Information processing apparatus

Abstract

The present invention relates to an information processing device that applies settings relating to a user to an in-vehicle device, the information processing device being provided with a control unit that executes: a process for identifying a user using one of a plurality of different types of identification methods; and selecting a setting item to be applied to the in-vehicle device, from among a plurality of setting items indicating settings related to the user, in accordance with the type of the recognition method for which the user has been recognized.

Description

Technical Field

[0001] The present disclosure relates to a device for managing settings of an in-vehicle device. Background Art

[0002] There is a known technology for identifying a user and reflecting settings suitable for that user to an in-vehicle device, etc. For example, Japanese Patent Application Laid-Open No. 2016-215817 discloses an electronic key system that uses a user's mobile terminal to identify a user sitting in a vehicle and adjusts the seat position to suit the user via a seat device. Summary of the Invention

[0003] An object of the present disclosure is to appropriately select setting items to be applied to an in-vehicle device.

[0004] One aspect of an embodiment of the present disclosure is an information processing device that applies user-related settings to an in-vehicle device, and includes a control unit that executes the following processing:

[0005] The user is identified using one of a plurality of different identification methods; and the setting item applied to the in-vehicle device is selected from a plurality of setting items indicating the settings related to the user according to the type of the identification method used to identify the user.

[0006] Furthermore, as other aspects, there may be mentioned a method executed by the above-mentioned apparatus, a program for causing a computer to execute the method, or a computer-readable storage medium storing the program non-transitorily.

[0007] According to the present disclosure, it is possible to appropriately select setting items to be applied to an in-vehicle device. BRIEF DESCRIPTION OF THE DRAWINGS

[0008] Hereinafter, features, advantages, technical and industrial significance of exemplary embodiments of the present invention will be described with reference to the accompanying drawings, in which like reference numerals represent like elements, and in which:

[0009] Figure 1 This is a diagram showing an overview of processing executed by the authentication device according to the first embodiment.

[0010] Figure 2 This is a diagram for explaining the components of the authentication device according to the first embodiment.

[0011] Figure 3 This is a flowchart of a process executed by the control unit of the authentication device according to the first embodiment.

[0012] Figure 4 This is a table showing the reliability of the user identification method according to the first embodiment.

[0013] Figure 5 This is a table showing the privacy levels of the setting items according to the first embodiment.

[0014] Figure 6 This is a table showing the magnitude of the influence of setting items according to the second embodiment on the safety of the vehicle. DETAILED DESCRIPTION

[0015] summary

[0016] It can be imagined that the user riding in the vehicle is identified and the settings suitable for the identified user are applied to the vehicle-mounted equipment, etc. At this time, the setting items applied to the vehicle-mounted equipment, etc. (hereinafter referred to as setting items) also include setting items that are highly private to the user, or setting items that have a great impact on the safety of the vehicle, etc. For example, setting items such as the user name, destination history, and the position of the driver's seat are setting items that are highly private to the user, or setting items that have a great impact on the safety of the vehicle. Therefore, if these setting items are mistakenly applied to others, it is not preferred from the perspective of privacy protection and safety. In view of this, the application of these setting items to the vehicle-mounted equipment, etc. is only allowed when the user is identified by a high-precision identification method, and is performed with caution.

[0017] However, in the prior art, when user identification is performed using an unreliable method, not only must the settings that are applied be carefully considered, but even settings that present minimal application issues are prevented from being applied to in-vehicle devices, etc. In other words, when user identification is performed using an unreliable method, even settings with low privacy or minimal impact on vehicle safety cannot be applied to in-vehicle devices. However, when user identification is performed using an unreliable method, it is desirable to be able to apply settings with low privacy or minimal impact on vehicle safety. To address this issue, it is desirable for a device to be able to flexibly select settings that can be applied to in-vehicle devices, etc., based on the reliability of the user identification method.

[0018] An information processing device according to one embodiment of the present disclosure is an information processing device that applies user-related settings to in-vehicle equipment, and includes a control unit that executes the following processing:

[0019] Identifying the user using one of a plurality of different types of identification methods; and

[0020] The setting item applied to the in-vehicle device is selected from a plurality of setting items indicating the settings related to the user, according to the type of the identification method used to identify the user.

[0021] The user identification method is a method by which the information processing device of the present disclosure identifies the identity of the user riding in a vehicle. Typically, user identification is performed using a smartphone associated with the user, an electronic key of a vehicle equipped with the information processing device of the present disclosure, or the like.

[0022] User-related settings are settings that are determined individually for each user and are applied to various devices installed in the vehicle, such as in-vehicle equipment and seats. Specifically, user-related settings include display settings for in-vehicle equipment and the position of the driver's seat and steering wheel. User-related settings include multiple setting items.

[0023] The control unit selects setting items to be applied to the in-vehicle device or the like according to the type of identification method used when identifying the user.

[0024] For example, when a high-precision recognition method is used, settings that are more confidential and less likely to affect security can be selected. Conversely, when a low-precision recognition method is used, settings that are less confidential and less likely to affect security can be selected.

[0025] Thus, the information processing device of the present disclosure can flexibly select setting items applied to in-vehicle devices, etc., according to the user's identification method. In other words, the information processing device of the present disclosure can improve user convenience in applying vehicle settings including in-vehicle devices, etc.

[0026] Furthermore, each of the plurality of different identification methods is associated with a reliability of the identification method when used in identifying the user.

[0027] The control unit may select the setting item to be applied to the in-vehicle device from among the plurality of setting items based on the reliability of the identification method.

[0028] Reliability is a value that indicates the probability that the user identified by a particular user identification method is the person identified (i.e., the degree of identification accuracy). The higher the reliability, the more likely it is that the user identified by the user identification method is the person identified.

[0029] Thus, the information processing device according to the present disclosure can select appropriate setting items according to the reliability of the identification method used for user identification.

[0030] Furthermore, the control unit may determine to apply, to the in-vehicle device, a setting item having a greater impact on the user's privacy among the plurality of setting items as the reliability of the recognition method is higher.

[0031] Thus, the information processing device of the present disclosure can select settings with an appropriate level of privacy based on the reliability of the user identification method. For example, if the reliability of the user identification method is low, a person different from the identified user may be riding in the vehicle. In this case, by applying settings related to the identified user's privacy to in-vehicle devices, etc., the identified user's personal information can be prevented from being accidentally leaked to third parties.

[0032] Furthermore, the control unit may determine to apply, to the in-vehicle device, a setting item of the plurality of setting items that has a greater impact on the safety of a vehicle equipped with the in-vehicle device as the reliability of the recognition method is higher.

[0033] Thus, the information processing device of the present disclosure can select settings that have an appropriate impact on vehicle safety based on the reliability of the user identification method. For example, if the reliability of the user identification method is low, a person different from the identified user may be riding. In this case, it is possible to prevent vehicle operation problems from occurring due to the application of settings customized for the identified user to onboard equipment, etc.

[0034] The identification method may be any one of identification by an electronic key, identification by a digital key, identification by a Bluetooth (registered trademark) device, biometric identification, and identification based on an input operation performed by the user.

[0035] An electronic key is typically a key fob associated with the vehicle. A digital key is typically authentication data transmitted from a portable terminal to the vehicle. A digital key can also be sent from a Bluetooth (registered trademark) device. User input is typically a user-defined driver operation. Users can set a password associated with their account and enter it during user identification.

[0036] Specific embodiments of the present disclosure are described below with reference to the accompanying drawings. Unless otherwise specified, the hardware configuration, module configuration, and functional configuration described in each embodiment are not intended to limit the technical scope of the disclosure to these configurations.

[0037] First embodiment

[0038] Overview of the authentication device's processing

[0039] Reference Figure 1 Next, an overview of the processing performed by the authentication device according to the embodiment will be described. Figure 1A diagram showing an overview of the processing performed by the authentication device 100 according to the first embodiment is shown. The authentication device 100 is an example of an information processing device according to the present disclosure. The authentication device 100 identifies a user riding in the vehicle 10 and applies settings associated with the user to, for example, in-vehicle devices. Furthermore, the authentication device 100 can communicate with a database (described later) to obtain information related to settings associated with the user. Typically, the authentication device 100 is implemented as an in-vehicle device mounted on the vehicle 10. The authentication device 100 can be controlled by multiple in-vehicle devices or multiple ECUs mounted on the vehicle 10.

[0040] First, the authentication device 100 performs user identification using one of a plurality of user identification methods when the user is boarding the vehicle 10. For example, the user identification method includes identification using an electronic key, identification using a digital key, identification using a Bluetooth (registered trademark) device, biometric identification, and identification based on user input operations.

[0041] Next, the authentication device 100 selects settings to be applied to in-vehicle devices, etc., based on the user identification method. For example, the authentication device 100 selects settings with different levels of privacy as the settings to be applied based on the reliability of the user identification method. The reliability of the user identification method refers to the probability that the person identified as the user is the person identified (i.e., recognition accuracy).

[0042] For example, let's describe the case where user identification is performed using an electronic key. The electronic key is typically a key card corresponding to vehicle 10. For example, if vehicle 10 is used by multiple people, each person may have their own electronic key. In this case, the user who boarded the vehicle can be inferred based on the electronic key's identifier, etc. However, there is also the possibility that the electronic key owned by one user is the electronic key of another user. In other words, electronic key-based identification is an identification method with low or medium accuracy in identifying the person being identified by electronic key-based user identification. When user identification is performed using an electronic key, the authentication device 100 selects low-privacy and medium-privacy setting items as setting items to be applied to in-vehicle devices, etc. Conversely, when user identification is performed using an electronic key, the authentication device 100 does not select high-privacy setting items as setting items to be applied to in-vehicle devices, etc.

[0043] Specifically, if user identification is performed using a low- or medium-reliability identification method, the authentication device 100 does not apply highly private settings among the settings corresponding to the user identified by user identification to in-vehicle devices, etc. This is because, from the perspective of protecting user privacy, if there is a certain probability that the identified user is not the person riding in vehicle 10, applying highly private settings to in-vehicle devices, etc. is not preferable. Instead, the authentication device 100 applies the selected settings to in-vehicle devices, etc.

[0044] Thus, in the first embodiment, the authentication device 100 is configured to extract highly confidential settings when there is a possibility that the user identified by user identification is not the person who identified them, and not apply them to in-vehicle devices, etc. The settings applied to in-vehicle devices, etc., vary depending on the reliability of the method used for user identification. This configuration allows the authentication device 100 to flexibly select settings applied to in-vehicle devices, etc., depending on the reliability of the user identification method.

[0045] Authentication device configuration

[0046] Figure 2 This is a diagram for explaining the components of the authentication device 100 according to the first embodiment. Figure 2 In the embodiment, the authentication device 100 may be implemented by a computer mounted on one or more in-vehicle devices mounted on the vehicle 10 .

[0047] The authentication device 100 according to this embodiment includes a control unit 110, a storage unit 120, and a communication unit 130. The authentication device 100 is mounted on a vehicle 10. The authentication device 100 can be installed in a device mounted on the vehicle 10 that is capable of performing settings related to driving assistance, route guidance, and adjustments to the vehicle interior environment. The authentication device 100 can be a terminal for a car navigation system installed in the driver's seat. The authentication device 100 can include a display, an input unit, and an audio output unit. Alternatively, the authentication device 100 can include an audio output unit and a touch-panel display to receive input from the user. Alternatively, the authentication device 100 can be any in-vehicle terminal other than a car navigation terminal.

[0048] The control unit 110 is implemented by a processor such as a CPU (Central Processing Unit) or a GPU (Graphics Processing Unit) and a memory. The control unit 110 includes a recognition unit 111, a determination unit 112, a selection unit 113, and an application unit 114 as functional modules. These functional modules can be implemented by executing a program in the control unit 110.

[0049] The identification unit 111 identifies the user using the vehicle 10. The identification unit 111 identifies the user using one of multiple existing identification methods. Alternatively, the identification unit 111 may combine several of the multiple existing identification methods to identify the user. Examples of the multiple existing identification methods include identification based on an electronic key, identification based on a digital key, identification based on a Bluetooth (registered trademark) device, biometric identification, and user input operations. A digital key is authentication data transmitted from a portable terminal, etc., owned by the user, to the authentication device 100. Portable terminals are more likely to be carried by their owners, and therefore are considered more reliable than electronic keys. Bluetooth (registered trademark) devices are information terminals such as smartphones and tablets. While the user of the vehicle 10 is more likely to carry a Bluetooth (registered trademark) device, the vehicle 10 does not necessarily only detect Bluetooth (registered trademark) devices carried by the user. For example, the vehicle 10 may also detect Bluetooth (registered trademark) devices carried by other people in the surrounding area, other than the user of the vehicle 10. Therefore, the reliability of Bluetooth (registered trademark) devices can be considered equivalent to that of electronic keys (low to medium).

[0050] The determination unit 112 determines the reliability of the method used by the recognition unit 111 in recognition. Here, the reliability of the method used in recognition is a value indicating the probability that the recognition unit 111 can accurately determine the person being recognized in front of the user. The reliability of the method used in recognition can be the probability itself of being able to accurately determine the person being recognized in front of the user, or it can be a numerical value or character string that represents the degree to which the person being recognized in front of the user can be accurately determined using a multi-level evaluation. The determination unit 112 makes the above-mentioned determination for each of the recognition methods that the recognition unit 111 can use in recognition, with reference to predetermined data indicating reliability. The determination unit 112 can, for example, refer to data indicating reliability stored in the storage unit 120, or can refer to data indicating reliability stored in the storage unit 320 of the database 300. In addition, the determination unit 112 can also refer to data indicating reliability stored in an external storage device other than the above.

[0051] The selection unit 113 selects setting items to be applied to the in-vehicle device, etc., based on the reliability of the recognition method determined by the determination unit 112. For example, if the reliability of the recognition method is high, the selection unit 113 selects setting items with high privacy as well as setting items with low privacy as the setting items to be applied to the in-vehicle device, etc. Conversely, if the reliability of the recognition method is low, the selection unit 113 selects only setting items with low privacy as the setting items to be applied to the in-vehicle device, etc.

[0052] The application unit 114 applies the settings indicated by the setting items selected by the selection unit 113 to in-vehicle devices and the like. The application unit 114 communicates with the in-vehicle devices and the like, transmits information regarding the setting items applied to the in-vehicle devices and the like, and instructs the in-vehicle devices to apply the settings. The in-vehicle devices may be devices that provide information to the user, such as the in-vehicle terminal 13, or devices that control the vehicle, such as the ECU 12.

[0053] The storage unit 120 is a main storage device such as RAM or ROM, or an auxiliary storage device such as an EPROM, a hard disk drive, or a removable medium. The auxiliary storage device stores an operating system (OS), various programs, various tables, and the like. By executing the programs stored therein, the various functions that meet the intended purposes of the various components of the control unit 110 can be realized. However, some or all of the functions may be implemented by hardware circuits such as ASICs and FPGAs.

[0054] The storage unit 120 stores data used or generated in the processing performed by the control unit 110. The storage unit 120 may also store information related to the reliability of the identification method, the level of privacy of the setting items, and the impact of the setting items on vehicle safety.

[0055] The communication unit 130 is composed of a communication circuit that performs wireless communications. For example, the communication unit 130 may be a communication circuit that performs wireless communications using 4G (4th Generation) or a communication circuit that performs wireless communications using 5G (5th Generation). Furthermore, the communication unit 130 may be a communication circuit that performs wireless communications using LTE (Long Term Evolution) or a communication circuit that performs communications based on LPWA (Low Power Wide Area). Furthermore, the communication unit 130 may be a communication circuit that performs wireless communications using Wi-Fi (registered trademark).

[0056] Next, components other than the authentication device 100 mounted on the vehicle 10 will be described.

[0057] The drive unit 11 is a component that drives the vehicle 10. The drive unit 11 can be configured to include, for example, a motor for driving wheels, an inverter, a brake, and a steering mechanism. The drive unit 11 can be operated by power supplied from a driving battery.

[0058] ECU12 is an electronic control unit that is a computer for realizing various functions required for driving of the vehicle 10. A plurality of ECU12 can be mounted. ECU12 can receive instructions from the authentication device 100 to execute a part of the action performed by the authentication device 100. For example, ECU12 can receive instructions from the determination unit 112 to determine the reliability of the user's identification method. ECU12 can be an ECU (body ECU, etc.) that controls a device (such as a seat actuator, etc.) possessed by the vehicle 10. In this case, ECU12 can receive instructions from the application unit 114 in order to apply the setting represented by the setting item selected by the selection unit 113 in the vehicle interior setting and apply the setting to the device of the vehicle 10 related to the setting. The above-mentioned vehicle interior setting is a setting related to driving, such as the position of the driver's seat or the position of the steering wheel.

[0059] The in-vehicle terminal 13 accepts input of settings required for driving the vehicle 10 and provides the driver with a car navigation system. The in-vehicle terminal 13 may include a display. The in-vehicle terminal 13 receives applications selected by the selection unit 113, such as various settings for the car navigation system, the vehicle 10's air conditioning settings, and the volume settings of the in-vehicle terminal 13, from the application unit 114, and applies these settings to the corresponding various devices.

[0060] Devices other than authentication devices

[0061] Next, the database 300 will be described.

[0062] The database 300 is a storage device that stores information indicating setting items for each user, which is referenced by the authentication device 100. The database 300 includes a control unit 310, a storage unit 320, and a communication unit 330.

[0063] The control unit 310 is implemented by a processor such as a CPU or a GPU and a memory. Each functional module included in the control unit 310 can be implemented by the control unit 310 executing a program.

[0064] For example, in response to a request from the authentication apparatus 100 , the control unit 310 acquires the setting items corresponding to the designated user from the storage unit 320 and transmits the acquired setting items to the authentication apparatus 100 .

[0065] The storage unit 320 stores the above-mentioned information indicating the setting items for each user.

[0066] The storage unit 320 is a main storage device such as RAM or ROM, or an auxiliary storage device such as an EPROM, a hard disk drive, or a removable medium. The auxiliary storage device stores an operating system (OS), various programs, various tables, and the like. By executing the programs stored therein, the various functions that meet the intended purposes of the various components of the control unit 310 can be realized. However, some or all of the functions may be implemented by hardware circuits such as ASICs and FPGAs.

[0067] Communication unit 330 is composed of a communication circuit that performs wireless communications. For example, communication unit 330 may be a communication circuit that performs wireless communications using 4G or 5G. Furthermore, communication unit 330 may be a communication circuit that performs wireless communications using LTE or LPWA. Furthermore, communication unit 330 may be a communication circuit that performs wireless communications using Wi-Fi (registered trademark).

[0068] Operation of the authentication device

[0069] Next, the specific content of the processing performed by the authentication device 100 will be described. Figure 3 This is a flowchart of the process executed by the control unit 110 of the authentication device 100 according to the first embodiment.

[0070] Before starting the illustrated process, the recognition unit 111 of the authentication device 100 is in a standby state, constantly detecting wireless signals, etc., used for user identification. When a wireless signal, etc., used for user identification is detected, or when any input related to user identification is received from an input device mounted on the vehicle 10, the recognition unit 111 starts the process of S10.

[0071] First, in S10, the identification unit 111 identifies the user. The identification unit 111 supports multiple identification methods, including identification based on electronic keys, digital keys, Bluetooth (registered trademark) devices, biometrics, and user input operations. The identification unit 111 detects wireless signals used in the aforementioned identification methods, or input signals from corresponding input devices, to identify the user attempting to use the vehicle 10. User input operation identification determines the user's identification based on inputs made by the user on a specified user interface screen.

[0072] Next, in S11, the recognition unit 111 determines whether the user has been identified. The recognition unit 111 determines whether the user has been identified as a specific user by recognizing the user in S10. If the recognition unit 111 determines that the user has been identified, this step becomes a positive determination.

[0073] When an affirmative determination is made in this step, the process proceeds to S12 .

[0074] If a negative determination is made in this step, the process ends.

[0075] When the processing is transferred to S12, the determination unit 112 determines whether the reliability of the means (identification method) used by the identification unit 111 in identifying the user is above a specified value. Here, reliability is a value indicating the accuracy with which the person identified facing the user can be accurately determined when the user is identified using a certain user's identification method. The determination unit 112 determines whether the reliability of the identification method is above a specified value by referring to a specified storage area in which the reliability of a predetermined identification method is recorded. The determination unit 112 can refer to information related to the reliability of the user's identification method stored in the storage unit 120. In addition, the determination unit 112 can also communicate with the database 300 and refer to information related to the reliability of the user's identification method stored in the storage unit 320 of the database 300. When the determination unit 112 determines that the reliability of the method used by the identification unit 111 in identification is above a specified value, this step becomes a positive determination.

[0076] If an affirmative determination is made in this step, the process proceeds to S13 .

[0077] If a negative determination is made in this step, the process proceeds to S14 .

[0078] Figure 4 This is a table showing the reliability of the user identification method involved in the first embodiment. As shown in Table 1, for example, the reliability of the electronic key is determined to be medium to low. In the case of identifying a user using an electronic key, since there are only a few electronic keys, the user identified by the identification unit 111 is likely to use the electronic key. However, it is also impossible to exclude the possibility that a person other than the user identified by the identification unit 111 uses the electronic key. Therefore, the reliability of the electronic key is as follows: Figure 4 In addition, in the case of biometric authentication, due to the recognition of face, voiceprint, iris or fingerprint, the probability that the user facing the user identification is the user identified by the recognition unit 111 is extremely high. Figure 4 As shown in the figure, the reliability of biometric authentication is set to be high. Other user identification methods are also based on the same idea as Figure 4 That's the rule.

[0079] When the process transitions to S13, the selection unit 113 sets the upper limit of the privacy level of the setting item to be selected to a value greater than a specified value. Here, for example, the privacy level can be represented by three levels: high, medium, and low, or it can be represented by a larger number of levels. The selection unit 113 can refer to information related to the privacy level of the setting items stored in the storage unit 120. Furthermore, the selection unit 113 can communicate with the database 300 to refer to information related to the privacy level of the setting items stored in the storage unit 320 of the database 300. Thus, if the reliability of the method for identifying the user exceeds a specified value, the selection unit 113 can select setting items with a certain degree of privacy as setting items to be applied to in-vehicle equipment, etc. In other words, the higher the reliability of the user identification method, the more likely the selection unit 113 is to select setting items that have a greater impact on the user's privacy as setting items to be applied to in-vehicle equipment, etc.

[0080] Figure 5 This is a table showing the privacy level of the setting items involved in the first embodiment. Figure 5 As shown, for example, items related to personal information are defined as high-privacy setting items. As an example, a user name (e.g., one's own name, etc.) and an icon image (e.g., one's own facial image, etc.) are defined as high-privacy setting items. In addition, places (e.g., a user's favorite places, a user's home, etc.) stored in the memory of an onboard device that provides a car navigation system, etc., and historical records of places registered as the user's destination, etc., are also defined as high-privacy setting items. In addition, items related to privacy, such as action history records or hobbies, are defined as medium-privacy setting items. As an example, information related to the setting of a detour route in a car navigation system, or information related to the setting of surrounding facilities to be guided at the driving position, etc., are defined as medium-privacy setting items. Furthermore, other items are defined as low-privacy setting items. As an example, the language setting of the user interface (UI) in the vehicle-mounted terminal including the authentication device 100, the sound setting (volume or type of sound, etc.), the VICS (registered trademark) (Vehicle Information and Communication System) interruption setting in the car navigation system, etc. are stipulated as low-privacy setting items.

[0081] When the process proceeds to S14, the selection unit 113 sets the upper limit of the privacy level of the setting item to be selected to a value below a predetermined value. Thus, the selection unit 113 cannot select a setting item with a privacy level exceeding a certain level as a setting item applied to an in-vehicle device or the like.

[0082] Next, in S15, the selection unit 113 selects a setting item based on the upper limit of privacy set in S13 or S 14. In other words, the selection unit 113 selects a setting item based on the extent of the impact of the setting item on the user's privacy.

[0083] Next, in S16, the application unit 114 applies the setting item selected by the selection unit 113 in S15 to the vehicle-mounted equipment, etc. (e.g., the vehicle-mounted terminal 13). Regarding the setting item selected by the selection unit 113, the application unit 114 applies the content of the setting specified for the setting item corresponding to the user identified by the recognition unit 111 to the vehicle equipment or the vehicle-mounted equipment, etc.

[0084] Thus, in the first embodiment, the higher the reliability of the user identification method, the more likely the authentication device 100 selects setting items with higher privacy as the setting items to be applied to the in-vehicle device. Specifically, when the reliability of the user identification method is low, only setting items with lower privacy are selected. When the reliability of the user identification method is high, both setting items with lower privacy and those with higher privacy can be selected.

[0085] This increases the likelihood that the authentication device 100 will be able to appropriately apply settings for in-vehicle devices, etc., individually configured for each user, while taking privacy into consideration. Consequently, if the reliability of user identification methods is low, the authentication device 100 does not uniformly prohibit the selection of both low-privacy and high-privacy settings; instead, it can select only the low-privacy settings. In other words, the authentication device 100 can flexibly select the settings to be applied to in-vehicle devices, etc.

[0086] Second embodiment

[0087] Selection of setting items considering safety

[0088] In the first embodiment, the higher the reliability of the user identification method, the more privacy-sensitive the authentication device 100 selects as the setting items to be applied to in-vehicle devices, etc. However, if the reliability of the user identification method is not high, setting items that are not limited to privacy-sensitive ones are not suitable; setting items that significantly impact vehicle safety are also not suitable for application to in-vehicle devices, etc. For example, if the driver's seat position or rearview mirror position is set to an inappropriate position, the vehicle's driving safety may be reduced. Therefore, in the second embodiment, the higher the reliability of the user identification method, the more privacy-sensitive the authentication device 100 selects as the setting items to be applied to in-vehicle devices, etc.

[0089] With Figure 3Similarly to S12 described in the previous section, the determination unit 112 determines whether the reliability of the method used by the identification unit 111 to identify the user is greater than a predetermined value. Figure 4 The determination is made based on the reliability of the identification method shown. Furthermore, if the determination unit 112 determines that the reliability of the method used by the identification unit 111 to identify the user is greater than a predetermined value, the selection unit 113 sets the upper limit of the impact of the selected setting item on the safety of the vehicle 10 to be greater than the predetermined value. Here, for example, the impact on the safety of the vehicle 10 can be expressed in three levels: large, medium, and small, or it can be expressed in more levels. The selection unit 113 can refer to information stored in the storage unit 120 regarding the impact of the setting items on the safety of the vehicle 10. Alternatively, the selection unit 113 can communicate with the database 300 and refer to information stored in the storage unit 320 of the database 300 regarding the impact of the setting items on the safety of the vehicle 10. This allows the selection unit 113 to select setting items that have a certain degree of impact on the safety of the vehicle 10 as setting items to be applied to in-vehicle devices, etc. In other words, the higher the reliability of the user identification method, the more likely the selection unit 113 is to select setting items that have a greater impact on the safety of the vehicle 10 as setting items to be applied to in-vehicle devices, etc.

[0090] Figure 6 This is a table showing the magnitude of the influence of the setting items involved in the second embodiment on the safety of the vehicle. Figure 6 As shown, for example, items with a high potential to affect driving operations and judgments are designated as settings with a high impact on the safety of vehicle 10. For example, information indicating the position of driving equipment, such as the driver's seat or steering wheel, in vehicle 10 is designated as a setting item with a high impact on the safety of vehicle 10. Driving assistance functions, such as turning on / off lane-exceeding warnings and collision avoidance, are also designated as settings with a high impact on the safety of vehicle 10. In contrast, items related to driving guidance are designated as settings with a moderate impact on the safety of vehicle 10. For example, settings for map display in a car navigation system, or settings related to guidance items such as turning on / off guidance for stop signs or railroad crossings, are designated as settings with a moderate impact on the safety of vehicle 10. Furthermore, other items are designated as settings with a low impact on the safety of vehicle 10. For example, various other settings such as the temperature and air volume of an air conditioner, as well as settings related to charging of vehicle 10, are designated as settings with a low impact on the safety of vehicle 10.

[0091] When the determination unit 112 determines that the reliability of the method used by the recognition unit 111 to identify the user is below a predetermined value, the selection unit 113 sets the upper limit of the magnitude of the impact of the selected setting item on the safety of the vehicle 10 to below the predetermined value. Thus, the selection unit 113 cannot select a setting item whose magnitude of impact on the safety of the vehicle 10 is greater than a certain level as a setting item to be applied to in-vehicle equipment, etc.

[0092] Next, the selection unit 113 selects a setting item based on the set upper limit of the magnitude of the impact on the safety of the vehicle 10. In other words, the selection unit 113 selects a setting item based on the magnitude of the impact of the setting item on the safety of the user's vehicle 10.

[0093] Next, the application unit 114 applies the selected setting item to the vehicle-mounted equipment, etc. Regarding the setting item selected by the selection unit 113 , the application unit 114 applies the setting content specified for the setting item corresponding to the user identified by the recognition unit 111 to the vehicle equipment or the vehicle-mounted equipment, etc.

[0094] Thus, in the second embodiment, the more reliable the user identification method, the more likely the authentication device 100 is to select, as the setting item to be applied to the in-vehicle equipment, the setting item that has a greater impact on the safety of the vehicle 10. This increases the likelihood that the authentication device 100 will appropriately apply settings for in-vehicle equipment, etc., that have been individually configured for each user, while taking into account the safety of the vehicle 10.

[0095] Third embodiment

[0096] Selection of setting items considering both privacy and security

[0097] In the first embodiment, the authentication device 100 considers the level of privacy of the setting items as a criterion for selecting the setting items. Furthermore, in the second embodiment, the authentication device 100 considers the impact of the setting items on the safety of the vehicle 10 as a criterion for selecting the setting items. In contrast, in the third embodiment, the authentication device 100 comprehensively considers both the level of privacy of the setting items and the impact on the safety of the vehicle 10 as a criterion for selecting the setting items.

[0098] With Figure 3 Similarly to S12 described in the previous section, the determination unit 112 determines whether the reliability of the method used by the identification unit 111 to identify the user is greater than a predetermined value. Figure 4The reliability is determined by, for example, the reliability of the identification method shown in the figure. Furthermore, when the determination unit 112 determines that the reliability of the method used by the identification unit 111 to identify the user is greater than a specified value, the selection unit 113 sets the upper limit of the evaluation value of the setting item to be selected to greater than the specified value. Here, the evaluation value is a value obtained by evaluating the setting item in consideration of both the level of privacy of the vehicle 10 and the magnitude of its impact on safety. The evaluation value is maximized when privacy is high and the impact on the safety of the vehicle 10 is large. For example, the size of the evaluation value can be expressed in three levels: large, medium, and small, or in a larger number of levels.

[0099] The selection unit 113 may refer to information related to the evaluation values of the setting items stored in the storage unit 120, or may communicate with the database 300 and refer to information related to the evaluation values of the setting items stored in the storage unit 320 of the database 300. Thus, the selection unit 113 can select setting items with a certain degree of privacy and setting items that have a significant impact on the safety of the vehicle 10 as setting items to be applied to in-vehicle devices, etc. In other words, the higher the reliability of the user identification method, the more likely the selection unit 113 will select setting items with a higher degree of privacy and setting items that have a greater impact on the safety of the vehicle 10 as setting items to be applied to in-vehicle devices, etc.

[0100] If the determination unit 112 determines that the reliability of the method used by the recognition unit 111 to identify the user is below a predetermined value, the selection unit 113 sets the upper limit of the evaluation value of the setting item to be selected to below the predetermined value. Thus, the selection unit 113 cannot select setting items that are more private than a certain level or that significantly affect the safety of the vehicle 10 as setting items to be applied to in-vehicle devices, etc.

[0101] Next, the selection unit 113 selects a setting item based on the upper limit of the evaluation value set as described above. In other words, the selection unit 113 selects a setting item based on the privacy of the setting item and the impact of the setting item on the safety of the user's vehicle 10.

[0102] Next, the application unit 114 applies the selected setting item to the vehicle-mounted equipment, etc. Regarding the setting item selected by the selection unit 113 , the application unit 114 applies the setting content specified for the setting item corresponding to the user identified by the recognition unit 111 to the vehicle equipment or the vehicle-mounted equipment, etc.

[0103] Thus, in the third embodiment, as the reliability of the user identification method increases, the authentication device 100 can select settings that are more sensitive to privacy and have a greater impact on the safety of the vehicle 10 as settings to be applied to the in-vehicle devices. This increases the likelihood that the authentication device 100 will be able to appropriately apply settings for in-vehicle devices, etc., that are individually configured for each user, taking both privacy and security into consideration.

[0104] Other variations

[0105] The above-described embodiment is merely an example, and the present disclosure can be implemented with appropriate modifications without departing from the gist of the disclosure.

[0106] The level of privacy of the set items, the degree of impact on the safety of the vehicle 10, and the evaluation values that take these into account do not need to be fixed values. If these values are changed according to circumstances, the user can communicate with an external server device (typically, database 300) via the communication unit 130 of the authentication device 100 to download information related to the changed values. Alternatively, the user can install the information related to the changed values from an external medium (such as a USB memory) to the authentication device 100.

[0107] Furthermore, in the above-described embodiment, the reliability of the user identification method is determined by the authentication device 100 upon initial user identification. However, this determination is not limited to the initial user identification. While the vehicle 10 is traveling, user identification may be re-performed at predetermined intervals. If a user is identified using a different method than the previous one, the reliability determination of the user identification method may be updated.

[0108] Alternatively, if the user wishes to apply specific setting items to an in-vehicle device, user authentication can be performed again, and setting items applicable to the in-vehicle device, etc. can be newly selected based on the reliability of the user's identification method. Specifically, specific setting items include those with high privacy requirements, those with a significant impact on the safety of the vehicle 10, or those with high evaluation values.

[0109] The present disclosure can also be implemented by supplying a computer program equipped with the functions described in the above-mentioned embodiments to a computer, and having one or more processors of the computer read out and execute the program. Such a computer program can be provided to the computer via a non-transitory computer-readable storage medium that can be connected to the system bus of the computer, or can be provided to the computer via a network. Non-transitory computer-readable storage media include, for example, any type of disk such as a magnetic disk (floppy (registered trademark) disk, hard disk drive (HDD), etc.), an optical disk (CD-ROM, DVD disk, Blu-ray disk, etc.), a read-only memory (ROM), a random access memory (RAM), an EPROM, an EEPROM, a magnetic card, a flash memory, an optical card, or any type of medium suitable for storing electronic commands.

Claims

1. An information processing device that applies user-related settings to an in-vehicle device, wherein: A control unit is provided to perform the following processing: identifying the user using one of a plurality of different types of identification methods; and The setting item applied to the in-vehicle device is selected from a plurality of setting items indicating the settings related to the user, according to the type of the identification method used to identify the user.

2. The information processing device according to claim 1, wherein Each of the plurality of different identification methods is associated with a reliability of using the identification method in identifying the user, The control portion selects the setting item applied to the in-vehicle device from among the plurality of setting items based on the reliability of the identification method.

3. The information processing device according to claim 2, wherein: The control unit determines to apply, to the in-vehicle device, a setting item having a greater impact on the user's privacy among the plurality of setting items as the reliability of the identification method is higher.

4. The information processing device according to claim 2, wherein: The control unit determines to apply, to the in-vehicle device, a setting item having a greater impact on safety of a vehicle equipped with the in-vehicle device among the plurality of setting items as the reliability of the identification method is higher.

5. The information processing device according to any one of claims 1 to 4, wherein: The identification method is any one of identification based on an electronic key, identification based on a digital key, identification based on a Bluetooth device, biometric identification, and identification based on an input operation performed by the user.

Images