Information processing device, system, vehicle, program, and consent confirmation method

Abstract

This will allow users to use the external transmission function even if they cannot agree to the terms of service on their terminal device. [Solution] The information processing device 20 includes a communication unit 23 that communicates with a server device 30, and a control unit 21 that, via the communication unit 23, receives consent information from the server device 30 indicating whether a user in the vehicle has previously agreed to the terms of service on a terminal device associated with the user. Based on the received consent information, if it is determined that the user has not agreed to the terms of service on the terminal device, the control unit 21 asks the user via an output device installed in the vehicle whether they temporarily agree to the terms of service. If the control unit 21 obtains a response from the user via an input device installed in the vehicle indicating that they temporarily agree to the terms of service, it transmits the data collected in the vehicle to the server device 30 via the communication unit 23, but only for a limited period.

Description

Technical Field

[0001] The present disclosure relates to an information processing apparatus, a system, a vehicle, a program, and a consent confirmation method.

Background Art

[0002] Patent Document 1 discloses an apparatus that displays a screen for a user riding in a vehicle to select whether to consent to information provision, and transmits information outside the vehicle when consent is given.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0004] It is conceivable to give consent to the terms of use of the external transmission function using a terminal device such as a smartphone. However, if the user cannot consent to the terms of use with the terminal device, such as when there is no time to give formal consent or there is no terminal device at hand, the user cannot use the external transmission function, which is disadvantageous to the user.

[0005] An object of the present disclosure is to enable the use of the external transmission function even when the user cannot consent to the terms of use with the terminal device.

Means for Solving the Problems

[0006] The information processing apparatus according to the present disclosure a communication unit that communicates with a server device; receives, from the server device, consent information indicating whether a user riding in a vehicle has previously consented to terms of use with a terminal device linked to the user via the communication unit; If, based on the received consent information, it is determined that the user has not agreed to the terms of service on the terminal device, the user is asked via an output device installed in the vehicle whether or not to temporarily agree to the terms of service. When the system obtains a response from the user indicating temporary agreement to the terms of service via an input device installed in the vehicle, it transmits the data collected by the vehicle to the server device via the communication unit, but only for the limited period. Control unit and It is equipped with.

[0007] The method for confirming consent regarding this disclosure is as follows: The system receives consent information from a server device via the network, indicating whether a user in a vehicle has previously agreed to the terms of service using a terminal device linked to that user. If, based on the received consent information, it is determined that the user has not agreed to the terms of service on the terminal device, the vehicle will be asked via an output device whether or not to temporarily agree to the terms of service. If the user provides a response indicating temporary agreement to the terms of service via an input device installed in the vehicle, the data collected by the vehicle will be transmitted to the server device via the network, but only for a limited period. Includes. [Effects of the Invention]

[0008] According to this disclosure, the external transmission function will be available even if the user cannot agree to the terms of service on the terminal device. Therefore, convenience will be improved. [Brief explanation of the drawing]

[0009] [Figure 1] This is a block diagram showing the configuration of a system according to an embodiment of this disclosure. [Figure 2] This figure shows an example in which an information processing device according to the present disclosure is mounted on a vehicle. [Figure 3]This is a block diagram showing the connection between an information processing device and an in-vehicle device according to an embodiment of the present disclosure. [Figure 4] This is a diagram showing a comparative example. [Figure 5] This is a diagram showing an example. [Figure 6] This is a flowchart showing the operation of the information processing device according to the embodiment of this disclosure. [Modes for carrying out the invention]

[0010] Hereinafter, one embodiment of this disclosure will be described with reference to the figures.

[0011] In each figure, identical or corresponding parts are denoted by the same reference numerals. In the description of this embodiment, the description of identical or corresponding parts will be omitted or simplified as appropriate.

[0012] Referring to Figure 1, the configuration of the system 10 according to this embodiment will be described.

[0013] The system 10 according to this embodiment comprises an information processing device 20 and a server device 30. The information processing device 20 can communicate with the server device 30 via a network 40.

[0014] The information processing device 20 may be a general-purpose computer such as a PC, a server computer such as a cloud server, or a dedicated computer. "PC" is an abbreviation for personal computer. As shown in Figure 2, in this embodiment, the information processing device 20 is mounted on the vehicle 50. As one variation, the information processing device 20 may be installed in a location away from the vehicle 50, such as a data center, as long as it can communicate with the various devices mounted on the vehicle 50.

[0015] The vehicle 50 is any type of automobile such as, for example, a gasoline vehicle, a diesel vehicle, a hydrogen vehicle, a HEV, a PHEV, a BEV, or an FCEV. "HEV" is an abbreviation for hybrid electric vehicle. "PHEV" is an abbreviation for plug-in hybrid electric vehicle. "BEV" is an abbreviation for battery electric vehicle. "FCEV" is an abbreviation for fuel cell electric vehicle. The vehicle 50 is driven by the user 11 in the present embodiment, but the driving may be automated at any level. The level of automation is, for example, any one of levels 1 to 5 in the SAE level classification. "SAE" is an abbreviation for Society of Automotive Engineers. The vehicle 50 may be a vehicle dedicated to MaaS. "MaaS" is an abbreviation for Mobility as a Service.

[0016] The server device 30 is a server computer such as a cloud server. The server device 30 is installed in a facility such as a data center.

[0017] The network 40 includes the Internet, at least one WAN, at least one MAN, or any combination thereof. "WAN" is an abbreviation for wide area network. "MAN" is an abbreviation for metropolitan area network. The network 40 may include at least one wireless network, at least one optical network, or any combination thereof. The wireless network is, for example, an ad hoc network, a cellular network, a wireless LAN, a satellite communication network, or a terrestrial microwave network. "LAN" is an abbreviation for local area network.

[0018] As shown in Figure 3, in this embodiment, the information processing device 20 is connected to various devices mounted on the vehicle 50, such as an output device 51, an input device 52, a camera 53, a microphone 54, a positioning device 55, an ignition sensor 56, and one or more other sensors 57. Interfaces compatible with standards such as USB, HDMI®, or Bluetooth® can be used for connecting to these devices. "USB" is an abbreviation for Universal Serial Bus. "HDMI®" is an abbreviation for High-Definition Multimedia Interface. As an example, the information processing device 20 may itself be equipped with one or more of the various devices mounted on the vehicle 50.

[0019] The output device 51 is, for example, a display 58 as shown in Figure 5, or a speaker. The display 58 is, for example, an LCD or an organic EL display. "LCD" is an abbreviation for liquid crystal display. "EL" is an abbreviation for electroluminescent. The display 58 may also be a display audio. The output device 51 outputs information obtained by the operation of the information processing device 20.

[0020] The input device 52 is, for example, a physical key, a capacitive key, a pointing device, or a touchscreen integrated with the display 58. The camera 53, microphone 54, or both may also function as the input device 52. The input device 52 accepts operations to input information used for the operation of the information processing device 20.

[0021] Camera 53 is, for example, a visible light camera or a depth camera. Camera 53 captures images of the interior, exterior, or both of the vehicle 50, which may be used as data for external transmission.

[0022] The microphone 54 collects audio from inside, outside, or both of the vehicle 50 as a type of data that may be transmitted outside the vehicle.

[0023] The positioning device 55 is, for example, a GNSS receiver. "GNSS" is an abbreviation for global navigation satellite system. Examples of GNSS systems include GPS, QZSS, BDS, GLONASS, or Galileo. "GPS" is an abbreviation for Global Positioning System. "QZSS" is an abbreviation for Quasi-Zenith Satellite System. QZSS satellites are called quasi-zenith satellites. "BDS" is an abbreviation for BeiDou Navigation Satellite System. "GLONASS" is an abbreviation for Global Navigation Satellite System. The positioning device 55 measures the coordinates of the vehicle 50, i.e., the vehicle's position, as a type of data that can be transmitted outside the vehicle.

[0024] The ignition sensor 56 detects the ignition status of the vehicle 50. The ignition sensor 56 outputs a signal indicating the detected status.

[0025] Other sensors 57 include, for example, a vehicle speed sensor, an acceleration sensor, a gyroscope, a human presence sensor, or a door opening / closing sensor. The other sensors 57 observe various events in different parts of the vehicle 50 and acquire observation results as a type of data that can be transmitted outside the vehicle.

[0026] The outline of this embodiment will be described with reference to Figure 1.

[0027] When user 11 gets into vehicle 50, the information processing device 20 receives consent information from server device 30 via network 40. The consent information indicates whether user 11 has previously agreed to the terms of service on terminal device 60 associated with user 11, as shown in Figure 5. Terminal device 60 is, for example, a smartphone or tablet. Based on the received consent information, if the information processing device 20 determines that user 11 has not agreed to the terms of service on terminal device 60, it asks user 11 via output device 51 installed in vehicle 50 whether they temporarily agree to the terms of service. When the information processing device 20 receives a response from user 11 indicating temporary agreement to the terms of service via input device 52 installed in vehicle 50, it transmits the data collected in vehicle 50 to server device 30 via network 40 only for a limited period. The limited period is, for example, the period until the ignition of vehicle 50 is turned off, or the period corresponding to one trip of vehicle 50. A trip refers to travel from a point of origin to a point of destination for a specific purpose.

[0028] According to this embodiment, even if user 11 cannot agree to the terms of service on the terminal device 60, such as when there is not enough time to give formal consent or when user 11 does not have the terminal device 60 in their possession, the external transmission function becomes available. Therefore, convenience is improved.

[0029] A comparative example will be explained with reference to Figure 4.

[0030] In this comparative example, user registration is performed via a display 58 mounted on the vehicle 50. During the user registration process, a 2D code is displayed on the display 58. An application for agreeing to the terms and conditions is launched on the terminal device 60, and when the 2D code is read by the terminal device 60, the terms of use for the communication function for external transmission and a user interface for selecting "Agree" or "Disagree" are displayed on the terminal device 60. If "Agree" is selected, the server device 30 records a status of "Agreed" for the terms of use and for the external transmission of all data, images, audio, and vehicle location. If "Disagree" is selected, the server device 30 records a status of "Disagreed" for the terms of use and for the external transmission of all data, images, audio, and vehicle location. Even if the user agrees to the terms of use, they may still choose not to agree to the external transmission of images, audio, vehicle location, or any combination thereof. For example, the server device 30 may record "Agreed" for the terms of service and for the transmission of all data, images, and audio outside the vehicle, while the server device 30 may record "Disagreement" for the transmission of vehicle location outside the vehicle. In such an example, consent would have been obtained for the transmission of all data collected by the vehicle 50 outside the vehicle, except for the vehicle location.

[0031] After user registration is complete, the status regarding agreement to the terms and conditions is notified from the server device 30 to the vehicle 50 when the user logs in. If at least "Agreed" is recorded in the server device 30 regarding the terms of service, the communication function for external transmission is available. If "Disagreement" is recorded in the server device 30 regarding the terms of service, the communication function for external transmission is unavailable, but this is in line with the user's intentions and does not disadvantage the user 11. On the other hand, if agreement to the terms and conditions is not made at the terminal device 60 for a long time and "Agreed" is not recorded in the server device 30 regarding the terms of service, the user 11 will be unable to use the communication function for external transmission even if they want to, which is disadvantageous to the user 11.

[0032] As described above, in this comparative example, user registration and agreement to the terms and conditions are performed on separate devices. If user 11 is registered but has not agreed to the terms and conditions, data cannot be transmitted outside the vehicle, which is inconvenient for user 11.

[0033] An example will be described with reference to Figure 5.

[0034] In this embodiment, user registration is performed via the display 58, similar to the comparative example shown in Figure 4. The agreement to the terms and conditions is also performed on the terminal device 60, as is the same as in the comparative example, so no further explanation is provided.

[0035] After user registration is complete, the status regarding agreement to the terms and conditions is notified from the server device 30 to the information processing device 20 when the user logs in. Similar to the comparative example, if "Agreed" is recorded in the server device 30 for at least the terms of use, the communication function for external transmission is available. If "Disagreement" is recorded in the server device 30 for the terms of use, the communication function for external transmission is unavailable. In this embodiment, unlike the comparative example, if agreement to the terms and conditions is not performed at the terminal device 60 and "Agreed" is not recorded in the server device 30 for the terms of use, the terms of use for the communication function for external transmission and a user interface for selecting "Temporary Agreement" are displayed on the display 58. When "Temporary Agreement" is selected, the communication function for external transmission becomes temporarily available. For example, the state in which the communication function is temporarily available ends when the ignition is turned off. That is, when the ignition is turned off, the temporary external transmission setting is canceled.

[0036] As described above, in this embodiment, data can be transmitted outside the vehicle even if user 11 is registered but has not yet agreed to the terms and conditions. Therefore, convenience is improved.

[0037] The server device 30 may log the history of agreement to the terms and conditions. If it is necessary to obtain agreement to the terms and conditions again each time the terms of service are updated, the server device 30 may log the history of agreement to the terms and conditions for each version of the terms of service. If updating the terms of service does not affect the transmission of one or more types of data from images, audio, and vehicle location outside the vehicle, the settings from before the update may be retained for the transmission of the relevant types of data outside the vehicle.

[0038] Referring to Figure 1, the configuration of the information processing device 20 according to this embodiment will be described.

[0039] The information processing device 20 comprises a control unit 21, a storage unit 22, and a communication unit 23.

[0040] The control unit 21 includes at least one processor, at least one programmable circuit, at least one dedicated circuit, or any combination thereof. The processor is a general-purpose processor such as a CPU or GPU, or a dedicated processor specialized for a specific process. "CPU" is an abbreviation for central processing unit. "GPU" is an abbreviation for graphics processing unit. The programmable circuit is, for example, an FPGA. "FPGA" is an abbreviation for field-programmable gate array. The dedicated circuit is, for example, an ASIC. "ASIC" is an abbreviation for application specific integrated circuit. The control unit 21 controls each part of the information processing device 20 and executes processes related to the operation of the information processing device 20.

[0041] The storage unit 22 includes at least one semiconductor memory, at least one magnetic memory, at least one optical memory, or any combination thereof. The semiconductor memory is, for example, RAM, ROM, or flash memory. "RAM" is an abbreviation for random access memory. "ROM" is an abbreviation for read-only memory. RAM is, for example, SRAM or DRAM. "SRAM" is an abbreviation for static random access memory. "DRAM" is an abbreviation for dynamic random access memory. ROM is, for example, EEPROM. "EEPROM" is an abbreviation for electrically erasable programmable read-only memory. Flash memory is, for example, SSD. "SSD" is an abbreviation for solid-state drive. Magnetic memory is, for example, HDD. "HDD" is an abbreviation for hard disk drive. The storage unit 22 functions, for example, as main memory, auxiliary memory, or cache memory. The memory unit 22 stores information used for the operation of the information processing device 20 and information obtained through the operation of the information processing device 20.

[0042] The communication unit 23 includes at least one communication module. The communication module is, for example, a module compatible with a mobile communication standard such as LTE, 4G, or 5G, or a wireless LAN communication standard such as IEEE 802.11. "LTE" is an abbreviation for Long Term Evolution. "4G" is an abbreviation for 4th generation. "5G" is an abbreviation for 5th generation. "IEEE" is an abbreviation for Institute of Electrical and Electronics Engineers. The communication unit 23 communicates with the server device 30. The communication unit 23 receives information used in the operation of the information processing device 20 and transmits information obtained through the operation of the information processing device 20.

[0043] The functions of the information processing device 20 are realized by executing the program according to this embodiment on the processor acting as the control unit 21. In other words, the functions of the information processing device 20 are realized by software. The program causes the computer to perform the operations of the information processing device 20, thereby causing the computer to function as the information processing device 20. That is, the computer functions as the information processing device 20 by performing the operations of the information processing device 20 according to the program.

[0044] The program can be stored on a non-temporary computer-readable medium. Examples of non-temporary computer-readable media include flash memory, magnetic recording devices, optical discs, magneto-optical recording media, or ROM. The program can be distributed, for example, by selling, transferring, or lending portable media such as SD cards, DVDs, or CD-ROMs containing the program. "SD" is an abbreviation for Secure Digital. "DVD" is an abbreviation for digital versatile disc. "CD-ROM" is an abbreviation for compact disc read only memory. The program may also be distributed by storing it in server storage and transferring it from the server to other computers. The program may also be provided as a program product.

[0045] A computer, for example, stores a program stored on a portable medium or a program transferred from a server in its main memory. Then, the computer reads the program stored in the main memory with its processor and executes the processing according to the read program. The computer may also read the program directly from the portable medium and execute the processing according to the program. The computer may also execute the processing according to the received program sequentially each time a program is transferred to the computer from a server. Processing may also be performed by a so-called ASP-type service, which does not transfer programs from the server to the computer, but realizes its function only through execution instructions and result retrieval. "ASP" is an abbreviation for application service provider. A program includes information used for processing by an electronic computer that is equivalent to a program. For example, data that is not a direct instruction to the computer but has the nature of defining the computer's processing falls under "equivalent to a program".

[0046] Some or all of the functions of the information processing device 20 may be implemented by a programmable circuit or a dedicated circuit as a control unit 21. In other words, some or all of the functions of the information processing device 20 may be implemented by hardware.

[0047] Referring to Figure 6, the operation of the information processing device 20 according to this embodiment will be described. The operation described below corresponds to the consent confirmation method according to this embodiment. That is, the consent confirmation method according to this embodiment includes steps S1 to S8 shown in Figure 6.

[0048] In S1, when the user 11 enters the vehicle 50, the control unit 21 authenticates the user 11 via the input device 52 installed in the vehicle 50. Specifically, the control unit 21 performs authentication using a PIN or password via a touchscreen integrated with the display 58. Alternatively, the control unit 21 may perform facial recognition via the camera 53. Alternatively, the control unit 21 may perform voice recognition via the microphone 54. Alternatively, the control unit 21 may perform biometric authentication by other means.

[0049] In S2, the control unit 21 waits until authentication in S1 is successful. If authentication is successful, the step in S3 is executed. If authentication is not successful after a certain period of time, the flow shown in Figure 6 ends.

[0050] In S3, the control unit 21 receives consent information from the server device 30 via the communication unit 23. Specifically, the control unit 21 sends a request containing the user 11 identifier to the server device 30 via the communication unit 23. The control unit 21 receives consent information from the server device 30 as a response to the sent request.

[0051] The consent information indicates whether user 11 has previously agreed to the terms of service on terminal device 60. In this embodiment, the consent information further indicates whether user 11 has previously indicated their intention not to agree to the terms of service on terminal device 60. That is, the consent information indicates whether user 11 has previously agreed to the terms of service on terminal device 60, whether user 11 has not agreed to the terms of service on terminal device 60, or whether user 11 has previously indicated their intention not to agree to the terms of service on terminal device 60. In the embodiment shown in Figure 5, one of the following statuses regarding the terms of service is transmitted from server device 30 as consent information: "Agree," "Not Agree," and "Disagree."

[0052] The consent information may include prior permission information. The prior permission information is permission information that indicates the types of data that user 11 has previously authorized for use outside the vehicle on the terminal device 60. In the embodiment shown in Figure 5, for each of the external transmissions of all data, images, audio, and vehicle location, one of the following statuses, "consented," "not consented," or "disagreement," is transmitted from the server device 30 as prior permission information.

[0053] In S4, the control unit 21 determines, based on the consent information received in S3, whether user 11 has previously agreed to the terms of service on the terminal device 60. If it is determined that user 11 has not agreed to the terms of service on the terminal device 60, step S5 is executed. If it is determined that user 11 has previously indicated their intention not to agree to the terms of service on the terminal device 60, step S5 is not executed, and the flow shown in Figure 6 ends. On the other hand, if it is determined that user 11 has previously agreed to the terms of service on the terminal device 60, step S8 is executed.

[0054] In S5, the control unit 21 asks the user 11 whether to temporarily agree to the terms of service via the output device 51 mounted on the vehicle 50. Specifically, the control unit 21 outputs a screen via the display 58 asking the user 11 whether to temporarily agree to the terms of service. Alternatively, the control unit 21 may output an audio message via the speaker asking the user 11 whether to temporarily agree to the terms of service. In the embodiment shown in Figure 5, a user interface for selecting "temporary agreement" is displayed on the display 58 along with the terms of service.

[0055] In S6, the control unit 21 waits for a response from the user 11 via the input device 52 mounted on the vehicle 50 indicating temporary agreement to the terms of service. In the embodiment shown in Figure 5, the selection of "Temporary Agreement" on the display 58 corresponds to the response being received from the user 11. If a response is received from the user 11, the step in S6 is executed. If no response is received from the user 11 after a certain period of time, the flow shown in Figure 6 ends.

[0056] The control unit 21 may obtain temporary permission information along with the response via the input device 52. The temporary permission information is permission information indicating the type of data that user 11 temporarily permits to be used outside the vehicle. In the embodiment shown in Figure 5, "temporary consent" may be individually selected on the display 58 for each of the external transmissions of all data, images, audio, and vehicle location.

[0057] In S7, the control unit 21 transmits the data collected by the vehicle 50 to the server device 30 via the communication unit 23, but only within the limited period. Specifically, the control unit 21 starts monitoring the signal output from the ignition sensor 56 mounted on the vehicle 50 and, until it detects that the ignition of the vehicle 50 has been turned off, collects one or more types of data from the three types of data (image, sound, and vehicle position) and transmits that one or more types of data to the server device 30 in real time via the communication unit 23. Images are acquired via the camera 53 mounted on the vehicle 50. Sound is acquired via the microphone 54 mounted on the vehicle 50. Vehicle position is acquired via the positioning device 55 mounted on the vehicle 50. In place of or in addition to one or more types of data from the three types of data (image, sound, and vehicle position), other types of data acquired via other sensors 57 mounted on the vehicle 50 may be collected.

[0058] If temporary permission information is obtained in S6 along with the response, in S7, the control unit 21 transmits the data of the type indicated by the temporary permission information, collected by the vehicle 50, to the server device 30 via the communication unit 23, only for the duration of the restriction period. For example, if "temporary consent" is selected for the transmission of all data, images, and audio outside the vehicle, but "temporary consent" is not selected for the transmission of vehicle location outside the vehicle, then all data except the vehicle location will be collected and transmitted to the server device 30 in real time until the ignition is turned off.

[0059] In S8, the control unit 21 transmits the data collected by the vehicle 50 to the server device 30 via the communication unit 23, regardless of whether it is within the restricted period. Specifically, the control unit 21 collects one or more types of data from the three types of data—image, sound, and vehicle 50 position—without monitoring the signal output from the ignition sensor 56, and transmits that one or more types of data to the server device 30 in real time via the communication unit 23. Similar to step S7, other types of data acquired via other sensors 57 mounted on the vehicle 50 may be collected in place of or in addition to one or more types of data from the three types of data—image, sound, and vehicle position.

[0060] If prior authorization information is included in the consent information, in S8, the control unit 21 transmits the data of the type indicated by the prior authorization information collected by the vehicle 50 to the server device 30 via the communication unit 23, regardless of whether it is within the restriction period or not. For example, if "consent" is transmitted from the server device 30 for the transmission of all data, images, and audio outside the vehicle, and "not consented" or "disagreement" is transmitted from the server device 30 for the transmission of the vehicle's location outside the vehicle, then all data except the vehicle's location is collected and transmitted to the server device 30 in real time.

[0061] If prior permission information is included in the consent information, the control unit 21 may ask the user 11 via the output device 51 mounted on the vehicle 50 whether to temporarily permit the use of data other than the type indicated by the prior permission information outside the vehicle. Specifically, the control unit 21 may output a screen via the display 58 asking the user 11 whether to temporarily permit the use of data other than the type indicated by the prior permission information outside the vehicle. Alternatively, the control unit 21 may output an audio message via the speaker asking the user 11 whether to temporarily permit the use of data other than the type indicated by the prior permission information outside the vehicle.

[0062] When the control unit 21 receives a response from the user 11 via the input device 52 mounted on the vehicle 50 indicating that it temporarily permits the use of data other than the types indicated by the pre-approved information outside the vehicle, it transmits the data other than the types indicated by the pre-approved information collected by the vehicle 50 to the server device 30 via the communication unit 23, but only for the period of restriction. Specifically, the control unit 21 starts monitoring the signal output from the ignition sensor 56 mounted on the vehicle 50 and collects data other than the types indicated by the pre-approved information until it detects that the ignition of the vehicle 50 has been turned off, and transmits that data to the server device 30 in real time via the communication unit 23. For example, if "consent" is sent from the server device 30 for the transmission of all data, images, and audio outside the vehicle, and "not consented" or "disagreement" is sent from the server device 30 for the transmission of vehicle location outside the vehicle, but "temporary consent" is selected for the transmission of vehicle location outside the vehicle, then all data, including the vehicle location, will be collected and transmitted to the server device 30 in real time until the ignition is turned off.

[0063] If temporary permission information is not obtained along with the response in S6, and prior permission information is not included in the consent information, the control unit 21 may, in S7, transmit to the server device 30, via the communication unit 23, a more restricted type of data than the data transmitted in S8, collected at the vehicle 50, only for the duration of the restriction period. That is, if the control unit 21 determines that user 11 has not agreed to the terms of service at the terminal device 60, and obtains a response from user 11, it may, in the duration of the restriction period, transmit to the server device 30, via the communication unit 23, a more restricted type of data than the data transmitted when it is determined that user 11 has previously agreed to the terms of service at the terminal device 60, collected at the vehicle 50. For example, in S7, all data except the vehicle position may be collected and transmitted to the server device 30 in real time until the ignition is turned off, and in S8, all data including the vehicle position may be collected and transmitted to the server device 30 in real time.

[0064] In S7 and S8, the data collected by the vehicle 50 is transmitted to the server device 30 along with various additional information. This additional information includes, for example, the identifier of user 11, the identifier of vehicle 50, or both, the time the data was acquired, the driving status of vehicle 50 at the time the data was acquired, or the type of data acquired. The data transmitted to the server device 30, along with the additional information, may be utilized by the operator of the server device 30. Alternatively, the data transmitted to the server device 30, along with the additional information, or with some of the additional information concealed, may be secondarily provided to a third party by the operator of the server device 30 and utilized by that third party.

[0065] This disclosure is not limited to the embodiments described above. For example, two or more blocks described in the block diagram may be combined, or one block may be divided. Instead of executing two or more steps described in the flowchart in chronological order as described, they may be executed in parallel or in a different order, depending on the processing capacity of the device performing each step, or as necessary. Other modifications are possible without departing from the spirit of this disclosure.

[0066] Some embodiments of the present disclosure are described below. However, it should be noted that the embodiments of the present disclosure are not limited to these. [Note 1] A communication unit that communicates with the server device, When a user riding in the vehicle is authenticated via an input device installed in the vehicle, consent information indicating whether the user has previously agreed to the terms of service on a terminal device associated with the user is received from the server device via the communication unit. Based on the received consent information, if it is determined that the user has not agreed to the terms of service on the terminal device, a screen or audio message will be output via the output device installed in the vehicle asking the user whether or not they temporarily agree to the terms of service. When the system obtains a response from the user via the input device indicating temporary agreement to the terms of service, it begins monitoring the signal output from the ignition sensor mounted on the vehicle. Until it detects that the vehicle's ignition has been turned off, it collects one or more of the three types of data—image, audio, and vehicle position—obtained via the camera, microphone, and positioning device mounted on the vehicle, and transmits the one or more of these data in real time to the server device via the communication unit. Control unit and An information processing device equipped with the following features. [Note 2] A communication unit that communicates with the server device, The communication unit receives consent information from the server device indicating whether the user in the vehicle has previously agreed to the terms of service using a terminal device linked to the user. If, based on the received consent information, it is determined that the user has not agreed to the terms of service on the terminal device, the user is asked via an output device installed in the vehicle whether or not to temporarily agree to the terms of service. When the system obtains a response from the user indicating temporary agreement to the terms of service via an input device installed in the vehicle, it transmits the data collected by the vehicle to the server device via the communication unit, but only for the limited period. Control unit and An information processing device equipped with the following features. [Note 3] The information processing apparatus according to Appendix 2, wherein the control unit, upon obtaining permission information indicating the type of data that the user temporarily permits to be used outside the vehicle, along with the response, transmits to the server device, via the communication unit, only within the restricted period, the type of data of the type indicated by the permission information that was collected in the vehicle. [Note 4] The information processing apparatus according to Appendix 2 or Appendix 3, wherein the control unit, based on the consent information, determines that the user has previously agreed to the terms of use on the terminal device, and transmits the data collected in the vehicle to the server device via the communication unit, regardless of whether it is within the restriction period or not. [Note 5] The consent information includes permission information indicating the types of data that the user has previously authorized for use outside the vehicle on the terminal device. The information processing device according to Appendix 4, wherein the control unit determines that the user has previously agreed to the terms of use on the terminal device, and transmits to the server device, via the communication unit, data of the type indicated by the permission information collected in the vehicle, regardless of whether it is within the restriction period or not. [Note 6] The control unit, If it is determined that the user has previously agreed to the terms of service on the terminal device, the output device will ask the user whether or not to temporarily permit the use of data other than the type indicated by the permission information outside the vehicle. The information processing device described in Appendix 5, which, upon obtaining a response from the user via the input device indicating temporary permission for the use of data other than the type indicated by the permission information outside the vehicle, transmits the data other than the type indicated by the permission information collected in the vehicle to the server device via the communication unit, only within the restricted period. [Note 7] The information processing apparatus according to any one of the appendices 4 to 6, wherein the control unit determines that the user has not agreed to the terms of use on the terminal device and obtains the response from the user, and transmits to the server device, via the communication unit, only within the restricted period, data of a more restricted type than the data collected in the vehicle that would be transmitted if the user had previously agreed to the terms of use on the terminal device. [Note 8] The consent information is information indicating whether the user has previously agreed to the terms of service on the terminal device, whether the user has not agreed to the terms of service on the terminal device, or whether the user has previously indicated on the terminal device that they do not agree to the terms of service. The information processing apparatus according to any one of the appendices 2 to 7, wherein the control unit determines, based on the consent information, that the user has previously expressed the intention on the terminal device, and does not ask the user whether or not to temporarily agree to the terms of use. [Note 9] The information processing device according to any one of the appendices 2 to 8, wherein the aforementioned restriction period is the period until the ignition of the vehicle is turned off. [Note 10] The information processing device described in any one of the appendices 2 to 8, wherein the aforementioned restriction period is the period corresponding to one trip of the vehicle. [Note 11] An information processing device described in any one of the items from Appendix 2 to Appendix 10, The server device and A system equipped with these features. [Note 12] A vehicle equipped with an information processing device as described in any one of the items from Appendix 2 to Appendix 10. [Note 13] A program that causes a computer to function as an information processing device as described in any one of the items in Appendix 2 to Appendix 10. [Note 14] The system receives consent information from a server device via the network, indicating whether a user in a vehicle has previously agreed to the terms of service using a terminal device linked to that user. If, based on the received consent information, it is determined that the user has not agreed to the terms of service on the terminal device, the vehicle will be asked via an output device whether or not to temporarily agree to the terms of service. If the user provides a response indicating temporary agreement to the terms of service via an input device installed in the vehicle, the data collected by the vehicle will be transmitted to the server device via the network, but only for a limited period. A method of confirming consent, including the method of consent. [Note 15] The consent confirmation method described in Appendix 14, wherein, upon obtaining permission information indicating the type of data that the user temporarily permits to be used outside the vehicle, along with the response, via the input device, the method transmits the data of the type indicated by the permission information, collected in the vehicle, to the server device via the network, only within the restricted period. [Note 16] The consent verification method according to Appendix 14 or Appendix 15, further comprising, if it is determined that the user has previously agreed to the terms of use on the terminal device based on the consent information, transmitting the data collected in the vehicle to the server device via the network, regardless of whether it is within the restriction period or not. [Note 17] The consent information includes permission information indicating the types of data that the user has previously authorized for use outside the vehicle on the terminal device. The consent confirmation method described in Appendix 16, which, if it is determined that the user has previously agreed to the terms of use on the terminal device, transmits to the server device, via the network, data of the type indicated by the permission information collected in the vehicle, regardless of whether it is within the restriction period. [Note 18] If it is determined that the user has previously agreed to the terms of service on the terminal device, the output device will ask the user whether or not to temporarily permit the use of data other than the type indicated by the permission information outside the vehicle, If, via the input device, a response is obtained from the user granting temporary permission for the use of data other than the type indicated by the permission information outside the vehicle, the data collected in the vehicle other than the type indicated by the permission information will be transmitted to the server device via the network only during the restricted period. The consent confirmation method described in Appendix 17, which further includes the above. [Note 19] The consent confirmation method described in any one of the appendices 16 to 18, wherein, if it is determined that the user has not agreed to the terms of use on the terminal device and the response is obtained from the user, the method transmits to the server device, via the network, only within the restricted period, data of a more restricted type than the data collected in the vehicle that would be transmitted if it were determined that the user had previously agreed to the terms of use on the terminal device. [Note 20] The consent information is information indicating whether the user has previously agreed to the terms of service on the terminal device, whether the user has not agreed to the terms of service on the terminal device, or whether the user has previously indicated on the terminal device that they do not agree to the terms of service. If, based on the consent information, it is determined that the user has previously expressed the intention on the terminal device, the consent confirmation method described in any one of the appendices 14 to 19 does not ask the user whether or not they temporarily agree to the terms of use. [Explanation of Symbols]

[0067] 10 Systems 11 users 20 Information Processing Devices 21 Control Unit 22 Memory section 23 Communications Department 30 Server Devices 40 Networks 50 vehicles 51 Output devices 52 Input devices 53 Cameras 54 Microphones 55 Positioning device 56 Ignition Sensor 57 Other sensors 58 displays 60 Terminal devices

Claims

1. A communication unit that communicates with the server device, When a user riding in the vehicle is authenticated via an input device installed in the vehicle, consent information indicating whether the user has previously agreed to the terms of service on a terminal device associated with the user is received from the server device via the communication unit. Based on the received consent information, if it is determined that the user has not agreed to the terms of service on the terminal device, a screen or audio message will be output via the output device installed in the vehicle asking the user whether or not they temporarily agree to the terms of service. When the system obtains a response from the user via the input device indicating temporary agreement to the terms of service, it begins monitoring the signal output from the ignition sensor mounted on the vehicle. Until it detects that the vehicle's ignition has been turned off, it collects one or more of the three types of data—image, audio, and vehicle position—obtained via the camera, microphone, and positioning device mounted on the vehicle, and transmits the one or more of these data in real time to the server device via the communication unit. Control unit and An information processing device equipped with the following features.

2. A communication unit that communicates with the server device, The communication unit receives consent information from the server device indicating whether the user in the vehicle has previously agreed to the terms of service using a terminal device linked to the user. If, based on the received consent information, it is determined that the user has not agreed to the terms of service on the terminal device, the user is asked via an output device installed in the vehicle whether or not to temporarily agree to the terms of service. When the system obtains a response from the user indicating temporary agreement to the terms of service via an input device installed in the vehicle, it transmits the data collected by the vehicle to the server device via the communication unit, but only for the limited period. Control unit and An information processing device equipped with the following features.

3. The information processing apparatus according to claim 2, wherein the control unit, upon obtaining permission information indicating the type of data that the user temporarily permits to be used outside the vehicle via the input device, along with the response, transmits to the server device, via the communication unit, only within the restricted period, the type of data of the type indicated by the permission information that was collected in the vehicle.

4. The information processing apparatus according to claim 2, wherein the control unit, based on the consent information, determines that the user has previously agreed to the terms of use on the terminal device, transmits the data collected in the vehicle to the server device via the communication unit, regardless of whether it is within the restriction period or not.

5. The consent information includes permission information indicating the types of data that the user has previously authorized for use outside the vehicle on the terminal device. The information processing apparatus according to claim 4, wherein, when the control unit determines that the user has previously agreed to the terms of use on the terminal device, it transmits to the server device, via the communication unit, data of the type indicated by the permission information collected in the vehicle, regardless of whether it is within the restriction period or not.

6. The control unit, If it is determined that the user has previously agreed to the terms of service on the terminal device, the output device will ask the user whether or not to temporarily permit the use of data other than the type indicated by the permission information outside the vehicle. The information processing apparatus according to claim 5, which, when it obtains a response from the user via the input device indicating that it temporarily permits the use of data other than the type indicated by the permission information outside the vehicle, transmits the data other than the type indicated by the permission information collected in the vehicle to the server device via the communication unit only during the restricted period.

7. The information processing apparatus according to claim 4, wherein the control unit determines that the user has not agreed to the terms of use on the terminal device and obtains the response from the user, and transmits to the server device, via the communication unit, only within the restricted period, data of a more restricted type than the data collected in the vehicle that would be transmitted if the user had previously agreed to the terms of use on the terminal device.

8. The consent information is information indicating whether the user has previously agreed to the terms of service on the terminal device, whether the user has not agreed to the terms of service on the terminal device, or whether the user has previously indicated on the terminal device that they do not agree to the terms of service. The information processing apparatus according to claim 2, wherein the control unit determines, based on the consent information, that the user has previously expressed the intention on the terminal device, and therefore does not ask the user whether or not to temporarily agree to the terms of use.

9. The information processing apparatus according to claim 2, wherein the restriction period is the period until the ignition of the vehicle is turned off.

10. The information processing apparatus according to claim 2, wherein the restriction period is a period corresponding to one trip of the vehicle.

11. An information processing device according to any one of claims 2 to 10, The server device and A system equipped with these features.

12. A vehicle equipped with an information processing device according to any one of claims 2 to 10.

13. A program that causes a computer to function as an information processing device according to any one of claims 2 to 10.

14. The system receives consent information from a server device via the network, indicating whether a user in a vehicle has previously agreed to the terms of service using a terminal device linked to that user. If, based on the received consent information, it is determined that the user has not agreed to the terms of service on the terminal device, the vehicle will be asked via an output device whether or not to temporarily agree to the terms of service. If the user provides a response indicating temporary agreement to the terms of service via an input device installed in the vehicle, the data collected by the vehicle will be transmitted to the server device via the network, but only for a limited period. A method of confirming consent, including the method of consent.

15. The consent confirmation method according to claim 14, wherein, via the input device, permission information indicating the type of data that the user temporarily permits to be used outside the vehicle is obtained along with the response, and only within the restricted period, the data of the type indicated by the permission information, collected in the vehicle, is transmitted to the server device via the network.

16. The consent confirmation method according to claim 14, further comprising, if it is determined that the user has previously agreed to the terms of use on the terminal device based on the consent information, transmitting the data collected in the vehicle to the server device via the network, regardless of whether it is within the restriction period or not.

17. The consent information includes permission information indicating the types of data that the user has previously authorized for use outside the vehicle on the terminal device. The consent confirmation method according to claim 16, wherein if it is determined that the user has previously agreed to the terms of use on the terminal device, the method transmits to the server device, via the network, data of the type indicated by the permission information collected in the vehicle, regardless of whether it is within the restriction period.

18. If it is determined that the user has previously agreed to the terms of service on the terminal device, the output device will ask the user whether or not to temporarily permit the use of data other than the type indicated by the permission information outside the vehicle, If, via the input device, a response is obtained from the user granting temporary permission for the use of data other than the type indicated by the permission information outside the vehicle, the data collected in the vehicle other than the type indicated by the permission information will be transmitted to the server device via the network only during the restricted period. The consent confirmation method according to claim 17, further comprising:

19. The consent confirmation method according to claim 16, wherein if it is determined that the user has not agreed to the terms of use on the terminal device and the response is obtained from the user, the method transmits to the server device, via the network, only within the restricted period, data of a more restricted type than the data collected in the vehicle that would be transmitted if it were determined that the user had previously agreed to the terms of use on the terminal device.

20. The consent information is information indicating whether the user has previously agreed to the terms of service on the terminal device, whether the user has not agreed to the terms of service on the terminal device, or whether the user has previously indicated on the terminal device that they do not agree to the terms of service. The consent confirmation method according to claim 14, wherein, based on the consent information, it is determined that the user has previously expressed the intention on the terminal device, and the user is not asked whether or not they temporarily agree to the terms of use.

Images