Monitoring system, information processing device, information processing method, and program

Abstract

To provide a monitoring system that ensures the safety of elderly individuals while maintaining their dignity, and that allows them to retain their roles within the family. [Solution] The monitoring system 1 comprises a server 10, a first terminal device 20, a second terminal device 30, and a third terminal device 40. The server 10 comprises a management unit 101 that stores account information and location information of the first user (parent), second user (grandparent), and third user (grandchild) in a storage unit, and an information disclosure control unit 102 that provides the first terminal device 20 with location information of the second and third users, and provides the second terminal device 30 with location information of the third user. The second user can have a dual role of watching over the third user while simultaneously being watched over by the first user, allowing them to maintain an active role of "being on the watching side" rather than being in a one-sided position of "being watched over," thereby reducing their psychological burden.

Description

Technical Field

[0001] The present invention relates to a monitoring system, an information processing device, an information processing method, and a program.

Background Art

[0002] Conventionally, monitoring systems for ensuring the safety of the elderly and children have been known. For example, Patent Document 1 discloses a customizable position tracking system in which a tracked person can set an authorization policy regarding the tracking of their own position information. In this system, the tracked person can control the disclosure range and conditions of the position information.

[0003] In addition, applications for mutually sharing position information among family members are also known. In these applications, it is common for all members within a group to be able to view each other's positions equally. However, such symmetric information sharing can cause the elderly to strongly feel that they are "being monitored." Furthermore, in the monitoring of the elderly, a method of indirectly confirming the safety through communication activities with family members rather than direct monitoring by sensors or cameras has not been fully realized.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] In conventional elderly monitoring systems, the elderly are generally positioned as the "monitored side" unilaterally, and their position information and behavior history are monitored by family members. In such a configuration, there is a problem that the elderly feel a psychological burden of "being monitored," and their pride and self-esteem are hurt.

[0006] Furthermore, in conventional systems, the relationship between the caregiver and the cared-for is fixed, and opportunities for the elderly to play an active role within the family are lost. For example, the natural role of grandparents watching over their grandchildren within the family is not supported by technology.

[0007] Furthermore, checking on the well-being of the elderly often relies on direct monitoring methods such as motion detection using sensors and video surveillance using cameras, which raises concerns about privacy violations and can create a feeling of excessive intervention.

[0008] To solve the above problems, the present invention aims to realize a monitoring system that ensures the safety of the elderly while maintaining their dignity and allowing them to retain their roles within the family. [Means for solving the problem]

[0009] A monitoring system according to one aspect of the present disclosure is a system comprising a server, a first terminal device, a second terminal device, and a third terminal device, wherein the server comprises a management unit that stores account information of a first user, a second user, and a third user, and location information of the second user and the third user in a storage unit, and an information disclosure control unit that provides the location information of the second user and the third user to the first terminal device and provides the location information of the third user to the second terminal device, the first terminal device comprises a display control unit that displays the location information of the second user and the third user received from the server in a display unit, the second terminal device comprises a display control unit that displays the location information of the third user received from the server in a display unit, and the third terminal device comprises a location information transmission unit that transmits the location information of the third user to the server. [Effects of the Invention]

[0010] According to this disclosure, the second user (grandparents) can have a dual role: they can watch over the third user (grandchild) while simultaneously being watched over by the first user (parents). This allows the second user to maintain an active role of "being on the watch side" rather than being merely "being watched over," thereby reducing their psychological burden. This makes it possible to create a monitoring system that ensures the safety of the elderly while maintaining their dignity, and that allows them to retain their roles within the family. [Brief explanation of the drawing]

[0011] [Figure 1] This figure shows the overall configuration of the monitoring system according to this embodiment. [Figure 2] This is a hardware configuration diagram for the server. [Figure 3] This is a hardware configuration diagram of the first terminal device. [Figure 4] This is a hardware configuration diagram of the second terminal device. [Figure 5] This is a hardware configuration diagram of the third terminal device. [Figure 6] This is a functional block diagram of the server. [Figure 7] This is a functional block diagram of the first terminal device. [Figure 8] This is a functional block diagram of the second terminal device. [Figure 9] This is a functional block diagram of the third terminal device. [Figure 10] This diagram shows the data structure of the user table. [Figure 11] This diagram shows the data structure of the location information table. [Figure 12] This diagram shows the data structure of the message history table. [Figure 12A] This diagram shows the data structure of the disclosure policy table. [Figure 12B] This diagram shows the data structure of the involvement score table. [Figure 13] This diagram shows the processing sequence of the entire system. [Figure 14] It is a flowchart of account registration processing. [Figure 15] It is a flowchart of location information acquisition and display processing. [Figure 16] It is a flowchart of message sending and receiving processing. [Figure 17] It is a flowchart of participation monitoring processing. [Figure 18] It is a diagram showing an example of the home screen of the first terminal device. [Figure 19] It is a diagram showing an example of the timeline screen of the first terminal device. [Figure 20] It is a diagram showing an example of the home screen of the second terminal device. [Figure 21] It is a diagram showing an example of the message sending screen of the second terminal device. [Figure 22] It is a conceptual diagram of information disclosure control. [Figure 23] It is a conceptual diagram of a three-layer authority structure.

Mode for Carrying Out the Invention

[0012] Hereinafter, embodiments of the present disclosure will be described in detail with reference to the drawings. Note that the following embodiments do not limit the present disclosure and can be appropriately changed within the scope of the technical idea of the present disclosure.

[0013] <1. System Overview> The monitoring system 1 according to the present embodiment has an authority management structure capable of setting different information disclosure levels for a plurality of users. Specifically, a three-layer authority hierarchy is adopted. The first layer (first user) has the highest authority and can access the location information of the second layer (second user) and the third layer (third user). The second layer has intermediate authority and can only access the location information of the third layer, and does not necessarily recognize that the location information of the first layer and itself is provided to the first layer. The third layer plays a role of providing location information.

[0014] This three-tiered structure can be applied to the parent-grandparent-grandchild relationship within a family. Specifically, the first user is the parent generation (e.g., parents in their 30s to 50s) and has administrator privileges. The second user is the grandparent generation (e.g., in their 60s to 80s) and has the authority to view the location information of the third user (grandchild) and also has the ability to send messages to the third user. The third user is the grandchild generation (e.g., aged 3 to 15) and sends location information to the server.

[0015] Furthermore, the three-tiered structure of this embodiment is not limited to family relationships. For example, it can be applied to relationships between managers, middle managers, and general employees in a company; relationships between teachers, parents, and students in an educational institution; and relationships between managers, caregivers, and those receiving care in a nursing home.

[0016] The technical effects of the monitoring system 1 of this embodiment are as follows: (a) By having the second user assume the role of "the one doing the watching," the psychological burden of being unilaterally monitored can be reduced. (b) The first user can indirectly grasp the second user's involvement with the third user from the message transmission history and can confirm the safety of the second user without directly monitoring them. (c) By providing different user interfaces according to each user's role, appropriate information provision and operability can be achieved.

[0017] The essence of the technical concept of this disclosure lies in the following three points. First, by assigning intermediate-level users the dual roles of "watcher" and "watched" in a hierarchy of three or more levels of authority, safety is ensured while reducing the psychological burden on intermediate-level users. Second, by monitoring the actions of intermediate-level users in engaging with lower-level users (sending messages, viewing location information, etc.), safety checks are performed without directly monitoring the intermediate-level users themselves. Third, different user interfaces are provided to users at each level, and the system is designed so that intermediate-level users are not strongly aware of their role as "watched." The combination of these technical features achieves the simultaneous attainment of "maintaining the dignity of the elderly" and "ensuring safety," which has been difficult to achieve with conventional monitoring systems.

[0018] <2. System Configuration> Referring to Figure 1, the overall configuration of the monitoring system 1 will be described. The monitoring system 1 comprises a server 10, a first terminal device 20, a second terminal device 30, and a third terminal device 40. The server 10, the first terminal device 20, the second terminal device 30, and the third terminal device 40 are connected to each other via a network 50 so that they can communicate with one another.

[0019] Server 10 is the core information processing device of the monitoring system 1, and manages user account information, location information, message history, etc. Server 10 may be located in a cloud environment or an on-premises environment. Furthermore, Server 10 may consist of a single physical server or multiple physical or virtual servers.

[0020] The first terminal device 20 is a terminal device used by the first user (parent), and is, for example, a smartphone. The first terminal device 20 has functions such as displaying the location information of the second and third users, registering family structure information, and issuing invitation codes.

[0021] The second terminal device 30 is a terminal device used by the second user (grandparents), and is, for example, a smartphone. The second terminal device 30 has functions such as displaying the location information of the third user and sending messages to the third user. The user interface of the second terminal device 30 differs from that of the first terminal device 20 and is designed to be easy for elderly people to operate.

[0022] The third terminal device 40 is a terminal device carried by the third user (grandchild), and is, for example, a dedicated terminal with a location information transmission function. The third terminal device 40 is smaller and lighter than the smartphones used as the first terminal device 20 and the second terminal device 30, and does not have a calling function. The third terminal device 40 has the function of transmitting location information to the server 10, receiving and outputting messages from the second user, and sending replies.

[0023] Network 50 is a network that mediates communication between server 10 and each terminal device 20, 30, and 40. Network 50 may include the internet, a mobile phone network, a wireless LAN, etc.

[0024] The security implementation in the monitoring system 1 of this embodiment will now be described.

[0025] (Encryption of communications) Communications between server 10 and each terminal device 20, 30, and 40 are encrypted using TLS (Transport Layer Security) 1.3 or higher. This prevents the interception of location information and messages along the communication path. In addition, message data is encrypted using AES-256 when stored in the server 10's storage 13. An encryption key is generated for each family ID and is securely managed by KMS (Key Management Service).

[0026] (Authentication and Authorization) Each terminal device performs an authentication flow based on OAuth 2.0 with server 10 upon initial startup. After successful authentication, server 10 issues an access token (valid for 1 hour) and a refresh token (valid for 30 days). The terminal device adds the access token to the Authorization header when making an API request. If the access token expires, a new access token is obtained using the refresh token.

[0027] (Access Control) Server 10 verifies the permissions of the requesting user for each API request. Permission verification is performed based on the disclosure policy set by the Information Disclosure Control Unit 102. If an attempt is made to access a resource without permission, Server 10 returns an HTTP 403 error and records an unauthorized access log. If unauthorized access is detected a predetermined number of times (e.g., 10 times) or more in a short period of time, access from that IP address is temporarily blocked.

[0028] (Personal Information Protection) Location information and message history are collected and processed based on the user's explicit consent. When a second user registers an account, they are informed that their location information will be disclosed to the first user and give their consent. However, the user interface of the second terminal device 30 is designed so that this disclosure is not prominently displayed. Users have an opt-out function to stop the collection of location information at any time. The default retention period for location information is 90 days, and location information that has exceeded this period is automatically deleted.

[0029] The system configuration in this embodiment is merely an example, and the number and arrangement of components such as servers and terminal devices can be appropriately changed according to the scale of the system and the required performance. Furthermore, the functions of each device can be implemented by distributing them across multiple physically separated devices, or by integrating them into a single device.

[0030] <3. Hardware Configuration> Referring to Figure 2, the hardware configuration of server 10 will be described. Server 10 comprises a processor 11, memory 12, storage 13, and a communication interface 14.

[0031] The processor 11 is a arithmetic processing unit that controls the entire server 10, and is, for example, a CPU (Central Processing Unit). The processor 11 reads programs stored in the storage 13 into the memory 12 and executes them, thereby realizing the various functional units described later.

[0032] Memory 12 is a storage device that temporarily stores programs and data, such as RAM (Random Access Memory).

[0033] Storage 13 is a memory unit that permanently stores programs and data, and is, for example, an SSD (Solid State Drive) or an HDD (Hard Disk Drive). Storage 13 stores user tables, location information tables, message history tables, etc., which will be described later.

[0034] The communication interface 14 is an interface for communicating with other devices via the network 50, and is, for example, a NIC (Network Interface Card).

[0035] Referring to Figure 3, the hardware configuration of the first terminal device 20 will be described. The first terminal device 20 includes a processor 21, memory 22, storage 23, communication unit 24, display unit 25, input unit 26, GPS receiver 27, speaker 28, and microphone 29.

[0036] The processor 21 is an arithmetic processing unit that controls the entire first terminal device 20. The memory 22 is a storage device that temporarily stores programs and data. The storage 23 is a storage device that permanently stores programs and data. The communication unit 24 communicates with the server 10 via the network 50. The display unit 25 is a display that shows the screen. The input unit 26 is a touch panel or the like that accepts input from the user. The GPS receiver unit 27 receives signals from GPS satellites to acquire location information. The speaker 28 is a device for outputting voice messages. The microphone 29 is a device for inputting the voice of the first user and is used to record voice messages. In this embodiment, the location information of the first user is not monitored, but as a modification, a configuration that also manages the location information of the first user is also possible.

[0037] Referring to Figure 4, the hardware configuration of the second terminal device 30 will be described. Similar to the first terminal device 20, the second terminal device 30 includes a processor 31, memory 32, storage 33, communication unit 34, display unit 35, input unit 36, GPS receiver 37, speaker 38, and microphone 39. The speaker 38 is a device for outputting voice messages. The microphone 39 is a device for inputting the voice of the second user and is used for recording voice messages.

[0038] Referring to Figure 5, the hardware configuration of the third terminal device 40 will be described. The third terminal device 40 includes a processor 41, memory 42, communication unit 43, GPS receiver 44, speaker 45, button 46, LED 47, and microphone 48.

[0039] The processor 41 is an arithmetic processing unit that controls the entire third terminal device 40. The memory 42 is a storage device that stores programs and data. The communication unit 43 communicates with the server 10 via the network 50. The GPS receiver 44 receives signals from GPS satellites to acquire location information. The speaker 45 outputs voice messages from the second user. The button 46 is a physical button for the third user to send a response. The LED 47 is a light-emitting element that blinks to notify when a message is received. The microphone 48 is a device for inputting the third user's voice and is used to record voice response messages from the third user.

[0040] The third terminal device 40 is smaller and lighter than the smartphones used as the first terminal device 20 and the second terminal device 30, and is designed to be easy for children to carry. Furthermore, the third terminal device 40 does not have a calling function and is designed for simple operation.

[0041] <4. Functional Blocks> Referring to Figure 6, the functional blocks of the server 10 will be described. The processor 11 of the server 10 functions as the management unit 101, the information disclosure control unit 102, the message management unit 103, the notification control unit 104, the area monitoring unit 105, and the operation history management unit 106 by executing programs stored in the storage unit 13.

[0042] The management unit 101 stores the account information of the first user, second user, and third user, as well as the location information of the second user and third user, in the storage unit 13. Here, "storage unit" is a broad concept that includes storage devices capable of permanently saving data, and includes local storage such as SSDs and HDDs, as well as cloud storage and distributed databases. The management unit 101 stores the family structure information registered by the first user and determines the attributes of the first user, second user, and third user based on the family structure information. The family structure information includes the relationship and age group of each user, and the management unit 101 sets the parent generation user as the first user, the grandparent generation user as the second user, and the child generation user as the third user based on the relationship and age group. Note that the determination of attributes may be performed automatically, or the first user may specify them manually. It is also possible to register multiple first users, second users, and third users for a single family ID. For example, it is possible to register both the father and mother as the first user, and both the paternal grandparents and maternal grandparents as the second user.

[0043] Furthermore, the management unit 101 registers the accounts of the second and third users using the invitation code issued by the first user. The invitation code has a predetermined expiration date, and account registration is permitted only if it is used within the expiration date.

[0044] The information disclosure control unit 102 controls the range and granularity of the location information provided based on the user attributes corresponding to the requesting terminal device. Specifically, the information disclosure control unit 102 provides the location information of the second and third users to the first terminal device 20, and provides the location information of the third user to the second terminal device 30.

[0045] The processing algorithm of the information disclosure control unit 102 will be described in more detail. When the information disclosure control unit 102 receives a location information request, it performs the following steps. Step 1: Identify the requesting user ID from the authentication token included in the request. Step 2: Refer to the user table and retrieve the user type (user_type) corresponding to the user ID. Step 3: Apply the following disclosure policy based on the user type. If User Type = 1 (First User): Location information will be acquired for all users belonging to the same family ID (User Types = 2 and 3). If User Type = 2 (Second User): Only the location information of User Type = 3 users belonging to the same family ID will be retrieved. If user type = 3 (third user): Location information acquisition is not permitted (an empty list is returned). Step 4: For each user to be acquired, retrieve the latest location information record from the location information table. Step 5: If granularity control is enabled, the granularity of the location information is adjusted according to the combination of the requesting user type and the target user type. Step 6: Return the adjusted position information as a response.

[0046] In the algorithm described above, the disclosure policy in step 3 may be dynamically determined based on the disclosure policy table stored in storage 13. The disclosure policy table has columns for "Disclosing User Type," "Disclosing Destination User Type," "Disclosure Permitted / Not Permitted," and "Granularity Level." This allows the system administrator or the first user to customize the disclosure policy. For example, flexible control is possible, such as allowing location information to be provided to the second user only during specific time periods, or providing information at a lower granularity in specific areas (such as around one's home).

[0047] The information disclosure control unit 102 can provide detailed location information of the third user to the first terminal device 20, and approximate location information of the third user to the second terminal device 30. The approximate location information is location information expressed in predetermined area units (e.g., city / ward level, town name level). This allows the second user to be provided with the approximate location of the third user, while only the first user can know the detailed location.

[0048] The message management unit 103 records the history of messages sent from the second user to the third user. The message management unit 103 records the date and time of transmission, message type (text, voice, stamp), date and time of receipt confirmation, date and time of playback (in the case of voice messages), date and time of response transmission, etc. In this embodiment, an example of recording the "message transmission history" is described, but indicators showing the second user's involvement with the third user are not limited to message transmission. For example, the history of operations to view the third user's location information, the history of operations to display the third user's detailed information, or the history of responses to push notifications related to the third user can also be used as indicators of involvement. The server 10 determines the second user's involvement status by monitoring one or more of these involvement indicators.

[0049] The notification control unit 104 sends a notification to the first terminal device 20 if a message has not been sent for a predetermined period of time, based on the transmission history recorded in the message management unit 103. Specifically, the notification control unit 104 sends a first notification (mild warning) if a message has not been sent for a first predetermined period of time (e.g., 7 days), and sends a second notification, which is more urgent than the first notification, if a message has not been sent for a second predetermined period of time longer than the first predetermined period (e.g., 14 days).

[0050] The first and second predetermined periods may be changeable by user settings. For example, the first predetermined period can be set to a range of 1 to 30 days, and the second predetermined period can be set to a longer period than the first predetermined period (e.g., 1.5 to 5 times the length of the first predetermined period, or the first predetermined period plus a predetermined number of days). It is also possible to configure these periods to be dynamically adjusted according to the second user's health status and lifestyle patterns. For example, it is possible to learn the normal sending interval based on the second user's message sending frequency history and automatically set the first predetermined period based on the learning results.

[0051] The details of the notification processing by the notification control unit 104 are described below. The notification control unit 104 manages the following notification types.

[0052] (Notification Type 1: Decreased Involvement Notification) This notification is sent when no message has been sent from the second user to the third user for a predetermined period of time. The notification content includes the second user's identification information (nickname, etc.), the date and time of the last message sent, and the number of days elapsed. The notification is sent to the first terminal device 20 as both a push notification and an in-app notification. The title of the push notification is "Why not check on Grandpa / Grandma?", and the body is structured as follows: "[Nickname] has not sent a message to [Grandchild's Name] for [Number of Days Elapsed] days."

[0053] (Notification Type 2: Urgent Decreased Involvement Notification) This notification is sent when a message from the second user to the third user has not been sent for a specified period of time. The content and format of the notification are the same as Notification Type 1, but the notification priority is set to "high," and a warning icon is added to the push notification. In addition, the notification sound is set to be longer and more attention-grabbing than the default.

[0054] (Notification Type 3: Area Arrival Notification) This notification is sent when the third terminal device 40 arrives at a designated area (such as school, home, or place of extracurricular activity). The notification is sent to both the first terminal device 20 and the second terminal device 30. The notification content includes the third user's identification information, the name of the arrival area, and the date and time of arrival. The notification sent to the second terminal device 30 consists of simple wording that is easy for elderly people to understand (e.g., "Taro has arrived at school").

[0055] (Suppression of duplicate notifications) If multiple notifications of the same type occur in a short period of time (e.g., within 1 hour), the notification control unit 104 aggregates the notifications and sends a summary notification such as "[Number of notifications] items." This prevents excessive notifications to the user. In addition, the user can set the on / off status of each notification type, the notification time period (e.g., no notifications at night), and whether or not to include notification sounds on the notification settings screen.

[0056] The area monitoring unit 105 detects entry into or exit from a predetermined area (e.g., school, home, place of extracurricular activities) from the third terminal device 40 and sends a notification to at least one of the first terminal device 20 and the second terminal device 30. The area can be set as a circular region defined by a center coordinate and radius, or a polygonal region defined by vertex coordinates.

[0057] The operation history management unit 106 records the operation history of the second terminal device 30. The operation history includes the date and time the application was launched, the date and time location information was viewed, the date and time a message was sent, etc. Based on the operation history, the operation history management unit 106 determines the activity status of the second user and sends a notification to the first terminal device 20 if the activity status does not meet predetermined conditions (e.g., if the application has not been launched for a predetermined period of time).

[0058] Referring to Figure 7, the functional blocks of the first terminal device 20 will be described. The processor 21 of the first terminal device 20 functions as a display control unit 201, an input receiving unit 202, and a communication control unit 203 by executing a program (application) stored in the storage 23. The functional blocks of the first terminal device 20 are further connected to a speaker 28 and a microphone 29. The display control unit 201 outputs audio via the speaker 28 as needed and accepts audio input via the microphone 29. This makes it possible for the first user to send and receive voice messages with the second or third user.

[0059] The display control unit 201 displays the location information of the second and third users received from the server 10 on the display unit 25. The display control unit 201 displays the location information for each of the second and third users in a manner that allows for the identification of user attributes. Specific examples of manners that allow for the identification of user attributes include: (a) Different colored icons: The third user (grandchild) is displayed in blue, and the second user (grandparents) in orange. (b) Different shaped icons: The third user is displayed in a round shape, and the second user in a square shape. (c) Different sized icons: The third user's icon is displayed larger than the second user's icon to emphasize them as being monitored. (d) Label display: The user's nickname (e.g., "Taro-kun," "Grandpa") is displayed near each icon. (e) Status display: A badge indicating the status of each user (online / offline, moving / stationary, etc.) is superimposed on the icon. These identification manners may be used individually or in combination.

[0060] Furthermore, the display control unit 201 displays the location history of the third user and the message history from the second user to the third user in a timeline format. In the timeline display, each history is displayed in a manner that allows identification of which user attribute it relates to.

[0061] Furthermore, the display control unit 201 displays summary information indicating the second user's involvement with the third user. The summary information includes the date and time of the last message sent, the number of messages sent in the past week, and the status of the involvement (normal, caution, need to be checked).

[0062] The input reception unit 202 receives input from the user. This input includes registering family structure information, issuing invitation codes, changing notification settings, and changing area settings.

[0063] The communication control unit 203 controls communication with the server 10. The communication control unit 203 receives location information, message history, notifications, etc. from the server 10 and sends various requests to the server 10.

[0064] Referring to Figure 8, the functional blocks of the second terminal device 30 will be described. The processor 31 of the second terminal device 30 functions as a display control unit 301, a message input unit 302, and a communication control unit 303 by executing a program (application) stored in the storage 33. The functional blocks of the second terminal device 30 are further connected to a speaker 38 and a microphone 39. The message input unit 302 records the voice message of the second user via the microphone 39. The display control unit 301 can also output the received message as voice via the speaker 38.

[0065] The display control unit 301 displays the location information of the third user received from the server 10 on the display unit 35. The display control unit 301 also displays a user interface that includes a prompt to send a message to the third user. This user interface is designed with a large font size and easy-to-press buttons to make it easy for elderly people to operate.

[0066] The message input unit 302 accepts messages from the second user to the third user. The message input unit 302 accepts at least one of the following: text messages, voice messages, or stamps.

[0067] For text message input, the message input unit 302 accepts input via a software keyboard or voice recognition. To reduce the burden on elderly users, the software keyboard is displayed with larger-than-usual key sizes (each key is 48 pixels x 48 pixels or larger). A function is also provided to select and send pre-set phrases (e.g., "How are you?", "Good morning", "Have a great day!").

[0068] When inputting a voice message, the message input unit 302 records the voice via the microphone 39. Recording is started by tapping or long-pressing the record button. The maximum recording time is 60 seconds by default and can be changed in the settings. During recording, a recording time count-up display and visual feedback of the volume level are shown. After recording is finished, it is possible to check the content using the preview playback function before sending.

[0069] When entering stamps, the message input unit 302 displays a list of pre-prepared stamp images and accepts the user's selection. The stamps consist of simple illustrations that are easy for the elderly to understand (e.g., smiling, waving, heart, illustration with the text "thank you"). The stamps are displayed larger than in typical messaging apps to prevent accidental taps. A "frequently used stamps" function is also provided, which prioritizes the display of recently used stamps.

[0070] The communication control unit 303 controls communication with the server 10. The communication control unit 303 receives location information, area notifications, etc. from the server 10 and sends a message transmission request to the server 10.

[0071] Referring to Figure 9, the functional blocks of the third terminal device 40 will be described. The processor 41 of the third terminal device 40 functions as a location information transmission unit 401, a message output unit 402, and a response transmission unit 403 by executing a program stored in memory 42. The functional blocks of the third terminal device 40 are further connected to a microphone 48. In addition to transmitting a standard response by pressing button 46, the response transmission unit 403 can record a voice response message from the third user via microphone 48 and send it to the server 10. This allows the third user to convey more detailed information by voice in addition to responding with simple button operations.

[0072] The location information transmission unit 401 uses the GPS receiver unit 44 to acquire the location information of the third user and transmits the acquired location information to the server 10. The transmission of location information is performed periodically at predetermined intervals (e.g., every minute, every 5 minutes). The location information transmission unit 401 can also transmit location information immediately when it detects entry into or exit from a predetermined area.

[0073] In this specification, "location information" is a broad concept that includes information that can identify or estimate the location of a third user. Location information includes detailed location information such as GPS coordinates (latitude and longitude), as well as information indicating arrival and departure from a predetermined area (such as school, home, or place of lessons), address information (such as city, town, or village), or location category information (such as indoors or outdoors, moving or stationary). Server 10 stores and manages one or more of this location information and provides it to each terminal device at an appropriate level of granularity. For example, a configuration in which the location information transmitted from the third terminal device 40 consists only of area information (e.g., a configuration that transmits only event information such as "arrived at school" or "left home") is also included in the scope of this disclosure.

[0074] The message output unit 402 receives and outputs messages transmitted from the second terminal device 30. In the case of voice messages, the sound is output from the speaker 45. When a message is received, the LED 47 blinks to notify the third user.

[0075] The response transmission unit 403 transmits a response to the second user. When the third user presses button 46, the response transmission unit 403 transmits a predetermined response (e.g., the text "I heard it" or a predetermined voice message) to the second terminal device 30 via the server 10.

[0076] <5. Data Structure> Refer to Figure 10 to explain the data structure of the user table. The user table is stored in the storage 13 of the server 10 and manages the account information of each user. The user table has the following columns: user ID (user_id), user type (user_type), family ID (family_id), username (name), age group (age_group), relationship (relationship), device ID (device_id), creation date and time (created_at), and update date and time (updated_at).

[0077] The user type is indicated by "1" for the first user (parent), "2" for the second user (grandparent), and "3" for the third user (grandchild). The age group is one of "child", "adult", or "senior". The relationship is one of "parent", "grandparent", or "child".

[0078] Refer to Figure 11 to explain the data structure of the location information table. The location information table has the following columns: location_id, user_id, latitude, longitude, accuracy, acquisition date and time (acquired_at), and source. The source can be one of the following: "gps" (GPS), "wifi" (Wi-Fi positioning), or "cell" (cell phone base station positioning).

[0079] Refer to Figure 12 to explain the data structure of the message history table. The message history table has the following columns: message ID (message_id), sender user ID (sender_user_id), receiver user ID (receiver_user_id), message type (message_type), sent date and time (sent_at), received date and time (received_at), played date and time (played_at), and response sent date and time (response_sent_at). The message type is one of "text", "voice", or "stamp".

[0080] Refer to Figure 12A to explain the data structure of the disclosure policy table. The disclosure policy table has the following columns: disclosure policy ID (policy_id), family ID (family_id), source user type (source_user_type), target user type (target_user_type), disclosure allowed flag (is_allowed), granularity level (granularity_level), effective start date and time (valid_from), and effective end date and time (valid_until).

[0081] In the example above, records 1-3 are policies that permit disclosure, while records 4-5 are policies that prohibit disclosure. Record 3 indicates that the location information of the third user will be disclosed to the second user at a general level (granularity level 3).

[0082] Referring to Figure 12B, the data structure of the involvement score table will be explained. The involvement score table is a table in which the operation history management unit 106 of the server 10 quantifies and records the involvement status of the second user. The involvement score table has the following columns: score ID (score_id), user ID (user_id), target user ID (target_user_id), score calculation date (score_date), message score (message_score), viewing score (view_score), response score (response_score), total score (total_score), and score status (score_status).

[0083] The following explains how the engagement score is calculated. The message score is calculated based on the number of messages sent in the past 7 days. Specifically, the message score is calculated as min(number of messages sent × 10, 100). The browsing score is calculated based on the number of location information views in the past 7 days. The browsing score is calculated as min(number of location information views × 5, 50). The response score is calculated based on the number of times responses from third-party users have been confirmed. The response score is calculated as min(number of response confirmations × 20, 50). The total score is calculated as message score + browsing score + response score, with a maximum of 200 points. The score status is classified as "Normal" (100 points or more), "Caution" (50 points or more but less than 100 points), or "Needs Confirmation" (less than 50 points) based on the total score.

[0084] <6. Processing Flow> Referring to Figure 13, the overall processing sequence of the system will be explained. First, the first user registers family configuration information using the first terminal device 20 and issues an invitation code (S101). The second and third users register accounts using the invitation code (S102, S103).

[0085] The third terminal device 40 periodically transmits location information to the server 10 (S104). The server 10 stores the location information in a location information table (S105).

[0086] When a request for location information is received from the first terminal device 20 or the second terminal device 30 (S106), the information disclosure control unit 102 of the server 10 determines the location information to provide based on the user attributes of the requester and responds (S107). The first terminal device 20 is provided with the location information of both the second and third users, while the second terminal device 30 is provided with the location information of only the third user.

[0087] When a message is sent from the second terminal device 30 to the third user (S108), the server 10 forwards the message to the third terminal device 40 and records it in the message history table (S109). The third terminal device 40 outputs the message (S110), and when the third user presses the response button, the response is sent to the second terminal device 30 via the server 10 (S111, S112).

[0088] The notification control unit 104 of server 10 periodically checks the message history (S113), and if no message has been sent from the second user to the third user for a predetermined period of time, it sends a notification to the first terminal device 20 (S114).

[0089] Exception handling and error handling in the monitoring system 1 of this embodiment will be described below.

[0090] (Handling of communication errors) If communication between the third terminal device 40 and the server 10 fails, the third terminal device 40 temporarily stores the location information in local storage and sends the accumulated location information to the server 10 all at once when communication is restored. The server 10 checks the timestamp of the received location information and records it in the location information table in chronological order. If the first terminal device 20 and the second terminal device 30 cannot obtain location information from the server 10, the server displays the cached last obtained location and also displays a message such as "Last updated: X minutes ago" to notify the user of the freshness of the data.

[0091] (Processing when terminal is offline) If the third terminal device 40 is offline (power off, out of range, battery dead, etc.), the server 10 notifies the first terminal device 20 and the second terminal device 30 of the "offline" status along with the last acquired location information. If the offline state continues for a predetermined time (e.g., 30 minutes) or longer, the server 10 sends a warning notification to the first terminal device 20. When the third terminal device 40 returns to the online state, the server 10 immediately acquires the location information, updates the status to "online", and sends a push notification to the first terminal device 20 and the second terminal device 30.

[0092] (Handling of Authentication Errors) If the authentication token included in the request from the terminal device is invalid (expired, tampered with, etc.), the server 10 returns an authentication error response, and the terminal device starts the re-authentication flow. For re-authentication, one of the following methods is used: authentication with user ID and password, biometric authentication, or OTP (one-time password) authentication. If authentication fails a predetermined number of times consecutively (e.g., 5 times), the account is temporarily locked, and a notification is sent to the first user.

[0093] (Handling of data inconsistencies) If a referential integrity error is detected between the user table and the location information table (e.g., if a location information record exists that references a non-existent user ID), server 10 invalidates the record and outputs a warning log to the system administrator. Through periodic batch processing, the invalidated record is deleted after a predetermined period (e.g., 30 days).

[0094] Referring to Figure 14, the flowchart for the account registration process is explained. First, the first user inputs family structure information using the first terminal device 20 (S201). The family structure information includes the relationship and age range of the second user (grandparents) and the third user (grandchild). Next, the management unit 101 of the server 10 determines the attributes of each user (first user, second user, and third user) based on the input family structure information (S202). The first user issues an invitation code to invite the second and third users (S203). The invitation code has an expiration date.

[0095] The second or third user enters an invitation code and requests account registration (S204). The management unit 101 of server 10 determines whether the invitation code is valid or not (S205). If the invitation code is within its validity period and unused, account registration is permitted (S206). If the invitation code is invalid (expired or used), account registration is rejected (S207). If account registration is successful, the management unit 101 adds a new record to the user table (S208).

[0096] Referring to Figure 15, the flowchart for location information acquisition and display processing will be explained. The location information transmission unit 401 of the third terminal device 40 acquires the current location using the GPS receiver 44 (S301). The location information transmission unit 401 transmits the acquired location information to the server 10 (S302). The management unit 101 of the server 10 stores the received location information in the location information table (S303).

[0097] When the server 10 receives a location information request from the first terminal device 20 or the second terminal device 30 (S304), the information disclosure control unit 102 of the server 10 determines the user attribute of the requester (S305). If the requester is the first user (S306: first user), the information disclosure control unit 102 obtains the location information of the second and third users and transmits it to the first terminal device 20 (S307). If the requester is the second user (S306: second user), the information disclosure control unit 102 obtains only the location information of the third user and transmits it to the second terminal device 30 (S308).

[0098] The display control unit 201 of the first terminal device 20 displays the received location information on the map (S309). At this time, the second user and the third user are displayed with different icons to allow identification of user attributes. The display control unit 301 of the second terminal device 30 displays the received location information on the map (S310).

[0099] Referring to Figure 16, the flowchart for message transmission and reception processing will be explained. The second user inputs a message using the message input unit 302 of the second terminal device 30 (S401). The message can be text, voice, or a stamp. The second terminal device 30 sends the message to the server 10 (S402). The message management unit 103 of the server 10 records the message in the message history table (S403). The server 10 forwards the message to the third terminal device 40 (S404).

[0100] The message output unit 402 of the third terminal device 40 outputs a message (S405). In the case of an audio message, audio is output from the speaker 45. When the third user presses the response button (button 46) (S406: YES), the response transmission unit 403 sends a response to the server 10 (S407). If the response button is not pressed (S406: NO), the process ends. The server 10 forwards the response to the second terminal device 30 (S408). The second terminal device 30 displays the response (S409).

[0101] Refer to Figure 17 to explain the flowchart of the involvement monitoring process. The notification control unit 104 of server 10 periodically (e.g., once a day) checks the message history (S501). The notification control unit 104 obtains the date and time of the last message sent from the second user to the third user for each family (S502). The notification control unit 104 calculates the number of days elapsed from the date and time of the last message sent to the current date and time (S503).

[0102] If the number of days elapsed is equal to or greater than the second threshold (e.g., 14 days) (S504: YES), the notification control unit 104 sends a second notification (high urgency) to the first terminal device 20 (S505). If the number of days elapsed is less than the second threshold and equal to or greater than the first threshold (e.g., 7 days) (S506: YES), the notification control unit 104 sends a first notification (low urgency) to the first terminal device 20 (S507). If the number of days elapsed is less than the first threshold (S506: NO), no notification is sent (S508).

[0103] <7. User Interface> Referring to Figure 18, an example of the home screen of the first terminal device 20 is described. The home screen includes a map display area and a summary display area. In the map display area, the current locations of the second user and the third user are displayed as pins on the map. The third user (grandchild) is displayed as a blue circular pin, and the second user (grandparent) is displayed as an orange square pin, allowing for identification of user attributes. The summary display area displays the involvement status of the second user (last message sent date and time, status).

[0104] Referring to Figure 19, an example of the timeline screen of the first terminal device 20 is described. The timeline screen displays the location history of the third user and the message history from the second user to the third user in chronological order. Each history item displays the date and time, content, and an icon indicating the associated user attribute. For example, it may be displayed as "9:00 Taro arrives at school" and "9:30 Grandpa sends a message".

[0105] Referring to Figure 20, an example of the home screen of the second terminal device 30 is described. The home screen includes a map display area and a message sending button. Only the current location of the third user is displayed on the map in the map display area. The message sending button is prominently located at the bottom of the screen, allowing for one-touch transition to the message sending screen. The user interface of the second terminal device 30 is designed with a large font size (18 points or more) and sufficiently large buttons (44 pixels x 44 pixels or more), making it easy for elderly people to operate.

[0106] Referring to Figure 21, an example of the message sending screen of the second terminal device 30 is described. The message sending screen displays a voice recording button, a text input area, and a stamp selection panel. The voice recording button is located in the center of the screen as a large microphone icon, and a voice message can be recorded by tapping and holding it down. The stamp selection panel displays simple, large stamps (e.g., a smiling face, a heart, a waving character).

[0107] <8. Details of Information Disclosure Controls> Referring to Figure 22, the concept of information disclosure control will be explained. The information disclosure control unit 102 performs disclosure scope control based on user attributes and granularity control of location information.

[0108] In the disclosure scope control, the first user is provided with the location information of both the second and third users, while the second user is provided with only the location information of the third user. The third user is not provided with the location information of other users. As a result, the second user takes on the role of monitoring the third user without being strongly aware that they themselves are being monitored.

[0109] In granularity control, even for location information of the same object, the level of detail can be changed and provided according to the user attributes of the requester. The granularity of location information is classified into the following levels: Level 1 (detailed) is location information at the latitude and longitude coordinate or address level. Level 2 (medium) is location information at the town name level. Level 3 (general) is location information at the city / ward / town / village level. Level 4 (wide area) is location information at the prefecture level.

[0110] For example, the first user can be provided with the third user's location information at level 1, while the second user can be provided with the third user's location information at level 2 or 3. This allows the second user to have an approximate idea of ​​the third user's location, while the first user manages the detailed location.

[0111] Referring to Figure 23, the concept of a three-tiered authority structure will be explained. The monitoring system 1 of this embodiment has an authority structure consisting of three tiers: the first tier (first user), the second tier (second user), and the third tier (third user). The first tier has the highest level of authority and can access the location information of the second and third tiers. The second tier has intermediate authority and can access only the location information of the third tier. The third tier is responsible for providing the location information.

[0112] In this three-tiered structure, the second tier (second user) plays both the role of "watcher" and "watched over." The second user maintains their role within the family by watching over the third user (grandchild), while simultaneously being indirectly watched over by the first user (parent). Since the second user is not necessarily aware that their location information is being provided to the first user, the psychological burden of being "monitored" is reduced.

[0113] <9. Variation> Furthermore, each component described in the above embodiments may be modified, omitted, or combined as appropriate without departing from the purpose of this disclosure.

[0114] (Modification 1: User Layer Expansion) In this embodiment, a three-tiered permission structure has been described, but it is also possible to adopt a four-tiered or higher permission structure. For example, it is possible to add great-grandparents as the fourth user, and provide the location information of the third user (grandchild) and the second user (grandparents) to the fourth user, while providing the fourth user's own location information only to the first user.

[0115] (Modification 2: Dynamic Role Switching) In this embodiment, the roles of each user were described as being fixed, but a configuration in which roles can be dynamically switched is also possible. For example, dynamic control is possible such as the second user watching over the third user when the second user is out, and the second user transferring the responsibility of watching over the third user to the first user when the second user is at home.

[0116] (Modification 3: Involvement indicators other than messages) In this embodiment, message transmission history was used as an indicator for monitoring involvement, but it is not limited to this. For example, the frequency of app launches on the second terminal device, the number of times location information is viewed, and the number of times area notifications are confirmed can also be used as involvement indicators. It is also possible to detect the physical proximity (approach within a predetermined distance) between the second user and the third user and record it as face-to-face involvement.

[0117] In this embodiment, an example has been described in which the message management unit 103 and the notification control unit 104 are implemented on the server 10, but the arrangement of these functional units is not limited to the above. For example, the message transmission history may be managed on the second terminal device 30 side, and when the processor 31 of the second terminal device 30 detects that no messages have been transmitted for a predetermined period of time, it may send a notification to the first terminal device 20 via the server 10 or directly. Furthermore, a distributed configuration is also possible in which part of the message history is managed by the server 10 and another part is managed by the second terminal device 30. In addition, the server 10 and the second terminal device 30 may cooperate in detecting non-transmissions, and a notification may be generated when either of them detects a predetermined condition.

[0118] (Modification 4: Location acquisition means other than GPS) In this embodiment, location information acquisition using GPS has been described, but it is not limited to this. Other location acquisition means such as Wi-Fi positioning, cellular base station positioning, Bluetooth beacons, and UWB (ultra-wideband radio) can be used alone or in combination. Furthermore, the technical concept of this disclosure is applicable even in configurations that do not use GPS (e.g., Wi-Fi positioning only).

[0119] (Modification 5: Third terminal device other than a dedicated terminal) In this embodiment, a dedicated GPS terminal was described as the third terminal device, but it is not limited to this. Any device capable of transmitting location information can be used as the third terminal device, such as a smartphone, smartwatch, GPS module built into a school bag, or GPS module built into a shoe.

[0120] (Modification 6: Omission of Granularity Control of Location Information) In this embodiment, an example of providing location information of different granularities to the first user and the second user has been described, but a configuration that provides location information of the same granularity is also possible. Granularity control of location information is not a mandatory requirement of this disclosure.

[0121] (Variation 7: Dynamic adjustment of notification threshold) The notification threshold for message non-delivery is not limited to a fixed value; it can also be dynamically adjusted based on the second user's past message sending patterns. For example, for a second user who usually sends messages about once a week, a notification can be set after 10 days of non-delivery, while for a second user who sends messages daily, a notification can be set after 3 days of non-delivery.

[0122] (Modification 8: Call function of the third terminal device) In this embodiment, an example in which the third terminal device does not have a call function has been described, but it is also possible to use a terminal with a call function (e.g., a kids' mobile phone) as the third terminal device.

[0123] In this embodiment, an example using GPS to acquire location information has been described, but this disclosure is not limited to this. For example, a configuration that does not include GPS (Wi-Fi positioning only, mobile phone base station positioning only, etc.) is also possible.

[0124] While we've described 7-day and 14-day examples for message delivery failure notification thresholds, these are just examples. Depending on processing load and user usage patterns, you may set the threshold outside of a specific range (e.g., 5 to 10 days).

[0125] In this embodiment, a message sending function from a second user to a third user has been described, but a configuration without a message sending function is also possible. In this case, involvement monitoring is performed based on the application operation history and location information viewing history of the second terminal device.

[0126] In this embodiment, the function of sending messages from the second user to the third user is not essential. For example, it is possible to configure the second terminal device 30 to have only the function of displaying the third user's location information and not the function of sending messages. In this case, the second user's involvement is monitored based on the location information viewing history and the application launch history.

[0127] Furthermore, in this disclosure, it is not mandatory for the first user to be able to view the second user's location information. For example, the first user may only be able to view the third user's location information and only be able to check the second user's involvement status (message sending history and operation history) in a summary format. In this configuration, the second user's privacy is more strongly protected, while indirect safety confirmation through involvement monitoring is maintained.

[0128] Furthermore, this disclosure also includes configurations for acquiring location information without using GPS. For example, configurations using Wi-Fi positioning, cellular base station positioning, indoor positioning using beacons, or location information manually entered by the user are also possible.

[0129] Furthermore, the ranges and conditions of specific numerical values ​​are not limited to the examples shown in the embodiments, and ranges that exclude certain parts (disclaimer) to avoid duplication with cited documents, etc., are also within the scope of the technical idea of ​​the present invention.

[0130] According to this embodiment, the second user (grandparents) can have a dual role: they can watch over the third user (grandchild) while simultaneously being watched over by the first user (parents). This allows the second user to maintain an active role of "being on the watch side" rather than being merely "being watched over," thereby reducing their psychological burden. This makes it possible to create a monitoring system that ensures the safety of the elderly while maintaining their dignity, and that allows them to retain their roles within the family.

[0131] Furthermore, the first user can indirectly understand the extent to which the second user is involved with the third user through the message sending history. This allows the first user to check on the second user's well-being based on a natural indicator such as the presence or absence of communication activity, without directly monitoring the second user.

[0132] Furthermore, in this embodiment, by providing different user interfaces for the first, second, and third terminal devices, appropriate information provision and operability tailored to each user's role are achieved.

[0133] Conventional elderly monitoring systems (e.g., behavior detection using sensors, video surveillance using cameras, one-sided sharing of location information, etc.) only position the elderly as "objects to be monitored" and are unable to play an active role within the system. In contrast, this disclosure reduces the psychological resistance of the second user to using the system by giving the second user (grandparents) an active role of "watching over the third user (grandchildren)." Specifically, in the user interface of the second terminal device 30, the functions of the "watcher" side, such as the second user checking the location of the third user and sending messages, are prominently displayed, while the fact that the second user's own location information can be viewed on the first terminal device 20 is not emphasized in the user interface of the second terminal device 30. This asymmetrical user interface design allows the second user to have a stronger sense of "watching over" rather than "being watched over," thus maintaining a sense of self-efficacy.

[0134] Furthermore, the monitoring of the second user's involvement in this embodiment involves monitoring the second user's engagement actions with the third user (such as sending messages), and does not directly monitor the second user's location information or physical activity. As a result, the second user does not feel "constantly watched" as with conventional sensor-based surveillance systems, and their safety is confirmed through natural communication with the third user. This indirect monitoring method makes it possible to achieve a balance that was difficult to achieve with conventional technology: respecting the second user's privacy while providing the first user with necessary safety information.

[0135] It should be noted that the effects of this embodiment are not limited to those described above, and the technical effects that can be understood from the description herein are also included in the effects of this disclosure.

[0136] <10. Summary> [General tasks] One of the purposes of this disclosure is to realize a monitoring system that ensures the safety of elderly people while maintaining their dignity, and that allows them to retain their roles within the family.

[0137] [Issues related to Appendix 1] One of the purposes of this disclosure is to realize a monitoring system that allows different levels of information disclosure to be set for multiple users. [Note 1] A system comprising a server, a first terminal device, a second terminal device, and a third terminal device, wherein the server includes a management unit that stores account information of a first user, a second user, and a third user, and location information of the second user and the third user in a storage unit, and an information disclosure control unit that provides the location information of the second user and the third user to the first terminal device and provides the location information of the third user to the second terminal device, the first terminal device includes a display control unit that displays the location information of the second user and the third user received from the server in a display unit, the second terminal device includes a display control unit that displays the location information of the third user received from the server in a display unit, and the third terminal device includes a location information transmission unit that transmits the location information of the third user to the server. [Effects of Appendix 1] The second user (grandparents) can take on the role of watching over the third user (grandchild) while simultaneously being watched over by the first user (parents), thus having a dual role and reducing their psychological burden.

[0138] [Issues related to Appendix 2] One of the purposes of this disclosure is to realize a monitoring system that can automatically set permissions based on user attributes. [Note 2] In the system described in Appendix 1, the management unit of the server stores family configuration information registered by the first user, and determines the attributes of the first user, the second user, and the third user based on the family configuration information. [Effects of Appendix 2] By automatically determining each user's attributes based on family structure information, the burden of user configuration can be reduced.

[0139] [Issues related to Appendix 3] One of the purposes of this disclosure is to realize a monitoring system that can set appropriate permissions based on relationship and age group. [Note 3] In the system described in Appendix 2, the family structure information includes the relationship and age group of each user, and the management unit sets up users of the parent generation as the first user, users of the grandparent generation as the second user, and users of the child generation as the third user, based on the relationship and age group. [Effects of Appendix 3] By setting appropriate permissions based on family relationship and age group, a natural monitoring structure can be created that aligns with family roles.

[0140] [Issues related to Appendix 4] One of the purposes of this disclosure is to realize a monitoring system that allows for secure user registration using an invitation code. [Note 4] In the system described in Appendix 2, the management unit of the server registers the accounts of the second user and the third user using the invitation code issued by the first user. [Effects of Appendix 4] Using invitation codes prevents unintended user registration and ensures security.

[0141] [Issues related to Appendix 5] One of the purposes of this disclosure is to realize a monitoring system that can provide terminal devices suitable for each user. [Note 5] The system described in Appendix 1, wherein the first terminal device and the second terminal device are smartphones, and the third terminal device is a dedicated terminal having a location information transmission function. [Effects of Appendix 5] By providing a dedicated terminal to the third user (grandchild), a simple and portable device can be realized.

[0142] [Issues related to Appendix 6] One of the purposes of this disclosure is to realize a monitoring system that can provide a small, lightweight terminal device that is easy for children to carry. [Note 6] In the system described in Appendix 5, the third terminal device is smaller and lighter than the smartphone and does not have a calling function. [Effects of Appendix 6] The small, lightweight, and non-call-enabled dedicated device is easy for children to carry and use with simple operation.

[0143] [Issues related to Appendix 7] One of the purposes of this disclosure is to realize a monitoring system that can provide different user interfaces tailored to each user's role. [Note 7] In the system described in Appendix 1, the display control unit of the first terminal device and the display control unit of the second terminal device display different user interfaces. [Effects of Appendix 7] By providing different user interfaces tailored to each user's role, appropriate information delivery and usability can be achieved.

[0144] [Issues related to Appendix 8] One of the purposes of this disclosure is to realize a monitoring system that can display location information in a manner that allows for the identification of user attributes. [Note 8] In the system described in Appendix 7, the display control unit of the first terminal device displays location information for each of the second and third users in a manner that allows for the identification of user attributes. [Effects of Appendix 8] By displaying user attributes in an identifiable manner, the first user can grasp the location of each user at a glance.

[0145] [Issues related to Appendix 9] One of the purposes of this disclosure is to realize a monitoring system that can display location information and message history in chronological order. [Note 9] In the system described in Appendix 7, the display control unit of the first terminal device displays the history of the third user's location information and the history of messages from the second user to the third user in a timeline format in chronological order. [Effects of Appendix 9] By displaying the information in a timeline format, the first user can understand the third user's actions and the second user's involvement in chronological order.

[0146] [Issues related to Appendix 10] One of the purposes of this disclosure is to realize a monitoring system that can identify user attributes in a timeline display. [Note 10] In the system described in Appendix 9, the display control unit of the first terminal device displays the timeline-format display in a manner that allows identification of which user attribute each history is related to. [Effects of Appendix 10] By displaying the user attributes of each history entry in an identifiable way, the first user can easily understand the contents of the history.

[0147] [Issues related to Appendix 11] One of the purposes of this disclosure is to realize a monitoring system that can provide a user interface that makes it easy for elderly people to send messages. [Note 11] In the system described in Appendix 7, the display control unit of the second terminal device displays a user interface that includes a display prompting the third user to send a message. [Effects of Appendix 11] The display prompting users to send messages can help encourage elderly people to actively communicate with their grandchildren.

[0148] [Issues related to Appendix 12] One of the purposes of this disclosure is to realize a monitoring system that can control the level of detail of location information according to user attributes. [Note 12] In the system described in Appendix 1, the information disclosure control unit of the server provides detailed location information of the third user to the first terminal device and approximate location information of the third user to the second terminal device. [Effects of Appendix 12] By providing a general location to the second user, a balance can be achieved between privacy and monitoring needs.

[0149] [Issues related to Appendix 13] One of the purposes of this disclosure is to realize a monitoring system that can provide location information on a predetermined area basis. [Note 13] In the system described in Appendix 12, the approximate location information is location information represented in predetermined area units. [Effects of Appendix 13] Area-based location information allows for an approximate location to be determined without disclosing the precise location.

[0150] [Issues related to Appendix 14] One of the purposes of this disclosure is to realize a monitoring system that can monitor the involvement of a second user. [Note 14] The system described in Appendix 1 further comprises: a message management unit that records the transmission history of messages from the second user to the third user; and a notification control unit that, based on the transmission history, sends a notification to the first terminal device if the message has not been sent for a predetermined period of time. [Effects of Appendix 14] By monitoring the message sending history, it is possible to indirectly understand the involvement of second users and detect anomalies early.

[0151] [Issues related to Appendix 15] One of the purposes of this disclosure is to realize a monitoring system that provides phased notifications. [Note 15] In the system described in Appendix 14, the notification control unit sends a first notification if the message has not been sent for a first predetermined period, and sends a second notification of higher urgency than the first notification if the message has not been sent for a second predetermined period that is longer than the first predetermined period. [Effects of Appendix 15] Phased notifications can encourage appropriate responses depending on the situation.

[0152] [Issues related to Appendix 16] One of the purposes of this disclosure is to realize a monitoring system that has specific notification thresholds. [Note 16] A system in which the first predetermined period is 7 days and the second predetermined period is 14 days, as described in Appendix 15. [Effects of Appendix 16] The 7-day and 14-day thresholds allow for monitoring involvement at a moderate frequency.

[0153] [Issues related to Appendix 17] One of the purposes of this disclosure is to realize a monitoring system that can display a summary of the involvement status of a second user. [Note 17] In the system described in Appendix 14, the display control unit of the first terminal device displays summary information indicating the second user's involvement with the third user. [Effects of Appendix 17] Summary information allows the first user to quickly grasp the second user's level of involvement.

[0154] [Issues related to Appendix 18] One of the purposes of this disclosure is to realize a monitoring system that has a message input function. [Note 18] The system described in Appendix 14, wherein the second terminal device further comprises a message input unit that receives message input from the second user to the third user. [Effects of Appendix 18] The message input function allows a second user to communicate with a third user.

[0155] [Issues related to Appendix 19] One of the purposes of this disclosure is to realize a monitoring system that can send multiple types of messages. [Note 19] The system described in Appendix 18, wherein the message input unit accepts input of at least one of text messages, voice messages, or stamps. [Effects of Appendix 19] Multiple messaging options allow the second user to communicate in their preferred way.

[0156] [Issues related to Appendix 20] One of the purposes of this disclosure is to realize a monitoring system that has a message response function. [Note 20] The system described in Appendix 18, wherein the third terminal device further comprises a message output unit that receives and outputs a message transmitted from the second terminal device, and a response transmission unit that transmits a response to the second user. [Effects of Appendix 20] The response function enables feedback from a third user to a second user, facilitating two-way communication.

[0157] [Issues related to Appendix 21] One of the purposes of this disclosure is to realize a monitoring system that can detect entry into and exit from an area. [Note 21] The system described in Appendix 1, wherein the server further comprises an area monitoring unit that transmits a notification to at least one of the first terminal device and the second terminal device when it detects entry into or exit from a predetermined area from the third terminal device. [Effects of Appendix 21] Area monitoring allows for automatic notifications of a third user's movements to and from school or extracurricular activities.

[0158] [Issues related to Appendix 22] One of the purposes of this disclosure is to realize a monitoring system that can acquire location information using GPS. [Note 22] In the system described in Appendix 1, the location information transmission unit of the third terminal device acquires the location information using GPS. [Effects of Appendix 22] GPS allows for the acquisition of highly accurate location information.

[0159] [Issues related to Appendix 23] One of the purposes of this disclosure is to realize a monitoring system that can monitor the activity status of a second user. [Note 23] The system described in Appendix 1, wherein the server further comprises an operation history management unit that records the operation history of the second terminal device, determines the activity status of the second user based on the operation history, and sends a notification to the first terminal device if the activity status does not meet predetermined conditions. [Effects of Appendix 23] By monitoring activity status based on operation history, the safety of a second user can be confirmed through methods other than sending messages.

[0160] [Issues related to Appendix 24] One of the purposes of this disclosure is to realize an information processing device that can set different levels of information disclosure for multiple users. [Note 24] An information processing device comprising: a management unit that stores account information of a first user, a second user, and a third user, and location information of the second user and the third user in a storage unit; and an information disclosure control unit that provides the location information of the second user and the third user to the terminal device of the first user, and provides the location information of the third user to the terminal device of the second user. [Effects of Appendix 24] As a standalone server, it can implement information disclosure control based on user attributes.

[0161] [Issues related to Appendix 25] One of the purposes of this disclosure is to realize an information processing method that allows different levels of information disclosure to be set for multiple users. [Note 25] An information processing method comprising: a processor storing account information of a first user, a second user, and a third user, and location information of the second user and the third user in a storage unit; providing the location information of the second user and the third user to the terminal device of the first user; and providing the location information of the third user to the terminal device of the second user. [Effects of Appendix 25] As an information processing method, it is possible to implement information disclosure control based on user attributes.

[0162] [Issues related to Appendix 26] One of the purposes of this disclosure is to implement a program that displays information according to the user's account type. [Note 26] A program that causes the processor to execute the following processes: a process to determine the account type of the logged-in user; a process to receive location information of the second and third users from the server and display the location information of the second and third users on the display unit if the account type is the first user; and a process to receive location information of the third user from the server and display the location information of the third user on the display unit if the account type is the second user. [Effects of Appendix 26] As a program installed on the terminal device, it can implement display control according to the account type. [Explanation of Symbols]

[0163] 1. Monitoring System 10 servers 11 processors 12 memory 13. Storage (memory unit) 14. Communication Interface 101 Management Department 102 Information Disclosure Control Unit 103 Message Management Department 104 Notification Control Unit 105 Area Monitoring Department 106 Operation History Management Department 20. First Terminal Device 21 processors 22 memory 23 Storage 24 Communications Department 25 Display section 26 Input section 27 GPS receiver 28 speakers 29 Mike 201 Display Control Unit 202 Input Reception Section 203 Communication Control Unit 30 Second Terminal Device 31 processors 32 memory 33 Storage 34 Communications Department 35 Display section 36 Input section 37 GPS receiver 38 speakers 39 Mike 301 Display Control Unit 302 Message Input Section 303 Communication Control Unit 40 Third Terminal Device 41 processors 42 memory 43 Communications Department 44 GPS receiver 45 speakers 46 buttons 47 LED 48 Mike 401 Location Information Transmission Unit 402 Message Output Section 403 Response Transmission Unit 50 Networks

Claims

1. A system comprising a server, a first terminal device, a second terminal device, and a third terminal device, The aforementioned server, A management unit that stores account information of the first user, the second user, and the third user, and location information of the second user and the third user in a storage unit, An information disclosure control unit provides the location information of the second user and the third user to the first terminal device, and provides the location information of the third user to the second terminal device, Equipped with, The first terminal device includes a display control unit that displays the location information of the second user and the third user received from the server on the display unit. The second terminal device includes a display control unit that displays the location information of the third user received from the server on the display unit. The third terminal device includes a location information transmission unit that transmits the location information of the third user to the server. system.

2. In the system described in claim 1, The management unit of the server stores the family structure information registered by the first user and determines the attributes of the first user, the second user, and the third user based on the family structure information. system.

3. In the system described in claim 2, The aforementioned family structure information includes the relationship and age group of each user. The management unit sets up users of the parent generation as the first user, users of the grandparent generation as the second user, and users of the child generation as the third user, based on the relationship and age group. system.

4. In the system described in claim 2, The management unit of the server registers the accounts of the second user and the third user using the invitation code issued by the first user. system.

5. In the system described in claim 1, The first terminal device and the second terminal device are smartphones. The aforementioned third terminal device is a dedicated terminal having a location information transmission function. system.

6. In the system described in claim 5, The third terminal device is smaller and lighter than the smartphone and does not have a calling function. system.

7. In the system described in claim 1, The display control unit of the first terminal device and the display control unit of the second terminal device display different user interfaces. system.

8. In the system described in claim 7, The display control unit of the first terminal device displays location information for each of the second and third users in a manner that allows for the identification of user attributes. system.

9. In the system described in claim 7, The display control unit of the first terminal device displays the location history of the third user and the message history from the second user to the third user in a timeline format in chronological order. system.

10. In the system described in claim 9, The display control unit of the first terminal device displays the timeline-format display in a manner that allows identification of which user attribute each history item is related to. system.

11. In the system described in claim 7, The display control unit of the second terminal device displays a user interface that includes a display prompting the third user to send a message. system.

12. In the system described in claim 1, The information disclosure control unit of the server provides detailed location information of the third user to the first terminal device and approximate location information of the third user to the second terminal device. system.

13. In the system according to claim 12, The aforementioned approximate location information is location information represented in predetermined area units. system.

14. In the system described in claim 1, The aforementioned server, A message management unit that records the history of messages sent from the second user to the third user, A notification control unit that sends a notification to the first terminal device if the message has not been sent for a predetermined period of time based on the transmission history, Furthermore, system.

15. In the system described in claim 14, The notification control unit sends a first notification if the message has not been sent for a first predetermined period, and sends a second notification of higher urgency than the first notification if the message has not been sent for a second predetermined period that is longer than the first predetermined period. system.

16. In the system described in claim 15, The first predetermined period is 7 days, and the second predetermined period is 14 days. system.

17. In the system described in claim 14, The display control unit of the first terminal device displays summary information indicating the second user's involvement with the third user. system.

18. In the system described in claim 14, The second terminal device further includes a message input unit that receives a message input from the second user to the third user. system.

19. In the system according to claim 18, The message input unit accepts input of at least one of the following: text messages, voice messages, or stamps. system.

20. In the system according to claim 18, The device of the third terminal is A message output unit that receives and outputs a message transmitted from the second terminal device, A response transmission unit that transmits a response to the second user, Furthermore, system.

21. In the system described in claim 1, The server further includes an area monitoring unit that, when it detects entry into or exit from a predetermined area from the third terminal device, transmits a notification to at least one of the first terminal device and the second terminal device. system.

22. In the system described in claim 1, The location information transmission unit of the third terminal device acquires the location information using GPS. system.

23. In the system described in claim 1, The server further comprises an operation history management unit that records the operation history of the second terminal device, Based on the operation history, the activity status of the second user is determined, and if the activity status does not meet predetermined conditions, a notification is sent to the first terminal device. system.

24. A management unit that stores account information of the first user, the second user, and the third user, and location information of the second user and the third user in a storage unit, An information disclosure control unit provides the terminal device of the first user to the location information of the second user and the third user, and provides the terminal device of the second user to the location information of the third user, Equipped with, Information processing device.

25. The processor, The account information of the first user, the second user, and the third user, and the location information of the second user and the third user are stored in the storage unit. The terminal device of the first user is provided with the location information of the second user and the third user, and the terminal device of the second user is provided with the location information of the third user. Information processing methods.

26. In the processor, A process to determine the account type of the currently logged-in user. When the account type is the first user, the process involves receiving location information of the second and third users from the server and displaying the location information of the second and third users on the display unit. If the account type is the second user, the process involves receiving the location information of the third user from the server and displaying the location information of the third user on the display unit. A program that executes the command.

Images