Relay control device, relay control method, and computer-readable storage medium

Abstract

The invention provides a relay control apparatus, a relay control method, and a computer readable storage medium. A relay control device is provided with: an information acquisition unit that acquires information acquired from a plurality of moving bodies; and a transmission control unit that performs control for transmitting information acquired from the plurality of moving bodies to the plurality of auxiliary devices, the transmission control unit performing control for transmitting the information acquired from the plurality of moving bodies to the plurality of auxiliary devices, and a transmission unit that determines information transmitted in an anonymized manner and information transmitted in a non-anonymized manner from among information acquired from a first mobile body among the plurality of mobile bodies, and transmits the information determined to be transmitted in the anonymized manner to each of the plurality of auxiliary devices in the anonymized manner. The information determined to be non-anonymized is transmitted to each of the plurality of auxiliary devices in a non-anonymized manner.

Description

Technical Field

[0001] The invention relates to a relay control device, a relay control method and a computer-readable storage medium. Background Art

[0002] In recent years, efforts to provide access to sustainable transportation systems for people in vulnerable situations among traffic participants have become increasingly active. In order to achieve this goal, research and development are being devoted to further improving the safety and convenience of traffic through research and development related to preventive safety technologies. Patent documents 1 to 3 describe technologies for processing information sent from vehicles.

[0003] Patent Document 1: Japanese Patent Application Publication No. 2022-159038

[0004] Patent Document 2: Japanese Patent Application No. 2022-507642

[0005] Patent Document 3: Japanese Patent Application Publication No. 2018-205830 Summary of the invention

[0006] However, in preventive safety technology, the processing of personal data sent from a mobile object has become a problem. In order to solve the above problem, the present application aims to appropriately process personal data sent from a mobile object. In addition, it also contributes to the development of a sustainable transportation system.

[0007] In a first aspect of the present invention, a relay control device is provided. The relay control device includes an information acquisition unit that acquires information acquired from a plurality of mobile bodies. The relay control device includes a transmission control unit that performs control for transmitting the information acquired from the plurality of mobile bodies to a plurality of auxiliary devices, the transmission control unit performing the following control: for each auxiliary device that is a transmission destination, determining, among the information acquired from a first mobile body among the plurality of mobile bodies, information to be transmitted in an anonymized manner and information to be transmitted in a non-anonymized manner, transmitting the information determined to be transmitted in an anonymized manner to each of the plurality of auxiliary devices in an anonymous manner, and transmitting the information determined to be transmitted in a non-anonymized manner to each of the plurality of auxiliary devices in a non-anonymized manner.

[0008] In the above-mentioned relay control device, the sending control unit can perform the following processing: determine whether to send information acquired from a first mobile body among the multiple mobile bodies to a first auxiliary device among the multiple auxiliary devices in a non-anonymous manner, determine whether to send information acquired from a second mobile body among the multiple mobile bodies to the first auxiliary device in an anonymous manner, determine whether to send information acquired from the second mobile body to a second auxiliary device among the multiple auxiliary devices in a non-anonymous manner, and determine whether to send information acquired from the first mobile body to the second auxiliary device in an anonymous manner.

[0009] In any of the above-mentioned relay control devices, the sending control unit can perform the following processing: determine whether the first type of information among the information obtained from the first mobile body among the multiple mobile bodies is to be sent to the first auxiliary device among the multiple auxiliary devices in a non-anonymous manner, determine whether the first type of information among the information obtained from the second mobile body among the multiple mobile bodies is to be sent to the first auxiliary device in an anonymous manner, determine whether the first type of information among the information obtained from the second mobile body is to be sent to the second auxiliary device among the multiple auxiliary devices in a non-anonymous manner, and determine whether the first type of information among the information obtained from the first mobile body is to be sent to the second auxiliary device in an anonymous manner.

[0010] In any of the above relay control devices, the information acquired from the plurality of moving objects may include information indicating the mental state of each of the passengers of the plurality of moving objects. The first type of information may include information indicating the mental state of the passengers.

[0011] In any of the above relay control devices, the first assistance device may be an assistance device for providing traffic assistance to the first moving object. The second assistance device may be an assistance device for providing traffic assistance to the second moving object.

[0012] In any of the above-mentioned relay control devices, the transmission control unit may perform anonymization by prohibiting transmission of identification information of the plurality of moving objects or identification information of passengers of the plurality of moving objects.

[0013] Any of the above relay control devices may further include a setting acquisition unit that acquires setting information indicating whether to send information in an anonymous manner for each combination of a receiving source of information, an auxiliary device as a sending destination, and a type of information to be sent. The sending control unit may determine, based on the setting information, whether information to be sent in an anonymous manner or information to be sent in a non-anonymous manner among the information acquired from the first mobile body among the plurality of mobile bodies for each auxiliary device as a sending destination.

[0014] In any of the above-mentioned relay control devices, the plurality of moving objects may be vehicles.

[0015] In a second aspect of the present invention, a relay control method is provided. The relay control method includes a step of acquiring information acquired from a plurality of mobile bodies. The relay control method includes a step of performing control for transmitting the information acquired from the plurality of mobile bodies to a plurality of auxiliary devices. In the step of performing control for transmitting the information acquired from the plurality of mobile bodies to the plurality of auxiliary devices, the following control is performed: for each auxiliary device that is a transmission destination, information transmitted in an anonymized manner and information transmitted in a non-anonymized manner are determined among the information acquired from a first mobile body among the plurality of mobile bodies, the information determined to be transmitted in an anonymized manner is transmitted in an anonymous manner to each of the plurality of auxiliary devices, and the information determined to be transmitted in a non-anonymized manner is transmitted in a non-anonymized manner to each of the plurality of auxiliary devices.

[0016] According to a third aspect of the present invention, there is provided a program that causes a computer to function as any one of the above-mentioned relay control devices.

[0017] In addition, the above summary of the invention does not list all the features of the present invention. In addition, a sub-combination of these feature groups may also be an invention. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] Figure 1 A usage scenario of the assistance system 10 is schematically shown.

[0019] Figure 2 The functional structure of the relay device 50 is shown.

[0020] Figure 3 The data structure of setting information for anonymizing information transmitted to the relay device 50 is shown.

[0021] Figure 4 An example of information sent to the auxiliary device 60a is shown.

[0022] Figure 5 An example of information sent to auxiliary device 60b is shown.

[0023] Figure 6 An example of the execution flow of processes by the imaging device 70 , the user terminal 82 , the in-vehicle processing device 40 included in the vehicle 20 , the relay device 50 , and the support device 60 is shown.

[0024] Figure 7 An example of a flowchart related to an assist control method performed by the assist device 60 is shown.

[0025] Figure 8 An example of a computer 2000 is shown. DETAILED DESCRIPTION

[0026] Hereinafter, the present invention will be described by way of the embodiments of the invention, but the following embodiments do not limit the claimed invention. In addition, not all combinations of features described in the embodiments are essential to the solution means of the invention.

[0027] Figure 1 The following schematically shows a usage scenario of the support system 10. The support system 10 includes vehicles 20a, 20b, 20c, user terminals 82a and 82b, a relay device 50, support devices 60a and 60b, and a camera 70.

[0028] The vehicle 20a includes the vehicle-mounted processing device 40a, the vehicle 20b includes the vehicle-mounted processing device 40b, and the vehicle 20c includes the vehicle-mounted processing device 40c. The vehicles 20a and 20b are traveling vehicles, and the vehicle 20c is a stationary vehicle. The user terminal 82a is a terminal held by the user 80a, and the user terminal 82b is a terminal held by the user 80b. In this embodiment, the users 80a and 80b are pedestrians.

[0029] In this embodiment, the vehicle 20a, the vehicle 20b, and the vehicle 20c are sometimes collectively referred to as "the vehicle 20". The vehicle-mounted processing device 40a, the vehicle-mounted processing device 40b, and the vehicle-mounted processing device 40c are sometimes collectively referred to as "the vehicle-mounted processing device 40". The auxiliary device 60a and the auxiliary device 60b are sometimes collectively referred to as "the auxiliary device 60". The user terminal 82a and the user terminal 82b are sometimes collectively referred to as "the user terminal 82". The user 80a and the user 80b are sometimes collectively referred to as "the user 80".

[0030] The vehicle 20 is a vehicle traveling on the road 90. The vehicle 20 is an example of a mobile body. The vehicle-mounted processing device 40 is configured to include a camera, a position sensor including a global navigation satellite system (GNSS) receiver, and a speed sensor such as a vehicle speed sensor. The vehicle-mounted processing device 40 has a function of processing information obtained by various sensors and a function of communicating with the relay device 50 and the auxiliary device 60. The vehicle-mounted processing device 40 provides an advanced driver assistance system (ADAS) function that the vehicle 20 has.

[0031] The vehicle-mounted processing device 40 periodically transmits the current position information of the vehicle 20 detected by the position sensor and the current speed information of the vehicle 20 detected by the speed sensor to the relay device 50. The relay device 50 relays the information transmitted from the vehicle-mounted processing device 40 and transmits it to the auxiliary device 60. The relay device 50 receives the information transmitted from the vehicle-mounted processing device 40 through mobile communication. The relay device 50 transmits the information transmitted from the vehicle-mounted processing device 40 to the auxiliary device 60 through a communication line such as the Internet or a dedicated line. The vehicle-mounted processing device 40 can detect the mental state of the driver based on an image obtained by photographing the driver of the vehicle 20, the strength with which the driver holds the steering wheel, and the like, and transmits information indicating the mental state of the driver of the vehicle 20 to the relay device 50.

[0032] The user terminal 82 is a portable terminal such as a smartphone. The user terminal 82 periodically transmits the current position information of the user terminal 82 detected by the position sensor including the GNSS receiver to the relay device 50. The relay device 50 relays the information transmitted from the user terminal 82 and transmits it to the auxiliary device 60. The relay device 50 receives the information transmitted from the user terminal 82 through mobile communication. The relay device 50 transmits the information transmitted from the user terminal 82 to the auxiliary device 60 through a communication line such as the Internet or a dedicated line.

[0033] The relay device 50 relays the information transmitted from the camera 70 and transmits it to the auxiliary device 60. The relay device 50 receives the information transmitted from the camera 70 through mobile communication. The relay device 50 transmits the information transmitted from the camera 70 to the auxiliary device 60 through a communication line such as the Internet or a dedicated line. The information transmitted from the camera 70 includes information obtained by analyzing the image captured by the camera 70. The camera 70 obtains the positions of the vehicle 20 and the user 80 existing in the capturing range of the camera 70 by analyzing the captured image, and transmits the obtained positions of the vehicle 20 and the user 80 to the relay device 50.

[0034] The relay device 50 transmits the information received from the vehicle-mounted processing device 40 and the information received from the user terminal 82 to the auxiliary device 60 in an anonymous manner. The auxiliary device 60 performs traffic assistance on the vehicle 20 based on the information received from the relay device 50. In the present embodiment, the auxiliary device 60a performs traffic assistance on the vehicle 20a, and the auxiliary device 60b performs traffic assistance on the vehicle 20b. For example, the auxiliary device 60a instructs the vehicle-mounted processing device 40a and the user terminal 82a to output an alarm when it is predicted that the user 80a of the user terminal 82a and the vehicle 20a will approach within a predetermined time based on the history of the position information and speed information of the vehicle 20a, the history of the position information of the user terminal 82, and / or the history of the position information of the user 80. Similarly, the auxiliary device 60b instructs the vehicle-mounted processing device 40b and the user terminal 82b to output an alarm when it is predicted that the user 80b of the user terminal 82b and the vehicle 20b will approach within a predetermined time based on the history of the position information and speed information of the vehicle 20b, the history of the position information of the user terminal 82, and / or the history of the position information of the user 80.

[0035] In the present embodiment, the relay device 50 transmits the information received from the vehicle-mounted processing device 40 in an anonymized form to each auxiliary device 60 to which the information is to be transmitted. For example, the relay device 50 does not perform anonymization when transmitting the information transmitted from the vehicle-mounted processing device 40a to the auxiliary device 60a, and performs anonymization when transmitting the information transmitted from the vehicle-mounted processing device 40a to the auxiliary device 60b. The relay device 50 does not perform anonymization when transmitting the information transmitted from the vehicle-mounted processing device 40b to the auxiliary device 60b, and performs anonymization when transmitting the information transmitted from the vehicle-mounted processing device 40b to the auxiliary device 60a. Anonymization is performed, for example, by deleting information that can identify an individual from the information received from the vehicle-mounted processing device 40 or replacing it with other information. Thus, when the support device 60 performs traffic assistance based on personal information such as the mental state of the driver of the vehicle 20, for example, the support device 60a can identify the vehicle 20a for which the traffic assistance is provided by the vehicle 20a after signing a contract with the user of the vehicle 20a and use it for traffic assistance, while the support device 60a can prevent the user of the vehicle 20b for which the support device 60a is not responsible for traffic assistance from being identified by the support device 60a. Therefore, the personal data transmitted from the vehicle 20 can be appropriately processed.

[0036] Figure 2 The following is a functional configuration of the relay device 50. The relay device 50 includes a relay control device 200, a communication device 290, and a storage device 280.

[0037] The communication device 290 is responsible for the communication between the on-board processing device 40, the user terminal 82, and the auxiliary device 60 and the relay device 50. The relay control device 200 is implemented by a circuit including, for example, a calculation processing device including a processor. The relay control device 200 can be implemented by a microcomputer including a CPU, ROM, RAM, I / O, and bus. The storage device 280 is implemented by a non-volatile storage medium. The relay control device 200 uses the information stored in the storage device 280 for processing.

[0038] The relay control device 200 includes an information acquisition unit 210, a setting acquisition unit 220, and a transmission control unit 250. Figure 2 The functional form of a part of the functional structure shown.

[0039] The information acquisition unit 210 acquires information acquired from the plurality of vehicles 20 . The transmission control unit 250 performs control for transmitting the information acquired from the plurality of vehicles 20 to the plurality of support devices 60 .

[0040] Specifically, the transmission control unit 250 performs control such that, for each of the auxiliary devices 60 that are transmission destinations, the information acquired from the first vehicle 20 among the plurality of vehicles 20 is determined as information to be transmitted in an anonymized manner and information to be transmitted in a non-anonymized manner, the information determined to be transmitted in an anonymized manner is transmitted in an anonymous manner to each of the plurality of auxiliary devices 60, and the information determined to be non-anonymized is transmitted in a non-anonymized manner to each of the plurality of auxiliary devices 60. The first vehicle 20 may be the vehicle 20a, and the second vehicle 20 may be the vehicle 20b.

[0041] As an example, the transmission control unit 250 determines to transmit information acquired from a first vehicle 20 among the plurality of vehicles 20 to a first auxiliary device 60 among the plurality of auxiliary devices 60 in a non-anonymous manner, determines to transmit information acquired from a second vehicle 20 among the plurality of vehicles 20 to the first auxiliary device 60 in an anonymous manner, determines to transmit information acquired from the second vehicle 20 to a second auxiliary device 60 among the plurality of auxiliary devices 60 in a non-anonymous manner, and determines to transmit information acquired from the first vehicle 20 to the second auxiliary device 60 in an anonymous manner. The first auxiliary device 60 may be the auxiliary device 60a, and the second auxiliary device 60 may be the auxiliary device 60b.

[0042] As an example, the sending control unit 250 can be configured to determine whether the first type of information obtained from the first vehicle 20 among the multiple vehicles 20 is to be sent to the first auxiliary device 60 among the multiple auxiliary devices 60 in a non-anonymous manner, determine whether the first type of information obtained from the second vehicle 20 among the multiple vehicles 20 is to be sent to the first auxiliary device 60 in an anonymous manner, determine whether the first type of information obtained from the second vehicle 20 is to be sent to the second auxiliary device 60 among the multiple auxiliary devices 60 in a non-anonymous manner, and determine whether the first type of information obtained from the first vehicle 20 is to be sent to the second auxiliary device 60 in an anonymous manner.

[0043] The information acquired from the plurality of vehicles 20 may include information indicating the mental states of the respective occupants of the plurality of vehicles 20. In this case, the first category of information may include information indicating the mental states of the occupants.

[0044] The first assistance device 60 is an assistance device 60 for providing traffic assistance to the first vehicle 20 , and the second assistance device 60 may be an assistance device 60 for providing traffic assistance to the second vehicle 20 .

[0045] The transmission control unit 250 may perform anonymization by prohibiting the transmission of the identification information of the plurality of vehicles 20 or the identification information of the occupants of the plurality of vehicles 20 .

[0046] The setting acquisition unit 220 acquires setting information indicating whether to transmit the information in an anonymous manner for each combination of the vehicle 20 as the source of information reception, the support device 60 as the destination of information transmission, and the type of information to be transmitted. Based on the setting information, the transmission control unit 250 determines, for each support device 60 as the destination of transmission, whether the information acquired from the first vehicle 20 among the plurality of vehicles 20 is to be transmitted in an anonymous manner or not.

[0047] Figure 3 The data structure of setting information for anonymizing information transmitted to the relay device 50 is shown. The setting information is stored in the storage device 280. The setting information is information indicating whether to anonymize for each combination of the type of information transmitted to each auxiliary device 60 and the device receiving the information.

[0048] exist Figure 3In the example, "A" in the destination indicates the auxiliary device 60a, and "B" in the destination indicates the auxiliary device 60b. "A" in the source indicates the device that performs traffic assistance by the auxiliary device 60a, and "B" in the source indicates the device that performs traffic assistance by the auxiliary device 60b. Specifically, in the present embodiment, "A" in the source indicates the vehicle 20a and the user terminal 82a, and "B" in the source indicates the vehicle 20b and the user terminal 82b.

[0049] like Figure 3 As shown, the setting information shows that when the information indicating the position, speed, and mental state of the vehicle 20a is transmitted to the auxiliary device 60a, it is non-anonymized, and when the information indicating the position, speed, and mental state of the vehicle 20a is transmitted to the auxiliary device 60b, it is anonymized. In addition, the setting information shows that when the information indicating the position, speed, and mental state of the vehicle 20b is transmitted to the auxiliary device 60a, it is anonymized, and when the information indicating the position, speed, and mental state of the vehicle 20b is transmitted to the auxiliary device 60b, it is not anonymized.

[0050] The transmission control unit 250 refers to the setting information and determines whether to transmit the information in an anonymous manner for each combination of the supporting device 60 as the transmission destination, the type of information to be transmitted, and the device as the source of the information.

[0051] Figure 4 An example of information transmitted to the auxiliary device 60a is shown. The information transmitted to the auxiliary device 60a includes ID, type, time, position, speed, and mental state as data items.

[0052] ID is information for identifying a device as a source of information received by the relay device 50. It is assumed that "101", "102", "201" and "202" are set as device identification information in the vehicle 20a, the vehicle 20b, the user terminal 82a and the user terminal 82b, respectively. The vehicle-mounted processing device 40a, the vehicle-mounted processing device 40b, the user terminal 82a and the user terminal 82b give their respective device identification information to the information transmitted to the relay device 50.

[0053] The type is information indicating the type of the device. The types of the device include "vehicle" and "user terminal". The position, speed, and mental state are information included in the information received from the vehicle-mounted processing device 40 and the user terminal 82, respectively.

[0054] The vehicle-mounted processing device 40a, the vehicle-mounted processing device 40b, the user terminal 82a, and the user terminal 82b store in advance assistance source identification information for identifying from which assistance device 60 each vehicle 20 or user terminal 82 receives traffic assistance. The vehicle-mounted processing device 40a, the vehicle-mounted processing device 40b, the user terminal 82a, and the user terminal 82b add the assistance source identification information to the information transmitted to the relay device 50.

[0055] The transmission control unit 250 generates a signal based on the auxiliary source identification information and the auxiliary source identification information added to the information received from the vehicle-mounted processing device 40a. Figure 3 The setting information shown in FIG. 1 does not anonymize the information received from the vehicle-mounted processing device 40a and sent to the auxiliary device 60a, but sets the device identification information "101" set in the vehicle-mounted processing device 40a as the ID. The transmission control unit 250 sets the auxiliary source identification information and the auxiliary source identification information given to the information received from the user terminal 82a as the ID. Figure 3 The setting information shown does not anonymize the information received from the user terminal 82a and transmitted to the support device 60a, but sets the device identification information "201" set in the user terminal 82a as the ID.

[0056] On the other hand, the transmission control unit 250 generates a signal based on the auxiliary source identification information and the auxiliary source identification information added to the information received from the vehicle-mounted processing device 40b. Figure 3 The setting information shown in FIG. 1 anonymizes the information received from the vehicle-mounted processing device 40b and sent to the auxiliary device 60a, thereby setting the device identification information "101" set for the vehicle-mounted processing device 40b as the ID and setting "902" assigned by the relay device 50 as the ID. The transmission control unit 250 anonymizes the information received from the user terminal 82b based on the auxiliary source identification information and Figure 3 The setting information shown anonymizes the information received from the user terminal 82b and transmitted to the auxiliary device 60a, thereby setting the device identification information "202" set for the user terminal 82b as the ID, and setting "904" assigned by the relay device 50 as the ID. As a result, when the relay device 50 transmits information transmitted from the vehicle-mounted processing device 40b and the user terminal 82b to the auxiliary device 60a, it is possible to hide information that identifies an individual.

[0057] Figure 5 An example of information sent to the auxiliary device 60b is shown. Similar to the information sent to the auxiliary device 60b, the information sent to the auxiliary device 60b includes ID, type, time, position, speed, and mental state as data items.

[0058] The transmission control unit 250 generates a signal based on the auxiliary source identification information and the auxiliary source identification information added to the information received from the vehicle-mounted processing device 40b. Figure 3The setting information shown in FIG. 1 does not anonymize the information received from the vehicle-mounted processing device 40b and sent to the auxiliary device 60b, but sets the device identification information "102" set for the vehicle-mounted processing device 40b as the ID. The transmission control unit 250 sets the auxiliary source identification information and the auxiliary source identification information given to the information received from the user terminal 82b as the ID. Figure 3 The setting information shown does not anonymize the information received from the user terminal 82b and transmitted to the support device 60b, but sets the device identification information "202" set for the user terminal 82b as the ID.

[0059] On the other hand, the transmission control unit 250 generates a signal based on the auxiliary source identification information and the auxiliary source identification information added to the information received from the vehicle-mounted processing device 40a. Figure 3 The setting information shown in FIG. 1 anonymizes the information received from the vehicle-mounted processing device 40a and transmitted to the auxiliary device 60b, thereby setting the device identification information "101" set for the vehicle-mounted processing device 40a as the ID instead of setting "901" assigned by the relay device 50 as the ID. The transmission control unit 250 anonymizes the information received from the user terminal 82a based on the auxiliary source identification information and Figure 3 The setting information shown in the figure anonymizes the information received from the user terminal 82a and transmitted to the auxiliary device 60b, thereby setting the device identification information "201" set for the user terminal 82a as the ID, and setting "903" assigned by the relay device 50 as the ID. As a result, when the relay device 50 transmits the information transmitted from the vehicle-mounted processing device 40a and the user terminal 82a to the auxiliary device 60b, it is possible to hide the information that identifies the individual.

[0060] Figure 6 An example of the execution flow of processes by the imaging device 70 , the user terminal 82 , the in-vehicle processing device 40 included in the vehicle 20 , the relay device 50 , and the support device 60 is shown.

[0061] In S400, the camera 70 extracts images of pedestrians and vehicles from the image captured by the camera 70, and transmits information indicating the positions of the extracted pedestrians and vehicles to the relay device 50. For example, the camera 70 determines the geographical location where the pedestrians and vehicles extracted from the image exist based on the location where the camera 70 is set, the shooting conditions and shooting range of the camera 70, the size of the images of pedestrians and vehicles extracted from the image, and the ground feature information indicating the ground features set within the shooting range of the camera 70. The camera 70 transmits the determined position information of the pedestrians and vehicles, the time, and the device identification information identifying the camera 70 to the relay device 50.

[0062] In S401, the transmission control unit 250 transmits the information received from the camera 70 to the auxiliary device 60a and the auxiliary device 60b. The information received from the camera 70 does not include information that can identify an individual related to the vehicle 20 and the user terminal 82. Therefore, when the information received from the camera 70 is transmitted to the relay device 50, the transmission control unit 250 does not perform anonymization.

[0063] In S402, the user terminal 82a transmits information including the current position of the user terminal 82a based on the signal received from the GNSS satellite to the relay device 50. The information transmitted from the user terminal 82a to the relay device 50 includes the device identification information of the user terminal 82a, the assistance source identification information and the time.

[0064] In S404, the user terminal 82b transmits information including the current position of the user terminal 82b based on the signal received from the GNSS satellite to the relay device 50. The device identification information, the assistance source identification information and the time of the user terminal 82b are given to the information transmitted from the user terminal 82b to the relay device 50. The user terminal 82a and the user terminal 82b periodically transmit information including their respective current positions to the relay device 50.

[0065] In S412, the vehicle-mounted processing device 40a transmits information indicating the current position of the vehicle-mounted processing device 40a, the speed of the vehicle 20a, and the mental state of the driver of the vehicle 20a based on the signal received from the GNSS satellite to the relay device 50. The information transmitted from the vehicle-mounted processing device 40a to the relay device 50 includes the device identification information of the vehicle-mounted processing device 40a, the auxiliary source identification information, and the time.

[0066] In S414, the vehicle-mounted processing device 40b transmits information indicating the current position of the vehicle-mounted processing device 40b, the speed of the vehicle 20b, and the mental state of the driver of the vehicle 20b based on the signal received from the GNSS satellite to the relay device 50. The information transmitted from the vehicle-mounted processing device 40b to the relay device 50 includes the device identification information of the vehicle-mounted processing device 40b, the auxiliary source identification information, and the time.

[0067] In S420, the transmission control unit 250 performs anonymization-related processing on the information received from the user terminal 82 and the vehicle-mounted processing device 40 and transmitted to the auxiliary device 60a. Specifically, the transmission control unit 250 performs anonymization-related processing as described in the reference Figure 3 and Figure 4 As described above, based on the setting information, information set to be anonymized for information to be transmitted to the support device 60 a is anonymized, and information set to be non-anonymized is not anonymized.

[0068] Then, in S421 , the transmission control unit 250 transmits the information obtained by performing the anonymization process in S420 to the support device 60 a .

[0069] In S422, the transmission control unit 250 performs anonymization-related processing on the information received from the user terminal 82 and the vehicle-mounted processing device 40 and transmitted to the auxiliary device 60b. Specifically, the transmission control unit 250 performs anonymization-related processing as described in the reference Figure 3 and Figure 5 As described above, based on the setting information, information set to be anonymized for information to be transmitted to the support device 60 b is anonymized, and information set to be non-anonymized is not anonymized.

[0070] Then, in S423 , the transmission control unit 250 transmits the information obtained by performing the anonymization process in S422 to the support device 60 b .

[0071] In S430, the assistance device 60a determines whether to perform traffic assistance for the user terminal 82a and the vehicle 20a based on the information received from the relay device 50 in S421 and the information received from the camera 70 in S401. For example, the assistance device 60a determines to perform traffic assistance for at least the vehicle 20a based on the history of the position information and speed information of the vehicle 20, the history of the position information of the user terminal 82, and / or the history of the position information of the user 80, when it is determined that there are other vehicles 20 or user terminals 82 approaching the vehicle 20a within a predetermined first time. In addition, the assistance device 60a determines to perform traffic assistance for at least the user terminal 82a based on the history of the position information and speed information of the vehicle 20, the history of the position information of the user terminal 82, and / or the history of the position information of the user 80, when it is determined that there are other vehicles 20 or user terminals 82 approaching the vehicle 20a within a predetermined first time.

[0072] As another example, when the assistance device 60a determines that the driver of the vehicle 20a is anxious based on the mental state of the driver of the vehicle 20, based on the history of the location information and speed information of the vehicle 20, the history of the location information of the user terminal 82, and / or the history of the location information of the user 80, when it is determined that there are other vehicles 20 or user terminals 82 approaching the vehicle 20a within a predetermined second time, it can be determined to perform traffic assistance on at least the vehicle 20a. In addition, when the assistance device 60a determines that the driver of the vehicle 20a is anxious based on the mental state of the driver of the vehicle 20, based on the history of the location information and speed information of the vehicle 20, the history of the location information of the user terminal 82, and / or the history of the location information of the user 80, when it is determined that there are vehicles 20a approaching the user terminal 82a within a predetermined second time, it can be determined to perform traffic assistance on at least the user terminal 82a. The second time may be a time longer than the first time. Thus, when it is determined that the driver of the vehicle 20a is anxious, traffic assistance can be performed at an earlier time point than when it is determined that the driver of the vehicle 20a is not anxious.

[0073] In this embodiment, the auxiliary device 60a determines that the user 80a holding the user terminal 82a and the vehicle 20a are close within a predetermined time, and in S434, sends auxiliary information to the on-board processing device 40a and the user terminal 82a respectively, indicating the meaning of outputting an alarm.

[0074] When the user terminal 82a receives the assistance information from the assistance device 60a, in S406, the user terminal 82a notifies the user 80a of the presence of a vehicle approaching the user 80a through the HMI (Human Machine Interface) function of the user terminal 82a. The user terminal 82a can notify the user 80a of the presence of a vehicle approaching the user 80a through sound.

[0075] When the vehicle-mounted processing device 40a receives the auxiliary information from the auxiliary device 60a, in S416, the vehicle-mounted processing device 40a notifies the passengers of the vehicle 20a that there is a user approaching the vehicle 20a through the HMI function of the vehicle-mounted processing device 40a. The vehicle-mounted processing device 40a can notify the passengers of the vehicle 20a of the presence of a vehicle approaching the vehicle 20a by sound and display on a display device provided in the vehicle 20a.

[0076] In S432, the assistance device 60b determines whether to perform traffic assistance for the user terminal 82b and the vehicle 20b based on the information received from the relay device 50 in S423 and the information received from the camera 70 in S401. For example, the assistance device 60b determines to perform traffic assistance for at least the vehicle 20b based on the history of the position information and speed information of the vehicle 20, the history of the position information of the user terminal 82, and / or the history of the position information of the user 80, when it is determined that there are other vehicles 20 or user terminals 82 approaching the vehicle 20b within a predetermined time. In addition, the assistance device 60b determines to perform traffic assistance for at least the user terminal 82b based on the history of the position information and speed information of the vehicle 20, the history of the position information of the user terminal 82, and / or the history of the position information of the user 80, when it is determined that there are other vehicles 20 or user terminals 82 approaching the vehicle 20b within a predetermined time.

[0077] As another example, when the assistance device 60b determines that the driver of the vehicle 20b is anxious based on the mental state of the driver of the vehicle 20, the assistance device 60b determines to perform traffic assistance on at least the vehicle 20b when it is determined that there are other vehicles 20 or user terminals 82 approaching the vehicle 20b within a predetermined second time based on the history of the location information and speed information of the vehicle 20, the history of the location information of the user terminal 82, and / or the history of the location information of the user 80. In addition, when the assistance device 60b determines that the driver of the vehicle 20b is anxious based on the mental state of the driver of the vehicle 20, the assistance device 60b determines to perform traffic assistance on at least the user terminal 82b when it is determined that there are vehicles 20 approaching the user terminal 82b within a predetermined second time based on the history of the location information and speed information of the vehicle 20, the history of the location information of the user terminal 82, and / or the history of the location information of the user 80. Thus, when it is determined that the driver of the vehicle 20b is anxious, traffic assistance can be performed at an earlier time point than when it is determined that the driver of the vehicle 20b is not anxious.

[0078] In this embodiment, the auxiliary device 60b determines that the user 80b holding the user terminal 82b and the vehicle 20b are close within a predetermined time, and in S444, sends auxiliary information to the on-board processing device 40b and the user terminal 82b respectively, indicating the meaning of outputting an alarm.

[0079] When the user terminal 82b receives the assistance information from the assistance device 60b, in S408, the user terminal 82b notifies the user 80b of the presence of a vehicle approaching the user 80b through the HMI function of the user terminal 82b. The user terminal 82b can notify the user 80b of the presence of a vehicle approaching the user 80b through sound.

[0080] When the vehicle-mounted processing device 40b receives the auxiliary information from the auxiliary device 60b, in S418, the vehicle-mounted processing device 40b notifies the passengers of the vehicle 20b of the presence of a user approaching the vehicle 20b through the HMI function of the vehicle-mounted processing device 40b. The vehicle-mounted processing device 40b can notify the passengers of the vehicle 20b of the presence of a vehicle approaching the vehicle 20b through sound and display on a display device provided in the vehicle 20b.

[0081] Figure 7 An example of a flowchart related to a relay control method performed by the relay device 50 is shown. The processing of this flowchart may be performed periodically.

[0082] In S500, the setting acquisition unit 220 acquires the reference Figure 3 The setting information for anonymization described in, etc. In S502, the transmission control unit 250 performs a loop process of repeating the processes from S502 to S510 on the support device 60 as the transmission destination.

[0083] In S506, the transmission control unit 250 determines whether to anonymize the information to be transmitted to the auxiliary device 60 selected in the loop process. In S508, the information to be transmitted to the auxiliary device 60 selected in the loop process is generated. Specifically, in S508, the transmission control unit 250 anonymizes the information determined to be anonymized in S506, and generates the information to be transmitted to the auxiliary device 60 without anonymizing the information determined to be non-anonymized in S506. Then, in S510, the information generated in S508 is transmitted to the auxiliary device 60 selected in the loop process.

[0084] According to the assistance system 10 described above, information about the vehicle 20a and the user terminal 82a for which the assistance device 60a is responsible for traffic assistance can be sent to the assistance device 60a in a non-anonymous manner, while information about the vehicle 20b and the user terminal 82b for which the assistance device 60a is not responsible for traffic assistance can be sent to the assistance device 60a in an anonymous manner. As a result, since personalized traffic assistance can be provided to the user of the vehicle 20a and the user terminal 82a for which the assistance device 60a is responsible for traffic assistance, services related to traffic assistance can be improved. On the other hand, since information about the vehicle 20b and the user terminal 82b is sent to the assistance device 60a in an anonymous manner, information about the vehicle 20b and the user terminal 82b for which the assistance device 60a is not responsible for traffic assistance can be appropriately processed in a manner that does not identify individuals.

[0085] Figure 8An example of a computer 2000 that can fully or partially embody multiple embodiments of the present invention is shown. The program installed in the computer 2000 can make the computer 2000 function as a device such as the relay device 50 or each unit of the device involved in the embodiment, perform operations associated with the device or each unit of the device, and / or perform a process involved in the embodiment or steps of the process. Such a program can be executed by the CPU 2012 in order to make the computer 2000 perform the processing flow described in this specification and specific operations associated with some or all of the functional blocks in the block diagram.

[0086] The computer 2000 according to the present embodiment includes a CPU 2012 and a RAM 2014, which are connected to each other via a main controller 2010. The computer 2000 further includes a ROM 2026, a flash memory 2024, a communication interface 2022, and an input / output chip 2040. The ROM 2026, the flash memory 2024, the communication interface 2022, and the input / output chip 2040 are connected to the main controller 2010 via the input / output controller 2020.

[0087] The CPU 2012 operates according to the programs stored in the ROM 2026 and the RAM 2014 , thereby controlling each unit.

[0088] The communication interface 2022 communicates with other electronic devices via a network. The flash memory 2024 stores programs and data used by the CPU 2012 in the computer 2000. The ROM 2026 stores a startup program executed by the computer 2000 when activated, and / or a program dependent on the hardware of the computer 2000. The input / output chip 2040 can also connect various input / output units such as a keyboard, a mouse, and a monitor to the input / output controller 2020 via an input / output port such as a serial port, a parallel port, a keyboard port, a mouse port, a monitor port, a USB port, and an HDMI (registered trademark) port.

[0089] The program is provided via a computer-readable storage medium such as a CD-ROM, DVD-ROM, or a USB flash drive, or a network. RAM 2014, ROM 2026, or flash memory 2024 is an example of a computer-readable storage medium. The program is installed in flash memory 2024, RAM 2014, or ROM 2026 and executed by CPU 2012. The information processing described in these programs is read by computer 2000, and the cooperation between the program and the various types of hardware resources described above is realized. The device or method can be constructed by implementing the operation or processing of information in accordance with the use of computer 2000.

[0090] For example, when the computer 2000 communicates with an external device, the CPU 2012 may execute a communication program loaded into the RAM 2014, and based on the processing described in the communication program, instruct the communication interface 2022 to perform communication processing. Under the control of the CPU 2012, the communication interface 2022 reads the transmission data stored in the transmission buffer processing area provided in the RAM 2014 and the recording medium such as the flash memory 2024, transmits the read transmission data to the network, and writes the reception data received from the network to the reception buffer processing area provided on the recording medium.

[0091] In addition, the CPU 2012 can read all or a necessary part of a file or database stored in a recording medium such as the flash memory 2024 to the RAM 2014, and execute various processes on the data in the RAM 2014. The CPU 2012 then writes the processed data back to the recording medium.

[0092] Various types of information such as programs, data, tables, and databases can be saved to a recording medium and applied to information processing. CPU2012 can perform various operations, information processing, conditional judgment, conditional branching, unconditional branching, information retrieval / replacement, etc., which are specified by the instruction sequence of the program, on the data read from RAM2014, and write the results back to RAM2014. In addition, CPU2012 can retrieve information in files, databases, etc. in the recording medium. For example, when multiple items having attribute values ​​of the first attribute associated with the attribute value of the second attribute are stored in the recording medium, CPU2012 can retrieve an item that specifies the attribute value of the first attribute and is consistent with the condition from the multiple items, read the attribute value of the second attribute stored in the item, and thereby obtain the attribute value of the second attribute associated with the first attribute that meets the pre-set condition.

[0093] The program or software module described above can be stored in a computer-readable storage medium on or near the computer 2000. A recording medium such as a hard disk or RAM provided in a server system connected to a dedicated communication network or the Internet can be used as a computer-readable storage medium. The program stored in the computer-readable storage medium can be provided to the computer 2000 via a network.

[0094] The program installed in the computer 2000 and causing the computer 2000 to function as the relay device 50 can be run in the CPU 2012 or the like, thereby causing the computer 2000 to function as each unit of the relay device 50 (e.g., the relay control device 200). The information processing described in these programs is read into the computer 2000, thereby functioning as a specific unit in which software and the various hardware resources described above cooperate, that is, each unit of the relay device 50. And, by using these specific units to realize the calculation or processing of information corresponding to the purpose of use of the computer 2000 in this embodiment, a unique relay device 50 corresponding to the purpose of use is constructed.

[0095] Various embodiments are described with reference to block diagrams, etc. In the block diagram, each functional block may represent (1) a step of a process for performing an operation or (2) each unit of a device having the function of performing an operation. Specific steps and each unit may be implemented by a dedicated circuit, a programmable circuit supplied together with computer-readable instructions stored on a computer-readable storage medium, and / or a processor supplied together with computer-readable instructions stored on a computer-readable storage medium. The dedicated circuit may include digital and / or analog hardware circuits, and may also include integrated circuits (ICs) and / or discrete circuits. The programmable circuit may include reconfigurable hardware circuits including logical AND, logical OR, logical XOR, logical NAND, logical NOR, and other logical operations, flip-flops, registers, field programmable gate arrays (FPGAs), programmable logic arrays (PLAs), etc., including memory elements.

[0096] The computer-readable storage medium may include any tangible device capable of storing instructions to be executed by an appropriate device, and as a result, the computer-readable storage medium having the instructions stored therein constitutes at least a part of a product containing instructions executable to implement a unit for performing the operations specified in the process flow or block diagram. As examples of computer-readable storage media, electrical storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, etc. may be included. As more specific examples of computer-readable storage media, floppy disks (registered trademark), floppy disks, hard disks, random access memories (RAM), read-only memories (ROM), erasable programmable read-only memories (EPROM or flash memory), electrically erasable programmable read-only memories (EEPROM), static random access memories (SRAM), compact disk read-only memories (CD-ROM), digital versatile disks (DVD), Blu-ray (registered trademark) optical disks, memory sticks, integrated circuit cards, etc. may be included.

[0097] Computer-readable instructions may include assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine delegate instructions, microcode, firmware instructions, state setting data, or any source code or object code described in any combination of one or more programming languages ​​including object-oriented programming languages ​​such as Smalltalk (registered trademark), JAVA (registered trademark), C++, and conventional procedural programming languages ​​such as the "C" programming language or similar programming languages.

[0098] Computer readable instructions are provided to a processor or programmable circuit of a general-purpose computer, a special-purpose computer, or other programmable data processing device via a local or local area network (LAN), a wide area network (WAN) such as the Internet, and the computer readable instructions can be executed to implement a unit for performing the operations specified in the described processing flow or block diagram. Examples of processors include computer processors, processing units, microprocessors, digital signal processors, controllers, microcontrollers, etc.

[0099] The present invention has been described above using the embodiments, but the technical scope of the present invention is not limited to the scope described in the above embodiments. It is obvious to those skilled in the art that various changes or improvements can be made to the above embodiments. It is obvious from the description of the claims that such changes or improvements can also be included in the technical scope of the present invention.

[0100] Regarding the execution order of each process of actions, processes, steps, and steps in the devices, systems, programs, and methods shown in the claims, specifications, and drawings, it should be noted that there is no special indication of "before", "preceding", etc., and in addition, as long as the output of the previous process is not used in the subsequent process, it can be implemented in any order. For the action flow in the claims, specifications, and drawings, even if "first", "next", etc. are used for convenience, it does not mean that it must be implemented in such an order.

[0101] [Description of Reference Numerals]

[0102] 10Assistance Systems

[0103] 20 vehicles

[0104] 40 On-board processing device

[0105] 60 auxiliary devices

[0106] 50Relay device

[0107] 60 auxiliary devices

[0108] 70 Camera

[0109] 80 users

[0110] 82 user terminals

[0111] 90 Road

[0112] 210 Information Acquisition Department

[0113] 220 Setting acquisition unit

[0114] 250 Sending control unit

[0115] 280 storage devices

[0116] 290 communication device

[0117] 2000 Computer

[0118] 2010 Main Controller

[0119] 2012CPU

[0120] 2014 RAM

[0121] 2020 Input / Output Controller

[0122] 2022 Communication Interface

[0123] 2024 Flash

[0124] 2026ROM

[0125] 2040 input / output chips.

Claims

1. A relay control device, characterized in that: have: an information acquisition unit that acquires information acquired from a plurality of mobile objects; and a transmission control unit for performing control for transmitting information acquired from the plurality of mobile bodies to a plurality of auxiliary devices, The transmission control unit performs control such that, for each auxiliary device that is a transmission destination, information to be transmitted in an anonymized manner and information to be transmitted in a non-anonymized manner, among information acquired from a first mobile body among the plurality of mobile bodies, the information determined to be transmitted in an anonymized manner is transmitted to each of the plurality of auxiliary devices in an anonymized manner, and the information determined to be transmitted in a non-anonymized manner is transmitted to each of the plurality of auxiliary devices in a non-anonymized manner.

2. The relay control device according to claim 1, wherein: The sending control unit performs the following processing: determining to transmit information acquired from a first mobile body among the plurality of mobile bodies to a first auxiliary device among the plurality of auxiliary devices in a non-anonymized manner, determining to send information acquired from a second mobile object among the plurality of mobile objects to the first auxiliary device in an anonymous manner, determining to transmit the information acquired from the second mobile object to a second auxiliary device among the plurality of auxiliary devices in a non-anonymous manner, It is determined that the information acquired from the first mobile object is to be sent to the second support device in an anonymized form.

3. The relay control device according to claim 1, wherein: The sending control unit performs the following processing: determining to transmit a first type of information among the information acquired from a first mobile body among the plurality of mobile bodies to a first auxiliary device among the plurality of auxiliary devices in a non-anonymized manner, determining to send the first type of information among the information acquired from the second mobile object among the plurality of mobile objects to the first assistance device in an anonymous manner, determining to transmit the first type of information among the information acquired from the second mobile object to a second auxiliary device among the plurality of auxiliary devices in a non-anonymized manner, It is determined that the first type of information among the information acquired from the first mobile object is to be transmitted to the second support device in an anonymized form.

4. The relay control device according to claim 3, wherein: The information acquired from the plurality of moving objects includes information indicating the mental states of the passengers of the plurality of moving objects. The first category of information includes information representing the mental state of the occupant.

5. The relay control device according to any one of claims 2 to 4, wherein: The first assisting device is an assisting device that performs traffic assistance on the first moving body. The second assistance device is an assistance device that performs traffic assistance on the second moving object.

6. The relay control device according to any one of claims 1 to 4, wherein: The transmission control unit performs anonymization by prohibiting transmission of identification information of the plurality of moving objects or identification information of passengers of the plurality of moving objects.

7. The relay control device according to any one of claims 1 to 4, wherein: The device further comprises a setting acquisition unit for acquiring setting information indicating whether the information is to be transmitted in an anonymous manner for each combination of a receiving source of the information, a transmission destination auxiliary device, and a type of the information to be transmitted. The transmission control unit determines, for each of the supporting devices serving as transmission destinations, information to be transmitted in anonymized form and information to be transmitted in non-anonymized form, among the information acquired from the first mobile body among the plurality of mobile bodies, based on the setting information.

8. The relay control device according to any one of claims 1 to 4, wherein: The plurality of moving objects are vehicles.

9. A relay control method, characterized in that: have: a step of acquiring information acquired from a plurality of moving objects; a step of performing control for transmitting information acquired from the plurality of mobile bodies to a plurality of auxiliary devices, In the step of performing control for transmitting information acquired from the plurality of mobile bodies to the plurality of auxiliary devices, control is performed such that, for each of the auxiliary devices serving as the transmission destination, information transmitted in an anonymized manner and information transmitted in a non-anonymized manner, among the information acquired from a first mobile body among the plurality of mobile bodies, is determined, the information determined to be transmitted in an anonymized manner is transmitted in an anonymous manner to each of the plurality of auxiliary devices, and the information determined to be transmitted in a non-anonymized manner is transmitted in a non-anonymized manner to each of the plurality of auxiliary devices.

10. A computer-readable storage medium, characterized in that: A program for causing a computer to function as the relay control device according to any one of claims 1 to 8 is stored.

Images