Vehicle control device, control method, and program

Abstract

To facilitate grasping a situation of authority to use a vehicle control function.SOLUTION: A control device for a vehicle includes: a vehicle control section which, at least partly on the basis that a user of the vehicle has authority to use a specific vehicle control function, executes the vehicle control function; a first acquisition section which acquires a first instruction about the vehicle control function from the user by using a first operation section temporarily presented to the user; a second acquisition section which acquires a second instruction about the vehicle control function from the user by using a second operation section permanently presented to the user; a display control section which displays the first operation section in appearance indicating that the first instruction cannot be given when the user does not have the use authority; and a notification control section which notifies the user that the second instruction cannot be given in response to operation of the second operation section when the user does not have the use authority.SELECTED DRAWING: Figure 3

Description

[Technical field]

[0001] The present invention relates to a vehicle control device, a control method, and a program. [Background technology]

[0002] There is a known business model that allows a specific function of a vehicle to be executed only when a user has the authority to use it. Patent Document 1 describes making a function available in multiple vehicles based on the license data of a user. Patent Document 2 describes allowing execution of automatic driving control of a vehicle when a driver's license is present in the vehicle. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Patent Publication No. 2022-140011 [Patent Document 2] JP 2016-130091 A Summary of the Invention [Problem to be solved by the invention]

[0004] An operation related to a vehicle control function requiring a usage authority may be performed using various types of operation units such as a soft button or a hard button. The method of presenting information to a user may differ depending on the type of the operation unit. An object of some aspects of the present invention is to provide a technology for easily understanding the status of the usage authority of a vehicle control function. [Means for solving the problem]

[0005] According to some embodiments, a vehicle control device includes: a vehicle control means for executing a vehicle control function based at least in part on a fact that a user of the vehicle has authority to use the specific vehicle control function; and a first acquisition means for acquiring a first instruction related to the vehicle control function from the user using a first operation unit temporarily presented to the user. A button provided on the steering wheel of the vehicle. Using the second operation unit, the vehicle control function To carry out a second acquisition means for acquiring a second instruction from the user; a display control means for displaying the first operation unit in an appearance indicating that the first instruction cannot be performed when the user does not have the usage authority; and a means for notifying the user that the second instruction cannot be performed in response to the second operation unit being operated when the user does not have the usage authority. No. 1 A notification control means; A second notification control means for notifying the user that the vehicle control function is executable, using a notification unit provided in the steering wheel; Equipped with The vehicle control means executes the vehicle control function at least partially based on the second operation unit being operated in a state in which the vehicle control function is executable. , a control device is provided. Effect of the Invention

[0006] Some embodiments facilitate understanding of the status of usage rights for vehicle control functions. [Brief description of the drawings]

[0007] [Figure 1] FIG. 1 is a block diagram illustrating an example configuration of a vehicle according to some embodiments. [Diagram 2] FIG. 1 is a block diagram illustrating an example of the configuration of a function providing system according to some embodiments. [Diagram 3] FIG. 4 is a flow diagram illustrating an example operation of a vehicle according to some embodiments. [Figure 4] FIG. 2 is a schematic diagram illustrating an example of the configuration of the periphery of a steering wheel according to some embodiments. [Diagram 5] FIG. 4 is a schematic diagram illustrating an example of the configuration of a meter display unit according to some embodiments. [Figure 6] FIG. 13 is a schematic diagram illustrating an example of the configuration of a setting screen according to some embodiments. [Figure 7] FIG. 2 is a block diagram illustrating an example of a functional configuration of a controller of a vehicle according to some embodiments. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0008] Hereinafter, the embodiments will be described in detail with reference to the accompanying drawings. Note that the following embodiments do not limit the invention according to the claims, and not all combinations of features described in the embodiments are essential to the invention. Two or more features among the multiple features described in the embodiments may be arbitrarily combined. In addition, the same reference numbers are used for the same or similar configurations, and duplicated descriptions are omitted.

[0009] FIG. 1 is a block diagram of a control device CNT according to an embodiment of the present invention, and a schematic diagram of a vehicle V which is an application example of the control device CNT. In FIG. 1, the vehicle V is shown in a plan view and a side view. The vehicle V of this embodiment is, as an example, a four-wheeled sedan-type passenger vehicle, and may be, for example, a parallel hybrid vehicle. The vehicle V is not limited to a four-wheeled passenger vehicle, and may be a saddle-type vehicle (motorcycle, motor three-wheeler), or a large vehicle such as a truck or a bus.

[0010] The control device CNT includes a controller 1 which is an electronic circuit that executes control of the vehicle V including driving assistance of the vehicle V. The controller 1 includes a plurality of ECUs (Electronic Control Units). For example, an ECU is provided for each function of the control device CNT. Each ECU includes a processor represented by a CPU (Central Processing Unit), a storage device such as a semiconductor memory, an interface with an external device, and the like. The storage device stores a program executed by the processor, data used by the processor for processing, and the like. The interface includes an input / output interface and a communication interface. Each ECU may include a plurality of processors, a plurality of storage devices, and a plurality of interfaces. The program stored in the storage device may be stored in the storage device by being installed in the control device CNT using a storage medium such as a CD-ROM. In addition to or instead of this, the program stored in the storage device may be downloaded from an external server through wireless communication.

[0011] The controller 1 controls the drive (acceleration) of the vehicle V by controlling a power unit (power plant) 2. The power unit 2 is a traveling drive unit that outputs a driving force to rotate the drive wheels of the vehicle V, and may include an internal combustion engine, a motor, and an automatic transmission. The motor can be used as a drive source to accelerate the vehicle V, and can also be used as a generator during deceleration, etc. (regenerative braking).

[0012] In this embodiment, the controller 1 controls the output of the internal combustion engine and the motor and changes the gear of the automatic transmission in response to the driving operation of the driver detected by the operation detection sensor 2a provided on the accelerator pedal AP and the operation detection sensor 2b provided on the brake pedal BP, and the vehicle speed of the vehicle V detected by the rotation speed sensor 2c. The automatic transmission is provided with a rotation speed sensor 2c that detects the rotation speed of the output shaft of the automatic transmission as a sensor that detects the running state of the vehicle V. The vehicle speed of the vehicle V can be calculated from the detection result of the rotation speed sensor 2c.

[0013] The controller 1 controls the braking (deceleration) of the vehicle V by controlling the hydraulic device 3. The driver's braking operation on the brake pedal BP is converted into hydraulic pressure in the brake master cylinder BM and transmitted to the hydraulic device 3. The hydraulic device 3 is an actuator capable of controlling the hydraulic pressure of the hydraulic oil supplied to the brake devices 3a (e.g., disc brake devices) provided on each of the four wheels, based on the hydraulic pressure transmitted from the brake master cylinder BM.

[0014] The controller 1 can control the braking of the vehicle V by controlling the driving of an electromagnetic valve or the like provided in the hydraulic device 3. The controller 1 can also configure an electric servo brake system by controlling the distribution of the braking force by the brake device 3a and the braking force by regenerative braking of the motor provided in the power unit 2. The controller 1 may turn on the brake lamps 3b during braking.

[0015] The controller 1 controls the steering of the vehicle V by controlling the electric power steering device 4. The electric power steering device 4 includes a mechanism for steering the front wheels in response to the driver's driving operation (steering operation) with respect to the steering wheel ST. The electric power steering device 4 includes a drive unit 4a that exerts a driving force (sometimes referred to as steering assist torque) for assisting the steering operation or automatically steering the front wheels of the vehicle V. The drive unit 4a includes a motor as a drive source. The electric power steering device 4 also includes a steering angle sensor 4b that detects the steering angle, a torque sensor 4c that detects the steering torque borne by the driver (called steering burden torque and distinguished from steering assist torque), and the like.

[0016] The controller 1 controls an electric parking brake device 3c provided on the rear wheels of the vehicle V. The electric parking brake device 3c includes a mechanism for locking the rear wheels. The controller 1 can control the locking and unlocking of the rear wheels by the electric parking brake device 3c.

[0017] The controller 1 controls an information output device 5 that notifies the inside of the vehicle of information. The information output device 5 includes, for example, a display device 5a that notifies the driver of information by image and / or a voice output device 5b that notifies the driver of information by voice. The display device 5a includes, for example, a display device provided on an instrument panel or a display device provided on a steering wheel ST. The display device 5a may also include a head-up display. The information output device 5 may notify the occupant of information by vibration or light.

[0018] The controller 1 receives instruction inputs from a passenger (e.g., the driver) via the input device 6. The input device 6 is disposed in a position operable by the driver, and includes, for example, a switch group 6a with which the driver issues instructions to the vehicle V, and / or a turn signal lever 6b for operating a turn signal (blinker).

[0019] The controller 1 recognizes and determines the current position and course (attitude) of the vehicle V. In this embodiment, the vehicle V is provided with a gyro sensor 7a, a GNSS (Global Navigation Satellite System) sensor 7b, and a communication device 7c. The gyro sensor 7a detects the rotational motion (yaw rate) of the vehicle V. The GNSS sensor 7b detects the current position of the vehicle V. The communication device 7c wirelessly communicates with a server that provides map information and traffic information to acquire this information. In this embodiment, the controller 1 determines the course of the vehicle V based on the detection results of the gyro sensor 7a and the GNSS sensor 7b, and sequentially acquires map information related to the course from the server via the communication device 7c and stores it in a database 7d (storage device). The vehicle V may be provided with other sensors for detecting the state of the vehicle V, such as an acceleration sensor that detects the acceleration of the vehicle V.

[0020] The controller 1 executes driving assistance for the vehicle V based on the detection results of various detection units provided in the vehicle V. The vehicle V is provided with surrounding detection units 8a-8b, which are external sensors that detect the outside (surrounding conditions) of the vehicle V, and interior detection units 9a-9b, which are interior sensors that detect the conditions inside the vehicle (the conditions of the occupants (particularly the driver)). The controller 1 can grasp the surrounding conditions of the vehicle V based on the detection results of the surrounding detection units 8a-8b, and execute driving assistance in accordance with the surrounding conditions. In addition, the controller 1 can determine whether the driver is performing a predetermined operational obligation imposed on the driver when executing driving assistance based on the detection results of the interior detection units 9a-9b.

[0021] The surroundings detection unit 8a is an imaging device that captures an image in front of the vehicle V (hereinafter, may be referred to as the forward camera 8a), and is attached, for example, to the inside of the passenger compartment of the windshield at the front of the roof of the vehicle V. The controller 1 can extract the contours of targets and lane markings (white lines, etc.) on the road by analyzing the image captured by the forward camera 8a.

[0022] The surroundings detection unit 8b is a millimeter wave radar (hereinafter, may be referred to as radar 8b) that detects targets around the vehicle V using radio waves and detects (measures) the distance to the target and the direction (azimuth) of the target relative to the vehicle V. In the example shown in Fig. 1, five radars 8b are provided, one at the center of the front of the vehicle V, one at each of the left and right corners of the front, and one at each of the left and right corners of the rear.

[0023] The surrounding detection unit installed in the vehicle V is not limited to the above configuration, and the number of cameras and the number of radars may be changed, or a LIDAR (Light Detection and Ranging) that detects targets around the vehicle V may be installed.

[0024] The in-vehicle detection unit 9a is an imaging device that captures images of the interior of the vehicle (hereinafter, may be referred to as the in-vehicle camera 9a), and is attached, for example, to the inside of the vehicle compartment at the front part of the roof of the vehicle interior V. In the case of this embodiment, the in-vehicle camera 9a is a driver monitor camera that captures images of the driver (for example, the driver's eyes and face). The controller 1 can determine the driver's line of sight and the direction of the driver's face by analyzing the image (driver's facial image) captured by the in-vehicle camera 9a.

[0025] The in-vehicle detection unit 9b is a grip sensor that detects the driver's grip of the steering wheel ST (hereinafter, may be referred to as grip sensor 9b), and is provided, for example, on at least a part of the steering wheel ST. As the in-vehicle detection unit, the torque sensor 4c that detects the steering torque of the driver may be used.

[0026] Driving assistance for the driver of the vehicle V includes, for example, acceleration / deceleration assistance, lane keeping assistance, and lane change assistance. Acceleration / deceleration assistance is a driving assistance (ACC: Adaptive Cruise Control) in which the controller 1 automatically controls the power unit 2 and the hydraulic device 3 based on the detection results of the surroundings detection unit 8 and map information, thereby automatically controlling the acceleration / deceleration of the vehicle V within a predetermined vehicle speed. With ACC, when there is a preceding vehicle, it is also possible to accelerate or decelerate the vehicle V so as to maintain a distance from the preceding vehicle. ACC reduces the operational burden on the driver of acceleration / deceleration operations (operations of the accelerator pedal AP and the brake pedal BP).

[0027] The lane keeping assist is a driving assist system (LKAS) in which the controller 1 automatically controls the electric power steering device 4 based on the detection results of the surrounding detection unit 8 and map information to keep the vehicle V inside the lane. The LKAS reduces the driver's burden of steering (operation of the steering wheel ST) while the vehicle V is traveling straight.

[0028] The lane change assist is a driving assist (ALC: Auto Lane Changing, ALCA: Active Lane Change Assist) in which the controller 1 automatically controls the power unit 2, the hydraulic device 3, and the electric power steering device 4 based on the detection result of the surrounding detection unit 8 and map information to automatically change the driving lane of the vehicle V to an adjacent lane. ALC is lane change assist based on a system request, and ALCA is lane change assist based on an occupant request. Examples of system requests include a case where a navigation system that guides the vehicle V to a destination requests the vehicle V to change lanes, and a case where the vehicle V overtakes a preceding vehicle regardless of whether route guidance is provided. When making an occupant request, the driver instructs the vehicle to change lanes by operating an input device (e.g., the turn signal lever 6b). ALC or ACLA reduces the driver's operational burden of accelerating, decelerating, and steering the vehicle V when changing lanes.

[0029] Other examples of driving assistance control may include, for example, a collision mitigation brake that assists in avoiding a collision with an object on the road (e.g., a pedestrian, another vehicle, or an obstacle) by controlling the hydraulic device 3, an ABS function, traction control, and / or attitude control of the vehicle V.

[0030] In some embodiments, the controller 1 selectively executes one of three modes 1 to 3 having different driving assistance contents. The mode may be called a state. In the following, a case where ACC, LKAS, ALC, or ACLA is provided as driving assistance will be described, but the driving assistance contents of each of the modes 1 to 3 are not limited to ACC, LKAS, ALC, or ACLA, and may include other driving assistance contents. Also, only one of ALC and ACLA may be provided.

[0031] Mode 1 is a manual driving mode in which none of ACC, LKAS, ALC, and ACLA are executed, and is a mode based on the manual driving operation of the driver. This is the mode that is initially set when the vehicle V is started.

[0032] Mode 2 and Mode 3 are modes that are set on the condition that the occupant issues a driving assistance command in Mode 1. Mode 2 is a normal assistance mode in which ACC and LKAS can be executed. ALC and ACLA are not executed in Mode 2.

[0033] Mode 3 is an extended assistance mode in which all of ACC, LKAS, ALC, and ACLA can be executed. The extended assistance mode may also be called AHD (Advanced Highway Driving) mode. Mode 3 is a mode on the premise that the controller 1 has acquired high-precision map information including information on the road (traveling path) on which the vehicle V travels. The high-precision map information is map information having more accurate information on road information than map information (sometimes called normal map information) used for route guidance to a destination. Specifically, the high-precision map information may have at least position information within a lane. This can be used to control the position of the vehicle V in the vehicle width direction. The high-precision map information may further include information on the detailed shape of the road, such as the presence or absence of a curve, the curvature, the increase or decrease of lanes, and the gradient. The high-precision map information is prepared for each region or road section, for example, and there may be regions or road sections in which high-precision map information is not provided.

[0034] In mode 3, lane change assistance (ALC and ACLA) is performed by using this high-precision map information. By utilizing position information within the lane included in the high-precision map information and the current position of the vehicle V detected by the GNSS sensor 7b, reliable and smooth lane change assistance can be performed while recognizing other vehicles in the vicinity from the external detection results of the detection units 8a to 8b. Lane change assistance may be performed without using high-precision map information.

[0035] Both mode 2 and mode 3 are modes in which ACC and LKAS can be executed, but mode 3 is capable of executing ACC and LKAS using high-precision map information. The controller 1 can obtain road information ahead of the vehicle V from the high-precision map information and control the acceleration / deceleration and lateral position of the vehicle V, thereby providing the occupants with more reliable and smoother ACC and LKAS.

[0036] A vehicle control function such as the driving assistance function according to the above-mentioned modes 2 and 3 may be executable by a provider of the vehicle control function (e.g., a manufacturer of the vehicle V) granting a usage authority of the vehicle control function to a user of the vehicle V. The user of the vehicle V may be called an occupant of the vehicle V when the user is in the vehicle V. Also, the user of the vehicle V may be called a driver of the vehicle V when the user is driving the vehicle V. In the following description, the user of the vehicle V is simply referred to as a user. The usage authority of the vehicle control function may be granted, for example, by the user entering into a contract with the provider of the vehicle control function after starting to use the vehicle V. With reference to FIG. 2, a configuration example of a function providing system 200 for providing a vehicle control function requiring usage authority will be described.

[0037] The function providing system 200 may include, for example, a vehicle V, a user management server 201, a map distribution server 202, and a user device 203. In the example of FIG. 2, only one vehicle V is shown, but the function providing system 200 may include a plurality of vehicles. Similarly, the function providing system 200 may include a plurality of user devices 203. The vehicle V, the user management server 201, the map distribution server 202, and the user device 203 may be capable of communicating with each other through a network 204. The network 204 may include a local area network (LAN), a wide area network (WAN), the Internet, a cellular network, or any combination thereof. The communication between the vehicle V and the network 204 is typically wireless communication.

[0038] The user management server 201 manages information about users. For example, the user management server 201 may grant a user authority to use a vehicle control function in response to a request from the user. The request to grant the authority to use may be made by the user using a user device 203. The user device 203 is a device used by the user, and may be, for example, a personal computer, a mobile phone, a smartphone, a tablet computer, or the like. The request to grant the authority to use may be made by the user using a vehicle V.

[0039] The request for granting the usage authority may include the user's account information and the identification information of the vehicle (e.g., vehicle V) for which the vehicle control function is to be executable. The user's account information is information for the user management server 201 to uniquely identify the user. The identification information of the vehicle may be a vehicle identification number (VIN). The request for granting the usage authority may include a designation of the type of vehicle control function for which the usage authority is to be granted. The vehicle control function for which the usage authority is to be granted may be the entire AHD described above, a part of the functions therein (e.g., ALC or ALCA), another driving assistance function, or a function other than the driving assistance function.

[0040] In response to a request from a user, the user management server 201 grants the user the right to use a vehicle control function specified by the user for a vehicle (e.g., vehicle V) specified by the user. The granting of the right to use may be for a fee or free of charge. The user management server 201 may set an expiration date for the right to use. When the expiration date has passed, the right to use is cancelled. The user may be able to extend the expiration date by updating the right to use before it expires. The user management server 201 may store, for each user to be managed, the user's account information, the vehicle identification information, the vehicle control functions that the user has the right to use, and the expiration date of the right to use (if set), in association with each other.

[0041] The vehicle V (specifically, its controller 1, the same applies below) may inquire of the server whether the user has the right to use a specific vehicle control function. This inquiry may include the user's account information and the identification information of the vehicle V. In response to receiving the inquiry including the user's account information and the identification information of the vehicle V, the user management server 201 refers to the user information managed by itself and determines whether the user has the right to use associated with this information. If the user has the right to use, the user management server 201 transmits information indicating the vehicle control functions that the user has the right to use to the vehicle V. If an expiration date is set for this right to use, the user management server 201 also transmits this expiration date to the vehicle V. If the user does not have the right to use, the user management server 201 may transmit information indicating that there is no vehicle control function that the user has the right to use to the vehicle V. In this way, the vehicle V obtains from the user management server 201 the information indicating whether the user has the right to use a specific vehicle control function and the expiration date, if set. The vehicle V may store this information and use it for subsequent processing.

[0042] The vehicle V may transmit information indicating the status of the vehicle V to the user management server 201. The information indicating the status of the vehicle V may include, for example, information regarding a malfunction occurring in the vehicle V. The user management server 201 may notify the user device 203 using the information indicating the status of the vehicle V. For example, when the user management server 201 receives information from the vehicle V indicating that a malfunction has occurred in the vehicle V, the user management server 201 may notify the user device 203 of this.

[0043] The map distribution server 202 is an example of a server that provides information used by the vehicle V to execute a specific vehicle control function. The map distribution server 202 may provide map information (e.g., high-precision map information as described above) as such information. The map distribution server 202 may provide the map information to the vehicle V based at least on the fact that the user has usage authority to use the map information.

[0044] For example, in order to obtain map information from the map distribution server 202, the vehicle V may transmit information indicating that the user has the authority to use the map information to the map distribution server 202. This information may be a token provided by the user management server 201. When the map distribution server 202 determines that the user has the authority to use the map information, it may transmit the map information to the vehicle V.

[0045] An example of a method for the controller 1 of the vehicle V to initiate execution of a particular vehicle control function will be described with reference to Fig. 3. Each step of the method of Fig. 3 may be performed by a processor of the controller 1 executing a program stored in a memory of the controller 1. Alternatively, some or all of the steps of the method of Fig. 3 may be performed by a dedicated integrated circuit such as an application specific integrated circuit (ASIC).

[0046] The method of FIG. 3 may be initiated in response to the power (e.g., ignition power) of the vehicle V being turned on. Furthermore, the method of FIG. 3 may be initiated in response to a user logging in to the vehicle V using his / her own account information. For example, the user may input his / her own account information into the input device 6. The controller 1 may determine whether the account information input by the user matches the account information registered in the vehicle V. If the account information matches, the controller 1 may execute subsequent processing using the matching account information. This makes it possible to prevent the vehicle control function from being executed when a person other than a user having usage authority uses the vehicle V.

[0047] In S301, the controller 1 determines whether an instruction to execute a specific vehicle control function has been received from the user. If it is determined that an instruction to execute a specific vehicle control function has been received from the user ("YES" in S301), the controller 1 transitions the process to S302, and otherwise ("NO" in S301) repeats S301. In this manner, the controller 1 waits for an instruction to execute a specific vehicle control function. The specific vehicle control function may be, for example, a driving assistance function of the vehicle V, and may be, for example, the above-mentioned ACC, LKAS, ALC, ACLA, or a combination thereof.

[0048] In S302, the controller 1 determines whether the user has the authority to use the specified vehicle control function. If it is determined that the user has the authority to use the specified vehicle control function ("YES" in S302), the controller 1 transitions the process to S303, and otherwise ("NO" in S302), the controller 1 transitions the process to S307. If it is determined that the user does not have the authority to use the specified vehicle control function, the controller 1 notifies the user in S307 that the specified vehicle control function cannot be executed. Furthermore, the controller 1 may notify the user that the user does not have the authority. In this case, the controller 1 may guide the user on a method for acquiring the authority (for example, a method for applying for a usage contract).

[0049] The controller 1 may obtain information indicating whether the user has the authority to use the specific vehicle control function from the user management server 201 before S301 is executed, and store the information in the memory of the controller 1. For example, the controller 1 may send an inquiry to the user management server 201 as to whether the user has the authority to use the specific vehicle control function in response to the ignition power of the vehicle V being turned on. The controller 1 may determine that the user does not have the authority to use the specific vehicle control function if the expiration date of the authority to use the function has passed. A program for realizing the specific vehicle control function may be stored in the vehicle V in advance (for example, when the vehicle V is manufactured), or may be downloaded to the vehicle V after the authority to use this function is granted to the user.

[0050] In S303, the controller 1 determines whether the user has consented to the controller 1's use of the personal information. If it is determined that the user has consented to the use of the personal information ("YES" in S303), the controller 1 transitions the process to S304, and otherwise ("NO" in S303), transitions to S307. If it cannot be confirmed that the user has consented to the use of the personal information, the controller 1 notifies the user in S307 that the instructed vehicle control function cannot be executed. Furthermore, the controller 1 may notify the user that it cannot be confirmed that the user has consented to the use of the personal information. In this case, the controller 1 may guide the user on a method for consenting to the use of the personal information (for example, the controller 1 may present the user with a screen for consenting to the use of the personal information).

[0051] Consent regarding the use of the personal information may be given to the vehicle V, and the controller 1 may store the consent in memory and use it for subsequent processing. Alternatively or in addition, consent regarding the use of the personal information may be given to the user management server 201 through the user device 203. The controller 1 may obtain information indicating that the user has consented to the use of the personal information from the user management server 201 and store it in memory for subsequent processing.

[0052] Depending on the content of the vehicle control function, the user's personal information may be used. For example, when using high-precision map information as described above, the current position of the vehicle V is provided to the map distribution server 202. The current position of the vehicle V coincides with the current position of the user, and may therefore be considered personal information. In addition, an image of the user captured by the in-vehicle camera 9a may also be considered personal information. In order to use such personal information, depending on the country, the user's consent may be required by law. If the instructed vehicle control function does not use personal information, S303 may be omitted. If the vehicle V is used in a country that does not have a law requiring the user's consent to use personal information, S303 may be omitted.

[0053] In S304, the controller 1 determines whether the user has set in advance to enable the execution of the instructed vehicle control function. If it is determined that the user has set in advance to enable the execution of the instructed vehicle control function ("YES" in S304), the controller 1 transitions the process to S305, and otherwise ("NO" in S304), transitions to S307. If it is determined that the user has not set in advance to enable the execution of the instructed vehicle control function, the controller 1 notifies the user in S307 that the instructed vehicle control function cannot be executed. Furthermore, the controller 1 may notify the user that the execution of the instructed vehicle control function has not been set. In this case, the controller 1 may guide the user on a method for setting to enable the execution of the instructed vehicle control function (for example, the controller 1 may present the user with a screen for setting to enable the execution of the instructed vehicle control function).

[0054] Information indicating whether the execution of the instructed vehicle control function is set to be enabled may be stored in the memory of the controller 1, and the processor of the controller 1 may refer to this information. In S301, the user may unintentionally instruct the execution of a specific vehicle control function (for example, by accidentally touching a button for instructing). In this case, the controller 1 may set the enabling of the execution of a specific vehicle control function as a precondition for executing this function, that the user has set the function in advance. If such a precondition is not necessary, S304 may be omitted.

[0055] In S305, the controller 1 determines whether the instructed vehicle control function is in an executable state. If it is determined that the instructed vehicle control function is in an executable state ("YES" in S305), the controller 1 transitions the process to S306, and otherwise ("NO" in S305), transitions to S307. If it is determined that the instructed vehicle control function is not in an executable state, the controller 1 notifies the user in S307 that the instructed vehicle control function cannot be executed. Furthermore, the controller 1 may notify the user that the instructed vehicle control function is not in an executable state.

[0056] For example, if the instructed vehicle control function requires high-precision map information and the high-precision map information is not available, the controller 1 may determine that the function is not in an executable state. If the instructed vehicle control function is executable only in a specific driving environment (e.g., a highway) and the vehicle V is not in such a driving environment, the controller 1 may determine that the function is not in an executable state. If the instructed vehicle control function requires an initial check of a sensor (e.g., a radar) and such an initial check has not been completed, the controller 1 may determine that the function is not in an executable state.

[0057] In S306, the controller 1 executes the instructed vehicle control function. Thereafter, the controller 1 controls the vehicle V according to the vehicle control function. When the vehicle control function is terminated in response to a user's instruction or in response to a change in the driving environment, the controller 1 may execute the method of FIG. 3 again and wait for an instruction to execute a specific vehicle control function. The instructed vehicle control function may use map information provided by the map distribution server 202. The controller 1 may receive map information from the map distribution server 202 while executing the vehicle control function.

[0058] An example of the configuration of the steering wheel ST will be described with reference to Fig. 4. The steering wheel ST is attached to an instrument panel 400 arranged at the front of the passenger compartment of the vehicle V. The instrument panel 400 includes a meter display unit 401. The controller 1 displays various instruments, messages, icons, and the like on the meter display unit 401 to notify the driver of information and states of the vehicle V. In the example of Fig. 4, the meter display unit 401 is located behind the steering wheel ST as seen by the driver.

[0059] The steering wheel ST includes a rim 402, a hub 403, and spokes 404. The rim 402 has, for example, a circular shape. The hub 403 is located inside the rim 402. The hub 403 is connected to a shaft extending from the instrument panel 400. The hub 403 may house an airbag. The spokes 404 connect the rim 402 and the hub 403. In the example of FIG. 4, the steering wheel ST includes three spokes 404. The three spokes 404 are located on the right side of the hub 403, the left side of the hub 403, and below the hub 403 as seen by the driver. The steering wheel ST may have a structure other than that shown in FIG. 4.

[0060] An indicator 405 is provided on the steering wheel ST. The indicator 405 is arranged at a position visible to the driver. In the example of FIG. 4, the indicator 405 is included in the spoke 404. Alternatively, the indicator 405 may be included in another part of the steering wheel ST, for example, the rim 402 or the hub 403. In the example of FIG. 4, the indicator 405 is composed of two separate parts, one of which is located on the right spoke 404 and the other is located on the left spoke 404. Alternatively, the indicator 405 may be composed of only one part, or may be composed of three or more parts. The indicator 405 is an example of a notification unit that notifies the driver. Another notification unit, for example, a dot-matrix display, may be used instead of the indicator 405.

[0061] The controller 1 may control the notification using the indicator 405. For example, the controller 1 may operate the indicator 405 in a state selected from an off state, a lit state, and a blinking state. The controller 1 may notify the user that a specific vehicle control function can be executed using the indicator 405. For example, the controller 1 may turn off the indicator 405 when a driving assistance function using high-precision map information (e.g., ALC) is not executable, and may turn on the indicator 405 when a driving assistance function using high-precision map information (e.g., ALC) is executable.

[0062] In the above example, the vehicle V has a steering wheel ST, and the steering wheel ST includes the indicator 405. The steering wheel ST is an example of an operation input unit of the vehicle V, and other operation input units may be used. For example, the vehicle V may be equipped with a joystick as the operation input unit. In this case, the indicator 405 may be included in the joystick.

[0063] A hard button 406 is provided on the steering wheel ST (the right spoke 404 in the example of FIG. 4). The hard button 406 is an example of a physically existing button. In the example of FIG. 4, the hard button 406 is provided on the steering wheel ST, but the hard button 406 may be provided on another component of the vehicle V. The hard button 406 may be, for example, a capacitive button, a stroke button, or a button having another structure. The hard button 406 is an example of an operation unit that is permanently presented to the user. Permanently presented may mean that the hard button 406 is presented to the user even when the power of the vehicle V is turned off. The appearance of the hard button 406 may be unchanged.

[0064] The controller 1 may obtain an instruction from a user regarding a specific vehicle control function using the hard button 406. For example, the instruction may be an instruction to execute the specific vehicle control function. As described above, the specific vehicle control function may be a driving assistance function, a driving assistance function using high-precision map information, or ALC or ALCA. The type of vehicle control function instructed to be executed by the hard button 406 may be uniquely associated with the hard button 406. When the controller 1 has multiple vehicle control functions, the ST on the steering wheel may include a hard button for each vehicle control function.

[0065] 3, the controller 1 may determine that an instruction to execute a specific vehicle control function has been acquired from the user in response to the operation of the hard button 406. The controller 1 executes the vehicle control function instructed by the user in S306 based at least in part on the operation of the hard button 406 in a state in which the vehicle control function can be executed. In this way, the user can issue an instruction to execute a specific vehicle control function by simply operating the hard button 406 without performing step-by-step operations.

[0066] When the user does not have the authority to use the vehicle control function associated with the hard button 406, the controller 1 notifies the user in response to the operation of the hard button 406 in S307 that an instruction to execute the vehicle control function cannot be given. This allows the user to easily recognize that the vehicle control function cannot be executed. Furthermore, when the user has the authority to use the vehicle control function and has not consented to the use of personal information by the controller 1, the controller 1 may notify the user in response to the operation of the hard button 406 in S307 that consent to the use of personal information is required to execute the vehicle control function. This allows the user to easily recognize that consent to the use of personal information is required to execute the vehicle control function.

[0067] A display example of the meter display unit 401 will be described with reference to Fig. 5. The controller 1 may control the display using the meter display unit 401. The controller 1 may display the vehicle speed of the vehicle V in a speed area 501 of the meter display unit 401. The controller 1 may display a tachometer 502 and a speedometer 503 on the meter display unit 401. The controller 1 may display a message for the driver in a message area 504. The controller 1 may display other contents not shown in Fig. 5.

[0068] The meter display 401 may include an icon 505 associated with ACC in mode 2, an icon 506 associated with KLAS in mode 2, and an icon 507 associated with ALC or ALCA in mode 3.

[0069] The controller 1 may display the icon 505 in a specific color (e.g., white) to indicate that ACC can be executed, may display the icon 505 in a different color (e.g., green) to indicate that ACC is being executed, and may not display the icon 505 to indicate that ACC is not executable. The controller 1 may display the icon 506 in a specific color (e.g., white) to indicate that LKAS can be executed, may display the icon 506 in a different color (e.g., green) to indicate that LKAS is being executed, and may not display the icon 506 to indicate that LKAS is not executable. The controller 1 may display the icon 507 in a specific color (e.g., white) to indicate that ALC or ALCA can be executed, may display the icon 507 in a different color (e.g., green) to indicate that ALC or ALCA is being executed, and may not display the icon 507 to indicate that ALC or ALCA is not executable.

[0070] In this way, each of the icons 505 to 507 may be information indicating that a specific vehicle control function can be executed. In particular, the icon 507 may be information indicating that a vehicle control function (e.g., ALC or ALCA) can be executed using map information received from the map distribution server 202.

[0071] With reference to FIG. 6, an example of a screen 600 for setting to enable execution of a specific vehicle control function will be described. The screen 600 is displayed on the display device 5a. The display device 5a may be configured by, for example, a touch screen. The screen 600 may include soft buttons 601-604. The soft buttons 601-604 are an example of an operation unit that is temporarily presented to the user. Being temporarily presented may mean that they are not presented to the user in a specific case (for example, when the power of the vehicle V is turned off or when a screen other than the screen 600 is displayed on the display device 5a). The controller 1 may be capable of changing the appearance of the soft buttons 601-604.

[0072] The soft buttons 601 and 602 may be operation units for acquiring an instruction regarding the AHD from a user. In response to the soft button 601 being pressed by the user, the controller 1 determines that the user has set that all vehicle control functions used in the AHD are enabled, and stores information indicating this in a memory. To indicate that this setting has been reflected, the controller 1 may light up the soft button 601 and turn off the soft button 602. In response to the soft button 602 being pressed by the user, the controller 1 determines that the user has set that all vehicle control functions used in the AHD are not enabled, and stores information indicating this in a memory. To indicate that this setting has been reflected, the controller 1 may turn off the soft button 601 and turn on the soft button 602.

[0073] When the user does not have the authority to use the AHD, the controller 1 may display the soft buttons 601 and 602 in an appearance that indicates that the AHD cannot be set. For example, when the user does not have the authority to use the AHD, the controller 1 may gray out both of the soft buttons 601 and 602. This allows the user to recognize that he or she does not have the authority to use the AHD from the appearance of the soft buttons 601 and 602 without operating them.

[0074] The soft buttons 603 and 604 may be operation units for obtaining instructions related to ALC from a user. The operations of the soft buttons 603 and 604 may be the same as those of the soft buttons 601 and 602, and therefore a duplicated description will be omitted.

[0075] The screen 600 may include a field 605 for indicating the status of the authority to use a specific vehicle control function. When the user does not have the authority to use a specific vehicle control function, the controller 1 may display a message indicating that in the field 605. When the user has the authority to use a specific vehicle control function, the controller 1 may display a message indicating that in the field 605. In addition, when an expiration date is set for the authority to use a specific vehicle control function, the controller 1 may display the expiration date in the field 605.

[0076] With reference to FIG. 7, a specific description will be given of an example of a functional configuration of the controller 1 for communicating with the user management server 201 and the map distribution server 202. The controller 1 may include a display control unit 701, a communication control unit 702, a map processing unit 703, an input acquisition unit 704, and a function execution unit 705. The controller 1 may not include some of the functional units shown in FIG. 7, or may include functional units not shown in FIG. 7. Each of the functional units shown in FIG. 7 (the display control unit 701, the communication control unit 702, the map processing unit 703, the input acquisition unit 704, and the function execution unit 705) may be realized by a separate ECU. Alternatively, two or more functional units shown in FIG. 7 may be integrated into one ECU, or one functional unit may be realized by multiple ECUs.

[0077] The communication device 7c may include two separate communication modules 711 and 712. Both of the communication modules 711 and 712 may support cellular communication. For example, both of the communication modules 711 and 712 may include an antenna and a signal processing circuit. The communication module 711 may be used for communication with the user management server 201. The communication module 712 may be used for communication with the map distribution server 202. In this way, by performing communication with the user management server 201 and communication with the map distribution server 202 using separate communication modules, it is possible to execute communication settings and communication contracts according to the characteristics of the data to be communicated. For example, the map information received from the map distribution server 202 may be a large amount of data. Therefore, a flat-rate fee plan may be suitable for communication by the communication module 711. On the other hand, a pay-per-use fee plan may be suitable for communication with the user management server 201, which has a relatively small amount of data.

[0078] The display control unit 701 may control the display on the display device 5a. The display device 5a may include the above-mentioned meter display unit 401, the indicator 405, and a display for displaying the screen 600. The display control unit 701 may perform the notification of S307 in FIG. 3, the display of the screen 600, and the like.

[0079] The communication control unit 702 communicates with the user management server 201 using the communication module 711. As described above with reference to Fig. 2, the communication control unit 702 may use the communication module 711 to transmit identification information of the vehicle V, account information of the user, and information indicating the status of the vehicle V to the user management server 201. The communication control unit 702 may use the communication module 711 to receive, from the user management server 201, information indicating whether the user has authority to use a specific vehicle control function and, if set, the expiration date of the authority to use.

[0080] The map processing unit 703 performs processing related to high-precision map information. As described above with reference to Fig. 2, the map processing unit 703 may use the communication module 712 to transmit information indicating that the user has the authority to use information used in a specific vehicle control function (e.g., high-precision map information) to the map distribution server 202. The map processing unit 703 may use the communication module 712 to receive information used in a specific vehicle control function (e.g., high-precision map information) from the map distribution server 202. The map processing unit 703 may request map information of a range corresponding to the current geographical position of the vehicle V measured by the GNSS sensor 7b, which is an example of a positioning sensor, from the map distribution server 202.

[0081] The map processing unit 703 may determine whether the user has the authority to use a specific vehicle control function (S302 in FIG. 3). The map processing unit 703 may determine whether the expiration date of the authority to use the specific vehicle control function has expired using the time acquired by the GNSS sensor 7b. The GNSS sensor 7b can acquire accurate time from an artificial satellite used for positioning. This time is used to determine whether the expiration date has expired, thereby enabling this determination to be performed with high accuracy. For example, the map processing unit 703 may acquire the expiration date received from the user management server 201 from the communication control unit 702. The map processing unit 703 may notify the function execution unit 705 of the determination result of whether the expiration date of the authority to use the specific vehicle control function has expired.

[0082] The input acquisition unit 704 may detect an operation by a user on the input device 6. The input device 6 may include the above-mentioned hard button 406, a touch panel for detecting contact with the screen 600, etc. The input acquisition unit 704 may detect the operation of S301 in FIG. 3, an operation on the screen 600, etc.

[0083] The function executing unit 705 may execute a vehicle control function. The function executing unit 705 may execute a particular vehicle control function based at least in part on the user having authority to use the function. The function executing unit 705 may execute the vehicle control function based on the situation around the vehicle V acquired from the surroundings detection unit 8a or the like. The function executing unit 705 may execute the operations of S303 to S306 in FIG. 3.

[0084] <Summary of the embodiment> <Item 1> A control device (1) for a vehicle (V), a vehicle control means (705) for executing a particular vehicle control function based at least in part on a user of the vehicle having authorization to use the particular vehicle control function; a first acquisition means (704) for acquiring a first instruction related to the vehicle control function from the user using a first operation unit (601 to 604) that is temporarily presented to the user; a second acquisition means (704) for acquiring a second instruction related to the vehicle control function from the user using a second operation unit (406) that is permanently presented to the user; a display control means (701) for displaying the first operation unit in an appearance indicating that the first instruction cannot be performed when the user does not have the usage authority; and a notification control means (701) for notifying the user that the second instruction cannot be performed in response to the second operation unit being operated when the user does not have the usage authority. This item makes it easy to grasp the status of the authority to use the vehicle control function. <Item 3> 2. The control device according to item 1, wherein the second operation unit is a physically existing button (406). According to this item, the passenger will be able to give instructions by operating physical buttons. <Item 3> 2. The control device according to claim 1, wherein the second operation unit is a button (406) provided on a steering wheel (ST) of the vehicle. This item allows the occupant to give commands while holding the steering wheel. <Item 4> 4. The control device according to item 3, wherein the second instruction is an instruction to execute the vehicle control function. According to this item, the occupant can give instructions for the execution of vehicle control functions while holding the steering wheel. <Item 5> The control device further includes a second notification control means (701) for notifying the user that the vehicle control function can be executed by using a notification unit (406) provided on the steering wheel, The control device according to item 4, wherein the vehicle control means executes the vehicle control function based at least in part on the second operation unit being operated in a state in which the vehicle control function is executable. According to this item, the user can execute the vehicle control function while knowing that the vehicle control function is executable. <Item 6> 6. The control device according to item 5, wherein the vehicle control function is a driving assistance function that automatically changes lanes of the vehicle. This item allows the user to use the lane change function. <Item 7> 2. The control device according to claim 1, further comprising an inquiry means (702) for inquiring of a server (201) as to whether the user has the usage authority. According to this item, whether or not a user has usage authority can be centrally managed by the server. <Item 8> 8. The control device according to item 7, wherein the inquiry means acquires the expiration date of the usage right from the server. According to this item, the usage authority can be cancelled if the usage authority has expired. <Item 9> 9. The control device according to item 8, wherein the server grants the usage authority to the user in response to a request from the user. According to this item, a user can obtain usage rights at his / her own will. <Item 10> The control device described in item 1, wherein the notification control means, when the user has the usage authority and the user has not consented to the use of personal information by the control device, notifies the user that consent to the use of the personal information is required to execute the vehicle control function in response to the second operation unit being operated. This item makes it easier for users to understand that consent to the use of their personal information is required. <Item 11> A program for causing a computer to function as the control device according to any one of items 1 to 10. According to this item, a program capable of realizing the control device of the above item is provided. <Item 12> A method for controlling a vehicle (V), comprising: A vehicle control step (S306) of executing the vehicle control function based at least in part on the user of the vehicle having authority to use the particular vehicle control function; a first acquisition step (600) of acquiring a first instruction related to the vehicle control function from the user using a first operation unit (601 to 604) that is temporarily presented to the user; a second acquisition step (S301) of acquiring a second instruction related to the vehicle control function from the user using a second operation unit (406) that is permanently presented to the user; a display control step (600) for displaying the first operation unit in an appearance indicating that the first instruction cannot be performed when the user does not have the usage authority; and a notification control process (S307) of notifying the user that the second instruction cannot be performed in response to the second operation unit being operated when the user does not have the usage authority. This item makes it easy to grasp the status of the authority to use the vehicle control function.

[0085] The invention is not limited to the above-described embodiment, and various modifications and variations are possible within the scope of the gist of the invention. [Explanation of symbols]

[0086] V vehicle, 1 controller, 201 user management server, 202 map distribution server

Claims

1. A control device for a vehicle, vehicle control means for executing a particular vehicle control function based at least in part on a user of the vehicle having authority to use the particular vehicle control function; a first acquisition means for acquiring a first instruction related to the vehicle control function from the user by using a first operation unit that is temporarily presented to the user; a second acquisition means for acquiring a second instruction to execute the vehicle control function from the user using a second operation unit that is a button provided on a steering wheel of the vehicle; a display control means for displaying the first operation unit in an appearance indicating that the first instruction cannot be performed when the user does not have the usage authority; a first notification control means for notifying the user that the second instruction cannot be performed in response to the operation of the second operation unit when the user does not have the usage authority; a second notification control means for notifying the user that the vehicle control function is executable, using a notification unit provided in the steering wheel; The vehicle control means executes the vehicle control function at least partially based on the second operation unit being operated in a state in which the vehicle control function is executable.

2. The control device according to claim 1 , wherein the vehicle control function is a driving assistance function that automatically changes lanes of the vehicle.

3. The control device according to claim 1 , further comprising an inquiry means for inquiring of a server whether or not the user has the usage authority.

4. The control device according to claim 3 , wherein the inquiry means acquires the expiration date of the usage right from the server.

5. The control device according to claim 4 , wherein the server grants the usage authority to the user in response to a request from the user.

6. 2. The control device according to claim 1, wherein the first notification control means notifies the user that consent to the use of the personal information is required to execute the vehicle control function in response to the second operation unit being operated when the user has the usage authority and has not consented to the use of the personal information by the control device.

7. A control device for a vehicle, comprising: vehicle control means for executing the vehicle control function based at least in part on a user of the vehicle having authority to use the vehicle control function related to driving control of a particular vehicle; a first acquisition means for acquiring a first instruction related to the vehicle control function from the user by using a first operation unit that is temporarily presented to the user; a second acquisition means for acquiring a second instruction related to the vehicle control function from the user by using a second operation unit that is permanently presented to the user; a display control means for displaying the first operation unit in an appearance indicating that the first instruction cannot be performed when the user does not have the usage authority; A control device comprising: a notification control means for notifying the user that the second instruction cannot be performed in response to the second operation unit being operated when the user does not have the usage authority.

8. A program for causing a computer to function as the control device according to any one of claims 1 to 7.

9. A method for controlling a vehicle, comprising: a vehicle control step of executing the vehicle control function based at least in part on a user of the vehicle having authorization to use the particular vehicle control function; a first acquisition step of acquiring a first instruction related to the vehicle control function from the user by using a first operation unit that is temporarily presented to the user; a second acquisition step of acquiring a second instruction to execute the vehicle control function from the user using a second operation unit that is a button provided on a steering wheel of the vehicle; a display control step of displaying the first operation unit in an appearance indicating that the first instruction cannot be performed when the user does not have the usage authority; a first notification control step of notifying the user that the second instruction cannot be performed in response to the second operation unit being operated when the user does not have the usage authority; and a second notification control means step of notifying the user that the vehicle control function is executable, using a notification unit provided in the steering wheel, A control method, comprising: executing the vehicle control function based at least in part on the second operation unit being operated in a state in which the vehicle control function is executable.

10. A method for controlling a vehicle, comprising: a vehicle control step of executing the vehicle control function based at least in part on a user of the vehicle having authority to use the vehicle control function related to driving control of a particular vehicle; a first acquisition step of acquiring a first instruction related to the vehicle control function from the user by using a first operation unit that is temporarily presented to the user; a second acquisition step of acquiring a second instruction related to the vehicle control function from the user using a second operation unit that is permanently presented to the user; a display control step of displaying the first operation unit in an appearance indicating that the first instruction cannot be performed when the user does not have the usage authority; A control method comprising: a notification control process for notifying the user that the second instruction cannot be performed in response to the second operation unit being operated when the user does not have the usage authority.

Images