic accident (e.g., images from an external camera) and evidence data of dangerous driving (location information and time of occurrence) to the third device 103. It is possible that a component of the first device 101-b may malfunction due to a traffic accident, preventing the first device 101-b from transmitting vehicle data to the third device 103. The first device 101-a can then transmit vehicle data to the third device 103 based on an instruction (first instruction) provided from data received from vehicle 110-b. Furthermore, the first device 101-a can classify the vehicle data into first data and second data based on the category of the data instruction provided.

[0193] Furthermore, since the settings in the classification condition table 300 are prioritized, it is possible to prevent vehicle data, including the driver's personal data, from being accidentally sent to the third device 103.

[0194] Furthermore, the data provision instructions in this example may also include instructions other than the first and second instructions. For example, the data provision instructions may also include a third instruction sent when a vehicle malfunction occurs and a fourth instruction sent when the vehicle enters a congested area, etc.

[0195] Furthermore, the embodiments described above are merely examples, and the present invention is not limited to these contents as long as they do not impair the features of the invention. Other forms conceived within the scope of the technical concept of the present invention are also included within the scope of the present invention.

[0196] In all the embodiments described above, the data acquisition device 210 includes a storage unit, but is not limited to this configuration. For example, the storage unit used by the data acquisition device 210 can be flexibly changed according to the vehicle configuration. For example, the data acquisition device 210 may also utilize other ECUs with storage units, such as an MPU (Map Position Unit). The data acquisition device 210 may also utilize the storage unit of a dashcam.

[0197] Symbol Explanation

[0198] 100…Information System

[0199] 101-a, 101-b, 101-c… Device 1

[0200] 102-a, 102-b, 102-c… Second device

[0201] 103… Device 3

[0202] Vehicles 110-a, 110-b, 110-c…

Claims

1. An information system comprising: The first device is mounted on the vehicle; The second device, which is operated by the driver of the vehicle; and Device 3 The information system is characterized by, The first device is configured to classify the various vehicle data acquired from the vehicle into first data and second data according to pre-set classification conditions. The first piece of data is data requesting the driver's approval for the operation. The second data refers to data that does not request the approval operation. The first device is configured to send the first data to the second device and the second data to the third device. The second device is configured to receive the first data from the first device and transmit the first data to the third device according to the approval operation. The second device is configured to send a first condition for classifying the vehicle data into the first data and the second data to the first device based on the driver's operation. The first device pre-stores a second condition, which is used to classify the vehicle data into the first data and the second data, and the second condition is set according to each region. The first device is configured to compare the first condition with the second condition to set the classification conditions. The first device is configured to send the first data to the second device based on an instruction provided by data received from an external source, and to send the second data to the third device. The data provision includes a first instruction sent when other vehicles are involved in a traffic accident and a second instruction sent when other vehicles are injured by dangerous driving.

2. The information system according to claim 1, characterized in that, The second device includes a display unit. The second device is configured to display a setting screen for setting the classification conditions on the display unit, and to send the classification conditions to the first device according to the driver's operation on the setting screen.

3. The information system according to claim 1, characterized in that, The second device includes a display unit. The second device is configured to display an approval screen for accepting the approval operation on the display unit, and to send the first data to the third device according to the approval operation on the approval screen.

4. The information system according to claim 1, characterized in that, The second device includes a storage device for storing the first data. The first device is configured to send the first data to the second device when the remaining capacity of the storage device is above a predetermined threshold.

5. The information system according to claim 1, characterized in that, The first device is configured to monitor the communication traffic of the network within the vehicle, and to send the second data to the third device when the communication traffic is below a predetermined threshold.

6. The information system according to claim 1, characterized in that, The first device is configured to assign identifiers to the first data and the second data respectively for identifying the first data and the second data as a set of data.

7. The information system according to claim 1, characterized in that, The second device is configured to determine whether a connection with the communication device has been established, and after establishing a connection with the communication device, to send the first data to the third device.

8. A data acquisition device mounted on a vehicle, characterized in that, have: Memory, which stores programs; as well as processor, The processor is configured to acquire various types of vehicle data in the vehicle by executing the program, and to receive from the outside a first condition, obtained based on the driver's operation, for classifying the vehicle data into first data and second data. The memory pre-stores a second condition, which is used to classify the vehicle data into the first data and the second data, and the second condition is set for each region. The processor is configured to compare the first condition and the second condition to set classification criteria, classify the vehicle data into first data and second data according to the classification criteria, and send the first data and the second data according to instructions provided by data received from the outside. The data provision includes a first instruction sent when other vehicles are involved in a traffic accident and a second instruction sent when other vehicles are injured by dangerous driving. The first data is data requesting the driver's approval for the operation. The second data refers to data that does not request the approval operation.

9. An information terminal operated by a vehicle driver, characterized in that, have: Memory, which stores programs; processor; as well as Display section, The processor is configured to display a setting screen for setting a first condition on the display unit by executing the program, and to send the first condition to the vehicle according to the operation on the setting screen. The first condition is used to compare with the second condition pre-stored in the vehicle, which is set according to each region, to set the classification conditions. The classification criteria are used to classify the vehicle data obtained from the vehicle into first data and second data. The first piece of data is data requesting the driver's approval for the operation. The second data refers to data that does not request the approval operation. The first device is installed on the vehicle. When the first device receives data from an external source providing an instruction, the information terminal accepts the first data from the first device. The data provision includes a first instruction sent when other vehicles are involved in a traffic accident and a second instruction sent when other vehicles are injured by dangerous driving.

10. The information terminal according to claim 9, characterized in that, The processor is configured to receive the first data from the vehicle, display an approval screen for accepting the approval operation on the display unit, and send the first data according to the approval operation on the approval screen.