In-vehicle device and in-vehicle system

Abstract

To provide a novel technology for displaying authentication information of in-vehicle devices.SOLUTION: In S108, a sensor-side processor reads a piece of information for display, which is a piece of information for displaying authentication information, which is required to be displayed by law, on the display device, from an information database for display stored in a storage unit. Subsequently, in S109, the sensor-side processor determines whether the three pieces of display information read in S108 match. Having determined that the three pieces of information for display match, the sensor-side processor shifts the processing to S110, and outputs one of the three display information read in S108 on a display unit.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present disclosure relates to an in-vehicle device. [Background technology]

[0002] There are known products that are required by law to display information to prove that they comply with technical standards set forth in the law. One example of certification information that is required by law is the 'Technical Conformity Mark', which is required by the Radio Law of Japan. The Radio Law requires that products that use radio waves, such as mobile phones, display the 'Technical Conformity Mark'. For this reason, this type of product displays the 'Technical Conformity Mark' on the product itself.

[0003] However, in the case of small products, there is a problem in that it is difficult to secure space on the product body to display the technical conformity mark. Therefore, the Ministry of Internal Affairs and Communications' website states that it is permissible to display the ITE mark on an external display instead of on the product itself. [Prior art documents] [Non-patent literature]

[0004] [Non-Patent Document 1] How to display the technical conformity mark, [online], Ministry of Internal Affairs and Communications, [searched on February 4, 2021], Internet<URL: https: / / www.tele.soumu.go.jp / j / sys / equ / tech / gitekimark / index.htm> Summary of the Invention [Problem to be solved by the invention]

[0005] Among the on-board devices used in vehicles such as automobiles, products that use radio waves, such as millimeter wave radar devices, are subject to the Radio Law and are therefore required to display the Technical Conformity Mark. For this reason, this type of on-board device has the Technical Conformity Mark displayed on the main body of the on-board device.

[0006] However, as a result of detailed investigation by the inventor, it was found that as the size of the in-vehicle device continues to decrease, it may become difficult to secure a space for displaying the ITE mark on the in-vehicle device body in the future. Note that this problem is not limited to in-vehicle devices subject to the Radio Law, but may also occur in in-vehicle devices subject to other laws and regulations that require the display of certification information.

[0007] The present disclosure provides a novel technique for displaying authentication information of an in-vehicle device. [Means for solving the problem]

[0008] One aspect of the present disclosure is an in-vehicle device mounted on a vehicle for use, comprising a storage unit (23) and a display processing unit (21, S110, S113, S115). The storage unit is configured to store display information, which is information for displaying authentication information that is required by law on a display device. The display processing unit is configured to execute processing for displaying the authentication information on the in-vehicle display device, which is a display device mounted on the vehicle, using the display information stored in the storage unit. With this configuration, the authentication information of the in-vehicle device can be displayed on the in-vehicle display device. [Brief description of the drawings]

[0009] [Figure 1] FIG. 1 is a block diagram showing a configuration of an in-vehicle system. [Diagram 2] FIG. 2 is a block diagram showing a configuration of a millimeter wave radar sensor in a state where it is connected to an external display device. [Diagram 3] 13 is a flowchart of an authentication display process executed by the millimeter wave radar sensor. [Figure 4]FIG. 11 is a diagram showing the contents of a display information database. [Diagram 5] 13 is a flowchart of a request determination process executed by the HMI processing device. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0010] Hereinafter, exemplary embodiments of the present disclosure will be described with reference to the drawings. [1. Configuration] The in-vehicle system 1 shown in Fig. 1 is mounted on a vehicle. The in-vehicle system 1 has a function of displaying authentication information of the millimeter-wave radar sensor 2 on an in-vehicle display device, which is a display device mounted on the vehicle. The authentication information is information that is required to be displayed by law. Since the millimeter-wave radar sensor 2 is a product that uses radio waves, the Radio Act requires that the millimeter-wave radar sensor 2 display authentication information. For this reason, the millimeter-wave radar sensor 2 is configured to be able to display the authentication information on the in-vehicle display device as information proving that it complies with the technical standards set forth in the Radio Act and has obtained authorization to use radio waves.

[0011] The in-vehicle system 1 includes a millimeter wave radar sensor 2, an HMI processing device 3, a position estimation unit 4, and an operation unit 5. The millimeter wave radar sensor 2 is connected to an ECU 6 and is configured to be able to communicate with the HMI processing device 3 via the ECU 6. Specifically, in the vehicle of this embodiment, a plurality of ECUs 6 to 8 including the ECU 6 to which the millimeter wave radar sensor 2 is connected, and the HMI processing device 3 are connected to be able to communicate with each other via an in-vehicle network such as a CAN. Note that the millimeter wave radar sensor 2 may be configured to be able to communicate with the HMI processing device 3 without going through the ECU. HMI is an abbreviation for Human Machine Interface. Also, CAN is an abbreviation for Controller Area Network. CAN is a registered trademark. Also, ECU is an abbreviation for Electronic Control Unit.

[0012] The millimeter wave radar sensor 2 is a sensor for detecting objects around the vehicle by transmitting and receiving radio waves in the millimeter wave band. The millimeter wave radar sensor 2 includes a sensor side processing unit 21, a communication unit 22, and a storage unit 23.

[0013] The sensor-side processing unit 21 is mainly composed of a well-known microcomputer having a CPU, a ROM, a RAM, etc. (not shown). The CPU executes a program stored in a non-transient physical storage medium such as a ROM. The program is executed to execute a method corresponding to the program. In this embodiment, display software, which is a program for causing the sensor-side processing unit 21 to execute an authentication display process (to be described later), is stored in a storage unit 23 (to be described later). The sensor-side processing unit 21 may include one microcomputer or multiple microcomputers. In addition, the method of realizing the functions of the sensor-side processing unit 21 is not limited to software, and some or all of the functions may be realized using one or multiple hardware. For example, when the above functions are realized by an electronic circuit that is hardware, the electronic circuit may be realized by a digital circuit, an analog circuit, or a combination of these.

[0014] The communication unit 22 is configured to be wired to an external device, specifically, an external display device such as the ECU 6 or an external display device, thereby enabling communication between the external device and the sensor side processing unit 21.

[0015] The storage unit 23 includes a plurality of memories 231. In this embodiment, the storage unit 23 includes three memories 231. A display information database, which will be described later, is stored in the memory 231. As described above, the storage unit 23 stores display software.

[0016] The HMI processing device 3 includes an HMI side processing unit 31 and a display unit 32 . The HMI side processing unit 31 is mainly composed of a well-known microcomputer having a CPU, ROM, RAM, etc. (not shown). The CPU executes a program stored in a non-transient real storage medium such as a ROM. The program is executed to execute a method corresponding to the program. In this embodiment, a program for causing the HMI side processing unit 31 to execute a request determination process (to be described later) is stored. The HMI side processing unit 31 may include one microcomputer or multiple microcomputers. In addition, the method for realizing the function of the HMI side processing unit 31 is not limited to software, and some or all of the functions may be realized using one or multiple hardware. For example, when the above function is realized by an electronic circuit that is hardware, the electronic circuit may be realized by a digital circuit, an analog circuit, or a combination of these.

[0017] The display unit 32 is an in-vehicle display device installed in the interior of the vehicle. In this embodiment, the display unit 32 is a display capable of displaying a map image for navigation and the like. The position estimation unit 4 is configured to estimate the current position of the vehicle and includes a GPS receiver 41 and a map database .

[0018] The GPS receiver 41 is a device for receiving GPS signals from GPS satellites. Note that GPS is an abbreviation for Global Positioning System. Map database 42 is a database configured to store map data.

[0019] The operation unit 5 is configured to receive operations of a user who is in the vehicle. For example, a user operation may be a display request operation that requests the display of authentication information. In this embodiment, the operation unit 5 is a push button installed on the steering wheel of the vehicle.

[0020] The millimeter wave radar sensor 2 not only displays authentication information on a display unit 32 serving as an in-vehicle display device when incorporated in the in-vehicle system 1 as shown in Fig. 1 (hereinafter referred to as an in-vehicle state), but also displays authentication information on an external display device 9 connected to it so as to be able to communicate, even when the millimeter wave radar sensor 2 is in a standalone state not mounted on a vehicle as shown in Fig. 2 (hereinafter referred to as a standalone state), i.e., not incorporated in the in-vehicle system 1. In this embodiment, the millimeter wave radar sensor 2 is configured to be able to communicate with the external display device 9 by a wired connection via a cable. Note that, for example, a personal computer equipped with a display is used as the external display device 9.

[0021] [2. Processing Overview] Next, an overview of the authentication display process executed by the sensor-side processing unit 21 of the millimeter wave radar sensor 2 will be described. The authentication display process is a process for displaying authentication information on a display device. In this embodiment, the authentication display process is executed to display the authentication information on the display unit 32 serving as an in-vehicle display device or the external display device 9.

[0022] The millimeter wave radar sensor 2 is configured to be capable of executing a process for displaying the authentication information on the display device in two display modes according to the type of user, that is, whether the user who is trying to view the authentication information is a general user or a professional user. The general user is assumed to be a general user who does not have specialized knowledge about the authentication information. For example, a passenger of a vehicle equipped with the millimeter wave radar sensor 2 is considered as a general user. On the other hand, the professional user is assumed to be a professional user who has more specialized knowledge about the authentication information than the general user. For example, a person belonging to a management organization that manages the operation of the authentication information, such as whether the authentication information is legally displayed on a product that is required to display the authentication information, or a person belonging to a manufacturer of the millimeter wave radar sensor 2 is considered as a professional user.

[0023] In the display mode for general users, the authentication information is displayed on the display device, and in the display mode for professional users, supplementary information is displayed on the display device together with the authentication information. The supplementary information is information about the authentication information for professional users that is not displayed in the display mode for general users. The supplementary information is information that is not required to be displayed by laws and regulations, specifically the Radio Law, but is used to determine whether the authentication information is legally displayed on the display device. The state in which the authentication information is legally displayed refers to a state in which the authentication information is displayed so as to satisfy display requirements based on laws and regulations, such as the display content and display size of the authentication information. That is, in the display mode for general users, the minimum information required to be displayed by laws and regulations is displayed on the display device, and in the display mode for professional users, information for confirming the legality of the display of the authentication information is also displayed on the display device.

[0024] This is because general users and professional users may have different purposes for viewing the authentication information. For example, while it is sufficient for a general user to be able to confirm that the millimeter wave radar sensor 2 is a product that complies with technical standards set by laws and regulations, a professional user may also need to confirm that the authentication information is displayed lawfully.

[0025] Furthermore, the millimeter wave radar sensor 2 of this embodiment is configured to be capable of executing a process for displaying the authentication information on the display device in a plurality of display modes in accordance with the laws and regulations of a plurality of countries. This is because it is assumed that the millimeter wave radar sensor 2 will be used in a plurality of countries, and the display modes in accordance with the laws and regulations that require the display of the authentication information may differ from country to country.

[0026] [3. Processing] Next, the authentication display process executed by the sensor-side processing unit 21 of the millimeter-wave radar sensor 2 will be described with reference to the flowchart of Fig. 3. The sensor-side processing unit 21 executes the authentication display process shown in Fig. 3 at a predetermined cycle when the millimeter-wave radar sensor 2 is supplied with power. When the millimeter-wave radar sensor 2 is mounted on the vehicle, it receives power from the vehicle battery, and when it is standalone, it receives power from the external display device 9 by being connected to the external display device 9 by wire.

[0027] First, in S101, the sensor-side processing unit 21 detects whether the display software has been tampered with. In this embodiment, the sensor-side processing unit 21 determines whether the display software has been tampered with by comparing a hash value of the display software in a normal state that is stored in advance with a hash value calculated from the display software at the current time. Specifically, if the two hash values ​​match, it is determined that the display software has not been tampered with, and if the two hash values ​​do not match, it is determined that the display software has been tampered with. If the sensor-side processing unit 21 determines that the display software has not been tampered with, it shifts the process to S102.

[0028] In S102, the sensor-side processing unit 21 determines whether the millimeter-wave radar sensor 2 is mounted on the vehicle. In this embodiment, the millimeter-wave radar sensor 2 is determined to be mounted on the vehicle when it is detected that the millimeter-wave radar sensor 2 is connected to the ECU 6. When the sensor-side processing unit 21 determines in S102 that the millimeter-wave radar sensor 2 is mounted on the vehicle, the process proceeds to S103.

[0029] In S103, the sensor-side processing unit 21 judges whether a display request has been input from the HMI processing unit 3. The display request is a request to execute a process for displaying the authentication information on the display unit 32 as an in-vehicle display device in a display mode according to an instruction from the user. The display request includes user information indicating the type of user who is judged by the HMI processing unit 3 to be trying to view the authentication information, and country information indicating the country corresponding to the current location of the vehicle. The circumstances under which a display request is input to the sensor-side processing unit 21 will be described later in the description of the request judgment process. If the sensor-side processing unit 21 judges in S103 that a display request has not been input from the HMI processing unit 3, it ends the authentication display process of FIG. 3.

[0030] On the other hand, if the sensor-side processing unit 21 determines in S103 that a display request has been input from the HMI processing device 3, it shifts the process to S104. In S104, the sensor side processing unit 21 determines the type of user based on the user information included in the display request.

[0031] Next, in S105, the sensor side processing unit 21 determines the country in which the millimeter wave radar sensor 2 is used (hereinafter, referred to as the country of use) based on the country information included in the display request, and then proceeds to S108.

[0032] On the other hand, if the sensor side processing unit 21 determines in S102 that the millimeter wave radar sensor 2 is not mounted on the vehicle, that is, if it determines that the millimeter wave radar sensor 2 is connected to the external display device 9 in a standalone state so as to be able to communicate with the external display device 9, the processing proceeds to S106.

[0033] In S106, the sensor-side processing unit 21 determines the type of the user as a professional user. Next, in S107, the sensor-side processing unit 21 determines the country of use. In this embodiment, when the millimeter wave radar sensor 2 is connected to the external display device 9 in a standalone state so as to be able to communicate with the external display device 9, it is assumed that the user inputs information indicating the country of use via the external display device 9. After determining the country of use based on the information input by the user, the sensor-side processing unit 21 transitions to the process at S108.

[0034] In S108, the sensor-side processing unit 21 reads out display information from the display information database stored in the storage unit 23. The display information is information for displaying authentication information and the like on the display device, and in this embodiment, is image information representing a display image. The display information database is a database for managing multiple types of display information. In this embodiment, as shown in FIG. 4, the display information database manages multiple types of display information corresponding to each of the user types and countries. The display information corresponding to the user type refers to display information for displaying on the display device in a display mode for general users, or display information for displaying on the display device in a display mode for professional users. Moreover, the display information corresponding to a certain country refers to display information for displaying on the display device in a display mode in accordance with the laws and regulations of the country.

[0035] The detailed contents of the display information will be described with reference to FIG. 4, taking as examples several countries in which the display format differs according to the laws and regulations that require the display of authentication information, among the countries in which the display information is managed in the display information database.

[0036] First, the display information corresponding to country X will be described as an example in which the authentication information includes a certification mark. A certification mark is a mark that certifies that a product complies with technical standards set forth in laws and regulations and has obtained approval to use radio waves. For example, the technical conformity mark and the CE mark are known as authentication marks. The authentication mark in country X is the CE mark. In the example of country X, the display information corresponding to general users shows only the authentication information, which is composed of the authentication mark "CE", the model number of the millimeter wave radar sensor 2 "MODEL:AAAAAA", and the manufacturer name of the millimeter wave radar sensor 2 "BBBBBB". However, in FIG. 4, a series of the same alphabets means obscured letters.

[0037] On the other hand, the display information corresponding to the professional user represents supplementary information in addition to the certification information, and the supplementary information is composed of the dimensions of the certification mark "CCC" and information on the display requirements for the display size of the certification mark "DD...DD". The information on the display requirements for the display size of the certification mark includes the reason why the certification mark displayed on the display device satisfies the display requirements. For example, in the section listing "D", an explanatory text such as "The dimensions of the certification mark are CCC. The display size requirement is EEE or more, so this is met." is displayed. In other words, the supplementary information in the example of country X is information for determining whether the certification mark satisfies the display requirements for the display size and is legally displayed. In addition to displaying the certification mark on the product, if it is mandatory to display it in a manual such as an owner's manual, in addition to the above explanatory text, for example, an explanatory text such as "The certification mark is printed in the manual at the size you see." may be displayed in the section listing "D". In this way, the user can easily determine whether the requirements for displaying the certification information in the manual are met.

[0038] Next, as an example of a case where the display requirements for authentication information have changed in accordance with recent legal amendments, display information corresponding to country Y will be described. In the example of country Y, the display information corresponding to general users indicates only authentication information, and the authentication information is composed of the model number of the millimeter wave radar sensor 2, "MODEL:AAAAAA", and the manufacturer name of the millimeter wave radar sensor 2, "BBBBBB".

[0039] On the other hand, the display information corresponding to the professional user represents supplementary information in addition to the authentication information, and the supplementary information is information on the amendment of the law, "FF...FF". Information on amendment of the law includes information indicating whether the product was approved before or after the amendment of the law, that is, information indicating whether the authentication information of the product is displayed based on the display requirements of the old law or the new law. For example, the "F" list may display an explanatory text such as "This product was approved on January 1, 20xx, so this authentication information is displayed based on the new law." In other words, in countries where laws have been amended in recent years, the display requirements for authentication information may change due to the amendment of the law, and both products that display authentication information based on the old law and products that display authentication information based on the new law may be in circulation. The supplementary information in the example of Country Y is information for determining whether the authentication information is legally displayed according to the time of approval when the display requirements for authentication information have changed due to the amendment of the law.

[0040] Next, as an example of country Z where the display of certification information is not required by law, the display information corresponding to country Z will be explained. In the example of country Z, the display information corresponding to general users only shows notification information "GG...GG" to notify that the product complies with the technical standards set forth in the law. However, since notification information is not required to be displayed by law, the notification information is simple information. For example, in the section listing "G", an explanatory text such as "There is no certification information. This product has been approved under the Radio Law in country Z" is displayed. In other words, notification information is information used instead of certification information to determine whether a product complies with the technical standards set forth in the law in countries where the display of certification information is not required.

[0041] On the other hand, the display information corresponding to the professional user represents supplementary information in addition to the notification information, and the supplementary information represents information "HH...HH" indicating the reason why the authentication information is not displayed. Examples of information indicating the reason why the authentication information is not displayed include information indicating the presence or absence of a law that requires the display of the authentication information. For example, the "H" string displays an explanatory text such as "Since there is no obligation to display authentication information in country Z, authentication information is not displayed." In other words, the supplementary information in the example of country Z is information for determining that the state in which authentication information is not displayed is not illegal in a country where the display of authentication information is not required.

[0042] In this embodiment, the same display information database is redundantly stored in each of the three memories 231 included in the storage unit 23. The sensor-side processing unit 21 reads out display information corresponding to the type and country of the user determined in S104 to S105 or S106 to S107 from each of the three display information databases.

[0043] Next, in S109, the sensor-side processing unit 21 determines whether the three pieces of display information read in S108 match. In this embodiment, the sensor-side processing unit 21 compares the contents of the three pieces of display information, and if no difference is detected, determines that the three pieces of display information match. If the sensor-side processing unit 21 determines that the three pieces of display information match, it transitions to S110.

[0044] In S110, the sensor-side processing unit 21 outputs one of the three pieces of display information read out in S108 to the display device. In the authentication display process of Fig. 3, the display device to which the sensor-side processing unit 21 outputs the display information and error information (described later) is the display unit 32 when the millimeter-wave radar sensor 2 is mounted on the vehicle (i.e., YES in S102), and is the external display device 9 when the millimeter-wave radar sensor 2 is in a standalone state (i.e., NO in S102). The sensor-side processing unit 21 then ends the authentication display process of Fig. 3.

[0045] On the other hand, if the sensor side processing unit 21 determines in S109 that at least one of the three pieces of display information read out in S does not match, the process proceeds to S111. In S111, the sensor-side processing unit 21 determines whether two of the three pieces of display information read in S108 match. If the sensor-side processing unit 21 determines in S111 that two of the three pieces of display information read in S108 match, the process proceeds to S112.

[0046] In S112, the sensor-side processing unit 21 overwrites one of the two pieces of display information determined to match in S111 with the remaining piece of display information determined to not match. Next, in S113, the sensor-side processing unit 21 outputs one of the two pieces of display information determined to match in S111 to the display device. The sensor-side processing unit 21 then ends the authentication display process in FIG.

[0047] On the other hand, if the sensor-side processing unit 21 determines in S111 that none of the three pieces of display information read out in S108 match each other, it shifts the process to S114. In S114, the sensor-side processing unit 21 executes error processing. In this embodiment, the sensor-side processing unit 21 executes processing for outputting image information for displaying an error message as error information to the display device as the error processing in S114. The error message is a message that notifies the user that the authentication information will not be displayed. The sensor-side processing unit 21 then ends the authentication display processing in FIG. 3.

[0048] As described above, in this embodiment, when it is determined that at least one of the three pieces of display information stored redundantly does not match, an error process is executed. This is because it is considered that the content of at least one of the three pieces of display information has changed due to tampering, damage, or the like. The change in the content of the display information includes a change in the value of the display information and the disappearance of the value itself. In other words, the same display information stored redundantly is compared with each other to determine an abnormality in the display information. However, when two of the three pieces of display information match, it is considered that the content of the two pieces of display information is likely to have not changed. Therefore, in this case, the error process is exceptionally not executed, and one of the two pieces of display information is overwritten with the remaining one piece of display information. In other words, by identifying the display information whose content is likely to have not changed and overwriting the remaining display information with the identified display information, the process for displaying the authentication information is continued without executing the error process.

[0049] On the other hand, if the sensor-side processing unit 21 determines in S101 that the display software has been tampered with, it shifts the process to S115. In S115, the sensor-side processing unit 21 executes error processing. In this embodiment, the sensor-side processing unit 21 executes processing for outputting image information for displaying a confirmation message as error information to the display device as the error processing in S115. The confirmation message is a message that prompts the user to check the status of the display software. This is because if the authentication display processing is realized by tampered display software, there is a possibility that incorrect authentication information will be displayed. The sensor-side processing unit 21 then ends the authentication display processing of FIG. 3.

[0050] Next, the request determination process executed by the HMI-side processor 31 of the HMI processing device 3 will be described with reference to the flowchart of Fig. 5. The HMI-side processor 31 executes the request determination process shown in Fig. 5 at a predetermined cycle when the accessory switch of the vehicle is turned on.

[0051] First, in S201, the HMI-side processing unit 31 determines whether the above-mentioned display request operation has been performed by a user in the vehicle. In this embodiment, when a display request operation is received via the operation unit 5, it is determined that the display request operation has been performed by the user. In other words, it is determined whether the user in the vehicle is attempting to view the authentication information on the display unit 32. When the HMI-side processing unit 31 determines that the display request operation has not been performed by the user, it ends the request determination process of FIG. 5.

[0052] On the other hand, if the HMI-side processing unit 31 determines that a display request operation has been performed by the user, it shifts the process to S202. In S202, the HMI-side processing unit 31 judges whether a password has been input by the user via the operation unit 5. Specifically, when the password input by the user matches a password set in advance for identifying a specialized user, it is judged that the password has been input. Since the password is information that only the specialized user can know, when it is judged that the password has been input, it is judged that the type of the user attempting to view the authentication information is a specialized user, and when it is judged that the password has not been input, it is judged that the type of the user attempting to view the authentication information is a general user. In other words, the presence or absence of input of a password represents an instruction from the user indicating whether the type of the user attempting to view the authentication information on the display unit 32 is a general user or a specialized user. In this way, the general user and the specialized user are assumed as the users who view the authentication information on the display unit 32. For this reason, in the authentication display process of FIG. 3, when it is judged in S102 that the millimeter wave radar sensor 2 is in the vehicle-mounted state, it is judged in S104 that the type of the user is a general user or a specialized user. On the other hand, only the specialized user is assumed as the user who views the authentication information on the external display device 9. 3, if it is determined in S102 that the millimeter wave radar sensor 2 is connected in a standalone state to the external display device 9 so as to be able to communicate with it, the user type is determined to be a professional user in S106. If the HMI-side processing unit 31 determines in S202 that the user has input a password via the operation unit 5, the processing proceeds to S203.

[0053] In S203, the HMI-side processing unit 31 identifies the country corresponding to the current position of the vehicle. In this embodiment, the HMI-side processing unit 31 identifies the country corresponding to the current position of the vehicle based on the GPS signal received by the GPS receiver 41 of the position estimation unit 4 and the map data stored in the map database 42 of the position estimation unit 4. Note that the map data may be acquired, for example, from an external server.

[0054] Next, in S204, the HMI-side processing unit 31 outputs the above-mentioned display request to the millimeter-wave radar sensor 2. The display request is output in S204 when it is determined in S202 that the type of the user attempting to view the authentication information is a professional user. Therefore, the display request output in S204 includes information indicating that the type of the user determined to be attempting to view the authentication information is a professional user as user information. In addition, information indicating the country identified in S203 is included in the display request as country information. For example, if it is determined that the country corresponding to the current position of the vehicle is country A, the display request output in S204 is a request to execute processing for displaying the authentication information on the display unit 32 in a display mode for professional users and in accordance with the laws and regulations of country A. The HMI-side processing unit 31 then shifts the process to S207.

[0055] On the other hand, if the HMI-side processing unit 31 determines in S202 that the user has not input a password via the operation unit 5, it shifts the process to S205. In S205, the HMI-side processing unit 31 identifies the country corresponding to the current position of the vehicle, similarly to S203.

[0056] Next, in S206, the HMI-side processing unit 31 outputs a display request to the millimeter wave radar sensor 2, similarly to S204. The case where the display request is output in S206 is when it is determined in S202 that the type of the user attempting to view the authentication information is a general user. Therefore, the display request output in S206 includes information indicating that the type of the user determined to be attempting to view the authentication information is a general user as user information. In addition, information indicating the country identified in S205 is included in the display request as country information. The HMI-side processing unit 31 then transitions to the process in S207.

[0057] In S207, the HMI-side processing unit 31 inputs image information from the millimeter-wave radar sensor 2. Specifically, the input image information is display information or error information output by the sensor-side processing unit 21 of the millimeter-wave radar sensor 2 in response to a display request.

[0058] Next, in S208, the HMI-side processing unit 31 causes the display unit 32 to display an image representing the image information input in S207. If the input image information is display information, authentication information is displayed on the display unit 32 in a display mode according to the display request. On the other hand, if the input image information is error information, an error message or a confirmation message is displayed on the display unit 32. The HMI-side processing unit 31 then terminates the request determination process of FIG. 5.

[0059] That is, when the millimeter wave radar sensor 2 is mounted on the vehicle, the request determination process of FIG. On the other hand, when the millimeter wave radar sensor 2 is connected in a standalone state to the external display device 9 so as to be able to communicate with it, an image represented by the image information input from the millimeter wave radar sensor 2 to the external display device 9 is displayed on the external display device 9. When the input image information is display information, authentication information is displayed on the external display device 9 in a display mode aimed at professional users and in accordance with the laws and regulations of the country of use input by the user. On the other hand, when the input image information is error information, an error message or a confirmation message is displayed on the external display device 9.

[0060] [4. Effects] According to the embodiment described above in detail, the following effects can be obtained. (4a) The millimeter wave radar sensor 2 executes a process for displaying the authentication information on the display unit 32 serving as an in-vehicle display device, using the display information stored in the memory unit 23. According to this configuration, the authentication information of the millimeter wave radar sensor 2 is displayed on the display unit 32, so that the requirements for displaying the authentication information can be met without securing a space for displaying the authentication information on the millimeter wave radar sensor 2 body.

[0061] (4b) The millimeter wave radar sensor 2 determines whether the user attempting to view the authentication information is a general user or a specialized user. The storage unit 23 stores display information for displaying the authentication information on the display device in a display mode for general users and display information for displaying the authentication information on the display device in a display mode for specialized users. If the millimeter wave radar sensor 2 determines that the user is a general user, it executes processing for displaying the authentication information in a display mode for general users, and if it determines that the user is a specialized user, it executes processing for displaying the authentication information in a display mode for specialized users. With this configuration, the user can view the authentication information in a display mode that suits the user.

[0062] (4c) In the display mode for the specialized user, supplementary information for the specialized user regarding the authentication information, which is not displayed in the display mode for the general user, is displayed. According to this configuration, the user can view the authentication information in a display mode that matches the purpose of viewing the authentication information. That is, the purpose of the general user is assumed to be to confirm that the millimeter wave radar sensor 2 is a product that complies with the technical standards set by the law, while the purpose of the specialized user is assumed to be to determine that the authentication information is legally displayed in addition to that. For this reason, it is considered that the general user may feel bothered when information other than the authentication information is displayed, while the specialized user is considered to desire that the supplementary information be displayed together with the authentication information. In this regard, according to the present embodiment, the display mode for the specialized user displays supplementary information that is not displayed in the display mode for the general user, so that the user can view the authentication information in a display mode that matches the purpose of viewing the authentication information.

[0063] (4d) When the millimeter-wave radar sensor 2 is connected to the external display device 9 in a standalone state so as to be able to communicate with the external display device 9, the millimeter-wave radar sensor 2 executes a process for displaying the authentication information on the external display device 9 in a display mode for a specialized user. With this configuration, regardless of the presence or absence of a configuration for inputting an instruction from the user indicating the type of user, the user can visually recognize the authentication information in a display mode suited to the purpose of visualizing the authentication information. That is, since the millimeter-wave radar sensor 2 is an in-vehicle device, it is assumed that the sensor is usually in a vehicle-mounted state. For this reason, it is considered that a user who visually recognizes the authentication information of the millimeter-wave radar sensor 2 usually visually recognizes the authentication information when the millimeter-wave radar sensor 2 is in a vehicle-mounted state. On the other hand, when the millimeter-wave radar sensor 2 is connected to the external display device 9 in a standalone state, a special situation is assumed in which the authentication information is displayed when the millimeter-wave radar sensor 2 is not mounted on the vehicle. For this reason, it is assumed that a user who intends to visually recognize the authentication information when the millimeter-wave radar sensor 2 is in a standalone state is a specialized user, not a general user such as a vehicle occupant. Furthermore, in a standalone state where the millimeter wave radar sensor 2 may be connected only to an external display device, unlike an in-vehicle state where a configuration for inputting instructions from a user is provided, it is assumed that there is no configuration for inputting instructions from a user indicating the type of user. In this embodiment, when the millimeter wave radar sensor 2 is connected to the external display device 9 in a standalone state so as to be able to communicate with the sensor, the authentication information is displayed in a display mode aimed at a specialized user even if an instruction indicating the type of user is not input. Therefore, regardless of the presence or absence of a configuration for inputting instructions from a user indicating the type of user, the user can view the authentication information in a display mode suited to the purpose of viewing the authentication information.

[0064] (4e) The storage unit 23 stores display information for displaying the authentication information in a display mode conforming to the laws and regulations of a plurality of countries. The millimeter wave radar sensor 2 determines the country of use and executes a process for displaying the authentication information in a display mode conforming to the laws and regulations of the determined country of use. With this configuration, even if the millimeter wave radar sensor 2 is used in a plurality of countries, it is possible to satisfy the display requirements based on the laws and regulations of the country of use.

[0065] (4f) In the storage unit 23, the same display information is redundantly stored in three memories 231. The millimeter wave radar sensor 2 determines an abnormality in the display information by comparing the same display information that is redundantly stored with each other. With such a configuration, it is possible to detect an abnormality in the display information with a simple configuration.

[0066] (4g) When the millimeter wave radar sensor 2 determines that the display software has been tampered with, it executes an error process. With this configuration, it is possible to prevent the authentication information from being displayed normally.

[0067] (4h) In the in-vehicle system 1 of this embodiment, the HMI processing device 3 receives an instruction from the user indicating whether the user is a general user or a professional user, and requests the millimeter wave radar sensor 2 to execute processing for displaying the authentication information in a display mode corresponding to the instruction. Based on the request, the millimeter wave radar sensor 2 determines whether the user attempting to view the authentication information is a general user or a professional user. With this configuration, the user can select a display mode suitable for the user for displaying the authentication information.

[0068] (4i) In the in-vehicle system 1 of this embodiment, the HMI processing device 3 identifies the country corresponding to the current location of the vehicle, and requests the millimeter wave radar sensor 2 to execute processing for displaying the authentication information in a display format conforming to the laws and regulations of the identified country. The millimeter wave radar sensor 2 determines the country of use based on the request. With this configuration, the user can visually recognize the authentication information displayed in a display format conforming to the laws and regulations of the country of use without having to input the country of use.

[0069] In this embodiment, the millimeter wave radar sensor 2 corresponds to an in-vehicle device, the HMI side processing unit 31 corresponds to a display control device, and the display unit 32 corresponds to an in-vehicle display device. S101 corresponds to the process of the abnormality detection unit, S104 and S106 correspond to the process of the user determination unit, S105 and S107 correspond to the process of the country determination unit, S110, S113, and S115 correspond to the process of the display processing unit, and S109 corresponds to the process of the abnormality determination unit. S202 corresponds to the process of the input unit, S203 and S205 correspond to the process of the identification unit, and S204 and S206 correspond to the process of the user-specific request unit and the country-specific request unit.

[0070] 5. Other embodiments Although the embodiments of the present disclosure have been described above, it goes without saying that the present disclosure is not limited to the above-described embodiments and can take various forms.

[0071] (5a) In the above embodiment, the display information is image information representing the entire display image, but the display information may be composed of a plurality of image information representing each part constituting the display image. For example, the display information may be composed of image information representing a common part between the display image in the display mode for general users and the display image in the display mode for professional users, and image information representing a different part. In the above example of country X, the display image in the display mode for general users represents authentication information, and the display image in the display mode for professional users represents supplementary information in addition to the authentication information. In this case, the common part is a part representing the authentication information, and the different part is a part representing the supplementary information. That is, in the example of country X, image information representing the common part is used to display the display image in the display mode for general users, and image information representing the common part and image information representing the different part are used to display the display image in the display mode for professional users. According to such a configuration, the overlapping part of the contents of the display information is reduced compared to when the display information is image information representing the entire display image, so that the amount of data of the display information stored in the storage unit 23 can be reduced.

[0072] (5b) In the above embodiment, the display information is image information, but the display information may be information for generating image information. For example, the display information may be character information representing characters. Specifically, for example, character information representing explanatory text such as supplemental information may be stored as display information, and image information representing the explanatory text may be generated based on the display information.

[0073] (5c) The method of determining the type of user is not limited to the determination method exemplified in the above embodiment. For example, the type of user may be determined based on whether the millimeter wave radar sensor 2 is mounted on the vehicle. Specifically, for example, when the millimeter wave radar sensor 2 is mounted on the vehicle, the user may be a general user, and when the millimeter wave radar sensor 2 is in a standalone state, the user may be a professional user. Also, for example, even when the millimeter wave radar sensor 2 is in a standalone state, the type of user may be determined based on an instruction indicating the type of user input by the user.

[0074] (5d) The method of determining the country of use is not limited to the determination method exemplified in the above embodiment. For example, even when the millimeter wave radar sensor 2 is mounted on the vehicle, the country of use may be determined based on an input by a user. Also, for example, even when the millimeter wave radar sensor 2 is in a standalone state, the country of use may be determined based on a current position estimated using a GPS receiver or the like.

[0075] (5e) The display mode of the authentication information is not limited to the display mode exemplified in the above embodiment. For example, the types of display modes according to the type of user are not limited to two types, namely, a display mode for general users and a display mode for professional users, but may be three or more types, or may be one type that is not distinguished by the type of user. Also, for example, the display mode according to the laws and regulations of multiple countries is not limited to multiple types, but may be one type. When the country of use is limited to multiple countries that have common display requirements for authentication information, one type of display mode according to the laws and regulations of the multiple countries can be used. Also, for example, when the country of use is limited to one country, one type of display mode according to the laws and regulations of the one country can be used. As described above, when one type of display information is available, the country of use does not need to be determined.

[0076] (5f) In the above embodiment, the configuration in which the same display information is redundantly stored in three memories 231 is exemplified, but the area in which the same display information is redundantly stored may be, for example, three areas in one memory 231. In addition, the number of identical display information redundantly stored is not limited to three. When four or more pieces of display information are stored, a process of overwriting the remaining display information with display information whose contents are likely to have not changed can be executed, as in the above embodiment. Specifically, when one piece of display information that matches with the largest number of pieces of display information is identified, the display information may be identified as display information whose contents are likely to have not changed. In addition, the number of pieces of display information that match with each other may be equal to or greater than a predetermined ratio of the number of pieces of display information redundantly stored, which may be added to the conditions for identifying the display information as display information whose contents are likely to have not changed. For example, the condition may be added that the number of pieces of display information that match with each other is more than half. In addition, for example, the condition may be added that there is only one piece of display information that does not match, that is, the remaining pieces of display information except for one piece match each other. When display information whose contents are likely to have changed is not identified, an error process may be executed.

[0077] (5g) In the above embodiment, when at least one of the multiple pieces of display information stored redundantly does not match, the display information with the most matches is specified as the display information with the highest probability of not changing content, and the remaining display information is overwritten with the display information. However, the overwriting process is not limited to this. For example, a process may be performed in which master display information stored to be more reliable than other display information is prepared, and display information that does not match the master display information is overwritten with the master display information. Also, for example, the overwriting process may be prevented from being executed, and an error process may be executed whenever at least one of the multiple pieces of display information does not match.

[0078] (5h) In the above embodiment, a configuration was given in which whether or not the display software has been tampered with was detected based on the hash value of the display software. However, there are no particular limitations on the method for detecting whether or not the display software has been tampered with.

[0079] (5i) In the above embodiment, a configuration was given in which a confirmation message was displayed instead of authentication information when it was determined that the display software had been tampered with. However, for example, a configuration in which the confirmation message was displayed together with the authentication information may also be used.

[0080] (5j) In the above embodiment, the error processing is different between an abnormality in the display information and an abnormality in the display software. However, the error processing may be the same. (5k) In the above embodiment, a configuration in which software tampering is detected as a software abnormality is exemplified. However, a configuration in which software abnormalities other than software tampering are detected in addition to or instead of software tampering may also be used.

[0081] (5l) In the above embodiment, the push buttons provided on the steering wheel of the vehicle are exemplified as the operation unit 5, but the operation unit 5 is not limited to this. For example, by using a display device equipped with a touch panel as the in-vehicle display device, the touch panel may be used as the operation unit 5.

[0082] (5m) In the above embodiment, a display capable of displaying a map image for navigation and the like is exemplified as the in-vehicle display device, but the in-vehicle display device is not limited to this. For example, the in-vehicle display device may be another display device mounted on a vehicle, such as a meter display or a head-up display.

[0083] (5n) In the above embodiment, a general-purpose display device is exemplified as the external display device 9. However, the external display device 9 may be, for example, a display device dedicated to displaying authentication information. (5o) In the above embodiment, a configuration was described in which the millimeter wave radar sensor 2 is supplied with power from the vehicle battery or the external display device 9, but the power source that supplies power to the millimeter wave radar sensor 2 is not particularly limited.

[0084] (5p) In the above embodiment, the millimeter wave radar sensor 2 is connected to the external device by wire. However, the millimeter wave radar sensor 2 may be connected to the external device wirelessly. (5q) In the above embodiment, the millimeter wave radar sensor 2 is exemplified as an in-vehicle device that displays the authentication information, but the in-vehicle device is not limited to this. For example, the in-vehicle device may be another in-vehicle device that is subject to the Radio Law. Also, for example, the in-vehicle device may be an in-vehicle device that is subject to a law other than the Radio Law that requires the display of authentication information.

[0085] (5r) The function of one component in the above embodiments may be distributed among multiple components, or the functions of multiple components may be integrated into one component. Also, part of the configuration of the above embodiments may be omitted. Also, at least part of the configuration of the above embodiments may be added to or substituted for the configuration of another of the above embodiments. [Explanation of symbols]

[0086] 1...vehicle-mounted system, 2...millimeter wave radar sensor, 3...HMI processing device, 21...sensor-side processing unit, 23...storage unit, 31...HMI-side processing unit.

Claims

1. An in-vehicle device for use in a vehicle, A storage unit (23) configured to store display information, which is information for displaying authentication information required by law on a display device; a display processing unit (21, S110, S113, S115) configured to execute a process for displaying the authentication information on an in-vehicle display device that is a display device mounted on the vehicle, using the display information stored in the storage unit; Equipped with The authentication information is further provided with a user determination unit (21, S104, S106) configured to determine whether a user who wishes to view the authentication information is a general user or a professional user, the storage unit is configured to store, as the display information, information for displaying the authentication information in a display manner oriented toward the general user and information for displaying the authentication information in a display manner oriented toward the specialized user; the display processing unit is configured to, when the user determination unit determines that the user is the general user, execute a process for displaying the authentication information in a display manner oriented toward the general user, and when the user determination unit determines that the user is the specialist user, execute a process for displaying the authentication information in a display manner oriented toward the specialist user; The user determination unit (21, S106) is configured to determine that a user attempting to view the authentication information is the professional user when the in-vehicle device is communicatively connected to an external display device that is an external display device while not mounted on the vehicle.

2. The in-vehicle device according to claim 1 , an in-vehicle device configured such that, in a display mode for the expert user, supplemental information for the expert user regarding the authentication information, which is not displayed in a display mode for the general user, is displayed.

3. The vehicle-mounted device according to claim 1, In the display mode for the expert user, supplementary information for the expert user regarding the authentication information, which is not displayed in the display mode for the general user, is displayed; and The supplementary information is information for determining whether a certification mark, which certifies that approval has been obtained to use radio waves, meets the display size requirements and is lawfully displayed on the in-vehicle device.

4. The vehicle-mounted device according to claim 1, In the display mode for the expert user, supplementary information for the expert user regarding the authentication information, which is not displayed in the display mode for the general user, is displayed; and The supplemental information is information for determining whether the authentication information is lawfully displayed based on the time when approval for using radio waves was obtained.

5. The vehicle-mounted device according to claim 1, In the display mode for the expert user, supplementary information for the expert user regarding the authentication information, which is not displayed in the display mode for the general user, is displayed; and The supplemental information is information for determining whether a state in which the authentication information is not displayed is an illegal state when displaying the authentication information is not mandatory.

6. The in-vehicle device according to any one of claims 1 to 5, A country determination unit (21, S105, S107) configured to determine a country in which the in-vehicle device is used, the storage unit is configured to store, as the display information, information for displaying the authentication information in a display manner in accordance with laws and regulations of a plurality of countries; The display processing unit is configured to execute a process for displaying the authentication information in a display mode in accordance with laws and regulations of the country determined by the country determination unit.

7. An in-vehicle device for use in a vehicle, comprising: A storage unit (23) configured to store display information, which is information for displaying authentication information required by law on a display device; a display processing unit (21, S110, S113, S115) configured to execute a process for displaying the authentication information on an in-vehicle display device that is a display device mounted on the vehicle, using the display information stored in the storage unit; Equipped with The display device further includes an abnormality determination unit (21, S109) configured to determine an abnormality in the display information stored in the storage unit, the storage unit is configured to store the same display information redundantly in a plurality of areas; The abnormality determination unit is configured to determine an abnormality in the display information by comparing the same display information redundantly stored in the multiple areas.

8. The in-vehicle device according to any one of claims 1 to 7, The vehicle further includes an abnormality detection unit (21, S101) configured to detect an abnormality in software that realizes a process for displaying the authentication information on the in-vehicle display device, The display processing unit (21, S115) is configured to execute a process for causing the in-vehicle display device to display information indicating that an abnormality has occurred when the abnormality detection unit detects an abnormality.

9. The in-vehicle device according to any one of claims 1 to 8, The in-vehicle device, wherein the regulation is the Radio Law.

10. The in-vehicle device according to any one of claims 1 to 9, The vehicle-mounted device further comprises a millimeter wave radar.

11. The vehicle-mounted device according to claim 10, An in-vehicle device configured not to execute a specified process that is performed when an abnormality occurs in the display information when a majority of the display information redundantly stored in the memory unit matches.

12. An on-vehicle device (2) according to any one of claims 1 to 5, A display control device (3) mounted on the vehicle; Equipped with The display control device includes: an input unit (31, S202) configured to input an instruction from a user indicating whether the user is a general user or a specialized user; a user-specific request unit (31, S204, S206) configured to request the in-vehicle device to execute a process for displaying the authentication information on the in-vehicle display device in a display mode according to an instruction input by the input unit; Equipped with The user determination unit (21, S104) is configured to determine whether the user attempting to view the authentication information is the general user or the professional user based on a request from the user-specific request unit.

13. An in-vehicle system including an in-vehicle device and a display control device mounted on the vehicle, The in-vehicle device includes: A storage unit (23) configured to store display information, which is information for displaying authentication information required by law on a display device; a display processing unit (21, S110, S113, S115) configured to execute a process for displaying the authentication information on an in-vehicle display device that is a display device mounted on the vehicle, using the display information stored in the storage unit; a country determination unit (21, S105, S107) configured to determine a country in which the in-vehicle device is used, the storage unit is configured to store, as the display information, information for displaying the authentication information in a display manner in accordance with laws and regulations of a plurality of countries; the display processing unit is configured to execute a process for displaying the authentication information in a display mode in accordance with laws and regulations of the country determined by the country determination unit, The display control device includes: an identification unit (31, S203, S205) configured to identify a country corresponding to a current location of the vehicle; a country-specific request unit (31, S204, S206) configured to request the in-vehicle device to execute a process for displaying the authentication information on the in-vehicle display device in a display mode conforming to the laws and regulations of the country specified by the specification unit; Equipped with The country determination unit (21, S105) is configured to determine a country in which the in-vehicle device is used based on a request from the country-specific request unit.

Images