Data management system for plumbing equipment

Abstract

To prevent the leakage of information obtained from plumbing fixtures. [Solution] The data management system for plumbing equipment comprises: a water supply means that supplies water to a water receiving means; an acquisition means that acquires at least one piece of information selected from a group including information required to identify a user of the water supply means or the water receiving means, information about the user's actions, information about the user's biological information, and information about the user's excretion; a storage means that stores the acquired data from the acquisition means; a transmission means that transmits the acquired data stored in the storage means to an external device; and a control means that controls the transmission by the transmission means, wherein the control means determines a transmission method that includes at least one of the communication timing, transmission path, and transmission method of the acquired data to the external device based on predetermined conditions.

Description

Technical Field

[0001] The disclosed embodiments relate to a data management system for plumbing equipment.

Background Art

[0002] Conventionally, various systems have been provided that perform processing using information detected by sensors in plumbing spaces such as toilets. For example, a technique has been proposed to adjust the flushing water volume of a toilet by controlling the flush to save water based on data from an odor sensor installed in the toilet and a camera that acquires visual images of excrement (see, for example, Patent Document 1).

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] However, there is room for improvement in the management of information obtained from plumbing equipment. For example, even if both intrusion prevention measures and data tampering prevention measures are implemented for the system, if the data itself is in a form that can be easily interpreted, there is a possibility that an attacker will achieve their goal.

[0005] An object of the disclosed embodiments is to provide a data management system for plumbing equipment that can suppress the outflow of information obtained from plumbing equipment.

Means for Solving the Problems

[0006] A data management system for plumbing equipment according to one embodiment comprises: a water supply means for supplying water to a water receiving means; an acquisition means for acquiring at least one piece of information selected from a group including information required to identify a user of the water supply means or the water receiving means, information about the user's actions, information about the user's biological information, and information about the user's excretion; a storage means for storing the acquired data from the acquisition means; a transmission means for transmitting the acquired data stored in the storage means to an external device; and a control means for controlling the transmission by the transmission means, wherein the control means determines a transmission method including at least one of the communication timing, transmission path, and transmission method of the acquired data to the external device based on predetermined conditions.

[0007] For example, in plumbing systems, the acquired user privacy data was not transmitted to external parties such as fraud sites, and the information was not fed back to the individuals from whom the data was collected. Such systems require high security against various external attacks in order to prevent data leakage. If security measures are insufficient, for example, if the system is easily infiltrated, there is a risk that data can be easily extracted. Furthermore, while the above conventional system collects stool information that can become vital information, the control of the flush is a function unrelated to individuals, and therefore does not require a highly secure system that takes privacy into consideration, making it difficult to ensure sufficient security.

[0008] According to a data management system for plumbing equipment in one embodiment, the timing, transmission path, or transmission method for transmitting privacy data to an external device is determined randomly or specifically based on predetermined conditions. This makes it possible to suppress the leakage of information obtained from plumbing equipment. Specifically, the data management system for plumbing equipment can determine the timing of transmitting privacy data to an external device randomly or at a specific timing. Furthermore, the data management system for plumbing equipment can randomly determine the output point from the plumbing system. In addition, the data management system for plumbing equipment can determine the transmission method to a specific communication method, thereby suppressing the use of unnecessary methods. As a result, the data management system for plumbing equipment can limit opportunities for external intrusion and keep privacy information confidential. For example, the data management system for plumbing equipment transmits privacy data related to user privacy, such as excretion, bathing, face washing, and tooth brushing, to an external device by selecting the communication method, communication path, and communication timing based on whether permission is granted. As a result, the data management system for plumbing equipment can improve security when transmitting privacy data. Therefore, the data management system for plumbing equipment can appropriately manage information related to human health.

[0009] In a data management system for plumbing equipment according to one embodiment, the transmission means has a function to transmit the acquired data to the external device using a plurality of transmission paths or a plurality of transmission methods, and the control means is characterized in that it determines at least one of the plurality of transmission paths or the plurality of transmission methods based on the predetermined conditions.

[0010] According to a data management system for plumbing equipment in one embodiment, when communicating with an external device, communication is performed by selecting from multiple communication methods or communication paths, rather than using a specific communication method or communication path. As a result, the data management system for plumbing equipment can reduce the possibility of intrusion by external attackers because the communication method or communication path is random. For example, the data management system for plumbing equipment can select the port and protocol to use for each transmission of acquired data. As a result, it becomes difficult for attackers to identify the port or protocol to target, and the data management system can improve security and appropriately manage information related to people's health.

[0011] In a data management system for plumbing equipment according to one embodiment, the transmission means has the function of transmitting the acquired data to the external device using a predetermined transmission path, and the control means is characterized in that it determines at least one of the communication timing or transmission method of the acquired data based on the predetermined conditions.

[0012] According to one embodiment of a data management system for plumbing equipment, when communicating with an external device, the method and timing of communication are appropriately changed. As a result, the data management system for plumbing equipment can reduce the possibility of intrusion by external attackers because the communication method and timing are random. For example, the data management system for plumbing equipment can change the transmission timing for each data transmission according to the content of the data to be transmitted. As a result, it becomes difficult for attackers to pinpoint the timing of an attack, and the data management system can improve security and appropriately manage information related to people's health.

[0013] In a data management system for plumbing equipment according to one embodiment, the acquired data is stored in the storage means together with information on the date and time of use of the water supply means or the water receiving means, and the system further comprises a data extraction means that converts the acquired data corresponding to a predetermined period or predetermined number of times from the storage means into a single transmission unit data, and the transmission means transmits the transmission unit data extracted by the data extraction means to the external device.

[0014] According to one embodiment of a data management system for plumbing equipment, when communicating with an external device, instead of sending data externally each time data is acquired, the acquired data is sent in batches based on a period or number of occurrences. This reduces the frequency of external communication for the plumbing equipment data management system, lowering the possibility of intrusion by external attackers. Furthermore, by sending data for multiple people in batches, the plumbing equipment data management system can speed up the timing for each user to check their data and improve the reliability of external transmission. For example, the plumbing equipment data management system can send a day's worth of data for a family to an external device in a batch. This reduces the timing of attacks by attackers, improves security, and allows for the proper management of information related to people's health.

[0015] In a data management system for plumbing equipment according to one embodiment, the acquisition means acquires data detected by one or more sensors provided in plumbing equipment having the water supply means and the water receiving means as acquisition data, and the transmission means transmits transmission data of a data array, which is formed by associating the acquisition data acquired by the acquisition means based on date and time information, to the external device.

[0016] According to one embodiment of the plumbing equipment data management system, instead of sending data to an external device each time data is acquired, a predetermined amount of data is sent in a batch with date and time information attached. This allows the plumbing equipment data management system to minimize the data structure and reduce the possibility of intrusion by external attackers. Furthermore, by sending the acquired data as a predetermined data sequence, the plumbing equipment data management system facilitates data use at the receiving end. For example, the plumbing equipment data management system can generate a data sequence by arranging acquired data from the same date and time in a predetermined order and send it to an external device. This allows the plumbing equipment data management system to limit the data structure to be sent, and also makes it easier for the external device to process the acquired data structure.

[0017] In a data management system for plumbing equipment according to one embodiment, the external device comprises a data structure determination means for determining a data structure based on the data arrangement, and a health information estimation means for estimating the user's health information, wherein the health information estimation means selects a model from a plurality of health information estimation models that corresponds to the data structure and estimates the user's health status.

[0018] According to a data management system for plumbing equipment in one embodiment, it is possible to select the optimal estimation model from acquired data without requesting additional information from the user. For example, an external device can determine a data structure that includes all the information used for estimating health information, and based on that data structure, the health status can be easily estimated.

[0019] A data management system for plumbing equipment according to one embodiment further comprises identification means for identifying the user of the water supply means or the water receiving means, the storage means stores the data acquired by the acquisition unit in association with the user identification result by the identification means, the control means has data generation means for generating transmission data linked to the user identification information corresponding to the acquired data, and the transmission means transmits the transmission data generated by the data generation means to the external device.

[0020] According to a data management system for plumbing equipment in one embodiment, when multiple people use a single piece of equipment in a plumbing space such as a toilet or bathroom, a dataset containing user identification information is transmitted. This makes it easier for the plumbing equipment data management system to manage information that requires personal identification, such as health information. For example, by automatically linking users with acquired data, the plumbing equipment data management system eliminates the need to later link acquired data with users.

[0021] In a data management system for plumbing equipment according to one embodiment, the transmission means is a communication device owned by the user, and the communication device constitutes at least a part of the control means.

[0022] According to one embodiment of the plumbing equipment data management system, data and users can be reliably linked by using a user communication device as a transmission means. Furthermore, the plumbing equipment data management system allows for arbitrary selection of the communication method and timing with the plumbing equipment, thereby improving security. In addition, since the communication device used by a specific individual has advanced computing and communication capabilities, external transmission can be carried out more securely. Here, the communication device can be a smartphone, smartwatch, smart ring, or tablet. [Effects of the Invention]

[0023] According to one aspect of the embodiment, the outflow of information obtained from water-related equipment can be suppressed.

Brief Explanation of Drawings

[0024] [Figure 1] Figure 1 is a diagram showing an overview of a data management system according to the first embodiment. [Figure 2] Figure 2 is a block diagram of a data management device. [Figure 3] Figure 3 is a diagram showing an example of communication method permission data. [Figure 4] Figure 4 is a diagram showing an example of communication path permission data. [Figure 5] Figure 5 is a diagram showing an example of communication partner permission data. [Figure 6] Figure 6 is a diagram showing an example of communication timing permission data. [Figure 7] Figure 7 is a flowchart of communication method determination processing. [Figure 8] Figure 8 is a flowchart of communication path selection processing. [Figure 9] Figure 9 is a flowchart of communication partner permission processing. [Figure 10] Figure 10 is a flowchart of communication timing permission processing. [Figure 11] Figure 11 is a flowchart of transmission processing of acquired data. [Figure 12] Figure 12 is a diagram showing an overview of a data management system according to the second embodiment. [Figure 13] Figure 13 is a block diagram of a data management device according to the third embodiment. [Figure 14] Figure 14 is a diagram showing an example of a user identification button. [Figure 15] Figure 15 is a flowchart of an example of user registration processing used for user identification. [Figure 16] Figure 16 is a flowchart of an example of user identification processing. [Figure 17]Figure 17 is a flowchart of the conversion process for provisional user identification information. [Figure 18] Figure 18 shows an example of acquired data according to the third embodiment. [Figure 19] Figure 19 shows an example where the transmission method is different for each user ID. [Figure 20] Figure 20 shows an example of data transmission using a user ID that makes it difficult to identify the user. [Figure 21] Figure 21 is a block diagram of the data management device according to the fourth embodiment. [Figure 22] Figure 22 shows an example of transmission unit data. [Figure 23] Figure 23 shows an example of splitting and transmitting acquired data. [Figure 24] Figure 24 is a diagram showing an overview of the data management system according to the fifth embodiment. [Modes for carrying out the invention]

[0025] The embodiments of the data management system for plumbing fixtures disclosed herein will be described in detail below with reference to the attached drawings. However, the present invention is not limited to the embodiments described below. Each embodiment can be combined as appropriate within a non-consistent range.

[0026] <1. First Embodiment> <1-1. Structure> The configuration and processing examples of the system according to the first embodiment will be described with reference to Figure 1. Figure 1 is a diagram showing an overview of the data management system according to the first embodiment. The data management system 1 shown in Figure 1 includes a data management device 10, a cloud server 20, plumbing equipment 30, and a terminal device 40.

[0027] (Plumbing fixtures) The plumbing equipment 30 is a concept that includes equipment related to plumbing and the functions they have (are installed in). Plumbing equipment 30 includes various equipment and functions installed in a plumbing space. For example, plumbing equipment 30 includes toilets, urinals, bathrooms, bathtubs, washbasins, and other equipment related to sanitary spaces, as well as various plumbing devices such as kitchens. For example, plumbing equipment 30 includes toilet equipment 31, bathroom equipment 33, kitchen equipment 35, and washbasin equipment 37.

[0028] (toilet) A toilet is a type of bathroom used by users for excretion, and is an example of a water-related space where usage data, including excretion data, biometric data, and log data related to excretion, is collected. The toilet is equipped with a toilet device 31 and a toilet sensor 32, etc. Multiple toilet devices 31 and multiple toilet sensors 32 may be installed in the toilet.

[0029] The toilet device 31 includes a so-called toilet bowl equipped with a nozzle 311 and a washing mechanism 312, as well as a remote control device, etc., and is a device used by toilet users for the act of defecation. For example, if the toilet device 31 has a waste detection function, it may be equipped with a toilet sensor 32, which is a waste sensor used for the waste detection function. For example, if the toilet device 31 has a gas detection function, it may be equipped with a toilet sensor 32, which is a gas sensor used for the gas detection function.

[0030] The toilet device 31 can communicate with other devices such as the data management device 10 via a communication unit implemented by a communication device or communication circuit. The toilet device 31 is connected via a predetermined wireless communication function such as Wi-Fi (Wireless Fidelity) (registered trademark) or Bluetooth (Bluetooth Low Energy) (registered trademark), or via a wired connection, and transmits and receives information with other devices.

[0031] The toilet device 31 is an example of a plumbing fixture 30 that is connected to the data management device 10 via a predetermined network. For example, the toilet device 31 sends and receives information to and from the data management device 10 via the predetermined network. For example, the toilet device 31 transmits usage data related to toilet use to the data management device 10.

[0032] For example, the toilet device 31 transmits usage data such as excretion data, biometric data, and log data to the data management device 10. The toilet device 31 may also transmit the usage data to the data management device 10 along with the date and time information on when the usage data was acquired. The toilet device 31 may also transmit usage data corresponding to a request from the data management device 10 to the data management device 10 in response to a request from the data management device 10.

[0033] Furthermore, the toilet device 31 collects usage data for each user of the plumbing equipment who uses the toilet. The toilet device 31 may also have a function to authenticate (identify) the user who uses the toilet. The toilet device 31 may use an account identifier (user ID, etc.) received from a remote control device or the like that receives toilet-related operations from the plumbing equipment user to identify which of the registered users the user is. For example, the toilet device 31 associates the collected usage data with the date and time the usage data was acquired and an account identifier that identifies the user corresponding to the usage data, and transmits it to the data management device 10. In this case, if the toilet device 31 receives a user designation from the data management device 10, it may transmit the usage data corresponding to that user to the data management device 10.

[0034] The toilet sensor 32 is a sensor device that detects the use of the toilet by a user. For example, the toilet sensor 32 may be a sensor device mounted on the toilet device 31. For example, the toilet sensor 32 may be a sensor device that detects (receives) the operation of the nozzle 311 or the flushing mechanism 312 of the toilet device 31. In addition, for example, the toilet sensor 32 may be a stool sensor used for a stool detection function. For example, the toilet sensor 32 may be a gas sensor used for a gas detection function. For example, the toilet sensor 32 may be a radio wave sensor used for a function that detects the amount of stool or urine excreted by a user.

[0035] For example, the toilet sensor 32 may be a sensor device such as a sensor that detects the use of the toilet equipment 31. For example, the toilet sensor 32 may be a sensor device such as a sensor that detects when a user enters or leaves the toilet. For example, the toilet sensor 32 may be a sensor device such as a sensor that detects the duration of use of the toilet equipment 31 by a user. For example, the toilet sensor 32 may be a sensor device such as a seating sensor that detects when someone sits on the toilet seat of the toilet equipment 31. Note that the above are merely examples, and the toilet sensor 32 may be a sensor device such as a sensor device provided separately from the toilet equipment 31. For example, the toilet sensor 32 may be a sensor device such as a pyroelectric sensor using infrared signals or a μ (microwave) sensor (such as a motion sensor).

[0036] The toilet sensor 32 can communicate with other devices such as the data management device 10 via a communication unit implemented by a communication device, communication circuit, etc. The toilet sensor 32 is connected via a predetermined wireless communication function such as Wi-Fi or Bluetooth such as BLE, or via a wired connection, and transmits and receives information with other devices.

[0037] The toilet sensor 32 is an example of a plumbing device 30 that is connected to the data management device 10 via a predetermined network. For example, the toilet sensor 32 sends and receives information to and from the data management device 10 via the predetermined network. For example, the toilet sensor 32 transmits usage data related to toilet use to the data management device 10.

[0038] For example, the toilet sensor 32 transmits usage data such as excretion data, biometric data, and log data to the data management device 10. The toilet sensor 32 may also transmit the usage data to the data management device 10 along with the date and time information on when the usage data was acquired. The toilet sensor 32 may also transmit usage data corresponding to a request from the data management device 10 to the data management device 10 in response to a request from the data management device 10.

[0039] Furthermore, the toilet sensor 32 collects usage data for each user of the plumbing equipment. The toilet sensor 32 may have a storage means (storage device, etc.) for managing (registering) usage data for each user of the plumbing equipment. The toilet sensor 32 may have a function for authenticating (identifying) users who use the toilet. The toilet sensor 32 may use an account identifier (user ID, etc.) received from a remote control device, etc., that receives operations related to the toilet by the user of the plumbing equipment using the toilet to identify which of the registered users that user is. For example, the toilet sensor 32 associates the collected usage data with the date and time the usage data was acquired and an account identifier that identifies the user corresponding to the usage data, and transmits it to the data management device 10. In this case, if the toilet sensor 32 receives a user designation from the data management device 10, it may transmit usage data corresponding to that user to the data management device 10.

[0040] (bathroom) The bathroom is configured for use by users to perform bathing activities and is an example of a water-related space where usage data, including biometric data, bathing time, and bathing temperature log data, is collected. The bathroom is equipped with a bathroom device 33 and a bathroom sensor 34, etc. Multiple bathroom devices 33 and multiple bathroom sensors 34 may be placed in the bathroom.

[0041] The bathroom equipment 33 includes a shoulder bath 331 and lighting 332, etc. In addition, the bathroom equipment 33 includes a bathtub and shower, etc., and is an example of plumbing equipment 30 used by bathroom users for bathing. For example, if the bathroom equipment 33 has a bathroom temperature detection function, it may be equipped with a bathroom sensor 34, which is a temperature sensor used for the bathroom temperature detection function. For example, if the bathroom equipment 33 has a faucet water temperature detection function, it may be equipped with a bathroom sensor 34, which is a temperature sensor used for the faucet water temperature detection function.

[0042] The bathroom device 33 can communicate with other devices such as the data management device 10 via a communication unit implemented by a communication device, communication circuit, etc. The bathroom device 33 is connected via a predetermined wireless communication function such as Wi-Fi or Bluetooth such as BLE, or via a wired connection, and transmits and receives information with other devices.

[0043] Bathroom device 33 is an example of plumbing equipment 30 that is communicatively connected to data management device 10 via a predetermined network. For example, bathroom device 33 sends and receives information to and from data management device 10 via the predetermined network. For example, bathroom device 33 transmits usage data related to bathroom use to data management device 10.

[0044] For example, the bathroom device 33 transmits usage data such as biometric data and log data to the data management device 10. The bathroom device 33 may transmit the usage data to the data management device 10 along with the date and time information on when the usage data was acquired. The bathroom device 33 may also transmit usage data corresponding to a request from the data management device 10 to the data management device 10 in response to a request from the data management device 10.

[0045] Furthermore, the bathroom device 33 collects usage data for each user of the plumbing equipment. The bathroom device 33 may also have a function to authenticate (identify) the user using the bathroom. The bathroom device 33 may use an account identifier (user ID, etc.) received from a remote control device or the like that accepts operations related to the bathroom by the user of the plumbing equipment using the bathroom to identify which of the registered users the user is. For example, the bathroom device 33 associates the collected usage data with the date and time the usage data was acquired and an account identifier that identifies the user corresponding to the usage data, and transmits it to the data management device 10. In this case, if the bathroom device 33 receives a user designation from the data management device 10, it may transmit the usage data corresponding to that user to the data management device 10.

[0046] The bathroom sensor 34 is a sensor device that detects the user's use of the bathroom. For example, the bathroom sensor 34 may be a sensor device mounted on the bathroom device 33. For example, the bathroom sensor 34 may be a sensor device used for the motion detection function of the shoulder bath 331. For example, the bathroom sensor 34 may be a temperature sensor used for the bathroom temperature detection function. For example, the bathroom sensor 34 may be a temperature sensor used for the faucet water temperature detection function.

[0047] For example, the bathroom sensor 34 may be a sensor device such as a sensor that detects the use of the bathroom equipment 33. For example, the bathroom sensor 34 may be a sensor device that detects the turning on and off of the lighting 332. For example, the bathroom sensor 34 may be a sensor device such as a sensor that detects when a user enters or leaves the bathroom. For example, the bathroom sensor 34 may be a sensor device such as a sensor that detects the amount of time a user spends in the bathroom. For example, the bathroom sensor 34 may be a sensor device such as a motion sensor that detects when someone enters the bathroom equipment 33. Note that the above are merely examples, and the bathroom sensor 34 may be a sensor device such as a sensor device provided separately from the bathroom equipment 33. For example, the bathroom sensor 34 may be a sensor device such as a pyroelectric sensor using infrared signals or a μ (microwave) sensor (motion sensor, etc.).

[0048] The bathroom sensor 34 can communicate with other devices such as the data management device 10 via a communication unit implemented by a communication device, communication circuit, etc. The bathroom sensor 34 is connected via a predetermined wireless communication function such as Wi-Fi or Bluetooth such as BLE, or via a wired connection, and transmits and receives information with other devices.

[0049] The bathroom sensor 34 is an example of a plumbing fixture 30 that is connected to the data management device 10 via a predetermined network. For example, the bathroom sensor 34 transmits and receives information to and from the data management device 10 via the predetermined network. For example, the bathroom sensor 34 transmits usage data related to the use of the bathroom to the data management device 10.

[0050] For example, the bathroom sensor 34 transmits usage data such as biometric data and log data to the data management device 10. The bathroom sensor 34 may also transmit the usage data to the data management device 10 along with the date and time information on when the usage data was acquired. The bathroom sensor 34 may also transmit usage data corresponding to a request from the data management device 10 to the data management device 10 in response to a request from the data management device 10.

[0051] Furthermore, the bathroom sensor 34 collects usage data for each user of plumbing fixtures. The bathroom sensor 34 may have a storage means (such as a storage device) for managing (registering) usage data for each user of plumbing fixtures. The bathroom sensor 34 may also have a function for authenticating (identifying) users of plumbing fixtures who use the bathroom. The bathroom sensor 34 may use an account identifier (such as a user ID) received from a remote control device or the like that accepts operations related to the bathroom by the user of the plumbing fixtures to identify which of the registered users the user is. For example, the bathroom sensor 34 associates the collected usage data with the date and time the usage data was acquired and an account identifier that identifies the user corresponding to the usage data, and transmits it to the data management device 10. In this case, if the bathroom sensor 34 receives a user designation from the data management device 10, it may transmit the usage data corresponding to that user to the data management device 10.

[0052] (kitchen) The kitchen is configured for use by kitchen users for cooking and is an example of a water-related space where usage data, including biometric data, cooking time, and log data such as heat settings, is collected. The kitchen is equipped with kitchen devices 35 having a water dispensing mechanism 351, etc., and kitchen sensors 36, etc. Multiple kitchen devices 35 and multiple kitchen sensors 36 may be arranged in the kitchen.

[0053] The kitchen appliance 35 is an example of plumbing equipment 30 used by kitchen users for cooking, including a water dispensing mechanism 351 and a sink. For example, if the kitchen appliance 35 has a water temperature sensing function for the water dispensing mechanism 351, it may be equipped with a kitchen sensor 36, which is a temperature sensor used for the water temperature sensing function of the water dispensing mechanism 351.

[0054] The kitchen device 35 can communicate with other devices such as the data management device 10 via a communication unit implemented by a communication device, communication circuit, etc. The kitchen device 35 is connected via a predetermined wireless communication function such as Wi-Fi or Bluetooth such as BLE, or via a wired connection, and transmits and receives information with other devices.

[0055] Kitchen equipment 35 is an example of plumbing equipment 30 that is communicatively connected to data management device 10 via a predetermined network. For example, kitchen equipment 35 sends and receives information to and from data management device 10 via the predetermined network. For example, kitchen equipment 35 transmits usage data related to kitchen use to data management device 10.

[0056] For example, the kitchen device 35 transmits usage data such as biometric data and log data to the data management device 10. The kitchen device 35 may transmit the usage data to the data management device 10 along with the date and time information on when the usage data was acquired. The kitchen device 35 may also transmit usage data corresponding to a request from the data management device 10 to the data management device 10 in response to a request from the data management device 10.

[0057] Furthermore, the kitchen device 35 collects usage data for each user of the plumbing equipment. The kitchen device 35 may also have a function to authenticate (identify) users who use the kitchen. The kitchen device 35 may use an account identifier (user ID, etc.) received from a remote control device or the like that accepts operations related to the kitchen by the user of the plumbing equipment using the kitchen to identify which of the registered users that user is. For example, the kitchen device 35 associates the collected usage data with the date and time the usage data was acquired and an account identifier that identifies the user corresponding to the usage data, and transmits it to the data management device 10. In this case, if the kitchen device 35 receives a user designation from the data management device 10, it may transmit the usage data corresponding to that user to the data management device 10.

[0058] The kitchen sensor 36 is a sensor device that detects the user's use of the kitchen. For example, the kitchen sensor 36 may be a sensor device mounted on the kitchen appliance 35. For example, the kitchen sensor 36 may be a sensor device used for the water temperature detection function of the water dispensing mechanism 351 of the kitchen appliance 35.

[0059] For example, the kitchen sensor 36 may be a sensor device such as a sensor that detects the use of the kitchen appliance 35. For example, the kitchen sensor 36 may be a sensor device such as a sensor that detects when a user enters or leaves the kitchen. For example, the kitchen sensor 36 may be a sensor device such as a sensor that detects the amount of time a user spends using the kitchen. For example, the kitchen sensor 36 may be a sensor device such as a motion sensor that detects kitchen use of the kitchen appliance 35. Note that the above are merely examples, and the kitchen sensor 36 may be a sensor device such as a sensor device provided separately from the kitchen appliance 35. For example, the kitchen sensor 36 may be a sensor device such as a pyroelectric sensor using infrared signals or a μ (microwave) sensor (motion sensor, etc.).

[0060] The kitchen sensor 36 can communicate with other devices such as the data management device 10 via a communication unit implemented by a communication device, communication circuit, etc. The kitchen sensor 36 is connected via a predetermined wireless communication function such as Wi-Fi or Bluetooth such as BLE, or via a wired connection, and transmits and receives information with other devices.

[0061] The kitchen sensor 36 is an example of a plumbing fixture 30 that is connected to the data management device 10 via a predetermined network. For example, the kitchen sensor 36 sends and receives information to and from the data management device 10 via the predetermined network. For example, the kitchen sensor 36 transmits usage data related to kitchen use to the data management device 10.

[0062] For example, the kitchen sensor 36 transmits usage data such as biometric data and log data to the data management device 10. The kitchen sensor 36 may also transmit the usage data to the data management device 10 along with the date and time information on when the usage data was acquired. The kitchen sensor 36 may also transmit usage data corresponding to a request from the data management device 10 to the data management device 10 in response to a request from the data management device 10.

[0063] Furthermore, the kitchen sensor 36 collects usage data for each user of the plumbing fixtures. The kitchen sensor 36 may have a storage means (such as a memory device) for managing (registering) usage data for each user of the plumbing fixtures. The kitchen sensor 36 may also have a function for authenticating (identifying) users of the plumbing fixtures that use the kitchen. The kitchen sensor 36 may use an account identifier (such as a user ID) received from a remote control device or the like that accepts operations related to the kitchen by the user of the plumbing fixtures to identify which of the registered users the user is. For example, the kitchen sensor 36 associates the collected usage data with the date and time the usage data was acquired and an account identifier that identifies the user corresponding to the usage data, and transmits it to the data management device 10. In this case, if the kitchen sensor 36 receives a user designation from the data management device 10, it may transmit the usage data corresponding to that user to the data management device 10.

[0064] (Washbasin) A washbasin is configured for use by users to perform washbasin-related activities, and is an example of a water-related space where usage data, including biometric data and log data such as washbasin usage time, is collected. The washbasin is equipped with a washbasin device 37 having a water dispensing mechanism 371, and a washbasin sensor 38, etc. Multiple washbasin devices 37 and multiple washbasin sensors 38 may be arranged on the washbasin.

[0065] The washbasin device 37 includes a washbasin, a smart mirror, and the like, including a water dispensing mechanism 371, and is a device used by the user of the washbasin to perform the act of using the washbasin. For example, if the washbasin device 37 has a function to detect the user's facial expression, it may be equipped with a washbasin sensor 38, which is an image sensor used for the function to detect the user's facial expression. For example, if the washbasin device 37 has a function to detect the blood flow of the user's face, it may be equipped with a washbasin sensor 38, which is a blood flow sensor used for the function to detect the blood flow of the user's face.

[0066] The washbasin unit 37 can communicate with other devices such as the data management device 10 via a communication unit implemented by a communication device, communication circuit, etc. The washbasin unit 37 is connected via a predetermined wireless communication function such as Wi-Fi or Bluetooth such as BLE, or via a wired connection, and transmits and receives information with other devices.

[0067] The washbasin unit 37 is an example of a plumbing fixture 30 that is connected to the data management device 10 via a predetermined network. For example, the washbasin unit 37 sends and receives information to and from the data management device 10 via the predetermined network. For example, the washbasin unit 37 transmits usage data related to the use of the washbasin to the data management device 10.

[0068] For example, the washbasin device 37 transmits usage data such as biometric data and log data to the data management device 10. The washbasin device 37 may transmit the usage data to the data management device 10 along with the date and time information on when the usage data was acquired. The washbasin device 37 may also transmit usage data corresponding to a request from the data management device 10 to the data management device 10 in response to a request from the data management device 10.

[0069] Furthermore, the washbasin device 37 collects usage data for each user of the plumbing equipment. The washbasin device 37 may also have a function to authenticate (identify) the user using the washbasin. The washbasin device 37 may use an account identifier (user ID, etc.) received from a remote control device or the like that accepts operations related to the washbasin by the user of the plumbing equipment using the washbasin to identify which of the registered users the user is. For example, the washbasin device 37 associates the collected usage data with the date and time the usage data was acquired and an account identifier that identifies the user corresponding to the usage data, and transmits it to the data management device 10. In this case, if the washbasin device 37 receives a user designation from the data management device 10, it may transmit the usage data corresponding to that user to the data management device 10.

[0070] The washbasin sensor 38 is a sensor device that detects the user's use of the washbasin. For example, the washbasin sensor 38 may be a sensor device mounted on the washbasin unit 37. For example, the washbasin sensor 38 may be an image sensor used for detecting the user's facial expressions. For example, the washbasin sensor 38 may be a blood flow sensor used for detecting the blood circulation in the user's face.

[0071] For example, the washbasin sensor 38 may be a sensor device such as a sensor that detects the use of the washbasin unit 37. For example, the washbasin sensor 38 may be a sensor device such as a sensor that detects when a user enters or leaves the washbasin. For example, the washbasin sensor 38 may be a sensor device such as a sensor that detects the duration of a user's use of the washbasin. For example, the washbasin sensor 38 may be a sensor device such as a motion sensor that detects the use of the washbasin unit 37. Note that the above are merely examples, and the washbasin sensor 38 may be a sensor device such as a sensor device provided separately from the washbasin unit 37. For example, the washbasin sensor 38 may be a sensor device such as a pyroelectric sensor using infrared signals or a μ (microwave) sensor (motion sensor, etc.).

[0072] The sink sensor 38 can communicate with other devices such as the data management device 10 via a communication unit implemented by a communication device, communication circuit, etc. The sink sensor 38 is connected via a predetermined wireless communication function such as Wi-Fi or Bluetooth such as BLE, or via a wired connection, and transmits and receives information with other devices.

[0073] The sink sensor 38 is an example of a plumbing fixture 30 that is connected to a data management device 10 via a predetermined network. For example, the sink sensor 38 sends and receives information to and from the data management device 10 via the predetermined network. For example, the sink sensor 38 transmits usage data related to the use of the bathroom to the data management device 10.

[0074] For example, the sink sensor 38 transmits usage data such as biometric data and log data to the data management device 10. The sink sensor 38 may also transmit the usage data to the data management device 10 along with the date and time information on when the usage data was acquired. The sink sensor 38 may also transmit usage data corresponding to a request from the data management device 10 to the data management device 10 in response to a request from the data management device 10.

[0075] Furthermore, the washbasin sensor 38 collects usage data for each user of the plumbing equipment. The washbasin sensor 38 may have a storage means (storage device, etc.) for managing (registering) usage data for each user of the plumbing equipment. The washbasin sensor 38 may have a function for authenticating (identifying) users of the plumbing equipment that use the washbasin. The washbasin sensor 38 may use an account identifier (user ID, etc.) received from a remote control device, etc., that receives operations related to the washbasin by the user of the plumbing equipment, to identify which of the registered users that the user is. For example, the washbasin sensor 38 associates the collected usage data with the date and time the usage data was acquired and an account identifier that identifies the user corresponding to the usage data, and transmits it to the data management device 10. In this case, if the washbasin sensor 38 receives a user designation from the data management device 10, it may transmit the usage data corresponding to that user to the data management device 10.

[0076] The plumbing fixtures 30, such as the toilet fixture 31, bathroom fixture 33, kitchen fixture 35, and washbasin fixture 37, all have a water receiving means and a water supply means that supplies water to the water receiving means.

[0077] In the following, when describing water-related spaces such as toilets, bathrooms, and washbasins without distinction, they may be referred to simply as "water-related spaces." Furthermore, when describing toilet equipment 31, bathroom equipment 33, kitchen equipment 35, and washbasin equipment 37, as well as toilet sensors 32, bathroom sensors 34, kitchen sensors 36, and washbasin sensors 38, etc., without distinction, they may simply be referred to as "water-related equipment 30."

[0078] As described above, the plumbing equipment 30 transmits usage data to the data management device 10. The plumbing equipment 30 may also transmit information (raw sensor data, etc.) detected (acquired) by the toilet sensor 32, bathroom sensor 34, kitchen sensor 36, and washbasin sensor 38, etc., to the cloud server 100 as usage data. Furthermore, the plumbing equipment 30 may process the information detected (acquired) by the functional device 202 and transmit the processed data to the data management device 10 as usage data.

[0079] (Cloud Server) The cloud server 20 can send and receive information with the data management device 10 and other devices via a predetermined network such as the Internet. The cloud server 20 receives and stores the acquired data from the plumbing equipment 30 obtained by the data management device 10. The cloud server 20 then creates feedback information based on the acquired data and provides this feedback information to the users of the plumbing equipment 30. This feedback information is used, for example, for managing the user's health.

[0080] Although Figure 1 shows a single cloud server 20, there may be multiple cloud servers 20, with each cloud server 20 having a distributed function, and each function being executed by a different cloud server 20, with the multiple cloud servers 20 collectively executing the desired function. For example, the cloud server 20 sends data corresponding to the request from the data management device 10 to the data management device 10 in response to a request from the data management device 10.

[0081] (Terminal device) The terminal device 40 can send and receive information with the data management device 10, etc., via a predetermined network such as the Internet. The terminal device 40 can receive and store acquired data from the data management device 10 that the data management device 10 has acquired from the plumbing equipment 30. In addition, the terminal device 40 can display information about the user transmitted from the data management device 10. Although Figure 1 shows one terminal device 40, there may be multiple terminal devices 40. For example, each user of the plumbing equipment 30 may have a different terminal device 40.

[0082] The cloud server 20 and terminal device 40 are located outside the data management device 10 and communicate with the data management device 10, and are examples of "external devices".

[0083] (Data management device) The data management device 10 is an electronic device located in the same bathroom space as the plumbing fixtures 30, possessing communication capabilities and coordinating with the plumbing fixtures 30. For example, the data management device 10 is an information processing device (computer), such as a server, that provides data, including acquired data obtained from the plumbing fixtures 30, to the cloud server 20. The data management device 10 is an edge device located at the boundary with the internet. The data management device 10 may also be integrated with the plumbing fixtures 30.

[0084] The data management device 10 transmits and receives data with the plumbing equipment 30 via a wireless network such as BLE or Wi-Fi, or via a wired network. The data management device 10 also transmits and receives data with a cloud server 20 or the like via a predetermined network such as the Internet.

[0085] For example, the data management device 10 acquires and stores data from the plumbing equipment 30, including user privacy data such as excretion, bathing, cooking, and washing. The data management device 10 then determines whether to permit communication, selects the communication path and method, and transmits the provided data, including the acquired data, to the cloud server 20. The provided data is not limited to data such as excretion, bathing, cooking, and washing, but may include various other types of data. For example, the acquired data may include various user-related data such as the user's weight, height, and body fat percentage.

[0086] The above is merely an example, and the data management system 1 can employ any device configuration as long as it can achieve the desired processing. For example, the cloud server 20 may receive data detected by the plumbing equipment 30 via the terminal device 40. For example, the cloud server 20 may receive data detected by the plumbing equipment 30 regarding a user via the user's terminal device 40. In this case, the terminal device 40 may be connected to the plumbing equipment 30 via a predetermined network to enable communication, and may send and receive information with the plumbing equipment 30. Alternatively, the terminal device 40 may be connected to the data management device 10 via a predetermined network to enable communication, and may send and receive information with the data management device 10. Any communication method can be adopted, and the terminal device 40 may communicate with the plumbing equipment 30 and the data management device 10 using a predetermined wireless communication function such as Bluetooth or Wi-Fi.

[0087] (Configuration of the data management device) Figure 2 is a block diagram of the data management device. Next, the details of the data management device 10 will be explained with reference to Figure 2. The data management device 10 also sends data other than acquired data as provided data to external devices such as the cloud server 20, but here we will explain the transmission of provided data.

[0088] As shown in Figure 2, the data management device 10 includes a communication unit 11, a control unit 13, and a storage unit 15. The data management device 10 may also include input devices such as a keyboard or mouse for receiving various operations from users or administrators, and display devices such as a liquid crystal display for displaying various information.

[0089] The communication unit 11 is implemented, for example, by a communication circuit. The communication unit 11 is connected to a predetermined network, such as the Internet, by wire or wireless connection, and transmits and receives information with an external information processing device. For example, the communication unit 11 transmits and receives information with other devices having communication functions, such as a cloud server 20, plumbing equipment 30, and terminal device 40, via a predetermined network such as the Internet.

[0090] The communication unit 11 has communication paths 111 to 116 for communicating with external devices such as the cloud server 20 and terminal devices 40. The communication unit 11 can communicate with external devices such as the cloud server 20 and terminal devices 40, but the following explanation will use the case of communication with the cloud server 20 as an example. Communication paths 111 to 116 correspond to different ports, for example. In addition, communication paths 111 to 116 can also differ depending on the routing method and whether or not a proxy is used. Furthermore, communication paths 111 to 116 may include information that identifies the destination device.

[0091] Communication paths 111-116 have different paths through which the transmitted data travels, but all connect to the cloud server 20. Here, communication paths 111-116 are just examples, and there is no particular limit to the number of paths that can be used.

[0092] Furthermore, in this embodiment, available communication methods are assigned to communication paths 111 to 116. The communication method differs depending on the protocol used, for example. The communication method may also be assigned according to the ports used by communication paths 111 to 116. For example, the first communication method P1 is available for communication paths 111 and 112. The second communication method P2 is available for communication paths 113 and 114. The third communication method P3 is available for communication paths 115 and 116.

[0093] The communication unit 11 is an example of a "transmission means." The transmission means can transmit acquired data stored in the acquired data storage unit 151, which is an example of a storage means, to an external device. Furthermore, the communication paths 111 to 116 are examples of "transmission paths," and the first communication method P1, the second communication method P2, and the third communication method P3 are examples of "transmission methods." In other words, the transmission means has the function of transmitting the acquired data to an external device, such as a cloud server 20 or a terminal device 40, using multiple transmission paths or multiple transmission methods. The transmission means also has the function of transmitting the acquired data to the external device using a predetermined transmission path.

[0094] The storage unit 15 is implemented by, for example, a semiconductor memory element such as RAM (Random Access Memory) or flash memory, or a storage device such as a hard disk or optical disc. For example, the storage unit 15 is a computer-readable recording medium that non-temporarily records data used by a data management program.

[0095] As shown in Figure 2, the storage unit 15 according to this embodiment includes an acquired data storage unit 151, a communication method permission data storage unit 152, a communication path permission data storage unit 153, a communication partner permission data storage unit 154, and a communication timing permission data storage unit 155.

[0096] The acquired data storage unit 151 stores various data used by the data management device 10 for processing. The acquired data storage unit 151 is an example of a "storage means." The storage means stores the acquired data from the acquisition unit 131, which is an acquisition means.

[0097] The acquired data storage unit 151 stores acquired data, for example, user privacy data such as excretion, bathing, cooking, and washing, sent from the water-related equipment 30 to users of the water-related space. The acquired data storage unit 151 can store each acquired data item in association with the date and time information of when it was acquired.

[0098] For example, the acquired data storage unit 151 stores toilet sensor data acquired by the toilet device 31 and the toilet sensor 32. For example, the acquired data storage unit 151 stores toilet sensor data including gas data, stool data, urine data, biological data, etc., detected by the toilet device 31 or the toilet sensor 32. For example, the acquired data storage unit 151 stores gas data including data for one of various gases such as odorless gas and malodorous gas, and stool data including data for at least one of the following: amount, shape, and color of stool.

[0099] Thus, the acquired data storage unit 151 may include data such as the shape of the stool, the color of the stool, the amount of stool, the amount of odorless gas, the amount of malodorous gas, the color of the urine, the amount of urine, the flow rate of urine, and the components of urine. For example, various types of data such as the shape of the stool, the color of the stool, the amount of stool, the amount of odorless gas, the amount of malodorous gas, the color of the urine, the amount of urine, the flow rate of urine, and the components of urine may be generated by the toilet sensor 32 or by the data management device 10 through analysis processing. For example, data such as the shape of the stool, the color of the stool, the amount of stool, the color of the urine, the amount of urine, the flow rate of urine, and the components of urine may be generated based on images of stool or urine. An example of the shape of the stool will be explained in this regard. The data management device 10 may determine the shape of the stool using AI (Artifact Intelligence) technology. For example, the data management device 10 may determine the shape of the stool using a shape determination model, which is a machine learning model generated by machine learning. In addition, the acquired data storage unit 151 may store user operation information related to the use of the toilet device 31.

[0100] The acquired data storage unit 151 stores various water-related sensor data in addition to toilet sensor data. For example, the acquired data storage unit 151 stores bathroom sensor data, including user movement information and user biometric information detected by the bathroom device 33 and bathroom sensor 34. The acquired data storage unit 151 also stores kitchen sensor data, including user movement information and user biometric information detected by the kitchen device 35 and kitchen sensor 36. The data storage unit 121 also stores washbasin sensor data, including user movement information and user biometric information detected by the washbasin device 37 and washbasin sensor 38. This user movement information, user biometric information, and user excretion information can be used to identify the user.

[0101] For example, the acquired data storage unit 151 may store the analysis results obtained by analyzing data detected by the bathroom device 33 and bathroom sensor 34, the kitchen device 35 and kitchen sensor 36, and the washbasin device 37 and washbasin sensor 38 as water-related sensor data.

[0102] The acquired data storage unit 151 is not limited to the above and may store various types of information depending on the purpose. For example, if there are multiple users, the acquired data storage unit 151 can store information that identifies a user (e.g., a user ID) in association with the information of that user.

[0103] The communication method permission data storage unit 152 stores information indicating whether or not each of the first communication method P1, the second communication method P2, and the third communication method P3 is permitted for use in communication. Figure 3 shows an example of communication method permission data. For example, the communication method permission data storage unit 152 stores the communication method permission data 211 shown in Figure 3.

[0104] The communication method permission data 211 registers information for each communication method indicating whether or not that method is available for communication. For example, the communication method permission data 211 may register items such as "communication method" and "communication".

[0105] The "Communication Method" field registers information to identify the type of communication method. For example, the "Communication Method" field may register either the first communication method P1, the second communication method P2, or the third communication method P3.

[0106] The "Communication" field registers information indicating whether the corresponding communication method is permitted for use in communication. In the communication method permission data 211, OK is registered in the "Communication" column for communication methods that are permitted for use in communication. Conversely, in the communication method permission data 211, NG is registered in the "Communication" column for communication methods that are prohibited from being used for communication.

[0107] For example, an administrator can set "NG" in the "Communication" column for communication methods that are generally considered undesirable for security reasons. Furthermore, an administrator can set "NG" in the "Communication" column for communication methods that are considered undesirable for operational reasons. For example, the permitted communication method data 211 may be pre-configured.

[0108] Furthermore, the communication method permission data 211 is updatable. For example, the communication method permission data 211 is updated with information about the specified communication method under control from the data update unit 133 of the control unit 13. For example, if the communication method permission data 211 is updated by the data update unit 133 to permit the use of the third communication method P3, the "communication" field for the third communication method P3 is rewritten from NG to OK, and it becomes the communication method permission data 212.

[0109] In addition, the communication method permission data 211 may be updated randomly. For example, the communication method permission data 211 may be randomly updated by the data update unit 133 with information indicating whether or not the use of communication methods other than those prohibited by the administrator is permitted.

[0110] Returning to Figure 2, the explanation continues. The communication path permission data storage unit 153 stores information indicating whether or not communication is permitted using each of the communication paths 111 to 116 for each of the first communication method P1, the second communication method P2, and the third communication method P3. Figure 4 shows an example of communication path permission data. For example, the communication path permission data storage unit 153 stores the communication path permission data 221 shown in Figure 4.

[0111] Communication path permission data 221 is created for each of the first communication method P1, the second communication method P2, and the third communication method P3. For each of the first communication method P1, the second communication method P2, and the third communication method P3, the communication path permission data 221 registers information on whether communication is permitted for each of the communication paths 111 to 116. For example, the communication path permission data 221 registers items such as "communication path" and "communication".

[0112] The "communication path" field registers information for identifying the first communication method P1 and communication paths 111 to 116. For example, the "communication path" field registers identification information "1-1" assigned to communication path 111 and identification information "1-2" assigned to communication path 112. Furthermore, the "communication path" field registers identification information "2-1" assigned to communication path 113 and identification information "2-2" assigned to communication path 114. Additionally, the "communication path" field registers identification information "3-1" assigned to communication path 115 and identification information "3-2" assigned to communication path 116.

[0113] The "Communication" field registers information indicating whether communication with each of the communication paths 111 to 116 is permitted. In the communication path permission data 221, "OK" is registered in the "Communication" column for the identification information of the communication paths 111 to 116 for which communication is permitted. In addition, in the communication path permission data 221, "NG" is registered in the "Communication" column for the identification information of the communication paths 111 to 116 for which communication is prohibited.

[0114] Furthermore, the communication path permission data 221 is updatable. For example, the communication path permission data 221 is updated with information about a specified path among the communication paths 111 to 116 under control from the data update unit 133 of the control unit 13. For example, if the communication path permission data 221 is updated by the data update unit 133 to permit communication using communication path 115, whose identification information is "3-1", then "OK" is registered in the corresponding "Communication" column, and it becomes the communication path permission data 222.

[0115] In addition, the communication path permission data 221 may be updated randomly. For example, the communication path permission data 221 may be randomly updated by the data update unit 133 with information indicating whether or not use is permitted for communication paths 111 to 116, excluding those previously prohibited by the administrator.

[0116] Returning to Figure 2, the explanation continues. The communication partner permission data storage unit 154 stores information about the communication partner, indicating whether or not it is permitted to use them for communication. Figure 5 shows an example of communication partner permission data. For example, the communication partner permission data storage unit 154 stores the communication partner permission data 231 shown in Figure 5.

[0117] The communication partner permission data 231 registers information for each communication partner, indicating whether or not communication is permitted with that partner. For example, the communication partner permission data 231 may register items such as "communication partner" and "communication".

[0118] The "communication partner" field registers information for identifying the communication partner. For example, the "communication partner" may be registered as cloud servers 20, with clouds #01 and #02 registered, or as terminal devices 40, with smartphones #1 and #2 registered. Here, the information registered as the communication partner only needs to be information that can identify the communication partner, and may be, for example, a URL (Uniform Resource Locator) or an IP (Internet Protocol) address. For example, if an IP address is used to identify the communication partner, and the communication partner is configured to connect via Wi-Fi, then even if the communication device changes, it can still be identified as the same communication partner as long as the IP address does not change.

[0119] The "Communication" field registers information indicating whether or not communication with the corresponding communication partner is permitted. In the communication partner permission data 231, "OK" is registered in the "Communication" column for communication partners with whom communication is permitted.

[0120] Furthermore, as shown in the communication partner permission data 232, NG may be registered in the "Communication" column for communication partners who are not explicitly permitted to communicate. For example, an unregistered communication partner may be considered unknown, and NG may be registered in the "Communication" column for that partner. In this case, an unknown identity is defined as a communication partner whose identification information is not explicitly shown in the communication partner permission data 232. An unknown identity is also defined as an access from an unknown information processing device. The following explanation will use the communication partner permission data 232 as an example.

[0121] For example, an administrator can set the "Communication" column to OK for a cloud server 20 whose identity is guaranteed by a cloud certificate. The administrator can also set the "Communication" column to OK for a user upon their request. For example, communication partner permission data 232 may be pre-configured.

[0122] Furthermore, the communication partner permission data 232 is updatable. For example, the communication partner permission data 232 is updated with information about the specified communication partner under control from the data update unit 133 of the control unit 13. For example, if the communication partner permission data 232 is updated by the data update unit 133 to allow communication with Cloud #03, Cloud #03 is added to the "Communication Partner" field, OK is registered in the corresponding "Communication," and it becomes the communication partner permission data 223.

[0123] Returning to Figure 2, let's continue the explanation. The communication timing permission data storage unit 155 stores information about the communication timing at which communication is permitted. Figure 6 shows an example of communication timing permission data. For example, the communication timing permission data storage unit 155 stores the communication timing permission data 241 shown in Figure 6.

[0124] The communication timing permission data 241 registers the conditions for the communication timing under which communication can be performed. For example, the communication partner permission data 231 registers items such as "rules" and "communication timing".

[0125] "Rules" are used to register conditions regarding communication. For example, "rules" can register conditions regarding the data used for communication, such as including user identification information, including user action information, or neither of the above.

[0126] For each rule, the "communication timing" registers the communication timing at which communication is permitted under that rule. In the communication timing permission data 241, for the condition that user identification information is included, the "communication timing" field registers a communication timing that allows communication after a random time has elapsed. Also, in the communication timing permission data 241, for the condition that user action information is included, the "communication timing" field registers a communication timing that allows communication between 8:00 and 17:00. Furthermore, in the communication timing permission data 241, for the condition that none of the above apply, the "communication timing" field registers a communication timing that allows communication immediately.

[0127] Furthermore, the communication timing permission data 241 is updatable. For example, the communication timing permission data 241 is updated with information related to the specified rule under control from the data update unit 133 of the control unit 13. For example, the communication timing permission data 241 becomes the communication timing permission data 242 when the data update unit 133 updates the communication timing for the condition that user operation information is included to 13:00-15:00.

[0128] Returning to Figure 2, let's continue the explanation. The control unit 13 includes an acquisition unit 131, a transmission control unit 132, and a data update unit 133. Note that the internal configuration of the control unit 13 is not limited to the configuration shown in Figure 2; other configurations are also acceptable as long as they perform the information processing described later.

[0129] The control unit 13 is implemented, for example, by a CPU (Central Processing Unit) or GPU (Graphics Processing Unit) executing a program stored inside the data management device 10 using RAM or the like as a working area. Alternatively, the control unit 13 may be implemented by an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or FPGA (Field Programmable Gate Array).

[0130] The acquisition unit 131 acquires various data, including user privacy data such as excretion, bathing, cooking, and washing, sent from the plumbing equipment 30, as acquired data. The acquisition unit 131 then stores the acquired data in the acquired data storage unit 151.

[0131] The acquisition unit 131 is an example of an "acquisition means." As described above, the acquisition data storage unit 151 stores information necessary for identifying the user, user activity information, user biometric information, and user excretion information as acquisition data. In other words, the acquisition means acquires at least one piece of information selected from the group consisting of information necessary for identifying the user of the water supply means or water receiving means, user activity information, user biometric information, and user excretion information.

[0132] The transmission control unit 132 performs transmission control processing to select the communication method and communication path, and to determine whether or not to transmit the acquired data. The transmission control unit 132 may perform transmission control processing for newly acquired data to an external device such as the cloud server 20 when the acquired data is acquired by the acquisition unit 131 and stored in the acquired data storage unit 151. The transmission control unit 132 may also periodically perform transmission control processing for acquired data stored in the acquired data storage unit 151 at predetermined time intervals. In this case, the transmission control unit 132 may transmit acquired data other than acquired data already transmitted to the recipient. Furthermore, the transmission control unit 132 may perform transmission control processing for transmitting acquired data stored in the acquired data storage unit 151 when there is a communication request from an external device such as the cloud server 20. In this case, the transmission control unit 132 may transmit acquired data other than acquired data already transmitted to the recipient (untransmitted acquired data). The following describes the processing by the transmission control unit 132 to select the communication method and communication path, and to determine whether or not to transmit the acquired data.

[0133] Furthermore, the transmission control unit 132 executes a communication method selection process to select the communication method to be used for transmitting the acquired data, which will be described below. Here, we will explain the case where the transmission control unit 132 uses the communication method permission data 211 shown in Figure 3.

[0134] The transmission control unit 132 reads the communication method permission data 211 from the communication method permission data storage unit 152. Next, the transmission control unit 132 reads one communication method from among the communication methods registered in the communication method permission data 211. Here, the communication method read by the transmission control unit 132 is called the target communication method.

[0135] The transmission control unit 132 then refers to the communication method permission data 211 to determine whether or not permission has been granted for communication with the target communication method. If permission has been granted for communication with the target communication method, the transmission control unit 132 selects the target communication method as the communication method to be used for communication.

[0136] In contrast, if permission for communication has not been granted for the target communication method, the transmission control unit 132 reads other communication methods from the communication method permission data 211 and similarly determines whether permission for communication has been granted for those other methods.

[0137] The transmission control unit 132 repeatedly reads communication methods sequentially from the communication method permission data 211 and determines whether or not communication permission has been granted until a communication method for which communication permission has been granted is found. If no communication method for which communication permission has been granted is found in the communication method permission data 211, the transmission control unit 132 terminates the communication method selection process.

[0138] Next, the transmission control unit 132 executes a communication path selection process to select the communication path to be used for transmitting the acquired data, which will be described below. Here, we will explain the case where the transmission control unit 132 uses the communication path permission data 221 shown in Figure 4.

[0139] The transmission control unit 132 reads communication path permission data 221 for the communication method selected as the communication method to be used for communication through the communication method selection process from the communication path permission data storage unit 153. Next, the transmission control unit 132 reads one communication path from the communication paths registered in the communication path permission data 221. Here, the communication path read by the transmission control unit 132 is called the target communication path.

[0140] Next, the transmission control unit 132 refers to the communication path permission data 221 and determines whether communication using the target communication path with the communication method selected as the communication method to be used for communication is possible. If communication using the target communication path is possible, the transmission control unit 132 selects the target communication path as the communication path to be used for communication.

[0141] In contrast, if communication using the target communication path is not possible, the transmission control unit 132 terminates the communication path selection process without selecting a communication path to use for communication. Subsequently, the transmission control unit 132 executes the communication method selection process again to select a new communication method to use for communication, and repeats the process of executing the communication path selection process for the newly selected communication method.

[0142] Furthermore, the transmission control unit 132 executes a communication partner authorization process to permit communication with the communication partner described below. Here, in the case of transmitting acquired data at the time of acquisition or periodically transmitting acquired data, the transmission control unit 132 can, for example, execute the communication partner authorization process for the communication partner designated as the destination of the acquired data. Also, in the case of transmitting acquired data in response to a communication request, the transmission control unit 132 can, for example, execute the communication partner authorization process for the communication partner that received the communication request. Here, we will explain using the case where the transmission control unit 132 uses the communication partner authorization data 232 shown in Figure 5. In the following, in order to distinguish between authorization as a communication partner and authorization for communication timing, authorization as a communication partner will be called "first authorization," and authorization for communication timing will be called "second authorization."

[0143] The transmission control unit 132 reads the communication partner permission data 232 from the communication partner permission data storage unit 154. Next, the transmission control unit 132 determines whether the communication partner is unknown or not. If the communication partner is unknown, the transmission control unit 132 terminates the communication partner permission process for that communication partner without granting first permission for communication to that communication partner.

[0144] In response to this, if the communication partner who made the communication request is not of unknown identity, the transmission control unit 132 determines whether or not the communication partner has been granted permission to communicate by the communication partner permission data 232. If permission has not been granted, the transmission control unit 132 terminates the communication partner permission process for that communication partner without granting first permission for communication to that communication partner. On the other hand, if communication to the communication partner is permitted, the transmission control unit 132 grants first permission for communication to the communication partner.

[0145] If the transmission control unit 132 does not grant the first permission, it determines whether there are other communication partners. If there are other communication partners, the transmission control unit 132 performs a transmission retry, changing the communication partner and executing the communication partner permission process.

[0146] Here, the transmission control unit 132 has predetermined determination conditions for determining whether or not to perform a transmission retry. For example, the transmission control unit 132 has a determination condition as to whether or not the number of transmission retries has reached a predetermined number. Based on the determination condition, the transmission control unit 132 determines whether or not to perform a transmission retry. If it determines to perform a transmission retry, the transmission control unit 132 continues the transmission retries.

[0147] If, in response to this, the transmission control unit 132 determines that it will not perform a transmission retry, it cancels the transmission retry and notifies the user that the acquired data has not been transmitted using a display device (not shown).

[0148] Furthermore, the transmission control unit 132 executes a communication timing permission process to determine the communication timing for transmitting the acquired data, which will be described below. Here, we will explain the case where the transmission control unit 132 uses the communication timing permission data 241 shown in Figure 6.

[0149] The transmission control unit 132 reads the communication timing permission data 241 from the communication timing permission data storage unit 155. Next, the transmission control unit 132 obtains the communication timing information corresponding to the rule that corresponds to the acquired data to be transmitted from the communication timing permission data 241.

[0150] Next, the transmission control unit 132 determines whether the current time satisfies the acquired communication timing conditions. If the current time does not satisfy the acquired communication timing conditions, the transmission control unit 132 terminates the communication timing permission process without granting a second permission for communication. On the other hand, if the current time satisfies the acquired communication timing conditions, the transmission control unit 132 grants a second permission for communication.

[0151] If the transmission control unit 132 does not grant the second permission, it performs a transmission retry, which involves executing the communication timing permission process again. For example, if the time in the next communication timing permission process meets the communication timing conditions due to the passage of time, the transmission control unit 132 may grant the second permission.

[0152] In this case as well, the transmission control unit 132 determines whether or not to perform a transmission retry based on the determination conditions. If it determines to perform a transmission retry, the transmission control unit 132 continues the transmission retry. On the other hand, if it determines not to perform a transmission retry, the transmission control unit 132 cancels the transmission retry and notifies the user that the acquired data has not been transmitted using a display device (not shown) or the like.

[0153] If both the first and second permissions are granted, the transmission control unit 132 sends the acquired data to the communication partner to whom the first permission was granted, using the selected communication method and communication path. For example, the transmission control unit 132 sends the acquired data to the cloud server 20 using the first communication method P1 and communication path 111.

[0154] The transmission control unit 132 is an example of a "control means." That is, the control means controls the transmission by the transmission means. Examples of determining the transmission method based on predetermined conditions include whether or not permission is granted, random selection of communication methods and communication paths, selection of communication partners based on whether or not permission is granted, and rule-based determination of communication timing. Here, the transmission control unit 132 determines all of the communication method, communication path, communication partner, and communication timing, but it is not limited to this, and may determine at least one of these as the transmission method. That is, the control means determines a transmission method that includes at least one of the communication timing, transmission path, and transmission method for acquired data to an external device based on predetermined conditions. The control means also determines at least one of a plurality of transmission paths or a plurality of transmission methods based on predetermined conditions. The transmission means also determines at least one of the communication timing or transmission method for acquired data based on predetermined conditions.

[0155] For example, if the data update unit 133 receives an instruction from the administrator to update the communication method permission data, it updates the communication method permission data stored in the communication method permission data storage unit 152 according to the instruction. For example, if the data update unit 133 receives an instruction to permit the third communication method P3 for the communication method permission data 211 in Figure 3, it changes the "Communication" column for the third communication method P3 from NG to OK. As a result, the data update unit 133 updates the communication method permission data 211 to the communication method permission data 212.

[0156] Furthermore, if the data update unit 133 receives an instruction from the administrator to update the communication path permission data, for example, it updates the communication path permission data stored in the communication path permission data storage unit 153 according to the instruction. For example, if the data update unit 133 receives an instruction to permit communication path 115 for communication path permission data 221 in Figure 4, it changes the "communication" column of the communication path in identification information 3-1 from NG to OK. As a result, the data update unit 133 updates communication path permission data 221 to communication path permission data 222.

[0157] Furthermore, if the data update unit 133 receives an instruction from the administrator to update the communication partner permission data, for example, it updates the communication partner permission data stored in the communication partner permission data storage unit 154 according to the instruction. For example, if the data update unit 133 receives an instruction to grant permission to Cloud #03 for the communication partner permission data 232 in Figure 5, it adds Cloud #03 as a "communication partner" and registers OK in the "communication" column. As a result, the data update unit 133 updates the communication partner permission data 232 to the communication partner permission data 223.

[0158] Furthermore, if the data update unit 133 receives an instruction from the administrator to update the communication timing permission data, for example, it updates the communication timing permission data stored in the communication timing permission data storage unit 155 according to the instruction. For example, the data update unit 133 receives an instruction to change the communication timing for the communication timing permission data 241 in Figure 6, when it includes user operation information, to 13:00 to 15:00. The data update unit 133 then changes the "communication timing" column for the rule that includes user operation information to 13:00 to 15:00. As a result, the data update unit 133 updates the communication timing permission data 241 to communication timing permission data 242.

[0159] <1-2. Data Management Processing> (Communication method selection process) Figure 7 is a flowchart of the communication method determination process. Next, the flow of the communication method determination process by the transmission control unit 132 will be explained with reference to Figure 7.

[0160] The transmission control unit 132 reads the communication method permission data from the communication method permission data storage unit 152 (step S101).

[0161] Next, the transmission control unit 132 reads the Nth communication method from among the multiple communication methods registered in the communication method permission data (step S102). Here, the initial value of N is 1.

[0162] Next, the transmission control unit 132 determines whether or not communication permission has been granted for the Nth communication method that was read, based on the communication method permission data (step S103).

[0163] If permission is granted (step S103: Yes), the transmission control unit 132 selects the Nth communication method it has read as the communication method to be used for communication (step S104).

[0164] In contrast, if permission has not been granted (step S103: No), the transmission control unit 132 determines whether or not there is a communication method for which permission has not been granted (step S105).

[0165] If there is a communication method for which permission to communicate has not been granted (step S105: Yes), the transmission control unit 132 increments N by 1 (step S106). Then, the transmission control unit 132 returns to step S102.

[0166] In response to this, if the confirmation of whether or not permission for communication has been granted for all communication methods is completed (step S105: No), the transmission control unit 132 terminates the communication method selection process.

[0167] (Communication path selection process) Figure 8 is a flowchart of the communication path selection process. Next, the flow of the communication path selection process by the transmission control unit 132 will be explained with reference to Figure 8. Here, the explanation will be given as an example where the transmission control unit 132 has already selected the Nth communication method in the communication method permission data as the communication method to be used for communication.

[0168] The transmission control unit 132 reads the communication path permission data for the Nth communication method from the communication path permission data storage unit 153 (step S201).

[0169] Next, the transmission control unit 132 reads the Mth communication path from among the multiple communication paths registered in the communication path permission data (step S202). Here, the initial value of M is 1.

[0170] Next, the transmission control unit 132 determines whether or not communication permission has been granted for the Mth communication path that was read, based on the communication path permission data (step S203).

[0171] If permission is granted (step S203: Yes), the transmission control unit 132 selects the read Mth communication path as the communication path to be used for communication (step S204).

[0172] In contrast, if permission has not been granted (step S203: No), the transmission control unit 132 determines whether or not there is a communication path for which permission for communication has not been granted (step S205).

[0173] If there is a communication path for which permission to communicate has not been granted (step S205: Yes), the transmission control unit 132 increments M by 1 (step S206). Then, the transmission control unit 132 returns to step S202.

[0174] In response to this, if the confirmation of whether or not communication permission has been granted for all communication paths is completed (step S205: No), the transmission control unit 132 terminates the communication path selection process.

[0175] (Communication partner permission processing) Figure 9 is a flowchart of the communication partner authorization process. Next, referring to Figure 9, the flow of the communication partner authorization process by the transmission control unit 132 will be explained. Here, the explanation will be based on the case where authorization is determined for the communication partner who made the communication request, and where communication to an unknown communication partner is registered as not permitted in the communication partner authorization data.

[0176] The transmission control unit 132 determines whether the communication partner who made the communication request is unidentified or not (step S301).

[0177] If the identity of the communication partner who made the communication request is unknown (step S301: Yes), the transmission control unit 132 terminates the communication partner permission process without granting first permission for communication to the communication partner who made the communication request.

[0178] In contrast, if the communication partner who made the communication request is not of unknown identity (step S301: No), the transmission control unit 132 determines whether or not permission for communication has been granted to the communication partner who made the communication request based on the communication partner permission data (step S302).

[0179] If permission is not granted (step S302: No), the transmission control unit 132 terminates the communication partner permission process without granting first permission for communication to the communication partner that made the communication request.

[0180] In response to this, if communication with the communication partner that made the communication request is permitted (step S302: Yes), the transmission control unit 132 grants first permission for communication to the communication partner that made the communication request (step S303).

[0181] (Communication timing permission process) Figure 10 is a flowchart of the communication timing permission process. Next, the flow of the communication timing permission process by the transmission control unit 132 will be explained with reference to Figure 10.

[0182] The transmission control unit 132 obtains information about the communication timing of the acquired data from the communication timing permission data (step S401).

[0183] Next, the transmission control unit 132 determines whether the current time satisfies the acquired communication timing conditions (step S402). If the current time does not satisfy the acquired communication timing conditions (step S402: No), the transmission control unit 132 terminates the communication timing permission process without granting a second permission for communication.

[0184] In response to this, if the current time satisfies the acquired communication timing conditions (step S402: Yes), the transmission control unit 132 grants a second permission for communication (step S403).

[0185] (Transmission process) Figure 11 is a flowchart of the data transmission process. Next, referring to Figure 11, the flow of the data transmission process by the transmission control unit 132 will be explained.

[0186] The transmission control unit 132 executes a communication method selection process to complete the selection of the communication method (step S1).

[0187] Next, the transmission control unit 132 executes a communication path selection process to complete the selection of the communication path (step S2).

[0188] Next, if the transmission control unit 132 has not yet granted the communication partner first permission to communicate, it selects the communication partner and executes the communication partner permission process. If the transmission control unit 132 has already granted the communication partner first permission to communicate, it maintains the first permission to the communication partner. With the above as preprocessing, the transmission control unit 132 determines whether or not the communication partner has been granted first permission (step S3).

[0189] If the communication partner has been granted first permission to communicate (step S3: Yes), the transmission control unit 132 performs a communication timing permission process to determine whether or not second permission to communicate has been granted (step S4).

[0190] If a second permission for communication is granted (Step S4: Yes), the transmission control unit 132 transmits the acquired data to the communication partner to whom the first permission was granted, at the communication timing in which the second permission was granted, using the communication method and communication path used for the selected communication (Step S5).

[0191] On the other hand, if the first permission is not granted (step S3: No) or the second permission is not granted (step S4: No), the transmission control unit 132 determines whether or not to perform a transmission retry (step S6).

[0192] If a transmission retry is performed (step S6: Yes), the transmission control unit 132 returns to step S3.

[0193] If no transmission retry is performed (Step S6: No), the transmission control unit 132 notifies the user that the acquired data was not transmitted (Step S7). After that, the transmission control unit 132 terminates the transmission process. Examples of notifications to the user include sending a warning message to the plumbing equipment 30 or the user's terminal, sounding a warning, or illuminating a warning light.

[0194] As described above, when the data management device 10 according to this embodiment transmits acquired data, including privacy data, to an external information processing device such as a cloud server 20, it selects the communication method and communication path to be used for communication from among the permitted communication methods and communication paths. Furthermore, the data management device 10 transmits the acquired data only to communication partners to whom communication is permitted, and at permitted communication timings.

[0195] This allows the data management device 10 to transmit acquired data using authorized communication methods and paths, limited to authorized communication partners, and at authorized communication timings, thereby improving security. Furthermore, the data management device 10 can randomly change the authorized communication methods and paths, further enhancing security. Therefore, the data management device 10 can appropriately manage information related to human health, such as private data.

[0196] <2. Second Embodiment> Next, a second embodiment will be described. Figure 12 is a diagram showing an overview of the data management system according to the second embodiment. The data management device 10 according to this embodiment transmits data having a data array that combines acquired data with date and time information to the cloud server 20. The data management device 10 according to this embodiment is also represented by the block diagram in Figure 2. In the following description, the operation of each part, which is the same as in the first embodiment, will be omitted.

[0197] Referring to Figure 2, the data management device 10 will be described. The acquisition unit 131 acquires the acquired data, along with the date and time information of each acquired data item, from the plumbing equipment 30. The acquisition unit 131 then associates the date and time information with the acquired data and stores it in the acquired data storage unit 151.

[0198] Here, the acquired data includes data detected by the toilet sensor 32, bathroom sensor 34, kitchen sensor 36, and washbasin sensor 38 provided on the plumbing fixture 30. In other words, the acquisition unit 131, which is the acquisition means, acquires data detected by one or more sensors provided on the plumbing fixture 30, which has a water supply means and the water receiving means, as acquired data.

[0199] The transmission control unit 132 reads the acquired data along with the corresponding date and time information from the acquired data storage unit 151. Next, the transmission control unit 132 generates a data array that associates the acquired data with the corresponding date and time information. For example, the transmission control unit 132 generates a data array by arranging multiple types of acquired data obtained at the same time in a predetermined pattern.

[0200] The communication unit 11 transmits transmission data, including a data array of generated acquired data, to the cloud server 20, which has been granted first permission by the transmission control unit 132, using the selected communication method and communication path for communication. In other words, the transmission means transmits transmission data, which is a data array formed by associating acquired data acquired by the acquisition means based on date and time information, to an external device.

[0201] Next, the cloud server 20 will be described with reference to Figure 12. The cloud server 20 has a data structure determination unit 21 and a health information estimation unit 22. The data structure determination unit 21 and the health information estimation unit 22 are implemented, for example, by a CPU or GPU, where a program stored inside the cloud server 20 is executed using RAM or the like as a working area. Alternatively, the data structure determination unit 21 and the health information estimation unit 22 may be implemented by an integrated circuit such as an ASIC or FPGA.

[0202] The data structure determination unit 21 is an example of a "data structure determination means," and the health information estimation unit 22 is an example of a health information estimation means. In other words, the cloud server 20, which is an external device, is equipped with a data structure determination means that determines the data structure based on the data arrangement, and a health information estimation means that estimates the user's health information.

[0203] The data structure determination unit 21 receives transmission data containing the data array of the acquired data from the data management device 10. Based on the data array of the acquired data stored in the transmission data, the data structure determination unit 21 determines the data structure of the acquired data.

[0204] The health information estimation unit 22 selects a health information estimation model that corresponds to the data structure of the acquired data determined by the data structure determination unit 21. Then, the health information estimation unit 22 estimates the user's health information using the selected health information estimation model. In this way, the health information estimation unit 22, which is a health information estimation means, selects a model from among multiple health information estimation models that corresponds to the data structure to estimate the user's health status.

[0205] As explained above, the data management device 10 minimizes the data structure by transmitting acquired data as a data array in a single batch, thereby reducing the risk of intrusion by external attackers. Furthermore, the data management device 10 facilitates the use of acquired data at the destination. In addition, external devices that receive the transmitted data, such as the cloud server 20, can select the optimal health information estimation model from the acquired data without requiring additional information from the user.

[0206] <3. Third Embodiment> Figure 13 is a block diagram of the data management device according to the third embodiment. The data management device 10 identifies users of the plumbing equipment 30 and stores the user identification result by the plumbing equipment 30 in association with the acquired data. In the following description, the operation of each part, which is the same as in the first embodiment, will be omitted. The data management device 10 according to this embodiment has an identification unit 134 and a data extraction unit 136. The transmission control unit 132 also has a data generation unit 135.

[0207] The identification unit 134 identifies the user of the plumbing equipment 30. Figure 14 shows an example of a user identification button. For example, the remote control device for operating the plumbing equipment 30 is provided with the user identification button 301 shown in Figure 14. The user identification button 301 is connected to the data management device 10 via a network.

[0208] The user operates the remote control device of the plumbing fixture 30 to register their user identification information to the assigned button on the user identification button 301. The identification unit 134 holds the user identification information registered for each button on the user identification button 301. For example, the identification unit 134 can hold a user ID as user identification information. For the user identification button 301, the button for user A can hold user ID as A.

[0209] Figure 15 is a flowchart of an example of a user registration process used for user identification. Here, we will explain an example of the user registration process with reference to Figure 15. This example describes the process of registering user identification information to the user A button on the user identification button 301.

[0210] Upon receiving notification that the user has initiated the information registration process via remote control operation, the identification unit 134 begins the information registration process for user A's button (step S501).

[0211] The identification unit 134 receives user identification information for user A's buttons via the user's remote control operation (step S502).

[0212] The identification unit 134 registers the input identification information to user A's button and terminates the user information registration process (step S503).

[0213] The identification unit 134 acquires registered user identification information corresponding to user information when a user presses a user identification button 301 while using the plumbing equipment 30. For example, if user A's button among the user identification buttons 301 is pressed, the identification unit 134 acquires user identification information for the plumbing equipment 30 using user A's button as user information.

[0214] Here, the method of registering user identification information is not limited to linking it with the user identification button 301. For example, biometric authentication of the user's face or fingerprints may be performed using a biometric authentication device, and the identification unit 134 may use the authentication result sent from the biometric authentication device as user information to identify the user. Alternatively, the identification unit 134 may accept registration of user knowledge information such as the user's ID and password using an input device such as a keyboard attached to the data management system 1, and use the entered knowledge information as user information to identify the user. In addition, the identification unit 134 may accept registration of smartphones, IC cards, etc., held by the user, and use them as user information to identify the user.

[0215] Furthermore, the identification unit 134 does not necessarily have to be configured to receive user information directly. For example, the identification unit 134 may infer the user from the acquired data and use the inference result as user information to perform user identification.

[0216] The identification unit 134 is an example of an "identification means." The identification means identifies the user of the water supply means or water receiving means.

[0217] The data generation unit 135 of the transmission control unit 132 acquires acquired data and date / time information from the acquisition unit 131. The data generation unit 135 also acquires user identification information obtained from user identification by the identification unit 134. Then, the data generation unit 135 associates the user identification information and the date and time the acquired data was acquired with the acquired data and stores it as transmission data in the acquired data storage unit 151.

[0218] Here, if the user does not input user information when using the plumbing equipment 30, the identification unit 134 will have difficulty performing user identification. In that case, the data generation unit 135 will not be able to obtain user identification information. Therefore, the data generation unit 135 issues temporary user identification information such as a temporary ID. Then, the data generation unit 135 associates the temporary user identification information and the date and time the acquired data was acquired with the acquired data and stores it in the acquired data storage unit 151 as transmitted data.

[0219] Subsequently, the data generation unit 135 notifies each user of the plumbing equipment 30 of temporary user identification information. In this case, it is preferable that the data generation unit 135 also notifies the users of information that identifies the use of the plumbing equipment 30. For example, the data generation unit 135 may display the temporary user identification information along with the date and time of use on the screen of the remote control device of the shared plumbing equipment 30. Alternatively, the data generation unit 135 may transmit and display the temporary user identification information along with the date and time of use to each user's terminal device 40 of the plumbing equipment 30.

[0220] The user, after reviewing the notified information and determining that they will be using their own plumbing equipment 30, sends a conversion instruction to the data management device 10 to convert the temporary user identification information into their own user identification information. For example, the user selects the temporary user identification information displayed on the remote control device screen, inputs their own user information or user identification information, and sends it to the data management device 10. Here, the user does not have to input the conversion instruction at the time the data generation unit 135 notifies the temporary user identification information; it can be input at any time after some time has passed.

[0221] Upon receiving a conversion instruction, the data generation unit 135 converts the temporary user identification information in the transmitted data stored in the acquired data storage unit 151 into the specified user identification information or user identification information corresponding to the specified user information. Here, when selecting the temporary user identification information of the user, the data generation unit 135 may request input of information known only to the user who possesses the user identification information to be converted (such as a password).

[0222] Furthermore, even if user identification information has not been registered, if data is acquired indicating that user information has been entered and the plumbing equipment 30 has been used, the data generation unit 135 issues temporary user identification information associated with that user information. The data generation unit 135 then associates the temporary user identification information and the date and time the acquired data was acquired with the acquired data and stores it in the acquired data storage unit 151 as transmitted data. Later, if user identification information is registered for the user information associated with the temporary user identification information, the data generation unit 135 changes the temporary user identification information in the transmitted data to the registered user identification information.

[0223] This data generation unit 135 is an example of a "data generation means." That is, the transmission control unit 132, which is an example of a control means, has a data generation means that generates transmission data that links user identification information corresponding to the acquired data to the acquired data. In addition, the acquired data storage unit 151, which is a storage means, stores the acquired data from the acquisition means in association with the user identification result by the identification means.

[0224] Figure 16 is a flowchart of an example of user identification processing. Here, we will explain an example of user identification processing with reference to Figure 16. In this example, the identification unit 134 performs user identification using information obtained from the user identification button 301, and the case where the user ID is used as the user identification information is explained.

[0225] The acquisition unit 131 acquires data, including privacy data, from the plumbing equipment 30 (step S511).

[0226] The identification unit 134 determines whether or not user information has been entered by the user pressing the user identification button 301 (step S512). In this case, if user information for which a user ID has not been registered is entered, the identification unit 134 determines that user information has not been entered.

[0227] If user information is received (Step S512: Yes), the identification unit 134 reads the user ID corresponding to the user information (Step S513).

[0228] The data generation unit 135 associates the user ID with the acquired data and stores it in the acquired data storage unit 151 (step S514).

[0229] In contrast, if user information has not been entered (step S512: No), the data generation unit 135 issues a temporary ID (step S515).

[0230] Next, the data generation unit 135 associates the temporary ID with the acquired data and stores it in the acquired data storage unit 151 (step S516).

[0231] Next, the data generation unit 135 notifies each user of the plumbing equipment 30 of the temporary ID (step S517).

[0232] Figure 17 is a flowchart of the conversion process for temporary user identification information. Next, the conversion process for temporary user identification information will be explained with reference to Figure 17.

[0233] The user selects a temporary ID displayed on the remote control device's display screen, etc. (Step S521).

[0234] Furthermore, the user enters their user information or user ID to initiate the conversion (step S522).

[0235] The data generation unit 135 receives a conversion instruction from the user to convert a temporary ID to a user ID, and executes the conversion process of the temporary ID stored in the acquired data storage unit 151 to the specified user ID (step S523).

[0236] Returning to Figure 13, the transmission control unit 132 instructs the communication unit 11 to send data other than the data linked to the temporary user identification information from the acquired data to the cloud server 20, etc. This allows the transmission control unit 132 to reduce the amount of data transmitted and improve security.

[0237] Figure 18 shows an example of acquired data according to the third embodiment. For example, the acquired data storage unit 151 stores transmitted data linked to the user ID and usage date and time shown in Table 302 of Figure 18. Of the data in Table 302, the transmitted data 303 is linked to temporary user identification information.

[0238] When the transmission control unit 132 transmits the transmission data included in Table 302, it extracts the transmission data other than transmission data 303 in Table 302, excluding transmission data 303 which is associated with temporary user identification information, and instructs the communication unit 11 to transmit it to the cloud server 20 or the like.

[0239] Furthermore, the transmission control unit 132 can also differentiate the transmission method for each user identification information. Here, the transmission method includes the communication method, communication path, and communication timing. The transmission control unit 132 can differentiate any or a combination thereof for each user identification information. This allows the transmission control unit 132 to reduce the risk of all acquired data being leaked through a single communication method.

[0240] Figure 19 shows an example where the transmission method differs for each user ID. For example, as shown in transmission method 304, the transmission control unit 132 can use different transmission methods for each of the user IDs, ID_A to ID_C. Specifically, for user ID ID_A, the transmission control unit 132 can use BLE as the communication method, transmit after the data is released, and transmit to the terminal device 40, which is a smartphone. For user ID ID_B, the transmission control unit 132 can use Wi-Fi as the communication method, transmit after the data is released, and transmit to the terminal device 40, which is a family shared PC (Personal Computer). For user ID ID_C, the transmission control unit 132 can use a mobile network as the communication method, transmit around 8 AM, and transmit to the cloud server 20.

[0241] Furthermore, the transmission control unit 132 may instruct the communication unit 11 to transmit data using a user ID that makes it difficult to identify a specific user. Figure 20 shows an example of data transmission using a user ID that makes it difficult to identify a specific user. For example, by using information such as ID_A shown in the transmission data 305 as the user ID, the specific user can be concealed. The transmission control unit 132 can instruct the communication unit 11 to transmit the transmission data 305, which includes the user ID ID_A and acquired data that is private data linked to the date and time of use, to the cloud server 20 or terminal device 40. Note that methods such as concealment processing can be used to generate a user ID that makes it difficult to identify a specific user.

[0242] The communication unit 11 transmits the transmission data to the cloud server 20 or the like, in accordance with the instructions of the transmission control unit 132. In transmitting this data, the communication unit 11 transmits the data to the communication unit 11 using a user ID that makes it difficult to identify a specific user. The communication unit 11 can also differentiate the transmission method for each user identification information in accordance with the instructions of the transmission control unit 132. In this way, the transmission means transmits the transmission data generated by the data generation means to the external device.

[0243] The cloud server 20 and terminal device 40 pre-store user identification information to identify specific users corresponding to user IDs. The cloud server 20 and terminal device 40 then convert user IDs contained in the transmitted data received from the data management device 10 into user identification information. Subsequently, the cloud server 20 and terminal device 40 can perform various processes such as data conversion using the user identification information.

[0244] In this case, the transmitted data sent from the data management device 10 does not identify the user until it reaches the cloud server 20 or terminal device 40. Therefore, the transmitted data sent from the data management device 10 can be kept to the minimum necessary while considering the risk of information leakage, and the data management device 10 can improve security.

[0245] <4. Fourth Embodiment> Figure 21 is a block diagram of the data management device according to the fourth embodiment. The data management device 10 groups multiple acquired data according to predetermined indicators and transmits them as a single transmission unit data. Here, we will describe a configuration in which new functions have been added to the third embodiment. However, the functions according to this embodiment are also applicable to the first or second embodiment. In the following description, the operation of each part, which is the same as in the third embodiment, will be omitted. The control unit 13 of the data management device 10 according to this embodiment has a data extraction unit 136.

[0246] Figure 22 is a diagram showing an example of transmission unit data. Here, as shown in Tables 401 to 403 of Figure 22, the data generation unit 135 associates user identification information and usage date and time with the acquired data, and stores the acquired data together with the user identification information and usage date and time in the acquired data storage unit 151. In other words, the acquired data is stored in the storage means together with the usage date and time information of the water supply means or water receiving means.

[0247] The data extraction unit 136 has pre-defined aggregation indicators for grouping acquired data into transmission data units. The data extraction unit 136 then groups the acquired data using the aggregation indicators to create transmission unit data.

[0248] For example, the data extraction unit 136 has a predetermined time frame as an aggregation indicator. Specifically, the data extraction unit 136 can have one day as a predetermined time frame. For example, if the acquired data storage unit 151 stores a table 401 that associates acquired data with users and usage time, the data extraction unit 136 can group the acquired data for one day on October 30th, shown in time frame 411, into a single transmission unit data.

[0249] The data extraction unit 136 is an example of a "data extraction means." The data extraction means converts data acquired from the storage means for a predetermined period or a predetermined number of times into a single transmission unit data.

[0250] In this way, the data management device 10 can reduce the number of times acquired data is sent to the cloud server 20, etc., by grouping acquired data by time frame and using that as transmission unit data, thereby improving security.

[0251] Furthermore, if, for example, processing such as conversion of acquired data into other information is performed on a cloud server 20, the data extraction unit 136 can use aggregation indicators appropriate to the processing. For example, if it is preferable to group information by the number of times one defecates in order to estimate the defecation rhythm, the data extraction unit 136 can group the acquired data by the number of times one defecates and use it as the unit data for transmission.

[0252] For example, the data generation unit 135 registers the number of excretions per day in the acquired data, as shown in Table 402. The data extraction unit 136 checks the number of excretions assigned to the acquired data 412 and can group the acquired data with the same number of excretions to create transmission unit data.

[0253] In this way, the data management device 10 can improve security and reduce the processing load on the cloud server 20, etc., by grouping acquired data according to processing and converting it into transmission unit data.

[0254] Furthermore, for example, when multiple specific users, such as family members, are using the system, the data extraction unit 136 can group the acquired data for each specific user and create a transmission unit data. For example, consider a case where users A to D are family members, and the acquired data storage unit 151 stores a table 403 that associates the acquired data with the user and the time of use. In this case, the data extraction unit 136 can combine, for example, time frames and group the acquired data for one day for users A to D according to the user identification information 413 in table 403 to create a single transmission unit data.

[0255] In this way, the data management device 10 can improve security by reducing the frequency of external communications by grouping data by specific users, and can also improve the efficiency and reliability of uploading acquired data to the cloud server 20, etc.

[0256] In this embodiment, the data extraction unit 136 aggregates the acquired data into transmission unit data, but it is also possible to aggregate transmission data linked to the acquired data, such as the date and time of use, into transmission unit data.

[0257] Returning to Figure 21, the explanation continues. The transmission control unit 132 transmits the acquired data for each transmission unit data generated by the data extraction unit 136. The transmission control unit 132 transmits the acquired data for each transmission unit data to the cloud server 20, etc., according to the determination made by the transmission control unit 132.

[0258] Figure 23 shows an example of splitting and transmitting acquired data. For example, if data is grouped by specific users, the amount of data transmitted at once increases, which is thought to increase the risk of data leakage.

[0259] Therefore, the transmission control unit 132 can also divide and transmit the acquired data in order to reduce risk. For example, let's consider the case where the information shown in Table 404 in Figure 23 is treated as a single unit of data by the data extraction unit 136. In this case, the transmission control unit 132 assigns a linking ID to each acquired data as shown in Table 404. Then, the transmission control unit 132 divides Table 404 in the column direction, that is, across multiple acquired data, to generate Tables 441 to 443. By assigning a linking ID to each of Tables 441 to 443, the transmission control unit 132 enables the cloud server 20, etc., to reconstruct Table 404 from Tables 441 to 443.

[0260] In this way, the data management device 10 can further improve security by dividing and sending the acquired data.

[0261] Returning to Figure 21, the explanation continues. The communication unit 11 transmits the data extracted by the data extraction unit 136 to an external device such as the cloud server 20, based on the communication method, communication path, communication partner, and communication timing determined by the transmission control unit 132.

[0262] <5. Fifth Embodiment>

[0263] Figure 24 is a diagram showing an overview of the data management system according to the fifth embodiment. The terminal device 40 according to this embodiment has communication paths 41 to 44 and a terminal control unit 45. The data management device 10 can also transmit data to the cloud server 20 via the terminal device 40. In the following description, the operation of each part, which is the same as in the first embodiment, will be omitted.

[0264] When the transmission control unit 132 of the data management device 10 sends acquired data to the cloud server 20, it sends the acquired data to a terminal device 40, for example, instead of the cloud server 20, and requests that the terminal device 40 send the data to the cloud server 20.

[0265] Furthermore, the transmission control unit 132 of the data management device 10 may transfer the acquired data of multiple individuals stored in the acquired data storage unit 151 to the terminal device 40 used by a specific individual, in order to transmit the acquired data from the terminal device 40 to the cloud server 20. In this case, the transmission control unit 132 may transfer the acquired data in sections, such as transferring it to the terminal device 40 of the corresponding user, or it may transfer it all at once.

[0266] The terminal device 40 has multiple communication paths 41 to 44. The terminal device 40 is also capable of communicating using a fifth communication method P5 and a sixth communication method P6 for transmitting data. Here, the number of communication paths 41 to 44 and the number of fifth communication methods P5 and sixth communication methods P6 are examples only and are not limited to these. The terminal device 40 is configured to communicate using communication path 41 or 42 in the case of fifth communication method P5, and to communicate using communication path 43 or 44 in the case of sixth communication method P6.

[0267] The terminal control unit 45 receives a request from the data management device 10 to send the acquired data to the cloud server 20. The terminal control unit 45 then transmits the acquired data to the cloud server 20 using new computing and communication technologies available to the terminal device 40. The terminal control unit 45 may also transmit the acquired data transferred from the data management device 10 to the cloud server 20 at a predetermined time. This allows the transmission control unit 132 to reduce the risk of data leakage from the data management device 10.

[0268] In this case, the terminal control unit 45 can select the communication method to be used from the fifth communication method P5 and the sixth communication method P6, and can also select the communication path to be used from the communication paths 41 to 44. Here, the method of selecting the communication method by the terminal control unit 45 is the same as the method of selecting the communication method by the data management device 10 in the first embodiment.

[0269] Further, the terminal control unit 45 may obtain user identification information registered in association with the user identification button 301 from the data management device 10 and perform user identification. Furthermore, the terminal control unit 45 may generate transmission data by associating the user identification information with the acquired data and transmit the transmission data to the cloud server 20 or the like.

[0270] Also, the communication between the data management device 10 and the terminal device 40 may be limited by a person, a place, a timing, etc., such that the communication can be performed when the terminal device 40 exists in a limited space such as a water surrounding space, for example, in a communication form with a limited area such as a water surrounding space. For example, Bluetooth or the like can be used for the communication between the data management device 10 and the terminal device 40. Thereby, when transmitting the acquired data to the cloud server 20 via the terminal device 40, it becomes possible to more reliably transmit the data by the terminal device 40.

[0271] In this case, the terminal device 40 corresponds to an example of the "transmission means". That is, the transmission means is a communication device held by the user. And the communication device constitutes at least a part of the identification means and the control means.

[0272] Further effects and modifications can be easily derived by those skilled in the art. Therefore, the broader aspects of the present invention are not limited to the specific details and representative embodiments represented and described as above. Accordingly, various changes are possible without departing from the spirit or scope of the general inventive concept defined by the appended claims and their equivalents.

[0273] Regarding each of the above-described embodiments and modifications, the following configurations may be possible, but are not limited thereto.

[0274] (1) Water supply means for supplying water to the water receiving means, An acquisition means for acquiring at least one piece of information selected from the group including information required to identify the user of the water supply means or the water receiving means, information on the user's movements, information on the user's biological information, and information on the user's excretion; A storage means for storing the acquired data of the aforementioned acquisition means, A transmission means for transmitting acquired data stored in the storage means to an external device, The system includes control means for controlling transmission by the aforementioned transmission means, The control means determines a transmission method, which includes at least one of the communication timing, transmission path, and transmission method of the acquired data to the external device, based on predetermined conditions. A data management system for plumbing fixtures, characterized by the following features. (2) The transmission means has a function to transmit the acquired data to the external device using multiple transmission paths or multiple transmission methods. The control means determines at least one of the plurality of transmission paths or the plurality of transmission methods based on the predetermined conditions. A data management system for plumbing equipment as described in (1), characterized by the above. (3) The transmission means has a function of transmitting the acquired data to the external device using a predetermined transmission path. The control means determines at least one of the communication timing or transmission method of the acquired data based on the predetermined conditions. A data management system for plumbing equipment as described in (1) or (2), characterized by the above. (4) The acquired data is stored in the storage means along with information on the date and time of use of the water supply means or the water receiving means. The storage means further comprises a data extraction means that converts the acquired data corresponding to a predetermined period or predetermined number of times into a single transmission unit data, The transmission means transmits the transmission unit data extracted by the data extraction means to the external device. A data management system for plumbing equipment as described in any one of (1) to (3), characterized by the above. (5) The acquisition means acquires data detected by one or more sensors provided in the plumbing equipment having the water supply means and the water receiving means as the acquisition data. The transmission means transmits data of a data array, which is formed by associating the acquired data obtained by the acquisition means based on date and time information, to the external device. A data management system for plumbing equipment as described in any one of (1) to (4), characterized by the above. (6) The external device comprises a data structure determination means for determining a data structure based on the data array, and a health information estimation means for estimating the user's health information. The health information estimation means selects a model from among a plurality of health information estimation models that corresponds to the data structure and estimates the user's health status. A data management system for plumbing equipment as described in (5), characterized by the above. (7) The system further comprises identification means for identifying the user of the water supply means or the water receiving means, The storage means stores the user identification result by the identification means together with the acquired data by the acquisition means, The control means includes data generation means that generates transmission data that links the user identification information corresponding to the acquired data to the acquired data, The transmission means transmits the transmission data generated by the data generation means to the external device. A data management system for plumbing equipment as described in any one of (1) to (6), characterized by the above. (8) The aforementioned transmission means is a communication device owned by the user, The communication device constitutes at least a part of the control means. A data management system for plumbing equipment as described in any one of (1) to (7), characterized by the above. [Explanation of Symbols]

[0275] 1 Data Management System 10 Data Management Device 11 Communication Unit 13 Control Unit 15 Memory Unit 20 Cloud Server 21 Data Structure Determination Unit 22 Health Information Estimation Unit 30 Plumbing Equipment 31 Toilet Device 32 Toilet Sensor 33 Bathroom Device 34 Bathroom Sensor 35 Kitchen Device 36 Kitchen Sensor 37 Washbasin Device 38 Washbasin Sensor 40 Terminal Device 41 - 44 Communication Routes 45 Terminal Control Unit 111 - 116 Communication Routes 131 Acquisition Unit 132 Transmission Control Unit 133 Data Update Unit 134 Identification Unit 135 Data Generation Unit 136 Data Extraction Unit 151 Acquired Data Memory Unit 152 Communication Method Permission Data Memory Unit 153 Communication Route Permission Data Memory Unit 154 Communication Partner Permission Data Memory Unit 155 Communication Timing Permission Data Memory Unit

Claims

1. A water supply means that supplies water to a water receiving means, An acquisition means for acquiring at least one piece of information selected from the group including information required to identify the user of the water supply means or the water receiving means, information on the user's movements, information on the user's biological information, and information on the user's excretion; A storage means for storing the acquired data of the aforementioned acquisition means, A transmission means for transmitting acquired data stored in the storage means to an external device, The system includes control means for controlling transmission by the aforementioned transmission means, The control means determines a transmission method, which includes at least one of the communication timing, transmission path, and transmission method of the acquired data to the external device, based on predetermined conditions. A data management system for plumbing fixtures, characterized by the following features.

2. The transmission means has a function to transmit the acquired data to the external device using multiple transmission paths or multiple transmission methods. The control means determines at least one of the plurality of transmission paths or the plurality of transmission methods based on the predetermined conditions. A data management system for plumbing equipment as described in feature 1.

3. The transmission means has a function of transmitting the acquired data to the external device using a predetermined transmission path. The control means determines at least one of the communication timing or transmission method of the acquired data based on the predetermined conditions. A data management system for plumbing equipment as described in feature 1.

4. The acquired data is stored in the storage means along with information on the date and time of use of the water supply means or the water receiving means. The storage means further comprises a data extraction means that converts the acquired data corresponding to a predetermined period or predetermined number of times into a single transmission unit data, The transmission means transmits the transmission unit data extracted by the data extraction means to the external device. A data management system for plumbing equipment as described in feature 1.

5. The acquisition means acquires data detected by one or more sensors provided in the plumbing equipment having the water supply means and the water receiving means as the acquisition data. The transmission means transmits data of a data array, which is formed by associating the acquired data obtained by the acquisition means based on date and time information, to the external device. A data management system for plumbing equipment as described in feature 1.

6. The external device comprises a data structure determination means for determining a data structure based on the data array, and a health information estimation means for estimating the user's health information. The health information estimation means selects a model from among a plurality of health information estimation models that corresponds to the data structure and estimates the user's health status. A data management system for plumbing equipment as described in feature 5.

7. The system further comprises identification means for identifying the user of the water supply means or the water receiving means, The storage means stores the user identification result by the identification means together with the acquired data by the acquisition means, The control means includes data generation means that generates transmission data that links the user identification information corresponding to the acquired data to the acquired data, The transmission means transmits the transmission data generated by the data generation means to the external device. A data management system for plumbing equipment as described in feature 1.

8. The aforementioned transmission means is a communication device owned by the user, The communication device constitutes at least a part of the control means. A data management system for plumbing equipment as described in feature 1.

Images