Information processing method, and information processing device

The method improves remote operation system security by accurately determining normality or abnormality through correlation analysis of remote control and event information, enabling timely user notification and automatic intervention.

JP2025169432APending Publication Date: 2025-11-12PANASONIC INTELLECTUAL PROPERTY CORP OF AMERICA
View PDF 7 Cites 0 Cited by

Patent Information

Application Number
JP2025141149
Authority / Receiving Office
JP · JP
Patent Type
Applications
Current Assignee / Owner
Priority Date
2021-08-27
Filing Date
2025-08-27
Publication Date
2025-11-12

AI Technical Summary

Technical Problem

Existing remote operation systems lack accuracy in determining whether remote operations are normal or abnormal based on remote operation information and event information, leading to potential security vulnerabilities.

Method used

An information processing method that acquires remote control information and event information, determines the correlation between them, and outputs notifications or control commands based on predefined thresholds and correlation strengths to identify and address abnormal remote operations.

Benefits of technology

Enhances the accuracy of identifying abnormal remote operations, allowing for timely user notification and automatic intervention to prevent unauthorized access or manipulation.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 2025169432000001_ABST
    Figure 2025169432000001_ABST
Patent Text Reader

Abstract

To provide an information processing method capable of precisely determining whether the remote control is normal or abnormal based on remote control information and event information.SOLUTION: The information processing device is configured to acquire remote control information for remote control of devices, acquire event information indicating the occurrence of a specific event related to user behavior, and when the relevance information indicating the relationship between the remote control and the event and the acquired remote control information and the event information satisfy certain conditions, restrict the remote control.SELECTED DRAWING: Figure 1
Need to check novelty before this filing date? Find Prior Art

Description

[Technical Field]

[0001] The present disclosure relates to an information processing method and an information processing device. [Background technology]

[0002] Patent Document 1 discloses a device control system including an abnormal state determination unit, which, when determining that the operation mode of a control device is a remote operation mode, reduces the magnitude of the abnormal state determination threshold compared to when determining that the operation mode is not the remote operation mode. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2019-9685 Summary of the Invention [Problem to be solved by the invention]

[0004] In Patent Document 1, no consideration is given to determining whether a remote operation is normal or abnormal based on remote operation information and event information.

[0005] An object of the present disclosure is to provide an information processing method that can determine with high accuracy whether a remote operation is normal or abnormal based on remote operation information and event information. [Means for solving the problem]

[0006] An information processing method according to one aspect of the present disclosure includes an information processing device acquiring remote control information for remotely operating an equipment, acquiring event information indicating the occurrence of a predetermined event related to a user's behavior, and restricting the remote control if correlation information indicating the correlation between the remote control and the event, and the acquired remote control information and event information satisfy predetermined conditions. [Effects of the Invention]

[0007] According to the present disclosure, it is possible to determine with high accuracy whether a remote operation is normal or abnormal based on remote operation information and event information. [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 1 is a simplified diagram showing the overall configuration of a remote control system. [Figure 2] 10 is a flowchart showing the flow of processing executed by an information processing unit. [Figure 3] FIG. 10 is a diagram illustrating an example of table information. [Figure 4] FIG. 10 is a diagram illustrating an example of table information. [Figure 5] FIG. 1 is a simplified diagram showing the overall configuration of a remote control system. [Figure 6] 10 is a flowchart showing the flow of processing executed by an information processing unit. [Figure 7] FIG. 10 is a diagram illustrating an example of table information. DETAILED DESCRIPTION OF THE INVENTION

[0009] (Findings that formed the basis of this disclosure) With the spread of IoT technology, users can now connect various devices such as home appliances to a communication network and remotely control the devices from an operating terminal such as a smartphone via the communication network.

[0010] While this system is convenient, it also raises concerns among users that a third party may hack into the system and manipulate the device. Therefore, in order to give users a sense of security and promote the widespread use of remote control systems, it is important to develop a system that can accurately detect abnormal remote control.

[0011] In the device control system disclosed in Patent Document 1, when the abnormal state determination unit determines that the operation mode of the control device is the remote operation mode, it reduces the magnitude of the abnormality determination threshold compared to when it determines that the operation mode is not the remote operation mode. However, in this device control system, no consideration is given to determining whether the remote operation is normal or abnormal based on the remote operation information and event information, and the determination accuracy is insufficient, so further improvement in the determination accuracy is desired.

[0012] In order to solve this problem, the inventor discovered that by using remote control information and the event information associated with it, it is possible to determine with high accuracy whether remote control is normal or abnormal, and came up with the present disclosure.

[0013] Next, each aspect of the present disclosure will be described.

[0014] An abnormality determination method according to a first aspect of the present disclosure includes an information processing device acquiring remote operation information for remotely operating an apparatus, acquiring event information indicating the occurrence of a predetermined event related to a user's behavior that is associated with the remote operation, determining whether the remote operation is normal or abnormal based on correlation information indicating the correlation between the remote operation and the event, and the acquired remote operation information and event information, and outputting an abnormality notification if it is determined that the remote operation is abnormal.

[0015] According to the first aspect, the information processing device determines whether the remote operation is normal or abnormal based on the association information indicating the association between the remote operation and the event, and the acquired remote operation information and event information, thereby making it possible to determine whether the remote operation is normal or abnormal with high accuracy.

[0016] In the abnormality determination method according to the second aspect of the present disclosure, in the first aspect, the correlation information may include first threshold information regarding a time difference between an acquisition time of the remote control information and an occurrence time of the event.

[0017] According to the second aspect, the correlation information includes first threshold information regarding the time difference between the time when the remote control information was acquired and the time when the event occurred, thereby making it possible to improve the accuracy of determining whether the remote control is normal or abnormal.

[0018] In the abnormality determination method according to a third aspect of the present disclosure, in the second aspect, the content of the abnormality notification may be changed depending on the correlation strength between the acquisition time of the remote operation information and the occurrence time of the event.

[0019] According to the third aspect, by varying the content of the abnormality notification depending on the correlation strength, it is possible to clearly notify the user of the occurrence of an abnormality that is truly urgent.

[0020] In the abnormality determination method according to the fourth aspect of the present disclosure, in the first or second aspect, it may further determine whether the remote control is normal or abnormal based on the acquisition time of the remote control information and second threshold information related to the variance of the acquisition time.

[0021] According to the fourth aspect, the information processing device determines whether the remote operation is normal or abnormal based on the acquisition time of the remote operation information and the second threshold information related to the variation in the acquisition time, thereby further improving the accuracy of determining whether the remote operation is normal or abnormal.

[0022] In the abnormality determination method according to a fifth aspect of the present disclosure, in addition to the fourth aspect, the content of the abnormality notification may be varied depending on a correlation strength between an acquisition time of the remote operation information and a variation in the acquisition time.

[0023] According to the fifth aspect, by varying the content of the abnormality notification depending on the correlation strength, it is possible to clearly notify the user of the occurrence of an abnormality that is truly urgent.

[0024] The abnormality determination method according to the sixth aspect of the present disclosure, in any one of the first to fifth aspects, may further include outputting a confirmation notification to the user to confirm whether or not to stop the remote operation when it is determined that the remote operation is abnormal.

[0025] According to the sixth aspect, the information processing device outputs a confirmation notice, so that the user can perform a stop operation to stop the abnormal remote operation.

[0026] The abnormality determination method according to a seventh aspect of the present disclosure may be any one of the first to fifth aspects, further comprising the step of outputting a control command to stop the remote operation when it is determined that the remote operation is abnormal.

[0027] According to the seventh aspect, the information processing device outputs a control command, so that the abnormal remote control can be stopped without a stop operation by the user.

[0028] An information processing device according to an eighth aspect of the present disclosure includes an acquisition unit that acquires remote operation information for remotely operating an apparatus and event information that indicates the occurrence of a predetermined event related to a user's behavior and that is associated with the remote operation; correlation information that indicates the correlation between the remote operation and the event; a determination unit that determines whether the remote operation is normal or abnormal based on the acquired remote operation information and the acquired event information; and an output unit that outputs an abnormality notification when it is determined that the remote operation is abnormal.

[0029] According to the eighth aspect, the determination unit determines whether the remote operation is normal or abnormal based on the association information indicating the association between the remote operation and the event, and the acquired remote operation information and event information, thereby making it possible to determine whether the remote operation is normal or abnormal with high accuracy.

[0030] A program according to a ninth aspect of the present disclosure causes an information processing device to function as an acquisition means for acquiring remote operation information for remotely operating an apparatus and event information indicating the occurrence of a predetermined event related to user behavior that is associated with the remote operation, correlation information indicating the correlation between the remote operation and the event, a determination means for determining whether the remote operation is normal or abnormal based on the acquired remote operation information and the event information, and an output means for outputting an abnormality notification when it is determined that the remote operation is abnormal.

[0031] According to the ninth aspect, the determination means determines whether the remote operation is normal or abnormal based on the association information indicating the association between the remote operation and the event, and the acquired remote operation information and event information, thereby making it possible to determine whether the remote operation is normal or abnormal with high accuracy.

[0032] The present disclosure can also be realized as a program that causes a computer to execute each characteristic configuration included in such a method or apparatus, or as a system operated by this program. Needless to say, such a computer program can be distributed on a computer-readable non-transitory recording medium such as a CD-ROM or via a communication network such as the Internet.

[0033] (Embodiments of the present disclosure) Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. However, unnecessary detailed descriptions may be omitted. For example, detailed descriptions of well-known matters or redundant descriptions of substantially identical configurations may be omitted. This is to avoid unnecessary redundancy in the following description and to facilitate understanding by those skilled in the art.

[0034] The accompanying drawings and the following description are provided to enable those skilled in the art to fully understand the present disclosure, and are not intended to limit the subject matter described in the claims.

[0035] (First embodiment) FIG. 1 is a simplified diagram showing the overall configuration of a remote operation system 1 according to a first embodiment of the present disclosure. The remote operation system 1 includes an anomaly detection server 2, a remote operation terminal 3, a remote control server 4, a communication device 51, a detection device 52, and an operation target device 53. The operation target device 53 is a device that is remotely controlled by the remote operation terminal 3. The communication device 51, the detection device 52, and the operation target device 53 are installed, for example, in a house 5 where a user resides. The anomaly detection server 2, the remote operation terminal 3, the remote control server 4, and the communication device 51 can communicate with each other via a communication network 6. The communication network 6 is any dedicated or general-purpose line network compatible with any communication method such as IP.

[0036] The anomaly detection server 2 includes an information processing unit 11, a storage unit 12, and a communication unit 13. The information processing unit 11 is configured using a CPU or the like. The storage unit 12 is configured using a HDD, SSD, flash memory, or the like. The communication unit 13 is configured using a communication module or the like compatible with the communication method of the communication network 6. The information processing unit 11 has an acquisition unit 21, a setting unit 22, a determination unit 23, and an output unit 24 as functions realized by the CPU executing a predetermined program. The storage unit 12 stores remote operation data 31, event data 32, threshold data 33, and table information 101. Details of this data and information will be described later. The acquisition unit 21 acquires a remote operation command signal as remote operation information for remotely operating the operation target device 53 from the remote operation terminal 3 via the communication network 6 and the communication unit 13. The acquisition unit 21 also acquires an event detection signal as event information indicating the occurrence of an event from the detection device 52 via the communication device 51, the communication network 6, and the communication unit 13. The acquisition unit 21 acquires the remote control data 31 and the event data 32 stored as a database in the storage unit 12 by reading them from the storage unit 12. The setting unit 22 performs statistical data analysis on the remote control data 31 and the event data 32 acquired by the acquisition unit 21. The setting unit 22 sets a first threshold based on the results of the data analysis and stores threshold data 33 indicating the first threshold in the storage unit 12. The setting unit 22 creates table information 101 by associating the content of the remote control, the content of the corresponding event, and the first threshold based on the remote control data 31, the event data 32, and the threshold data 33. The setting unit 22 stores the created table information 101 in the storage unit 12. The determination unit 23 determines whether the remote control command signal to be determined is normal or abnormal. The output unit 24 generates and outputs an alert notification when the remote control command signal is determined to be abnormal.

[0037] The remote control terminal 3 is, for example, a smartphone carried by a user who is a resident of the house 5. The remote control terminal 3 includes an input unit 41, a display unit 42, a processing unit 43, and a communication unit 44. The input unit 41 and the display unit 42 are configured using, for example, a touch panel display using a liquid crystal or organic electroluminescence (EL) display. The processing unit 43 is configured using a CPU or the like. The communication unit 44 is configured using a communication module or the like compatible with the communication method of the communication network 6.

[0038] A communication device 51, a detection device 52, and an operation target device 53 are installed in the home 5. The communication device 51 is configured using, for example, a gateway device for connecting a communication network 6 outside the home 5 with a communication network such as a wireless LAN inside the home 5. The detection device 52 is a sensor for detecting the occurrence of a predetermined event within the home 5. The predetermined event indicates an event or occasion related to the user's behavior, and includes, for example, leaving home, returning home, picking up or dropping off a child at cram school, eating out with the family, extracurricular activities, or school events. For example, if the predetermined event is the user leaving home or returning home, the detection device 52 is a motion sensor or a front door open / close sensor installed at the entrance of the home 5. The operation target device 53 is an IoT device or the like that can be remotely controlled from outside the home 5, such as an air conditioner, an electronic lock on the front door, or a Blu-ray recorder.

[0039] The remote control server 4 receives a remote operation command signal transmitted from the remote operation terminal 3, and generates and transmits a control signal based on the remote operation command signal to control the operation of the operation target device 53. The control signal is input to the operation target device 53 via the communication device 51, whereby the operation target device 53 is remotely controlled.

[0040] FIG. 2 is a flowchart showing the flow of processing executed by the information processing unit 11 of the anomaly detection server 2.

[0041] When a user inputs a remote operation command for the operation target device 53 from the input unit 41 of the remote operation terminal 3, the processing unit 43 transmits a remote operation command signal from the communication unit 44 via the communication network 6 to the remote control server 4 and the anomaly detection server 2. The communication unit 13 of the anomaly detection server 2 receives the remote operation command signal. In step SP101, the acquisition unit 21 acquires the remote operation command signal received by the communication unit 13 from the communication unit 13. The information processing unit 11 also stores the remote operation command signal received by the communication unit 13 in the memory unit 12. The remote operation command signal is stored in the memory unit 12 as one record of remote operation data 31, which is a database. In addition, when the detection device 52 detects the occurrence of a predetermined event in the house 5, an event detection signal related to the event is transmitted from the communication device 51 via the communication network 6 to the anomaly detection server 2. The communication unit 13 of the anomaly detection server 2 receives the event detection signal. In step SP101, the acquisition unit 21 acquires the event detection signal received by the communication unit 13 from the communication unit 13. Furthermore, the information processing unit 11 stores an event detection signal received by the communication unit 13 in the storage unit 12. The event detection signal is stored in the storage unit 12 as one record of event data 32, which is a database. Every time the communication unit 13 receives a remote operation command signal and an event detection signal, the remote operation command signal and the event detection signal are stored in the storage unit 12. As a result, remote operation data 31 as a database including a plurality of records corresponding to a plurality of remote operation command signals, and event data 32 as a database including a plurality of records corresponding to a plurality of event detection signals are accumulated in the storage unit 12.

[0042] In step SP102, the acquisition unit 21 acquires the remote control data 31 and the event data 32 stored in the storage unit 12. The setting unit 22 performs statistical data analysis on the acquired remote control data 31 and event data 32.

[0043] In step SP103, the setting unit 22 sets a first threshold based on the result of the data analysis in step SP102, and stores threshold data 33 indicating the first threshold in the storage unit 12. In addition, the setting unit 22 creates table information 101 by associating the content of the remote control, the content of the corresponding event, and the first threshold based on the remote control data 31, the event data 32, and the threshold data 33, and stores the table information 101 in the storage unit 12.

[0044] FIG. 3 is a diagram illustrating an example of the table information 101. In this example, a remote operation of "turning on the air conditioner" for an air conditioner, which is an operation target device 53, is associated with an event of a user returning home to the house 5, and "1 hour" is set as the first threshold value for the time difference between turning on the air conditioner and returning home. Furthermore, a remote operation of "unlocking the electronic lock" for an electronic lock on the front door, which is an operation target device 53, is associated with an event of a user returning home to the house 5, and "1 minute" is set as the first threshold value for the time difference between unlocking the electronic lock and returning home. These first threshold values ​​correspond to association information indicating the association between a remote operation and a corresponding event. For example, the setting unit 22 can calculate the average value and standard deviation σ of the time difference based on a large number of samples of the time difference between the reception time (acquisition time) of a remote operation command signal and the reception time (occurrence time) of an event detection signal related to the corresponding event, and set the first threshold value to a time obtained by adding, for example, +3σ to the average value of the time difference. Note that +3σ is merely an example, and +2σ, +1σ, etc. may also be used. The same applies to the second threshold value described later. In the example shown in Fig. 3, the first threshold value for the remote control of turning on the air conditioner is set to one hour, and the first threshold value for the remote control of unlocking the electronic lock is set to one minute. In other words, in the example shown in Fig. 3, the user of this house 5 usually returns home within one hour after the remote control command signal for turning on the air conditioner is sent, and also usually returns home within one minute after the remote control command signal for unlocking the electronic lock is sent. Every time the communication unit 13 receives a remote control command signal and an event detection signal, the setting unit 22 calculates the first threshold value and updates the contents of the threshold data 33 and the table information 101 stored in the memory unit 12.

[0045] In step SP104, the determination unit 23 determines whether the remote control command signal to be determined is normal or abnormal. In the example shown in Fig. 3, if the remote control command signal to be determined is for turning the air conditioner on, the determination unit 23 calculates the time difference between the reception time (acquisition time) of the remote control command signal for turning the air conditioner on and the reception time (occurrence time) of a subsequent event detection signal related to the user's homecoming event, and determines whether the time difference is within a first threshold value (one hour in the example of Fig. 3). If the remote control command signal to be determined is for unlocking the electronic lock, the determination unit 23 calculates the time difference between the reception time (acquisition time) of the remote control command signal for unlocking the electronic lock and the reception time (occurrence time) of a subsequent event detection signal related to the user's homecoming event, and determines whether the time difference is within a first threshold value (one minute in the example of Fig. 3).

[0046] If the time difference is within the first threshold value (step SP105: NO), the remote control command signal to be judged is determined to be normal, and the process returns to step SP101.

[0047] If the time difference exceeds the first threshold value (step SP105: YES), the remote control command signal to be determined is determined to be abnormal, and then in step SP106, the output unit 24 generates and outputs an alert notification such as text or graphics to notify the user that an abnormal remote control has been performed. The communication unit 13 transmits the alert notification data input from the output unit 24 to the remote control terminal 3 via the communication network 6. In the remote control terminal 3, the communication unit 44 receives the alert notification data, and the processing unit 43 displays the alert notification on the display unit 42 based on the data received by the communication unit 44.

[0048] Next, in step SP107, the output unit 24 generates and outputs a cancellation confirmation notice such as text or graphics to confirm with the user whether or not to cancel (suspend) the abnormal remote operation. The communication unit 13 transmits the cancellation confirmation notice data input from the output unit 24 to the remote control terminal 3 via the communication network 6. In the remote control terminal 3, the communication unit 44 receives the cancellation confirmation notice data, and the processing unit 43 displays the cancellation confirmation notice on the display unit 42 based on the data received by the communication unit 44.

[0049] When the user inputs a command to stop remote operation from the input unit 41 of the remote operation terminal 3, the processing unit 43 transmits a stop command signal from the communication unit 44 to the remote control server 4 via the communication network 6. The remote control server 4 receives the stop command signal transmitted from the remote operation terminal 3, and generates and transmits a control signal for stopping the remote operation of the operation target device 53 based on the stop command signal. When the control signal is input to the operation target device 53 via the communication device 51, the remote operation of the operation target device 53 is stopped.

[0050] The alert notification in step SP106 and the cancellation confirmation notification in step SP107 may be output from the speaker of the remote control terminal 3 as a voice message instead of being displayed on the display unit 42 as characters or an image.

[0051] Furthermore, the alert notification in step SP106 and the cancellation confirmation notification in step SP107 may be executed simultaneously as a single step rather than as separate steps.

[0052] The cancellation confirmation notification in step SP107 may be a request signal requesting a user to input a response as to whether or not to cancel the abnormal remote operation. When a response to cancel the remote operation is input from the input unit 41 by tapping a cancel button, for example, the response signal may be transmitted from the remote operation terminal 3 to the anomaly detection server 2, and a control command to cancel the remote operation may be transmitted from the anomaly detection server 2 to the remote control server 4. Here, when the determination unit 23 determines that the remote operation is abnormal, the user's response input may be omitted, and the control command to cancel the remote operation may be transmitted immediately from the anomaly detection server 2 to the remote control server 4.

[0053] In addition, whether to request a response from the user or to immediately send a stop control command without requiring a response may be set individually depending on the type of remote operation. For example, a response from the user may be requested for a remote operation with low security importance, such as turning on an air conditioner, while a stop control command may be immediately sent for a remote operation with high security importance, such as unlocking an electronic lock.

[0054] Furthermore, when the corresponding event is a user leaving or returning home, the determination unit 23 may determine whether the user who has left or returned home is a registered authorized user by analyzing video captured by a camera installed at the entrance of the house 5 or by collating beacon information received from a smartphone carried by the user. When the event is not an event by an authorized user, the determination unit 23 does not have to treat it as an event having occurred.

[0055] According to this embodiment, the anomaly detection server 2 (information processing device) determines whether the remote operation to be determined is normal or abnormal based on a first threshold (relationship information) indicating the relationship between the remote operation and the corresponding event, and the remote operation command signal (remote operation information) and the event detection signal (event information) acquired by the acquisition unit 21. This makes it possible to determine with high accuracy whether the remote operation is normal or abnormal.

[0056] Furthermore, according to this embodiment, the correlation information includes threshold data 33 (first threshold information) regarding the time difference between the time at which the remote control command signal is acquired and the time at which the event occurs, thereby making it possible to improve the accuracy of determining whether the remote control is normal or abnormal.

[0057] Furthermore, according to this embodiment, the anomaly detection server 2 outputs a cancellation confirmation notice, allowing the user to perform a cancellation operation to stop the abnormal remote operation.

[0058] Furthermore, according to this embodiment, the anomaly detection server 2 outputs a stop control command, so that an abnormal remote operation can be immediately stopped without a stop operation by the user.

[0059] (Second embodiment) In the first embodiment, the determination unit 23 determines whether the time difference between the acquisition time of the remote control command signal and the occurrence time of the corresponding event is within a first threshold value. However, the determination unit 23 may also determine whether the acquisition time of the remote control command signal is within a second threshold value related to the variability of the acquisition time. However, the first threshold value may be omitted and the normality or abnormality of the remote control may be determined based only on the second threshold value.

[0060] FIG. 4 is a diagram showing an example of table information 102. In this embodiment, table information 102 is stored in storage unit 12 instead of table information 101 shown in FIG. 1. In the example shown in FIG. 4, in addition to the items shown in FIG. 3, a time of "18:00" is set as the average acquisition time for air conditioner ON, and "30 minutes" is set as the second threshold for the time difference from that average acquisition time. Furthermore, a time of "19:00" is set as the average acquisition time for electronic lock unlocking, and "30 minutes" is set as the second threshold for the time difference from that average acquisition time. In this embodiment, threshold data 33 indicating the first threshold and the second threshold is stored in storage unit 12.

[0061] The second threshold indicates the maximum allowable variation in the acquisition time of the remote control information. The setting unit 22 can, for example, calculate the average value and standard deviation σ based on a large number of samples of the reception time (acquisition time) of the remote control command, and set a time equivalent to, for example, ±3σ of the average value as the second threshold. In other words, in the example shown in FIG. 4, the user of the house 5 typically transmits a remote control command signal to turn on the air conditioner between 17:30 and 18:30, and typically transmits a remote control command signal to unlock the electronic lock between 18:30 and 19:30. Each time the communication unit 13 receives a remote control command signal, the setting unit 22 calculates the second threshold and updates the contents of the threshold data 33 and the table information 102 stored in the memory unit 12.

[0062] In step SP104, the determination unit 23 performs the following determination process in addition to the determination process of the first embodiment. In the example shown in Fig. 4, if the remote control command signal to be determined is for turning the air conditioner on, the determination unit 23 calculates the time difference between the acquisition time of the remote control command signal for turning the air conditioner on and the average acquisition time (18:00), and determines whether or not the time difference is within the second threshold value (30 minutes). Also, if the remote control command signal to be determined is for unlocking the electronic lock, the determination unit 23 calculates the time difference between the acquisition time of the remote control command signal for unlocking the electronic lock and the average acquisition time (19:00), and determines whether or not the time difference is within the second threshold value (30 minutes).

[0063] In addition to the determination process of the first embodiment, the determination unit 23 determines that the remote control command signal to be determined is normal if the time difference between the acquisition time of the remote control command signal and the average acquisition time is within a second threshold. Specifically, the determination unit 23 determines that the remote control command signal to be determined is normal if the time difference between the acquisition time of the remote control command signal and the occurrence time of the corresponding event is within a first threshold and the time difference between the acquisition time of the remote control command signal and the average acquisition time is within a second threshold. On the other hand, if the time difference between the acquisition time of the remote control command signal and the average acquisition time exceeds the second threshold, the determination unit 23 determines that the remote control command signal to be determined is abnormal. Specifically, the determination unit 23 determines that the remote control command signal to be determined is abnormal if the time difference between the acquisition time of the remote control command signal and the occurrence time of the corresponding event exceeds the first threshold or if the time difference between the acquisition time of the remote control command signal and the average acquisition time exceeds the second threshold.

[0064] According to this embodiment, in addition to the determination process of the first embodiment, the determination unit 23 determines whether the remote control command signal is normal or abnormal based on the acquisition time of the remote control command signal and second threshold information related to the variation in the acquisition time, thereby making it possible to further improve the accuracy of determining whether the remote control is normal or abnormal.

[0065] (Third embodiment) The information processing unit 11 may vary the content of the abnormality notification depending on the correlation strength between the acquisition time of the remote control command signal and the occurrence time of the event, or depending on the correlation strength between the acquisition time of the remote control command signal and the variance of the acquisition time. Fig. 5 is a simplified diagram showing the overall configuration of a remote control system 1 according to a third embodiment of the present disclosure. In addition to the first or second embodiment, correlation data 34 is stored in the storage unit 12.

[0066] 6 is a flowchart showing the flow of processing executed by the information processing unit 11 according to the third embodiment. The following will be based on the second embodiment, and will mainly explain the differences from it.

[0067] In step SP103, the setting unit 22 sets the first correlation strength and the second correlation strength based on the result of the data analysis in step SP102, and stores correlation data 34 indicating the settings in the storage unit 12. The first correlation strength represents the magnitude of the correlation (the smallness of variation) between the acquisition time of the remote control command signal and the occurrence time of the corresponding event in two levels, "strong" or "weak." The second correlation strength represents the magnitude of the correlation between the acquisition time of the remote control command signal and the variation in the acquisition time in two levels, "strong" or "weak." However, the first correlation strength and the second correlation strength may be divided into three or more levels. Furthermore, the setting unit 22 creates table information 103 that associates the content of the remote control, the content of the corresponding event, the first threshold value, the second threshold value, the first correlation strength, and the second correlation strength based on the remote control data 31, the event data 32, the threshold value data 33, and the correlation data 34, and stores the table information 103 in the storage unit 12.

[0068] Fig. 7 is a diagram showing an example of table information 103. A first correlation strength is set corresponding to a first threshold, and a second correlation strength is set corresponding to a second threshold. In the example shown in Fig. 7, a first correlation strength of "strong" is set corresponding to the first threshold (1 hour) for turning on the air conditioner, and a first correlation strength of "strong" is set corresponding to the first threshold (1 minute) for unlocking the electronic lock. In addition, a second correlation strength of "weak" is set corresponding to the second threshold (30 minutes) for turning on the air conditioner, and a second correlation strength of "strong" is set corresponding to the second threshold (30 minutes) for unlocking the electronic lock.

[0069] If the time difference between the acquisition time of the remote control command signal and the occurrence time of the corresponding event is within the first threshold (step SP105A: NO) and the time difference between the acquisition time of the remote control command signal and the average acquisition time is within the second threshold (step SP105B: NO), the judgment unit 23 judges that the remote control command signal to be judged is normal and returns to step SP101. On the other hand, if the time difference between the acquisition time of the remote control command signal and the occurrence time of the corresponding event deviates by exceeding the first threshold (step SP105A: YES) or if the time difference between the acquisition time of the remote control command signal and the average acquisition time deviates by exceeding the second threshold (step SP105B: YES), then in step SP201, the judgment unit 23 judges whether the correlation strength set corresponding to the threshold that deviates is “strong” or “weak.”

[0070] If the correlation strength is "strong" (step SP201: YES), then in step SP106, the output unit 24 generates and outputs an alert notification to strongly notify the user that an abnormal remote operation has been performed by highlighting the notification. The communication unit 13 transmits the alert notification data input from the output unit 24 to the remote control terminal 3 via the communication network 6. In the remote control terminal 3, the communication unit 44 receives the alert notification data, and the processing unit 43 displays the alert notification on the display unit 42 based on the data received by the communication unit 44.

[0071] If the correlation strength is "weak" (step SP201: NO), then in step SP202, the output unit 24 generates and outputs a warning notification to normally notify the user that an abnormal remote operation has been performed by a normal display. The communication unit 13 transmits the warning notification data input from the output unit 24 to the remote control terminal 3 via the communication network 6. In the remote control terminal 3, the communication unit 44 receives the warning notification data, and the processing unit 43 displays the warning notification on the display unit 42 based on the data received by the communication unit 44.

[0072] The correlation strength may be set according to the type of operation target device 53. For example, the correlation strength may be set to "weak" for an operation target device 53 that is of low security importance, such as an air conditioner, while the correlation strength may be set to "strong" for an operation target device 53 that is of high security importance, such as an electronic lock on a front door.

[0073] According to this embodiment, by varying the content of the abnormality notification depending on the correlation strength, it is possible to clearly notify the user of the occurrence of an abnormality that is truly urgent.

[0074] As an example of changing the content of the abnormality notification depending on the correlation strength, when the correlation strength is less than a threshold value (when it is "weak" in the above example), the output unit 24 issues an abnormality notification in a first mode (warning notification in the above example) that includes a normal display. On the other hand, when the correlation strength is equal to or greater than the threshold value (when it is "strong" in the above example), the output unit 24 issues an abnormality notification in a second mode (alert notification in the above example) that includes an emphasis display that suggests a higher level of urgency than the first mode. This makes it possible to clearly notify the user of the occurrence of an abnormality that is truly highly urgent. [Industrial Applicability]

[0075] The present disclosure is particularly useful when applied to a remote control system that allows remote control of IoT devices and the like in the home from an operation terminal such as a smartphone. [Explanation of symbols]

[0076] 2. Anomaly detection server 11 Information Processing Department 12 Storage section 21 Acquisition Department 22 Setting section 23 Judgment section 24 Output section 31 Remote Control Data 32 Event Data 33 Threshold Data 34 Correlated Data

Claims

1. The information processing device Obtaining remote operation information for remotely operating the device; acquiring event information indicating the occurrence of a predetermined event related to the user's behavior; restricting the remote operation when association information indicating an association between the remote operation and the event and the acquired remote operation information and event information satisfy a predetermined condition; Information processing methods.

2. The restriction is a stop control for stopping the remote operation. The information processing method according to claim 1 .

3. The information processing device acquires the remote control information from a smartphone carried by the user. The information processing method according to claim 1 .

4. The relevance information is a threshold value expressed in time. The information processing method according to claim 1 .

5. the threshold value is a time difference between a time when the command signal for remote control is received and a time when the event detection signal is received; The information processing method according to claim 4.

6. the predetermined condition is that the time difference is within the threshold value; The information processing method according to claim 5 .

7. the threshold is set depending on the device or the event; The information processing method according to claim 1 .

8. Obtaining remote operation information for remotely operating the device; acquiring event information indicating the occurrence of a predetermined event related to the user's behavior; restricting the remote operation when association information indicating an association between the remote operation and the event and the acquired remote operation information and event information satisfy a predetermined condition; Information processing device.

Citation Information

Patent Citations

  • Arrival home time forecasting system and remote control system

    JP2002267487A

  • Household electric appliance control system

    JP2006202013A

  • Household electric appliance control system

    JP2006203515A

  • Domestic appliance control system

    JP2006203516A

  • Household electric appliance control system

    JP2006203518A