Vehicle, information processing device, system, and setting selection method

Abstract

The present disclosure provides a vehicle, an information processing device, a system, and a setting selection method. An information processing device provided on a vehicle includes a communication device that performs communication with a server device, a memory that stores a first setting related to whether or not to agree to a usage rule, and a processor that receives a second setting related to whether or not to agree to the usage rule from the server device via the communication device, judges whether or not there is a difference between the first setting and the second setting, when it is judged that there is a difference between the first setting and the second setting, accepts a user input that selects a setting of any party via an input device mounted on the vehicle, judges whether or not the user agrees to the usage rule based on the selected setting, and when it is judged that the user agrees to the usage rule, transmits information collected in the vehicle to the server device via the communication device.

Description

Technical Field

[0001] This disclosure relates to a vehicle, an information processing device, a system, and a method for setting selection. Background Technology

[0002] Japanese Patent Application Publication No. 2020-135813 discloses a device that displays a screen for users riding in a vehicle to choose whether to agree to provide information, and sends the information to the outside of the vehicle if the user agrees. Summary of the Invention

[0003] Considering that settings related to whether or not to agree to the use of the external transmission function are maintained on both the in-vehicle device and the server device, however, in the event that synchronization between the in-vehicle device and the server device fails due to major reasons such as poor communication, there is a possibility that the user's intention regarding whether or not to transmit personal information to external devices may not be reflected.

[0004] This disclosure provides a technique that can reflect the user's intent, whether or not it is related to external transmission, even if the synchronization between the in-vehicle device and the server device fails.

[0005] The first aspect of this disclosure is a vehicle configured to communicate with an external server device. The vehicle includes a locator, a microphone, a camera, sensors, non-volatile memory, an input device, and a computer configured to store a first setting related to whether or not to agree to usage rules in the non-volatile memory. The computer is configured to collect two or more of four types of information obtained via the locator, microphone, camera, and sensors: location information, voice information, image information, and vehicle information. The computer is configured to receive a second setting related to whether or not to agree to the usage rules from the server device. The computer is configured to determine whether there is a difference between the first setting stored in the non-volatile memory and the second setting received from the server device. When a difference is determined between the first setting and the second setting, the computer accepts user input via the input device to select either setting, and determines whether the user agrees to the usage rules based on the selected setting. The computer is configured to, when it determines that the user agrees to the usage rules, send two or more types of collected information in real time to the server device in a manner that excludes information of prohibited types that the user is prohibited from sending to the outside of the vehicle.

[0006] The second aspect of this disclosure is an information processing device installed in a vehicle. The information processing device includes a communication device configured to communicate with a server device, a memory storing a first setting related to whether or not to agree to usage rules, and a processor. The processor is configured to receive a second setting related to whether or not to agree to the usage rules from the server device via the communication device. The processor is configured to determine whether there is a difference between the first setting stored in the memory and the second setting received from the server device. The processor is configured to, when it is determined that there is a difference between the first setting and the second setting, accept user input selecting either setting via an input device mounted in the vehicle, and determine whether the user agrees to the usage rules based on the selected setting. The processor is configured to, when it is determined that the user agrees to the usage rules, send information collected in the vehicle to the server device via the communication device.

[0007] In the second approach, the processor may also be configured to update the first setting in the memory using the modified setting when it receives user input via the input device that modifies settings related to whether or not the usage rules are agreed upon. Alternatively, the processor may be configured to send a request via the communication device to the server device to update the second setting using the modified setting, if the communication device is capable of communicating with the server device.

[0008] In the second method, the processor may also be configured such that, upon startup, when the communication device first becomes capable of communicating with the server device, it receives the second setting from the server device via the communication device.

[0009] In the second approach, the processor may also be configured to, when it is determined at a certain point in time that there is a difference between the first setting and the second setting, query the user via an output device mounted on the vehicle to select which setting. Alternatively, the processor may be configured to, when it receives user input via the input device not only requesting a selection of either setting, but also requesting the application of the same selection even if a difference is determined between the first setting and the second setting after the point in time, not query the user to select which setting, but instead apply the same selection.

[0010] In the second approach, the processor may also be configured to send a request to the server device via the communication device to update the second setting using the first setting when the first setting is selected. Alternatively, the processor may be configured to update the first setting in the memory using the second setting when the second setting is selected.

[0011] In the second approach, the processor may also be configured to determine whether the user agrees to the usage rules based on the setting of either setting when it is determined that there is no difference between the first setting and the second setting.

[0012] In the second approach, the first setting and the second setting may each include settings related to the types of information prohibited from being sent to the outside of the vehicle. Alternatively, the processor may be configured to, when it is determined that there is a difference between the first setting and the second setting, specify the types of information that the user is prohibited from sending to the outside of the vehicle as prohibited types based on the selected setting. Alternatively, the processor may be configured to, when it is determined that the user agrees to the usage rules, send information collected in the vehicle via the communication device to the server device in a manner that excludes the specified prohibited types of information.

[0013] In the second approach, the processor may also be configured to, when receiving user input specifying the prohibited type via the input device, add a setting related to the prohibited type to the first setting in the memory. Alternatively, the processor may be configured to, if the communication device is capable of communicating with the server device, send a request via the communication device to the server device to add the setting related to the prohibited type to the second setting.

[0014] In the second approach, the processor may also be configured to specify the prohibited type based on the setting of either setting when it is determined that there is no difference between the first setting and the second setting.

[0015] In the second approach, the information collected in the vehicle may also include two or more of the following four types of information: location information, voice information, image information, and vehicle information, obtained through locators, microphones, cameras, and sensors mounted on the vehicle.

[0016] The third aspect of this disclosure is a system. The system includes the information processing device and the server device.

[0017] In the third approach, the server device may also be configured to update the second setting according to the received request when it receives a request from a terminal device associated with the user to change the settings related to whether or not the user agrees to the usage rules.

[0018] The fourth aspect of this disclosure is a vehicle equipped with the aforementioned information processing device.

[0019] The fifth aspect of this disclosure is a setting selection method executed by a processor of an information processing device installed in a vehicle. The information processing device includes a communication device configured to communicate with a server device, a memory storing a first setting related to whether or not to agree to a usage rule, and the processor. The setting selection method includes: receiving a second setting related to whether or not to agree to the usage rule from the server device via the communication device; determining whether there is a difference between the first setting stored in the memory and the second setting received from the server device; when a difference is determined between the first setting and the second setting, accepting user input selecting either setting via an input device installed in the vehicle, and determining whether the user agrees to the usage rule based on the selected setting; and when the user agrees to the usage rule, sending information collected in the vehicle to the server device via the communication device.

[0020] In the fifth approach, the setting selection method may also include: when a user input regarding a change to a setting related to whether or not to agree to the usage rules is received via the input device, the first setting is updated in the memory using the changed setting. Alternatively, the setting selection method may include: if the communication device is capable of communicating with the server device, a request to update the second setting using the changed setting is sent to the server device via the communication device.

[0021] In the fifth method, the setting selection method may also be configured such that: at the point when the communication device first becomes capable of communicating with the server device after the processor starts up, the second setting is received from the server device via the communication device.

[0022] In the fifth approach, the setting selection method may also include: when it is determined at a predetermined time point that there is a difference between the first setting and the second setting, querying the user via an output device mounted on the vehicle which setting to select. Alternatively, the setting selection method may include: when the input device receives not only user input selecting either setting, but also user input requesting the application of the same selection if there is a difference between the first setting and the second setting after the predetermined time point, even if it is determined after the predetermined time point that there is a difference between the first setting and the second setting, not querying the user which setting to select, but applying the same selection.

[0023] In the fifth approach, the setting selection method may also include: when it is determined that there is a difference between the first setting and the second setting, specifying the types of information that the user is prohibited from sending to the outside of the vehicle as prohibited types based on the selected setting. Alternatively, the setting selection method may include: when it is determined that the user agrees to the usage rules, sending information collected in the vehicle via the communication device to the server device in a manner that excludes the specified prohibited types of information. Alternatively, the first setting and the second setting may each include settings related to the types of information prohibited from being sent to the outside of the vehicle.

[0024] In the fifth method, the setting selection method may also include: when user input specifying the prohibited type is received via the input device, adding the setting related to the prohibited type to the first setting in the memory. Alternatively, the setting selection method may include: if the communication device is capable of communicating with the server device, sending a request via the communication device to the server device to add the setting related to the prohibited type to the second setting.

[0025] According to the first, second, third, fourth, and fifth methods of this disclosure, even if the synchronization between the vehicle-mounted device and the server device fails, the user's intent regarding whether the transmission outside the vehicle is relevant can still be reflected. Attached Figure Description

[0026] The features, advantages, technical and industrial significance of representative embodiments of the present invention will be depicted in the following drawings for reference, wherein like symbols indicate like elements.

[0027] Figure 1 A block diagram illustrating the structure of the system involved in the embodiments of this disclosure.

[0028] Figure 2 A diagram illustrating an example of a vehicle equipped with an information processing device according to an embodiment of this disclosure.

[0029] Figure 3 This is a block diagram illustrating the connection between the information processing apparatus and the vehicle-mounted equipment according to embodiments of this disclosure.

[0030] Figure 4 This is a sequence diagram illustrating an example of communication steps between an information processing apparatus and a server apparatus according to embodiments of the present disclosure.

[0031] Figure 5 A flowchart illustrating the operation of an information processing apparatus according to embodiments of this disclosure.

[0032] Figure 6 This is a flowchart illustrating additional operations of the information processing apparatus according to embodiments of the present disclosure. Detailed Implementation

[0033] Hereinafter, one embodiment of the present disclosure will be described with reference to the accompanying drawings.

[0034] The same or equivalent parts in each of the accompanying drawings are labeled with the same symbols. In the description of this embodiment, descriptions of the same or equivalent parts are appropriately omitted or simplified.

[0035] Reference Figure 1 The structure of the system 10 involved in this embodiment will be described.

[0036] The system 10 according to this embodiment includes an information processing device 20 and a server device 30. The information processing device 20 is able to communicate with the server device 30 via a network 40.

[0037] The information processing device 20 is a microcomputer or ECU (Electronic Control Unit), or a combination of such a computer with other devices such as communication equipment. "ECU" is an abbreviation for Electronic Control Unit. Figure 2 As shown, the information processing device 20 is installed on the vehicle 50.

[0038] Vehicle 50 can be any type of automobile, such as a gasoline vehicle, diesel vehicle, hydrogen fuel cell vehicle, HEV, PHEV, BEV, or FCEV. "HEV" is an abbreviation for hybrid electric vehicle. "PHEV" is an abbreviation for plug-in hybrid electric vehicle. "BEV" is an abbreviation for battery electric vehicle. "FCEV" is an abbreviation for fuel cell electric vehicle. Although in this embodiment vehicle 50 is driven by user 11, driving can be automated at any level. The level of automation can be, for example, any of levels 1 to 5 under the SAE classification. "SAE" is an abbreviation for Society of Automotive Engineers. Vehicle 50 can also be a MaaS (Mobility as a Service) vehicle. "MaaS" is an abbreviation for Mobility as a Service.

[0039] Server device 30 is a server computer such as a cloud server. Server device 30 is installed in facilities such as data centers.

[0040] Network 40 includes the Internet, at least one WAN, at least one MAN, or any combination thereof. "WAN" is an abbreviation for Wide Area Network. "MAN" is an abbreviation for Metropolitan Area Network. Network 40 may also include at least one wireless network, at least one optical network, or any combination thereof. Wireless networks are, for example, ad hoc networks, cellular networks, wireless LANs, satellite communication networks, or terrestrial microwave networks. "LAN" is an abbreviation for Local Area Network.

[0041] like Figure 3As shown, in this embodiment, the information processing device 20 is connected to various devices mounted on the vehicle 50, such as the output device 51, input device 52, camera 53, microphone 54, locator 55, and various sensors 57. As the interface for connecting to these devices, interfaces corresponding to standards such as USB, HDMI (registered trademark), or Bluetooth (registered trademark) can be used. "USB" is an abbreviation for Universal Serial Bus. "HDMI (registered trademark)" is an abbreviation for High-Definition Multimedia Interface. The information processing device 20 can also connect to various devices via an in-vehicle network such as CAN. "CAN" is an abbreviation for Controller Area Network. As a variation, the information processing device 20 may also possess one or more types of devices mounted on the vehicle 50.

[0042] Output device 51 may be, for example, a display or a speaker. The display may be, for example, an LCD or an organic EL display. "LCD" is an abbreviation for liquid crystal display. "EL" is an abbreviation for electro luminescent. The display may also be a display speaker. Output device 51 outputs the information obtained by the operation of information processing device 20.

[0043] Input device 52 may be, for example, a physical button, an electrostatic capacitive button, an indicator device, or a touchscreen integrated with the display. A camera 53, a microphone 54, or both may also serve as input device 52. Input device 52 accepts operations for inputting information used in the operation of information processing device 20.

[0044] Camera 53 is, for example, a visible light camera or a depth camera. Camera 53 captures images of the interior, exterior, or both sides of vehicle 50. Camera 53 outputs image information containing the captured images.

[0045] Microphone 54 collects speech from inside, outside, or both sides of vehicle 50. Microphone 54 outputs speech information containing the collected speech.

[0046] Positioner 55 is, for example, a GNSS receiver. "GNSS" is an abbreviation for Global Navigation Satellite System. GNSS can be, for example, GPS, QZSS, BDS, GLONASS, or Galileo. "GPS" is an abbreviation for Global Positioning System. "QZSS" is an abbreviation for Quasi-Zenith Satellite System. QZSS satellites are called Quasi-Zenith Satellites. "BDS" is an abbreviation for BeiDou Navigation Satellite System. "GLONASS" is an abbreviation for Global Navigation Satellite System. Positioner 55 measures the coordinates of vehicle 50, i.e., the vehicle's position. Positioner 55 outputs position information containing the measured vehicle position.

[0047] Various sensors 57 include, for example, vehicle speed sensors, acceleration sensors, gyroscopes, human body sensors, and door opening / closing sensors. These sensors 57 observe various situations at different locations within the vehicle 50. The sensors 57 output vehicle information containing the results of their observations.

[0048] Reference Figures 1 to 3 The following is a summary description of this embodiment.

[0049] Vehicle 50 is capable of communicating with an external server device 30. As described above, vehicle 50 is equipped with a computer or an information processing device 20 including a computer.

[0050] Information processing device 20 stores a first setting related to whether or not to agree to the usage rules in non-volatile memory. Information processing device 20 receives a second setting related to whether or not to agree to the usage rules from server device 30 via network 40. Information processing device 20 determines whether there is a difference between the first setting stored in non-volatile memory and the second setting received from server device 30. When a difference is determined between the first and second settings, information processing device 20 accepts user input selecting either setting via input device 52 mounted on vehicle 50, and determines whether user 11 agrees to the usage rules based on the selected setting. When it is determined that user 11 agrees to the usage rules, information processing device 20 sends the information collected in vehicle 50 to server device 30 via network 40.

[0051] According to this embodiment, even if the synchronization between the information processing device 20 and the server device 30 fails due to major reasons such as poor communication, the intention of the user 11 related to whether or not to send data to the outside of the vehicle 50 can still be reflected. For example, if a certain setting is insisted upon when the synchronization between the information processing device 20 and the server device 30 fails, it may lead to a situation where the processing of personal information according to the user 11's intention cannot be performed, but this situation can be avoided in this embodiment.

[0052] In this embodiment, the information processing device 20 collects four types of information—location information, voice information, image information, and vehicle information—obtained via a locator 55, microphone 54, camera 53, and various sensors 57 mounted on the vehicle 50. When it is determined that the user 11 has agreed to the usage rules, the information processing device 20 sends the four types of collected information to the server device 30 in real time, excluding information that is prohibited from being sent to the outside of the vehicle 50 by the user 11.

[0053] As an alternative example, the information processing device 20 may also collect information from only three of the four categories of information. In this alternative example, when it is determined that user 11 has agreed to the usage rules, the information processing device 20 sends the collected three categories of information to the server device 30 in real time, excluding prohibited information.

[0054] As another variation, the information processing device 20 may collect information from only two of the four categories of information. In this variation, when it is determined that user 11 has agreed to the usage rules, the information processing device 20 sends the collected information from the two categories to the server device 30 in real time, excluding information from the prohibited categories.

[0055] In this embodiment, as part of the personal information protection measures, privacy settings are maintained on both the information processing device 20 and the server device 30, and the information processing device 20 and the server device 30 are synchronized. The privacy settings include the status of consent to usage rules and the feasibility of sending personal information to the outside of the vehicle 50. Personal information is managed in units of location information, voice information, image information, and all personal information including these, and the sending of personal information to the outside of the vehicle 50 is enabled or disabled based on the user 11's settings. Vehicle information is included in "all personal information".

[0056] When privacy settings are changed in locations with poor communication environments, such as underground parking lots, communication may fail, resulting in discrepancies between the values ​​in the information processing device 20 and the server device 30. Since privacy settings are required to accurately reflect the intentions of user 11, in this embodiment, when a discrepancy occurs, the information processing device 20 promptly notifies user 11 so that user 11 can select which value to use.

[0057] exist Figure 4 An example of the communication steps between the information processing device 20 and the server device 30 is shown.

[0058] In this example, upon startup, the information processing device 20 verifies the consistency of privacy settings between itself and the server device 30. The initial value in the privacy settings related to consent to usage rules is "not consented," and the initial value related to whether location information, voice information, image information, and all personal information can be sent to the outside of the vehicle 50 is "not allowed." Therefore, upon initial startup, the privacy settings in the information processing device 20 and the server device 30 are consistent.

[0059] When a setting is changed, the information processing device 20 sends the changed privacy setting value to the server device 30. The setting change is implemented via a display mounted on the vehicle 50.

[0060] For example, a screen is displayed showing text containing the usage rules and a user interface for selecting "agree" or "disagree". If "agree" is selected during the first setting change, the value related to agreement with the usage rules changes from "disagree" to "agree". If "disagree" is selected during the first setting change, the value related to agreement with the usage rules changes from "disagree" to "disagree". In subsequent setting changes, if "disagree" was selected previously and "agree" is selected this time, the value related to agreement with the usage rules changes from "disagree" to "agree". (This process is repeated twice in the original text.)

[0061] If "Agree" is selected when changing a setting, the display shows a list of four items: location information, voice information, image information, and all personal information, as well as a user interface for selecting "Yes" or "No" for each item. When "Yes" is selected for an "No" item, the value related to whether the information corresponding to that item can be sent to the outside of vehicle 50 changes from "No" to "Yes". When "No" is selected for a "Yes" item, the value related to whether the information corresponding to that item can be sent to the outside of vehicle 50 changes from "Yes" to "No".

[0062] If communication is poor when the settings are changed, the information processing device 20 cannot send the changed privacy settings to the server device 30. Therefore, upon subsequent startup, the privacy settings in the information processing device 20 and the server device 30 are inconsistent.

[0063] When a difference in privacy settings arises between the information processing device 20 and the server device 30, the information processing device 20 displays a selection screen on the monitor, prompting the user to choose which value to select. The selected value is then reflected on both the information processing device 20 and the server device 30.

[0064] For example, when a difference arises in the value related to the state of agreement with the usage rules, a first selection screen, comprising a user interface for selecting "agree" or "disagree," is displayed on the screen as a selection screen. The first selection screen may further display text of the usage rules. When "agree" is selected, the value related to the state of agreement with the usage rules for the party in the information processing device 20 and server device 30 that has not yet changed to "agree" is changed to "agree." When "disagree" is selected, the value related to the state of agreement with the usage rules for the party in the information processing device 20 and server device 30 that has not yet changed to "disagree" is changed to "disagree."

[0065] On the first selection screen, a checkbox can be further displayed indicating "use this selection again if the same situation occurs in the future." When this checkbox is checked, the first selection screen will not be displayed again even if the same situation occurs later; instead, the current selection will be shown again. Therefore, when the vehicle 50 is frequently parked in underground parking lots or other situations where communication problems occur during startup, the repeated display of the first selection screen can be prevented from causing annoyance to the user 11.

[0066] For example, when a difference arises in the value related to whether personal information can be sent to the outside of vehicle 50, a second selection screen is displayed on the screen as a selection screen. This screen includes a list of four items: location information, voice information, image information, and all personal information. A second selection screen is also displayed, showing a user interface for selecting "yes" or "no" for each item. On the second selection screen, items where there is no difference in value between the information processing device 20 and the server device 30 may not be displayed. When "yes" is selected for an "no" item, the value related to whether information in the information processing device 20 and server device 30 corresponding to the item that was not changed to "yes" can be sent to the outside of vehicle 50 is changed to "yes". When "no" is selected for a "yes" item, the value related to whether information in the information processing device 20 and server device 30 corresponding to the item that was not changed to "no" can be sent to the outside of vehicle 50 is changed to "no".

[0067] On the second selection screen, a checkbox can be further displayed indicating "use this selection again if the same situation occurs in the future." When this checkbox is checked, the second selection screen will not be displayed even if the same situation occurs later; instead, the current selection will be shown again. Therefore, when the vehicle 50 is frequently parked in underground parking lots or other situations where communication problems occur during startup, the repeated display of the second selection screen can be prevented from annoying the user 11.

[0068] Reference Figure 1 The structure of the information processing apparatus 20 according to this embodiment will be described.

[0069] The information processing device 20 includes a control unit 21, a storage unit 22, and a communication unit 23.

[0070] The control unit 21 includes at least one processor, at least one programmable circuit, at least one dedicated circuit, or any combination thereof. The processor is a general-purpose processor such as a CPU or GPU, or a dedicated processor specialized for specific processing. "CPU" is an abbreviation for Central Processing Unit. "GPU" is an abbreviation for Graphics Processing Unit. The programmable circuit is, for example, an FPGA. "FPGA" is an abbreviation for Field-Programmable Gate Array. The dedicated circuit is, for example, an ASIC. "ASIC" is an abbreviation for Application Specific Integrated Circuit. The control unit 21 controls the various parts of the information processing device 20 while performing processing related to the operation of the information processing device 20.

[0071] Storage unit 22 includes at least one semiconductor memory, at least one magnetic memory, at least one optical memory, or any combination thereof. Semiconductor memory is, for example, RAM, ROM, or flash memory. "RAM" is an abbreviation for random access memory. "ROM" is an abbreviation for read-only memory. RAM is, for example, SRAM or DRAM. "SRAM" is an abbreviation for static random access memory. "DRAM" is an abbreviation for dynamic random access memory. ROM is, for example, EEPROM. "EEPROM" is an abbreviation for electrically erasable programmable read-only memory. Flash memory is, for example, SSD. "SSD" is an abbreviation for solid-state drive. Magnetic memory is, for example, HDD. "HDD" is an abbreviation for hard disk drive. Storage unit 22 functions as, for example, a primary storage device, an auxiliary storage device, or a cache memory. The storage unit 22 stores information used in the operation of the information processing device 20 and information obtained by the operation of the information processing device 20. In this embodiment, the storage unit 22 includes a non-volatile memory that stores privacy settings as a first setting related to whether or not to agree to use the rules.

[0072] The communication unit 23 includes at least one communication module. The communication module is, for example, a module corresponding to mobile communication standards such as LTE, 4G, or 5G, or wireless LAN communication standards such as IEEE 802.11. "LTE" is an abbreviation for Long Term Evolution. "4G" is an abbreviation for 4th generation. "5G" is an abbreviation for 5th generation. "IEEE" is an abbreviation for the Institute of Electrical and Electronics Engineers. The communication unit 23 communicates with the server device 30. The communication unit 23 receives information used in the operation of the information processing device 20, and also transmits information obtained by the operation of the information processing device 20.

[0073] The functions of the information processing device 20 are realized by the processor, which serves as the control unit 21, executing the program according to this embodiment. That is, the functions of the information processing device 20 are realized through software. The program causes the computer to perform the operations of the information processing device 20, thereby enabling the computer to function as the information processing device 20. In other words, the computer functions as the information processing device 20 by executing the operations of the information processing device 20 according to the program.

[0074] The program can be pre-stored on a non-transitory computer-readable medium. Examples of non-transitory computer-readable media include flash memory, magnetic recording devices, optical discs, optical-magnetic recording media, or ROM. Program distribution is achieved, for example, through the sale, transfer, or lending of portable media such as SD cards, DVDs, or CD-ROMs containing the program. "SD" is an abbreviation for Secure Digital. "DVD" is an abbreviation for digital versatile disc. "CD-ROM" is an abbreviation for compact disc read-only memory. Program distribution can also be achieved by pre-storing the program in a server's storage and transferring the program from the server to other computers. The program can also be provided as a program product.

[0075] Computers may temporarily store programs stored on portable media or transferred from servers in main storage. The computer uses its processor to read the programs stored in main storage and executes the processing based on the read programs. The computer may also directly read programs from portable media and execute the processing based on those programs. Alternatively, the computer may execute the processing based on the received programs sequentially each time a program is transferred from a server to the computer. Processing can also be performed through so-called ASP-type services, which achieve functionality by executing instructions and results without transferring programs from the server to the computer. "ASP" is an abbreviation for Application Service Provider. Programs contain information used in the processing performed by the computer and are program-based information. For example, data that, while not direct instructions to the computer, has the nature of specifying the computer's processing conforms to "program-based content."

[0076] Alternatively, some or all of the functions of the information processing device 20 can be implemented through a programmable circuit or a dedicated circuit that serves as the control unit 21. That is, some or all of the functions of the information processing device 20 can also be implemented through hardware.

[0077] Reference Figure 5 The operation of the information processing apparatus 20 according to this embodiment will now be described. The operation described below is an example of the setting selection method according to this embodiment. That is, the setting selection method according to this embodiment may also include... Figure 5 The steps S101 to S111 are shown.

[0078] In S101, the control unit 21 refers to a first setting related to whether or not to agree to use the rules, which is stored in the storage unit 22. For example, the control unit 21 refers to the value of a privacy setting stored in non-volatile memory. After S101, step S102 is executed.

[0079] In S102, the control unit 21 determines whether communication with the server device 30 is possible. Specifically, the control unit 21 confirms the connectivity with the network 40 via the communication unit 23, and sends a request to the server device 30 via the network 40 to confirm the presence or absence of a response from the server device 30. If a connection to the network 40 is established and a response is received from the server device 30, the control unit 21 determines that the communication unit 23 can communicate with the server device 30. Otherwise, the control unit 21 determines that the communication unit 23 cannot communicate with the server device 30. When the control unit 21 determines that the communication unit 23 can communicate with the server device 30, step S103 is executed. On the other hand, when the control unit 21 determines that the communication unit 23 cannot communicate with the server device 30, step S110 is executed.

[0080] In S103, the control unit 21 receives a second setting related to whether or not to agree to use the rules from the server device 30 via the communication unit 23. For example, the control unit 21 receives a privacy setting value from the server device 30 via the communication unit 23. After S103, step S104 is executed.

[0081] In S104, the control unit 21 determines whether there is a difference between the first setting referenced in S101 and the second setting received in S103. For example, the control unit 21 compares the values ​​related to the consent status of the usage rules included in the privacy setting value referenced in S101 and the privacy setting value received in S103. If both values ​​are "not consented," "agreed," or "disagree," the control unit 21 determines that there is no difference between the first setting and the second setting. Otherwise, the control unit 21 determines that there is a difference between the first setting and the second setting.

[0082] In this embodiment, the first setting and the second setting each include settings related to the types of information that are prohibited from being sent to the outside of the vehicle 50. For example, the control unit 21 compares the values ​​of the privacy settings referenced in S101 and the values ​​of the privacy settings received in S103, which contain values ​​related to whether personal information can be sent to the outside of the vehicle 50, according to each type of personal information. If both values ​​are "not allowed" for location information, voice information, image information, and all personal information, or if both values ​​are "allowed," the control unit 21 determines that there is no difference between the first setting and the second setting. Otherwise, the control unit 21 determines that there is a difference between the first setting and the second setting.

[0083] If the control unit 21 determines in S104 that there is a difference between the first setting and the second setting, step S105 is executed. On the other hand, if the control unit 21 determines that there is no difference between the first setting and the second setting, step S108 is executed.

[0084] In S105, the control unit 21 accepts user input via the input device 52 to select either the first setting or the second setting. For example, the control unit 21 displays the first selection screen on the display and accepts touch input to select "agree" or "disagree" via the touch screen.

[0085] In this embodiment, as described above, the first setting and the second setting each include settings related to the types of information that are prohibited from being sent to the outside of the vehicle 50. For example, when the control unit 21 determines in S104 that there is a difference in value related to whether personal information can be sent to the outside of the vehicle 50, a second selection screen is displayed on the display, and touch input selecting "yes" or "no" for each item is accepted via the touch screen. The control unit 21 may also accept touch input selecting "yes" or "no" only for items with value differences.

[0086] If the first setting is selected in S105, step S106 is executed. On the other hand, if the second setting is selected, step S107 is executed.

[0087] In S106, the control unit 21 sends a request to the server device 30 via the communication unit 23 to update the second setting using the first setting. When the server device 30 receives the request, it updates the second setting using the first setting according to the received request. For example, the server device 30 updates the value of the stored privacy setting in a way that makes it consistent with the value of the privacy setting stored in the non-volatile memory of the information processing device 20. After S106, step S108 is executed.

[0088] In S107, the control unit 21 updates the first setting using the second setting in the storage unit 22. For example, the control unit 21 updates the value of the privacy setting stored in the non-volatile memory in a way that makes it consistent with the value of the privacy setting maintained by the server device 30. After S107, step S108 is executed.

[0089] In S108, if the control unit 21 determines in S104 that there is a difference between the first setting and the second setting, it determines whether the user 11 has agreed to the usage rules based on the setting selected in S105. If the control unit 21 determines in S104 that there is no difference between the first setting and the second setting, it determines whether the user 11 has agreed to the usage rules based on the setting of either setting. For example, if "agree" is selected in S105, or if the values ​​related to the consent to the usage rules included in the privacy setting value referenced in S101 and the privacy setting value received in S103 are both "agree," the control unit 21 determines that the user 11 has agreed to the usage rules. Otherwise, the control unit 21 determines that the user 11 has not agreed to the usage rules.

[0090] In this embodiment, as described above, the first setting and the second setting each include settings related to the types of information that are prohibited from being sent to the outside of the vehicle 50. When the control unit 21 determines in S104 that there is a difference between the first setting and the second setting, it specifies the types of information that the user 11 has prohibited from being sent to the outside of the vehicle 50 as prohibited types based on the settings selected in S105. When the control unit 21 determines in S104 that there is no difference between the first setting and the second setting, it specifies the prohibited types based on the settings of either one. For example, the control unit 21 specifies prohibited types for items that are selected as "not allowed" in S105, or for items in the privacy settings value referenced in S101 and the privacy settings value received in S103 where the values ​​related to whether personal information can be sent to the outside of the vehicle 50 are both "not allowed".

[0091] If the control unit 21 determines in S108 that user 11 has agreed to the usage rules, step S109 is executed. Conversely, if the control unit 21 determines that user 11 has not agreed to the usage rules, Figure 5 The process shown has ended.

[0092] In S109, the control unit 21 transmits the information collected in the vehicle 50 to the server device 30 via the communication unit 23. Specifically, the control unit 21 transmits four types of information—location information, voice information, image information, and vehicle information—obtained by the locator 55, microphone 54, camera 53, and various sensors 57, to the server device 30 via the communication unit 23. As an alternative, the control unit 21 may also transmit only three of the four types of information to the server device 30 via the communication unit 23. As another alternative, the control unit 21 may also transmit only two of the four types of information to the server device 30 via the communication unit 23.

[0093] In this embodiment, as described above, the first setting and the second setting respectively include settings related to the types of information prohibited from being sent to the outside of the vehicle 50. When the control unit 21 determines in S108 that the user 11 has agreed to the usage rules, it sends the information collected in the vehicle 50 to the server device 30 via the communication unit 23 in a manner that excludes information of the prohibited types specified in S108.

[0094] After S109, Figure 5 The process shown has ended.

[0095] In S110, the control unit 21 determines whether the user 11 has agreed to the usage rules based on the first setting referenced in S101. For example, if the privacy setting referenced in S101 contains a value related to the status of agreement to the usage rules that is "agreed," the control unit 21 determines that the user 11 has agreed to the usage rules. Otherwise, the control unit 21 determines that the user 11 has not agreed to the usage rules.

[0096] In this embodiment, as described above, the first setting includes settings related to the types of information that are prohibited from being sent to the outside of the vehicle 50. The control unit 21 specifies the prohibited types based on the first setting. For example, the control unit 21 specifies items in the privacy settings referenced in S101 that have a value of "not allowed" related to whether personal information can be sent to the outside of the vehicle 50 as prohibited types.

[0097] If the control unit 21 determines in S110 that the user 11 has agreed to the usage rules, step S111 is executed. Conversely, if the control unit 21 determines that the user 11 has not agreed to the usage rules, step S102 is executed again. Furthermore, after the ignition switch of the vehicle 50 is turned on, at the moment when the communication unit 23 first becomes capable of communicating with the server device 30, step S103 is executed. That is, at the moment when the communication unit 23 first becomes capable of communicating with the server device 30 after startup, the control unit 21 receives the second setting from the server device 30 via the communication unit 23.

[0098] In step S111, the control unit 21 transmits the information collected in the vehicle 50 to the server device 30 via the communication unit 23. Specifically, the control unit 21 transmits four types of information—location information, voice information, image information, and vehicle information—obtained from the locator 55, microphone 54, camera 53, and various sensors 57, respectively, to the server device 30 via the communication unit 23. As an alternative example, the control unit 21 may also transmit only three of the four types of information to the server device 30 via the communication unit 23. As another alternative example, the control unit 21 may also transmit only two of the four types of information to the server device 30 via the communication unit 23.

[0099] In this embodiment, as described above, the first setting includes settings related to the types of information prohibited from being sent to the outside of the vehicle 50. When the control unit 21 determines in S110 that the user 11 has agreed to the usage rules, it sends the information collected in the vehicle 50 to the server device 30 via the communication unit 23 in a manner that excludes information of the prohibited types specified in S110.

[0100] Following S111, step S102 is executed again. Furthermore, after the ignition switch of vehicle 50 is turned on, step S103 is executed at the moment when communication unit 23 first becomes capable of communicating with server device 30. That is, at the moment when communication unit 23 first becomes capable of communicating with server device 30 after control unit 21 is started, the second setting is received from server device 30 via communication unit 23.

[0101] In S109 and S111, information collected in vehicle 50 can be sent to server device 30 in a manner that includes various additional information. This additional information may include, for example, the identifier of user 11, the identifier of vehicle 50, or both, the time the information was acquired, the driving status of vehicle 50 at the time the information was acquired, or the type of information acquired. The information sent to server device 30, along with the additional information, can be effectively utilized by the operator using server device 30. Alternatively, the information sent to server device 30, along with the additional information, or with some of the additional information hidden, can be provided a second time from the operator using server device 30 to a third party for effective utilization.

[0102] As a variation, if the control unit 21 determines at a certain time point PT that there is a difference between the first setting and the second setting, it may ask the user 11 via the output device 51 which setting to select. In this variation, when the control unit 21 receives not only user input selecting either setting via the input device 52, but also user input requesting the same selection to be applied if there is a difference between the first setting and the second setting after time point PT, even if a difference is determined after time point PT, it will not ask the user 11 which setting to select, but will apply the same selection. For example, in S105, the control unit 21 may further display a checkbox on the display indicating "this selection will be used again if the same state is encountered in the future". When this checkbox is checked, even if the steps of S105 are executed again later, the selection screen will not be displayed, but the current selection will be reflected again.

[0103] As a variation, user 11 can not only specify whether personal information is sent from vehicle 50 to server device 30 via information processing device 20, but also specify it via different routes. "Different routes" could be, for example, applications or websites installed on terminal devices associated with user 11. Terminal devices could be mobile devices such as mobile phones, smartphones, or tablets, or PCs. "PC" is an abbreviation for personal computer. In this variation, server device 30 receives a request from the terminal device to change settings related to whether or not to agree to the usage rules. When server device 30 receives the request, it updates the second setting according to the received request. For example, the application or website installed on the terminal device displays text containing the usage rules and a user interface for selecting "agree" or "disagree". If "agree" is selected during the first setting change, the value related to the agreement status with the usage rules in server device 30 changes from "disagree" to "agree". If "Disagree" is selected during the first configuration change, the value related to the agreement status with the usage rules in server device 30 is changed from "Disagree" to "Disagree". During subsequent configuration changes, if "Disagree" was selected previously and "Agree" is selected this time, the value related to the agreement status with the usage rules in server device 30 is changed from "Disagree" to "Agree". Similarly, during subsequent configuration changes, if "Agree" was selected previously and "Disagree" is selected this time, the value related to the agreement status with the usage rules in server device 30 is changed from "Agree" to "Disagree".

[0104] Reference Figure 6 The additional operation of the information processing apparatus 20 according to this embodiment will be described. The setting selection method according to this embodiment can further include Figure 6 The steps S201 to S203 are shown.

[0105] The steps in S201 are as follows: Figure 5 The process shown is executed after it is completed.

[0106] In S201, when the control unit 21 receives user input via the input device 52 requesting a change to settings related to whether or not to agree to the usage rules, the storage unit 22 updates the first setting using the changed settings. For example, based on a request from the user 11, the control unit 21 displays the same screen as the first selection screen on the monitor and accepts touch input via the touchscreen to select "agree" or "disagree". The control unit 21 updates the privacy settings stored in non-volatile memory with values ​​related to the status of agreement to the usage rules to match the selected value.

[0107] Alternatively, it can accept user input specifying prohibited categories instead of accepting user input that modifies settings related to whether or not to use the rules. In such an example, when the control unit 21 receives user input specifying prohibited categories via the input device 52, the settings related to the prohibited categories are added to the first settings in the storage unit 22. For example, the control unit 21 displays the same screen as the second selection screen on the display based on a request from the user 11, and accepts touch input selecting "yes" or "no" for each item via the touchscreen. The control unit 21 can also accept touch input selecting "yes" or "no" only for items with different values. The control unit 21 updates the values ​​in the privacy settings stored in non-volatile memory that contain values ​​related to whether or not personal information can be sent to the outside of the vehicle 50, in a manner consistent with the selected values.

[0108] After S201, step S202 is executed.

[0109] In S202, the control unit 21 and Figure 5 Similarly, step S102 shows a determination of whether communication with server device 30 is possible. If control unit 21 determines that communication unit 23 can communicate with server device 30, step S203 is executed. On the other hand, if control unit 21 determines that communication unit 23 cannot communicate with server device 30, step S202 is executed again.

[0110] In S203, the control unit 21 sends a request to the server device 30 via the communication unit 23 to update the second setting using the settings changed in S201. When the server device 30 receives the request, it updates the second setting using the changed settings according to the received request. For example, the server device 30 updates the privacy settings to include values ​​related to the consent status of the usage rules, in a way that makes them consistent with the values ​​selected in S201.

[0111] When a user input specifying a prohibited category is received instead of the user input in S201 that modifies settings related to whether or not to use the rules, the control unit 21 sends a request to the server device 30 via the communication unit 23 to add the prohibited category-related settings to the second settings. When the server device 30 receives the request, it adds the prohibited category-related settings to the second settings according to the received request. For example, the server device 30 updates the values ​​in the privacy settings it maintains, including values ​​related to whether or not personal information can be sent to the outside of the vehicle 50, in a manner consistent with the values ​​selected in S201.

[0112] After S203, for example, it is executed again. Figure 5 The process is shown below.

[0113] This disclosure is not limited to the embodiments described above. For example, two or more modules described in the block diagram may be integrated, or a single module may be divided. Instead of executing two or more steps described in the flowchart according to the time sequence, the steps may be executed in parallel or in different sequences depending on the processing capacity of the device executing each step or as needed. Furthermore, modifications can be made without departing from the spirit of this disclosure.

Claims

1. A vehicle configured to communicate with an external server device, characterized by comprising: include: Positioner; microphone; Camera; sensor; Non-volatile memory; Input devices; as well as computer, The computer is configured to, The first setting related to whether or not to agree to use the rules is stored in the non-volatile memory. Collect two or more of the following four types of information: location information, voice information, image information, and vehicle information, obtained through the locator, the microphone, the camera, and the sensor, respectively. The server device receives a second setting related to whether or not to agree to the usage rules. A determination is made as to whether there is a difference between the first setting stored in the non-volatile memory and the second setting received from the server device. When a difference is determined between the first setting and the second setting, the user input selecting either setting is accepted via the input device, and the user's agreement to the usage rules is determined based on the selected setting. When it is determined that the user agrees to the usage rules, the collected information of two or more types will be sent to the server device in real time, excluding information of prohibited types that the user is prohibited from sending to the outside of the vehicle.

2. An information processing apparatus provided on a vehicle, characterized by comprising: include: A communication device configured to communicate with a server device; A memory that stores a first setting relating to whether or not to agree to use the rules; as well as processor, The processor is configured such that, The second setting related to whether or not to agree to the usage rules is received from the server device via the communication device. A determination is made as to whether there is a difference between the first setting stored in the memory and the second setting received from the server device. When a difference is determined between the first setting and the second setting, user input selecting either setting is accepted via an input device mounted on the vehicle, and the user's agreement to the usage rules is determined based on the selected setting. When it is determined that the user agrees to the usage rules, the information collected in the vehicle is sent to the server device via the communication device.

3. The information processing apparatus as described in claim 2, characterized in that, The processor performs the following processing: When a user input is received via the input device to change a setting related to whether or not to agree to the usage rules, the first setting is updated in the memory using the changed setting; and If the communication device is able to communicate with the server device, a request to update the second setting using the changed settings is sent to the server device via the communication device.

4. The information processing apparatus as described in claim 2, characterized in that, The processor is configured to receive the second setting from the server device via the communication device when the communication device first becomes capable of communicating with the server device after startup.

5. The information processing apparatus as described in claim 2, characterized in that, The processor is configured such that, When a difference is determined between the first setting and the second setting at a certain point in time, the user is prompted via an output device mounted on the vehicle to select which setting to choose. When the input device receives not only user input that selects a setting for either party, but also user input requesting the same selection to be applied even if there is a difference between the first setting and the second setting after the time point, the user is not asked which setting to select, but the same selection is applied, even if it is determined that there is a difference between the first setting and the second setting after the time point.

6. The information processing apparatus as described in claim 2, characterized in that, The processor is configured such that, If the first setting is selected, a request to update the second setting using the first setting is sent to the server device via the communication device, and When the second setting is selected, the first setting is updated in the memory using the second setting.

7. The information processing apparatus as described in claim 2, characterized in that, The processor is configured to determine whether the user agrees to the usage rules based on the setting of either setting when it is determined that there is no difference between the first setting and the second setting.

8. The information processing apparatus as described in claim 2, characterized in that, The first setting and the second setting each include settings related to the types of information that are prohibited from being sent to the outside of the vehicle. The processor is configured such that, When it is determined that there is a difference between the first setting and the second setting, the type of information that the user is prohibited from sending to the outside of the vehicle is specified as a prohibited type based on the selected setting, and When it is determined that the user agrees to the usage rules, the information collected in the vehicle is sent to the server device via the communication device in a manner that excludes specific prohibited types of information.

9. The information processing apparatus as described in claim 8, characterized in that, The processor performs the following processing: When a user input specifying the prohibited type is received via the input device, the setting related to the prohibited type is added to the first setting in the memory; and If the communication device is able to communicate with the server device, a request is sent to the server device via the communication device to add the setting related to the prohibited type to the second setting.

10. The information processing apparatus as described in claim 8, characterized in that, The processor is configured to specify the prohibited type based on the setting of either setting when it is determined that there is no difference between the first setting and the second setting.

11. The information processing apparatus as described in claim 8, characterized in that, The information collected in the vehicle includes two or more of the following four types of information: location information, voice information, image information, and vehicle information, obtained through locators, microphones, cameras, and sensors mounted on the vehicle.

12. A system, characterized by include: The information processing apparatus according to any one of claims 2 to 11; as well as The server device according to claim 2.

13. The system as described in claim 12, characterized in that, The server device is configured to update the second setting according to the received request when it receives a request from a terminal device associated with the user to change a setting related to whether or not the user agrees to the usage rules.

14. A vehicle, characterized in that, The information processing apparatus includes any one of claims 2 to 11.

15. A setting selection method executed by a processor of an information processing apparatus provided on a vehicle, wherein The information processing apparatus includes a communication device configured to communicate with a server device, a memory for storing a first setting related to whether or not to agree to use the rules, and the processor. The setting selection method is characterized by including: The second setting relating to whether or not to agree to the usage rules is received from the server device via the communication device; Determine whether there is a difference between the first setting stored in the memory and the second setting received from the server device; When a difference is determined between the first setting and the second setting, user input selecting either setting is accepted via an input device mounted on the vehicle, and a determination is made based on the selected setting to determine whether the user agrees to the usage rules; and When it is determined that the user agrees to the usage rules, the information collected in the vehicle is sent to the server device via the communication device.

16. The method of claim 15, wherein the setting selection is made by a user. Also includes: When a user input is received via the input device to change a setting related to whether or not to agree to the usage rules, the first setting is updated in the memory using the changed setting; and If the communication device is able to communicate with the server device, a request to update the second setting using the changed settings is sent to the server device via the communication device.

17. The setting and selection method as described in claim 15, characterized in that, Also includes: After the processor is started, when the communication device first becomes capable of communicating with the server device, it receives the second setting from the server device via the communication device.

18. The setting and selection method as described in claim 15, characterized in that, Also includes: When a difference is determined between the first setting and the second setting at a certain point in time, the user is prompted to select which setting to choose via an output device mounted on the vehicle; and When the input device receives not only user input that selects a setting for either party, but also user input requesting the same selection to be applied even if there is a difference between the first setting and the second setting after the time point, the user is not asked which setting to select, but the same selection is applied instead.

19. The setting and selection method as described in claim 15, characterized in that, Also includes: When it is determined that there is a difference between the first setting and the second setting, the type of information that the user is prohibited from sending to the outside of the vehicle is specified as a prohibited type based on the selected setting; and When it is determined that the user has agreed to the usage rules, the information collected in the vehicle is sent to the server device via the communication device in a manner that excludes specific prohibited types of information. In the setting selection method, the first setting and the second setting respectively include settings related to the types of information that are prohibited from being sent to the outside of the vehicle.

20. The setting and selection method as described in claim 19, characterized in that, Also includes: When a user input specifying the prohibited type is received via the input device, the setting related to the prohibited type is added to the first setting in the memory; and If the communication device is able to communicate with the server device, a request is sent to the server device via the communication device to add the setting related to the prohibited type to the second setting.

Images