relay device

Abstract

The present invention provides a relay device that suppresses the excessive burden placed on the development of target devices for acquiring privacy consent information. [Solution] The relay device can obtain privacy consent information PR from the first device and the second device. When the relay device obtains privacy consent information PR from the first device (S12:YES), in step S13, it transmits the privacy consent information PR obtained from the first device to the target device. When the relay device does not obtain privacy consent information PR from the first device (S11:NO), or when it obtains privacy consent information from the second device (S23:YES), in step S13, it transmits the privacy consent information PR obtained from the second device to the target device.

Description

Technical Field

[0001] The present invention relates to a relay device.

Background Art

[0002] Patent Document 1 describes a system including a vehicle and a server. When the target device of the vehicle performs processing using privacy information related to the user of the vehicle, privacy consent information indicating consent to the use of the privacy information is required.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] In a system as described in Patent Document 1, the device capable of transmitting privacy consent information may vary depending on the vehicle in which the target device is installed. If the target device is designed to directly receive privacy consent information from the first device and the second device capable of transmitting privacy consent information, it is necessary to design the communication to be possible between the target device and the first device, and between the target device and the second device. In such a case, an excessive burden is imposed on the development for the target device to acquire privacy consent information.

Means for Solving the Problems

[0005] A relay device to solve the above problem is capable of obtaining privacy consent information from the first and second devices, indicating that the user consents to the use of privacy information concerning the vehicle's user in processing the target device. The relay device is mounted on the vehicle and, if it does not obtain the privacy consent information from the first device, it sends a request to the second device to obtain the privacy consent information. If it obtains the privacy consent information from the second device in response to the sent request, it transmits the obtained privacy consent information to the target device. [Effects of the Invention]

[0006] According to the above configuration, if the relay device fails to obtain privacy consent information from the first of the multiple devices, it will obtain the privacy consent information from the second device. Therefore, whether the first device is installed in the vehicle or not, the same relay device can transmit the privacy consent information to the target device. Thus, the relay device can prevent the target device from having to bear an excessive burden in developing the system to obtain privacy consent information. [Brief explanation of the drawing]

[0007] [Figure 1] Figure 1 is a schematic diagram showing the communication system. [Figure 2] Figure 2 is a flowchart showing a series of processes performed by the relay device. [Figure 3] Figure 3 is a sequence chart showing the flow of privacy consent information in a communication system. [Modes for carrying out the invention]

[0008] <Communication System> As shown in Figure 1, the communication system 10 comprises a vehicle 20 equipped with a relay device 40 and a server 70. The vehicle 20 can communicate with the server 70 via a wireless communication network.

[0009] The vehicle 20 is equipped with multiple target devices 30, a relay device 40, a navigation device 51, a communication device 52, and a switch 53. Note that only two of the target devices 30 are shown in Figure 1.

[0010] The target device 30 is an ECU having a processor and a storage medium. The target device 30 performs processing using privacy information relating to the user of the vehicle 20. The privacy information includes information relating to the user of the vehicle 20 and information that changes as the vehicle 20 is driven while the user is identified. The information relating to the user of the vehicle 20 includes the user's name, location information, address, and facial photograph. The information that changes as the vehicle 20 is driven includes the location information of the vehicle 20 and the speed of the vehicle 20.

[0011] The multiple target devices 30 include, for example, an engine ECU, a brake ECU, a body ECU, a multimedia ECU, and an advanced driver assistance ECU. These target devices 30 perform processing using privacy information.

[0012] Specifically, the engine ECU controls the engine of the vehicle 20 using information that changes as the vehicle 20 is driven, which is included in the privacy information. The brake ECU controls the brakes of the vehicle 20 using information that changes as the vehicle 20 is driven, which is included in the privacy information.

[0013] The body ECU uses user information included in the privacy information to control functions such as wipers and power door mirrors. The multimedia ECU uses user information included in the privacy information to control functions such as audio and rearview monitors.

[0014] The advanced driver assistance ECU uses user information included in the privacy information and information that changes as the vehicle 20 is driven to perform processing to control the Advanced Driver Assistance System (ADAS). ADAS includes, for example, PCS (Pre-Crash Safety) and ACC (Adaptive Cruise Control).

[0015] The relay device 40 can communicate with multiple target devices 30, a navigation device 51, a communication device 52, and a switch 53 using the CAN communication standard. The relay device 40 can also communicate with the communication device 52 using the Ethernet® communication standard. In this embodiment, the relay device 40 is a central ECU. The central ECU is an ECU that manages multiple target devices 30 in a centralized manner.

[0016] The relay device 40 can obtain privacy consent information PR, described later, from the navigation device 51 and the communication device 52. The relay device 40 includes a CPU 41 and a memory 42. The memory 42 stores various programs for the CPU 41 to execute. The CPU 41 executes the various programs stored in the memory 42. Details of the processing of the relay device 40 will be described later.

[0017] The navigation device 51 can be mounted on the vehicle 20 and is mounted on the vehicle 20. When mounted on the vehicle 20, the navigation device 51 transmits a first signal S1, which is a CAN standard signal, to the relay device 40 at a predetermined interval. The navigation device 51 is the first device in this embodiment.

[0018] The navigation device 51 includes a control unit and a display unit. The display unit is, for example, a touch display. The control unit acquires the current position information of the vehicle 20 in the display unit. The control unit causes the display unit to display a map image around the current position of the vehicle 20. Further, the control unit causes an icon indicating the current position of the vehicle 20 to be displayed on the map image.

[0019] The navigation device 51 stores privacy consent information PR. The privacy consent information PR is information indicating consent to the use of privacy information in the processing of the target device 30. For example, when the user of the vehicle 20 operates the touch display which is the display unit, the navigation device 51 acquires a consent signal indicating consent to the use of privacy information in the processing of the target device 30. When the navigation device 51 acquires the consent signal, it stores the privacy consent information PR. When the navigation device 51 stores the privacy consent information PR, it includes the privacy consent information PR in the message indicated by the first signal S1. On the other hand, if the navigation device 51 has not acquired the consent signal, it does not store the privacy consent information PR.

[0020] The communication device 52 can be mounted on the vehicle 20 and is mounted on the vehicle 20. The communication device 52 transmits and receives a second signal S2 conforming to the Ethernet standard while being mounted on the vehicle 20. When the communication device 52 receives the second signal S2 from the server 70, the communication device 52 transmits the second signal S2 to the relay device 40.

[0021] The communication device 52 can communicate with a server 70 outside the vehicle 20. The server 70 can store privacy consent information PR acquired from the user of the vehicle 20. For example, when the user of the vehicle 20 operates the user-owned mobile terminal, the mobile terminal transmits a consent signal indicating consent to the use of privacy information in the processing of the target device 30 to the server 70. When the server 70 receives the consent signal, it stores the privacy consent information PR. On the other hand, if the server 70 has not received the consent signal, it does not store the privacy consent information PR.

[0022] When the server 70 stores the privacy consent information PR, upon request, it transmits a second signal S2 to the communication device 52. The message by the second signal S2 includes the privacy consent information PR. Thereby, the communication device 52 acquires the privacy consent information PR from the server 70. When the communication device 52 acquires the second signal S2, it transmits a message by the second signal S2 including the privacy consent information PR to the relay device 40.

[0023] The switch 53 is provided, for example, in the driver's seat of the vehicle 20. The switch 53 can be operated so that the operation state ST is in an on state or an off state. For example, the switch 53 is a toggle switch. In the present embodiment, when the operation state ST is in the on state, it is a state that permits the use of privacy information in the processing of the target device 30. When the operation state ST is in the off state, it is a state that prohibits the use of privacy information in the processing of the target device 30.

[0024] Next, a series of processes regarding the privacy consent information PR performed by the relay device 40 will be described.

[0025] When the CPU 41 acquires a request to perform processing using privacy information from the target device 30, it starts executing a program that performs a series of processes regarding the privacy consent information PR stored in the memory 42.

[0026] As shown in Figure 2, when the CPU 41 starts executing a program that performs a series of processes related to privacy consent information PR, it first performs the process in step S11. In step S11, the CPU 41 determines whether or not it has received the first signal S1 from the first device, the navigation device 51. Since the first signal S1 is transmitted at a predetermined interval when the navigation device 51 is installed in the vehicle 20, the CPU 41 determines whether or not the navigation device 51 is installed in the vehicle 20 through the processing in step S11.

[0027] When CPU 41 receives the first signal S1 (S11: YES), CPU 41 proceeds to step S12. In step S12, CPU 41 determines whether the message transmitted by the first signal S1 contains privacy consent information PR. If the message transmitted by the first signal S1 contains privacy consent information PR (S12: YES), CPU 41 proceeds to step S13.

[0028] In step S13, the CPU 41 transmits the privacy consent information PR to the target device 30. When performing the processing in step S13 after step S12, the CPU 41 transmits the privacy consent information PR obtained from the navigation device 51 to the target device 30. After that, the CPU 41 terminates this series of processes.

[0029] On the other hand, if the CPU 41 does not receive the first signal S1 (S11: NO), the CPU 41 proceeds to step S21. That is, if the navigation device 51 is not installed in the vehicle 20, the CPU 41 proceeds to step S21. Also, if the message from the first signal S1 does not contain privacy consent information PR (S12: NO), the CPU 41 proceeds to step S21. That is, if the navigation device 51 is not being operated by the user and therefore does not store the privacy consent information PR, the CPU 41 proceeds to step S21.

[0030] In step S21, the CPU 41 sends a request DP for acquiring privacy consent information PR to the second device, the communication device 52. Upon receiving the acquisition request DP, the communication device 52 sends the acquisition request DP to the server 70. After that, the CPU 41 proceeds to step S22.

[0031] In step S22, the CPU 41 determines whether or not it has received the second signal S2 from the second device, the communication device 52. Since the second signal S2 is transmitted when the communication device 52 is mounted on the vehicle 20, the CPU 41 determines whether or not the communication device 52 is mounted on the vehicle 20 through the processing in step S22.

[0032] When CPU 41 receives the second signal S2 (S22: YES), CPU 41 proceeds to step S23. In step S23, CPU 41 determines whether the message transmitted by the second signal S2 contains privacy consent information PR. If the message transmitted by the second signal S2 contains privacy consent information PR (S23: YES), CPU 41 proceeds to step S13.

[0033] When performing the processing in step S13 after step S23, the CPU 41 transmits the privacy consent information PR obtained from the communication device 52 to the target device 30. After that, the CPU 41 terminates this series of processes.

[0034] On the other hand, if the CPU 41 does not receive the second signal S2 (S22: NO), the CPU 41 proceeds to step S31. That is, if the communication device 52 is not installed in the vehicle 20, the CPU 41 proceeds to step S31. Also, if the message from the second signal S2 does not contain privacy consent information PR (S23: NO), the CPU 41 proceeds to step S31. That is, if the server 70 has not obtained the consent signal from the user's mobile terminal, and the communication device 52 has not obtained the privacy consent information PR, the CPU 41 proceeds to step S31.

[0035] In step S31, the CPU 41 obtains information indicating the operating state ST of the switch 53. After that, the CPU 41 proceeds to step S32. In step S32, the CPU 41 determines whether the operation state ST is in the ON state. If the operation state ST is in the ON state (S32: YES), the CPU 41 proceeds to step S33.

[0036] In step S33, the CPU 41 generates privacy consent information PR. Then, the CPU 41 proceeds to step S13. When performing the processing in step S13 after step S33, the CPU 41 transmits the privacy consent information PR to the target device 30 based on the operation status ST of the switch 53. In other words, the CPU 41 transmits the privacy consent information PR based on the operation status ST of the switch 53, provided that it has not obtained the privacy consent information PR from either the navigation device 51 or the communication device 52. Note that when the CPU 41 obtains privacy consent information PR from the navigation device 51 or the communication device 52, it does not transmit the privacy consent information PR based on the operation status ST of the switch 53, even if it obtains information indicating the operation status ST of the switch 53. For example, when the CPU 41 obtains privacy consent information PR from the navigation device 51 or the communication device 52, it invalidates the information indicating the operation status ST from the switch 53.

[0037] On the other hand, when the operation state ST is in the off state (S32: NO), the CPU 41 proceeds to step S41. In step S41, the CPU 41 sends privacy non-consent information PRN to the target device 30, indicating that it does not consent to processing using privacy information. After that, the CPU 41 terminates this series of processes.

[0038] <Operation of this embodiment> Incidentally, the vehicles on which the relay device 40 is installed may include, in addition to the aforementioned vehicle 20, vehicles that do not have a navigation device 51 but do have a communication device 52, and vehicles that do not have either a navigation device 51 or a communication device 52.

[0039] This section describes the flow of privacy consent information PR when the relay device 40 is installed in one of these three vehicles and performs a series of processes related to simultaneous privacy information PR.

[0040] As shown in Figure 3, assume that the relay device 40 is mounted on the vehicle 20 described above. In this case, the vehicle on which the relay device 40 is mounted is also equipped with a navigation device 51. When the relay device 40 performs the series of processes shown in Figure 2, the relay device 40 obtains privacy consent information PR from the navigation device 51. The relay device 40 then transmits the privacy consent information PR obtained from the navigation device 51 to the target device 30. As a result, the target device 30 obtains the privacy consent information PR.

[0041] Next, let's assume that the vehicle equipped with the relay device 40 does not have a navigation device 51 but does have a communication device 52. In this case, when the relay device 40 performs the series of processes shown in Figure 2, the relay device 40 sends a request DP for acquisition of privacy consent information PR to the communication device 52. The communication device 52, having received the acquisition request DP, sends the acquisition request DP to the server 70. The server 70, having received the acquisition request DP, sends the privacy consent information PR to the communication device 52. The communication device 52, having received the privacy consent information PR, sends the privacy consent information PR to the relay device 40. The relay device 40, having received the privacy consent information PR, sends the privacy consent information PR to the target device 30. As a result, the target device 30 acquires the privacy consent information PR.

[0042] Next, let's assume that the vehicle equipped with the relay device 40 does not have the navigation device 51 and the communication device 52. In this case, when the relay device 40 performs the series of processes shown in Figure 2, the relay device 40 obtains information from the switch 53 indicating the operation status ST of the switch 53. When the relay device 40 has obtained the information indicating the operation status ST and the operation status ST is ON, it generates privacy consent information PR. The relay device 40 then transmits the generated privacy consent information PR to the target device 30. As a result, the target device 30 obtains the privacy consent information PR.

[0043] <Effects of this embodiment> (1) If the relay device 40 does not obtain privacy consent information PR from the first device, the navigation device 51 (S11: NO, S12: NO), the relay device 40 sends an acquisition request DP to the second device, the communication device 52, in the process of step S21. If the relay device 40 obtains privacy consent information PR from the communication device 52 in response to the acquisition request DP sent by the relay device 40, it sends the acquired privacy consent information PR to the target device 30.

[0044] Therefore, even if the vehicle on which the relay device 40 is installed is not equipped with a navigation device 51, the relay device 40 transmits the privacy consent information PR obtained from the communication device 52 to the target device 30. As a result, the relay device 40 can transmit the privacy consent information PR to the target device 30 regardless of whether it is installed in a vehicle equipped with a navigation device 51 or a vehicle not equipped with a navigation device 51.

[0045] In other words, the relay device 40 can develop the technology for acquiring privacy consent information PR for the target device 30 using the same development process, even if the first device is not installed. Therefore, the relay device 40 can prevent the target device 30 from having to develop separate technologies for acquiring privacy consent information PR depending on whether the first device is installed or not.

[0046] (2) The first device is a navigation device 51. The navigation device 51 stores the privacy consent information PR. The second device is a communication device 52. The communication device 52 obtains the privacy consent information PR from the server 70.

[0047] Depending on the security regulations of the destination country of the vehicle on which the relay device 40 is installed, either the navigation device 51 or the communication device 52 may not be installed. Also, depending on the security regulations, either the navigation device 51 or the communication device 52 may not store the privacy consent information PR. In these cases, according to the above embodiment, the relay device 40 transmits the privacy consent information PR to the target device 30, allowing the target device 30 to acquire the privacy consent information PR.

[0048] (3) If the relay device 40 does not obtain privacy consent information PR from the navigation device 51 and the communication device 52, it transmits the privacy consent information PR to the target device 30 based on the operation status ST of the switch 53. As a result, even if the vehicle on which the relay device 40 is installed does not have the navigation device 51 and the communication device 52 installed, the target device 30 can obtain the privacy consent information PR.

[0049] (4) When the relay device 40 obtains privacy consent information PR from the navigation device 51 or the communication device 52, it does not transmit privacy consent information PR based on the operation state ST of the switch 53 to the target device 30. Therefore, when the vehicle on which the target device 30 is installed is equipped with either the navigation device 51 or the communication device 52, the target device 30 preferentially obtains privacy consent information PR from either the navigation device 51 or the communication device 52. Due to a change in the vehicle's user, the operation state ST of the switch 53 may be different from the operation state ST of the current user of the vehicle 20. If the relay device 40 can obtain privacy consent information PR from the navigation device 51 or the communication device 52, the target device 30 does not have to obtain privacy consent information PR based on an operation state ST that is different from the operation state ST of the current user of the vehicle 20.

[0050] <Example of changes> The above embodiment can be implemented with the following modifications. The above embodiment and the following modifications can be combined with each other to the extent that they do not contradict each other technically.

[0051] Vehicle 20 does not need to have switch 53. In this case, relay device 40 does not need to transmit privacy consent information PR based on the operating state ST of switch 53. The communication standard for the first signal S1 and the communication standard for the second signal S2 may be the same. For example, both communication standards may be CAN or Ethernet.

[0052] The relay device 40 may also transmit privacy consent information PR based on the operating status of the switch 53 if it has obtained privacy consent information PR from the navigation device 51 or the communication device 52.

[0053] In the above embodiment, the first device is a navigation device 51 and the second device is a communication device 52, but the first and second devices are not limited to these. For example, the first device may be a communication device 52 and the second device may be a navigation device 51.

[0054] The relay device 40 may omit the processing in steps S11 and S22. In this case, the relay device 40 only needs to determine in step S12 whether or not it has received the privacy consent information PR from the navigation device 51. Also, the relay device 40 only needs to determine in step S33 whether or not it has received the privacy consent information PR from the communication device 52. Even in these cases, for example, even if the vehicle is equipped with both the navigation device 51 and the communication device 52, as in vehicle 20, the device in which the privacy consent information PR is stored may differ depending on security regulations, etc. Therefore, even if it is unclear whether the privacy consent information PR is stored in either the navigation device 51 or the communication device 52, the relay device 40 can deliver the privacy consent information PR to the target device 30.

[0055] The relay device 40 does not need to relay information other than the privacy consent information PR. For example, regarding update information for updating the software of the target device 30 over the air (OTA), the relay device 40 does not need to relay it from the communication device 52 to the target device 30. In this case, the communication device 52 may directly send the update information to the target device 30. When updating the software using update information, it is assumed that the communication device 52 for OTA updates is installed in the vehicle when the target device 30 is developed. Therefore, the relay device 40 does not need to relay the update information.

[0056] For example, the relay device 40 does not have to relay information from the target device 30 to the navigation device 51. Also, for example, the relay device 40 does not have to relay information from the target device 30 to the communication device 52. More specifically, the target device 30 may directly send a notification indicating that the software update has been completed via update information to the communication device 52 without going through the relay device 40. [Explanation of symbols]

[0057] 10…Communication systems 20... Vehicles 30…Target device 40…Relay device 51…Navigation system 52...Communication equipment 53... Switch 70... Server ST...Operating status PR... Privacy consent information PRN…Privacy Non-Consent Information ST...Operating status

Claims

1. Privacy consent information indicating that the user consents to the use of privacy information concerning the vehicle's user in processing the target device can be obtained from the first and second devices, and the relay device mounted on the vehicle, If the privacy consent information is not obtained from the first device, a request to obtain the privacy consent information is sent to the second device. If privacy consent information is obtained from the second device in response to the transmitted request, the obtained privacy consent information is transmitted to the target device. A relay device.

2. The first device is a navigation device that can be installed in the vehicle and stores the privacy consent information. The second device is a communication device that can be mounted on the vehicle and acquires the privacy consent information from a server outside the vehicle. The relay device according to claim 1.

3. If the privacy consent information is not obtained from the second device, the privacy consent information is transmitted to the target device based on the operating state of a switch provided in the vehicle. The relay device according to claim 1 or claim 2.

4. When the privacy consent information is obtained from the first or second device, the privacy consent information will not be transmitted to the target device based on the operating state of the switch. The relay device according to claim 3.

Images