Information system, data collection device, and information terminal

Abstract

To provide technology that allows a driver to authorize the transmission of vehicle data to a data center.SOLUTION: An information system includes a first device (101-a) mounted on a vehicle, a second device (102-a) operated by a driver, and a third device (103). The first device classifies vehicle data into first and second data according to preset classification conditions. The first data is data for which an authorization operation by the driver is required. The second data is data that does not require authorization operation by the driver. The first device transmits the first data to the second device and the second data to the third device. The second device receives the first data from the first device and transmits the first data to the third device in response to the authorization operation by the driver.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The present disclosure relates to an information system for vehicles, a data collection device, and an information terminal.

Background Art

[0002] In recent years, various services (for example, telematics services) have been provided by connecting vehicles to an external network. The telematics service includes collecting various data in a vehicle and providing various services using the collected data.

[0003] For example, the system described in Patent Document 1 collects data from a vehicle according to predetermined data collection conditions in order to provide a telematics service.

Prior Art Documents

Patent Documents

[0004]

Patent Document 1

Summary of the Invention

Problems to be Solved by the Invention

[0005] In the future, it is expected that the types of data collected from vehicles will increase. For example, videos captured by in-vehicle cameras and information detected by in-vehicle sensors can be collected from vehicles.

[0006] Incidentally, rules regarding the handling of personal data are being implemented in connection with the collection and use of data. For example, in the EU (European Union), the "General Data Protection Regulation (GDPR)", a law for the protection of personal data, has been implemented. This regulation stipulates that the collection and use of personal data without the clear consent of the subject of such personal data is an act of violation.

[0007] On the other hand, regarding the data collected from vehicles, it is common for drivers to agree to the terms of use when purchasing a vehicle or starting to use a telematics service. Based on the agreement to the terms of use, a system (for example, a data center) that provides a telematics service collects data from the vehicle. However, it is expected that data protection efforts will become stricter in the future. The mechanism where the driver agrees when purchasing a vehicle or starting to use a telematics service may be insufficient from the perspective of data protection. Considering this, a system is required in which the driver gives consent / approval when the data is sent to the data center.

[0008] Therefore, the present disclosure provides a technology that enables a driver to give consent / approval when data is sent to a data center.

Means for Solving the Problem

[0009] In one or more embodiments, an information system is provided. The information system includes a first device mounted on a vehicle, a second device operated by a driver of the vehicle, and a third device. The first device is configured to classify a plurality of types of vehicle data acquired in the vehicle into first data and second data according to preset classification conditions. The first data is data for which an approval operation by the driver is required. The second data is data for which the approval operation is not required. The first device is configured to transmit the first data to the second device and transmit the second data to the third device. The second device is configured to receive the first data from the first device and transmit the first data to the third device according to the approval operation.

[0010] In one or more embodiments, a data collection device mounted on a vehicle is provided. The data collection device includes a memory for storing a program and a processor. By executing the program, the processor collects a plurality of types of vehicle data in the vehicle, classifies the vehicle data into first data and second data according to preset classification conditions, and transmits the first data and transmits the second data according to a data provision instruction received from the outside. The first data is data for which an approval operation by the driver of the vehicle is required. The second data is data for which the approval operation is not required.

[0011] In one or more embodiments, an information terminal operated by a driver of a vehicle is provided. The information terminal includes a memory for storing a program, a processor, and a display unit. The processor is configured to display, on the display unit, a setting screen for setting classification conditions, and to transmit the classification conditions to the vehicle in response to an operation on the setting screen. The classification conditions are conditions for classifying vehicle data acquired in the vehicle into first data and second data. The first data is data for which an approval operation by the driver is required. The second data is data for which the approval operation is not required.

Advantages of the Invention

[0012] According to the above configuration, the driver can approve the transmission of the first data. Thereby, it is possible to prevent the first data from being transmitted without the driver's approval.

Brief Description of the Drawings

[0013]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Figure 11

Figure 12

Figure 13

Figure 14

Figure 15

Figure 16

Figure 17

Figure 18

Figure 19

Figure 20

Figure 21

Figure 22

Figure 23

Figure 24

Figure 25

Embodiments for Carrying Out the Invention

[0014] Hereinafter, a plurality of embodiments will be described with reference to the accompanying drawings. The accompanying drawings show specific embodiments, but are not used for limiting the interpretation of the technical scope of the present invention.

[0015] <Example 1> FIG. 1 is a diagram showing the whole information system in Example 1. Using FIG. 1, the basic concept of this embodiment will be described. The information system 100 includes a plurality of first devices 101-a to 101-c, a plurality of second devices 102-a to 102-c, and a third device 103.

[0016] The first devices 101-a to 101-c are respectively mounted on vehicles 110-a to 110-c. The plurality of second devices 102-a to 102-c are respectively carried by the drivers of the vehicles 110-a to 110-c. The second devices 102-a to 102-c are information terminals such as smartphones, for example. The third device 103 is a data center. The third device 103 can provide a telematics service using the data collected from the vehicles 110-a to 110-c.

[0017] Since the plurality of first devices 101-a to 101-c have the same configuration respectively, hereinafter, the first device 101-a will be described. The first device 101-a collects a plurality of types of data from the vehicle 110-a. Hereinafter, the plurality of types of data obtained in the vehicle 110-a are collectively referred to as "vehicle data".

[0018] Vehicle data includes image data and video data acquired by in-vehicle cameras, information detected by in-vehicle sensors (hereinafter referred to as "sensor information"), control information, and identification information, etc. Sensor information includes, for example, vehicle speed, steering angle, vehicle position, acceleration, accelerator opening, brake opening, engine speed, and information regarding white lines around the vehicle, etc. Control information includes information regarding automatic controls such as inter-vehicle distance control (e.g., ACC: Adaptive Cruise Control) and collision damage mitigation braking control (e.g., AEB: Advanced Emergency Braking System), etc. Identification information includes personal data of the driver himself / herself and information for identifying the vehicle, etc.

[0019] The first device 101-a classifies vehicle data into first data and second data according to preset classification conditions. The first data is data for which an approval operation by the driver is required for transmission to the third device 103. The second data is data for which an approval operation by the driver is not required for transmission to the third device 103.

[0020] The first device 101-a receives a data provision instruction 130 from the third device 103. The first device 101-a transmits the first data to the second device 102-a according to the data provision instruction 130. Further, the first device 101-a transmits the second data to the third device 103 via the communication network 170. The communication network 170 is, for example, one of a mobile phone network, the Internet network, and short-range wireless communication, or a combination of two or more of them.

[0021] Since the plurality of second devices 102-a to 102-c each have the same configuration, the second device 102-a will be described below. The second device 102-a receives the first data from the first device 101-a. The second device 102-a presents the content of the first data to the driver and requests an approval operation from the driver. The second device 102-a transmits the first data to the third device 103 via the communication network 170 according to the approval operation.

[0022] The third device 103 receives the first data and the second data via the communication network 170. Then, the third device 103 stores the first data and the second data. In this way, the third device 103 can collect vehicle data (the first data and the second data) from each of the vehicles 110-a to 110-c. Further, the third device 103 provides the collected vehicle data to the user 190 of the telematics service.

[0023] According to the above configuration, the information system 100 can classify vehicle data into the first data and the second data. The first data is transmitted to the second device 102-a. The driver can check the content of the first data on the second device 102-a. Further, the first data is transmitted to the third device 103 in response to the driver's approval operation. Therefore, it is possible to avoid the first data being transmitted to the third device 103 unintentionally. On the other hand, the second data is transmitted to the third device 103 without the driver's approval operation. Since the second data that does not require the driver's approval operation is directly transmitted to the third device 103, the driver's labor can be saved.

[0024] (Configuration of the First Device) Next, the specific configuration of the first device 101-a will be described. FIG. 2 is a diagram showing the configuration of the first device 101-a. The first device 101-a includes a data collection device 210, a communication unit (for example, TCU: Telematics Control Unit) 220, a control unit 230, and a camera 240. These are connected to each other via the CAN bus 250.

[0025] The data collection device 210 includes at least a processor such as a CPU (Central Processing Unit), a memory, and a well-known storage device (storage) capable of reading and writing information. The processor realizes various functions described later by executing instructions (programs) stored in the memory.

[0026] The data collection device 210 collects vehicle data in response to the data provision instruction 130 and classifies the vehicle data into first data and second data. The data collection device 210 stores the first data and the second data.

[0027] The communication unit 220 receives the data provision instruction 130 from the third device 103. Further, the communication unit 220 receives the second data from the data collection device 210 and transmits the second data to the third device 103.

[0028] The control unit 230 includes one or more ECUs (Electronic Control Units). The ECU includes a CPU, a ROM, a RAM, etc. For example, the control unit 230 includes an ECU connected to a sensor (e.g., a radar sensor) that detects the surrounding situation of the vehicle, an ECU that controls a driving device (e.g., an engine), an ECU that controls a braking device, an ECU that detects the position of the vehicle (e.g., a GPS signal), and an ECU that controls the vehicle navigation, etc.

[0029] Further, the control unit 230 is connected to the camera 240. The camera 240 includes, for example, a camera (a monocular camera or a stereo camera) that captures the surrounding situation of the vehicle, a drive recorder, and a camera that captures the interior of the vehicle. The control unit 230 can acquire the video captured by the camera 240. The data collection device 210 can collect vehicle data from the control unit 230.

[0030] Next, the configuration of the data collection device 210 will be described in more detail. The data collection device 210 includes, as components, a short-range communication unit 211, an external device monitoring unit 212, a classification condition specifying unit 213, a classification processing execution unit 214, a storage 215, and a transmission control unit 216.

[0031] The short-range communication unit 211 executes communication processing with the second device 102-a using a predetermined wireless method (e.g., Bluetooth (registered trademark)).

[0032] The external device monitoring unit 212 executes setting processing regarding the connection with the second device 102-a so that the data collection device 210 is not connected to devices other than the second device 102-a. Further, the external device monitoring unit 212 monitors the remaining capacity of the storage 513 (see FIG. 5) of the second device 102-a.

[0033] The classification condition specifying unit 213 receives classification conditions from the second device 102-a and stores the classification conditions in the classification condition specifying unit 213. The classification conditions are conditions for classifying vehicle data into first data and second data. Note that the classification conditions may be stored in the storage 215.

[0034] FIG. 3 is an example of a classification condition table 300 representing classification conditions. The classification condition table 300 includes, as constituent items, the type 301 of vehicle data, the availability 302, the first data 303, and the second data 304.

[0035] The availability 302 indicates whether to provide to the third device 103. In the availability 302, "○" indicates providing to the third device 103, and "×" indicates not providing to the third device 103. The first data 303 indicates vehicle data classified as the first data. In this example, the out-of-vehicle camera image, the destination information, and the position information are classified as the first data. The second data 304 indicates vehicle data classified as the second data. In this example, the vehicle identification number, the vehicle type, and the ABS (Anti-lock Braking System) operation log are classified as the second data.

[0036] The classification processing execution unit 214 receives a data provision instruction 130 from the third device 103 via the communication unit 220. In response to the data provision instruction 130, the classification processing execution unit 214 refers to the classification condition table 300 and classifies the vehicle data into first data and second data. The classification processing execution unit 214 stores the first data and the second data in the storage 215. Note that the classification processing execution unit 214 may delete data other than the first data and the second data (i.e., data for which the provision availability 302 is "×") among the vehicle data.

[0037] The classification processing execution unit 214 assigns an identifier for identifying the first data and the second data as a group of data to each of the first data and the second data. The identifier is, for example, the date and time when the vehicle data was acquired. The identifier may be any information that can group the first data and the second data acquired at the same timing, and may be other information such as the position of the vehicle, for example. According to this configuration, the third device 103 can handle the first data and the second data having the same identifier (i.e., the vehicle data acquired at the same date and time) as a group and execute various processes.

[0038] As shown in FIG. 2, the storage 215 includes a logically separated first data area 215a and second data area 215b.

[0039] FIG. 4 is a diagram showing the first data area 215a and the second data area 215b in the storage 215. The first data area 215a is an area for storing the first data. The classification processing execution unit 214 assigns an identifier to the first data. The classification processing execution unit 214 stores the combination 401 of the first data and the identifier in the first data area 215a. Hereinafter, the "combination 401 of the first data and the identifier" will be simply referred to as "first data 401".

[0040] The second data area 215b is an area for storing the second data. The classification processing execution unit 214 assigns an identifier to the second data. The classification processing execution unit 214 stores the combination 402 of the second data and the identifier in the second data area 215b. Hereinafter, the "combination 402 of the second data and the identifier" will be simply referred to as "second data 402".

[0041] Note that the classification processing execution unit 214 may compress data having a large size (for example, an outside vehicle camera image) and store the compressed data in the storage 215. In another example, the camera 240 may execute compression processing of the outside vehicle camera image.

[0042] Referring to FIG. 2 again, the transmission control unit 216 includes a data processing unit 216a and a bus monitoring unit 216b. The data processing unit 216a acquires the first data 401 from the first data area 215a and transmits the first data 401 to the second device 102-a via the short-range communication unit 211. Further, the data processing unit 216a acquires the second data 402 from the second data area 215b and transmits the second data 402 to the third device 103 via the communication unit 220. When the transmission processing of the first data 401 and the transmission processing of the second data 402 are completed, the data processing unit 216a deletes the first data 401 from the first data area 215a and deletes the second data 402 from the second data area 215b.

[0043] The bus monitoring unit 216b monitors the traffic volume (for example, bus utilization rate) of the in-vehicle network (in this example, the CAN bus 250). When the traffic volume is equal to or less than a specified value, the bus monitoring unit 216b transmits a transmission permission command to the data processing unit 216a. The data processing unit 216a transmits the second data 402 to the third device 103 via the communication unit 220 in response to the transmission permission command. Note that the data processing unit 216a may adjust the transmission amount of the second data 402 per unit time so that the traffic volume is equal to or less than the specified value.

[0044] (Configuration of the Second Device) Next, the configuration of the second device 102-a will be described. FIG. 5 is a diagram showing the configuration of the second device 102-a. In this example, the second device 102-a is a smartphone capable of receiving an input from a driver on a display unit (display).

[0045] The second device 102-a includes at least a processor such as a CPU, a memory, and a well-known storage device (storage) capable of reading and writing information. The processor realizes various functions described later by executing instructions (programs) stored in the memory.

[0046] The second device 102-a includes, as components, a short-range communication unit 511, a data management application 512, a storage 513, and a communication unit 514.

[0047] The short-range communication unit 511 executes communication processing with the data collection device 210 using a predetermined wireless method (for example, Bluetooth).

[0048] The data management application 512 includes a classification condition setting unit 512a, a data management unit 512b, and a data processing unit 512c.

[0049] The classification condition setting unit 512a sets a classification condition table 300. FIG. 6 is a diagram for explaining the flow of setting the classification condition table 300. The classification condition setting unit 512a displays a setting screen for setting the classification condition table 300 on the display unit 112 of the second device 102-a. The setting screen includes a first screen 601 and a second screen 602.

[0050] The classification condition setting unit 512a first displays the first screen 601 on the display unit 112. The first screen 601 is a screen for selecting data that can be provided to the third device 103 from vehicle data. In this example, the outside vehicle camera image, the destination information, and the vehicle identification number (VIN) are selected on the first screen 601.

[0051] Next, the classification condition setting unit 512a displays the second screen 602 on the display unit 112. The second screen 602 is a screen for selecting the first data (i.e., the data that requires the driver's approval operation) from the data selected on the first screen 601. In this example, the outside vehicle camera image and the destination information are selected on the second screen 602. Therefore, the classification condition setting unit 512a sets the classification condition table 300 shown at the lower part of FIG. 6. The outside vehicle camera image and the destination information are set as the first data, and the vehicle identification number (VIN) is set as the second data. The classification condition setting unit 512a transmits the classification condition table 300 to the data collection device 210 via the short-range communication unit 511.

[0052] Referring to FIG. 5 again, the storage 513 includes a first data area 513a. The first data area 513a is an area for storing the first data 401. Note that the storage 513 is also used by other functions of the smartphone.

[0053] The data management unit 512b receives the first data 401 from the data collection device 210. The data management unit 512b stores the first data 401 in the first data area 513a of the storage 513.

[0054] Furthermore, the data management unit 512b requests the driver to perform an approval operation for the first data 401. FIG. 7 is a diagram for explaining the flow of requesting the driver to perform an approval operation. The data management unit 512b displays an approval screen for receiving the approval operation for the first data 401 on the display unit 112. The approval screen includes a third screen 603 and a fourth screen 604.

[0055] The data management unit 512b first obtains information regarding the first data 401 stored in the first data area 513a. In this example, the outside vehicle camera image and the destination information are stored in the first data area 513a. The data management unit 512b displays the third screen 603 on the display unit 112. The third screen 603 is a screen for displaying a list of the first data 401 stored in the first data area 513a.

[0056] The driver can check the content of the first data 401 on the third screen 603. For example, when the driver taps an icon 603a representing the outside vehicle camera image on the third screen 603, the outside vehicle camera image is displayed on the display unit 112.

[0057] When the display of the outside vehicle camera image ends, the data management unit 512b displays the fourth screen 604 on the display unit 112. The fourth screen 604 is a screen for approving the provision of the first data (here, the outside vehicle camera image) 401 to the third device 103. The fourth screen 604 includes a first button 604a and a second button 604b. The first button 604a is a button for approving the provision of the first data 401 to the third device 103, and the second button 604b is a button for not approving the provision of the first data 401 to the third device 103.

[0058] When the driver taps the first button 604a, the data management unit 512b transmits the first data 401 to the third device 103 via the communication unit 514. The data management unit 512b deletes the first data 401 transmitted to the third device 103 from the first data area 513a. On the other hand, when the driver taps the second button 604b, the data management unit 512b deletes the first data 401 from the first data area 513a without transmitting the first data 401 to the third device 103. The data management unit 512b repeatedly executes such processing until the first data 401 in the first data area 513a disappears.

[0059] Before the data management unit 512b transmits the first data 401 to the third device 103, the data processing unit 512c executes a predetermined processing (for example, compression processing and / or mosaic processing) on the first data 401.

[0060] (Configuration of the Third Device) Next, the configuration of the third device 103 will be described. FIG. 8 is a diagram showing the configuration of the third device 103. The third device 103 includes at least a processor such as a CPU, a memory, and a well-known storage device (storage) capable of reading and writing information. By executing the instructions (programs) stored in the memory, the processor realizes various functions described later.

[0061] As components, the third device 103 includes a communication unit 701, a data processing unit 702, a storage 703, and a data providing unit 704.

[0062] The communication unit 701 executes communication processing with the first device 101-a and also executes communication processing with the second device 102-a.

[0063] The data processing unit 702 receives the first data 401 from the first device 101-a. Further, the data processing unit 702 receives the second data 402 from the second device 102-a. The data processing unit 702 stores the first data 401 and the second data 402 in the storage 703 as vehicle data 710. Since identifiers are assigned to the first data 401 and the second data 402, the third device 103 can easily manage the first data 401 and the second data 402 acquired at the same date and time.

[0064] The data providing unit 704 can handle vehicle data 710 having the same identifier (that is, vehicle data acquired at the same date and time) as a group and execute various processes. For example, the data providing unit 704 transmits the vehicle data 710 having the same identifier to the user 190. The user 190 includes various operators, for example, police stations, hospitals, road operators, insurance companies, and the like. The vehicle data 710 is used in various services operated by these operators. Note that the vehicle data 710 may be used as map information.

[0065] Next, the specific processing flow will be described. In the following description, various components shown in FIGS. 2 and 5 are described as the subject, but it may also be described with the processor as the subject.

[0066] (Setting of Classification Conditions) FIG. 9 is a flowchart for setting classification conditions. First, the classification condition specifying unit 213 of the first device 101-a detects that the vehicle 110-a is in a parked state (S901). Specifically, the classification condition specifying unit 213 determines that the vehicle 110-a is in a parked state when the shift position of the vehicle 110-a is in the parking position (P) and the parking brake is in the on state. Next, the classification condition specifying unit 213 transmits a condition setting instruction to the second device 102-a (S902). The condition setting instruction is an instruction for causing the second device 102-a to execute the process of displaying the above-described setting screens (the first screen 601 and the second screen 602).

[0067] The classification condition setting unit 512a of the second device 102-a displays the first screen 601 on the display unit 112 in response to the condition setting instruction (S903). The driver selects, from the vehicle data on the first screen 601, the data that can be provided to the third device 103. Next, the classification condition setting unit 512a displays the second screen 602 on the display unit 112 (S904). The driver selects the first data (i.e., the data that requires the driver's approval operation) on the second screen 602. When the driver's operation on the second screen 602 is completed, the classification condition setting unit 512a sets the classification condition table 300. Then, the classification condition setting unit 512a transmits the classification condition table 300 to the first device 101-a (S905).

[0068] The classification condition specifying unit 213 of the first device 101-a receives the classification condition table 300 and stores the classification condition table 300 (S906).

[0069] (Classification of Vehicle Data) FIG. 10 is a flowchart for classifying vehicle data. The flowchart of FIG. 10 is executed after the flowchart of FIG. 9.

[0070] The classification processing execution unit 214 of the first device 101-a receives a data provision instruction 130 from the third device 103 via the communication unit 220 (S1001). Next, the classification processing execution unit 214 acquires the classification condition table 300 from the classification condition specifying unit 213. Then, the classification processing execution unit 214 refers to the classification condition table 300 and classifies the vehicle data into first data and second data (S1002).

[0071] Next, the classification processing execution unit 214 assigns an identifier to each of the first data and the second data (S1003). Then, the classification processing execution unit 214 stores the first data 401 in the first data area 215a and stores the second data 402 in the second data area 215b (S1004).

[0072] (Transmission of First Data and Second Data) FIG. 11 is a flowchart for transmitting the first data and the second data. The flowchart of FIG. 11 is executed after the flowchart of FIG. 10.

[0073] The bus monitoring unit 216b of the first device 101-a monitors the traffic volume of the CAN bus 250 (S1101). The bus monitoring unit 216b determines whether the traffic volume is less than or equal to a specified value (S1102). If the traffic volume is not less than or equal to the specified value, the process returns to the process of S1101.

[0074] If the traffic volume is less than or equal to the specified value, the bus monitoring unit 216b transmits a transmission permission command to the data processing unit 216a. In response to the transmission permission command, the data processing unit 216a transmits the second data 402 to the third device 103 via the communication unit 220 (S1103). Next, the external device monitoring unit 212 inquires of the second device 102-a about the remaining capacity of the storage 513 (S1104).

[0075] The data management unit 512b of the second device 102-a transmits the remaining capacity of the storage 513 to the external device monitoring unit 212.

[0076] The external device monitoring unit 212 determines whether the remaining capacity of the storage 513 is equal to or greater than a predetermined threshold value. If the remaining capacity of the storage 513 is less than the predetermined threshold value, there may be no sufficient first data area 513a for storing the first data 401. Therefore, the external device monitoring unit 212 sends a data deletion instruction to the second device 102-a (S1107). The data deletion instruction is an instruction for causing the second device 102-a to delete the data in the storage 513.

[0077] In response to the data deletion instruction, the data management unit 512b deletes old data in the storage 513 (for example, old data used in other functions of the smartphone) (S1108). Thereafter, the data management unit 512b returns to the process of S1105.

[0078] On the other hand, when the remaining capacity of the storage 513 is equal to or greater than the predetermined threshold value, the external device monitoring unit 212 instructs the data processing unit 216a to transmit the first data 401. In response to this, the data processing unit 216a transmits the first data 401 to the second device 102-a (S1109).

[0079] The data management unit 512b receives the first data 401 and stores the first data 401 in the first data area 513a (S1110). Next, the data management unit 512b sends a completion notification to the first device 101-a (S1111). The completion notification is a notification for informing the first device 101-a that the storage of the first data 401 has been completed. In response to the completion notification, the data processing unit 216a deletes the first data 401 from the first data area 215a and deletes the second data 402 from the second data area 215b (S1112).

[0080] (Transmission of the First Data) FIG. 12 is a flowchart for transmitting the first data. The flowchart of FIG. 12 is executed after the flowchart of FIG. 11.

[0081] First, the data processing unit 216a of the first device 101-a detects that the vehicle 110-a is in a parked state (S1201). Next, the data processing unit 216a sends an approval operation instruction to the second device 102-a (S1202). The approval operation instruction is an instruction for causing the second device 102-a to execute a process of displaying the above-described approval screens (the third screen 603 and the fourth screen 604).

[0082] The data management unit 512b of the second device 102-a displays the third screen 603 on the display unit 112 in response to the approval operation instruction (S1203). Next, the data management unit 512b displays the fourth screen 604 on the display unit 112 in response to the driver's operation (S1204). Next, the data management unit 512b determines whether the driver has performed an approval operation (S1205). Specifically, as described above, the data management unit 512b determines whether the driver has tapped the first button 604a on the fourth screen 604. When the driver taps the first button 604a, the data management unit 512b acquires the corresponding first data 401 from the first data area 513a and transmits the first data 401 to the third device 103 (S1206). Thereafter, the data management unit 512b deletes the corresponding first data 401 from the first data area 513a (S1207).

[0083] Note that when the driver taps the second button 604b on the fourth screen 604, the data management unit 512b deletes the corresponding first data 401 from the first data area 513a without executing the process of S1206 (S1207).

[0084] Thereafter, the data management unit 512b determines whether the first data 401 has disappeared from the first data area 513a. If the first data 401 does not exist in the first data area 513a, the data management unit 512b ends the process. On the other hand, if the first data 401 exists in the first data area 513a, the data management unit 512b returns to the process of S1203.

[0085] (Effect) According to the above configuration, the first device 101-a classifies vehicle data into first data 401 and second data 402 according to the classification condition table 300. The first data 401 is data for which an approval operation by the driver is required for transmission to the third device 103. The second data 402 is data for which an approval operation by the driver is not required for transmission to the third device 103. The first device 101-a transmits the first data 401 to the second device 102-a. The driver can check the content of the first data 401 on the display unit 112 of the second device 102-a. Further, when the driver performs an approval operation on the second device 102-a, the second device 102-a transmits the first data 401 to the third device 103. In this way, the driver can approve the transmission of each of the first data 401 to the third device 103. It is possible to avoid the vehicle data including the driver's personal data being transmitted to the third device 103 unintentionally.

[0086] On the other hand, the first device 101-a directly transmits the second data 402 to the third device 103. Since the second data 402 for which an approval operation by the driver is not required is directly transmitted to the third device 103, the driver's labor can be reduced.

[0087] Furthermore, the driver can set the classification condition table 300 by operating on the display unit 112 of the second device 102-a. That is, the driver can freely select the first data that requires his / her approval operation.

[0088] When transmitting data via the communication unit (TCU) 220, the data communication fee billing method is generally a metered system. Therefore, when transmitting a large amount of data, the data communication fee may increase. According to the above configuration, the first device 101-a transmits only the second data 402 to the third device 103 via the communication unit 220, so the data communication fee can be suppressed.

[0089] Furthermore, the first device 101-a monitors the remaining capacity of the storage 513 of the second device 102-a. The first device 101-a can transmit the first data 401 to the second device 102-a only when the second device 102-a can secure a sufficient area for storing the first data 401. Furthermore, the first device 101-a can also instruct the second device 102-a to delete data in the storage 513 in order to secure an area for storing the first data 401.

[0090] <Example 2> FIG. 13 is a diagram showing the configuration of the first device 101-a in Example 2. For the same configuration as in Example 1, the same reference numerals are given and the description thereof is omitted.

[0091] The first device 101-a includes a CGW (Central Gateway) 260. The CGW 260 has a relay function for relaying a plurality of communication networks in the vehicle 110-a and a function for managing communication processing between these networks. In this example, the CGW 260 relays between a plurality of CAN buses 250 to 252 and adjusts communication processing between the plurality of CAN buses 250 to 252. The data collection device 210 and the communication unit 220 are connected to the CAN bus 250. On the other hand, various ECUs (not shown) are connected to the CAN buses 251 and 252.

[0092] The CGW 260 includes a bus monitoring unit 216b. The bus monitoring unit 216b monitors the traffic volume for each of the plurality of CAN buses 250 to 252. The bus monitoring unit 216b determines whether the traffic volume is below a specified value.

[0093] (Transmission of First Data and Second Data) FIG. 14 is a flowchart for transmitting the first data and the second data. The flowchart of FIG. 14 is executed instead of the flowchart of FIG. 11.

[0094] The bus monitoring unit 216b of the CGW260 monitors the traffic volume of each of the plurality of CAN buses 250 to 252 (S1401). The bus monitoring unit 216b determines whether the traffic volume of each of the plurality of CAN buses 250 to 252 is equal to or less than a specified value (S1402). When the traffic volume of each of the plurality of CAN buses 250 to 252 is equal to or less than the specified value, the same processing as S1120 in FIG. 11 is executed.

[0095] According to the above configuration, the first device 101-a can transmit the second data 402 to the third device 103 in consideration of the traffic volume of each of the plurality of CAN buses 250 to 252 in the vehicle 110-a. Thereby, the influence on the communication processing on the other CAN buses 251 and 252 can also be reduced.

[0096] <Example 3> FIG. 15 is a diagram showing the configuration of the second device 102-a in the third embodiment. The same components as those in the first embodiment are denoted by the same reference numerals, and the description thereof is omitted.

[0097] In this example, the second device 102-a is an in-vehicle infotainment (IVI). The IVI is a touch panel type information terminal installed in the vehicle 110-a. The IVI has functions such as navigation, position information service, voice communication, Internet connection, multimedia playback, and search. In this example, the IVI is configured to be connectable to an external network device (Wi-Fi device 180 (Wi-Fi is a registered trademark)).

[0098] The second device 102-a includes an in-vehicle network connection unit 521 and a Wi-Fi connection unit 522. The in-vehicle network connection unit 521 is connected to the CAN bus 250. The in-vehicle network connection unit 521 executes communication processing with the data collection device 210 via the CAN bus 250. Note that the first device 101-a and the second device 102-a (IVI) may be directly connected without passing through the CAN bus 250.

[0099] The Wi-Fi connection unit 522 is a communication module for performing connection processing with a Wi-Fi device 180 installed at home or in the office. The Wi-Fi connection unit 522 notifies the driver that the connection with the Wi-Fi device 180 has been established. When there are multiple Wi-Fi devices 180, the Wi-Fi connection unit 522 may display a screen for selecting a connection destination from among the multiple Wi-Fi devices 180 on the touch panel. The Wi-Fi connection unit 522 may save information regarding the Wi-Fi device 180 that has been connected once.

[0100] Note that the Wi-Fi connection unit 522 may be built into the IVI or provided outside the IVI.

[0101] (Transmission of First Data) FIG. 16 is a flowchart for transmitting first data. The flowchart of FIG. 16 is executed in place of the flowchart of FIG. 12.

[0102] First, the data processing unit 216a of the first device 101-a detects that the vehicle 110-a is in a parked state (S1601). Next, the data processing unit 216a transmits an approval operation instruction to the second device 102-a (S1602).

[0103] The Wi-Fi connection unit 522 of the second device 102-a receives the approval operation instruction via the in-vehicle network connection unit 521. In response to the approval operation instruction, the Wi-Fi connection unit 522 performs connection processing with a Wi-Fi device 180 installed at home or in the office (S1603). Next, the Wi-Fi connection unit 522 determines whether the connection with the Wi-Fi device 180 has been established (S1604). If the connection with the Wi-Fi device 180 has been established, the same processing as S1210 in FIG. 12 is executed. Note that if the connection with the Wi-Fi device 180 has not been established, the Wi-Fi connection unit 522 returns to the processing of S1603. According to this configuration, the first device 101-a can transmit the first data 401 to the third device 103 after the communication environment for transmitting the first data 401 has been established.

[0104] (Effect) When the second device 102-a transmits the first data 401 to the third device 103, the data communication cost may increase. According to the above configuration, since the second device 102-a transmits the first data 401 to the third device 103 via the Wi-Fi device 180, the data communication cost can be suppressed.

[0105] Note that the second device 102-a may be connected to a communication device other than the Wi-Fi device 180 (for example, a public wireless LAN device) and transmit the first data 401 to the third device 103.

[0106] FIG. 17 is a diagram showing a modified example of the configuration of the first device 101-a in the third embodiment. The first device 101-a may include a driver management unit 217. The driver management unit 217 performs driver authentication by means of a password or biometric authentication when the driver starts driving the vehicle 110-a. Thereby, the driver management unit 217 stores information regarding the current driver. The Wi-Fi connection unit 522 may acquire information regarding the current driver from the driver management unit 217. The Wi-Fi connection unit 522 stores in advance information regarding the combination of the driver and the Wi-Fi device 180 (for example, the Wi-Fi device of the driver's own home). The Wi-Fi connection unit 522 may permit connection only to the Wi-Fi device 180 associated with the current driver.

[0107] <Example 4> FIG. 18 is a diagram showing the configuration of the first device 101-a in the fourth embodiment. For the same configuration as in the first embodiment, the same reference numerals are given and the description thereof is omitted.

[0108] For example, it is assumed that the rules related to the handling of personal data differ for each region (country). Therefore, the first device 101-a modifies the classification condition table 300 so as to correspond to the region.

[0109] In this example, the classification condition specifying unit 213 includes a table comparison unit 213a. The table comparison unit 213a can receive regional information from the roadside unit 181 via the communication unit 220. The regional information is information indicating in which region (country) the vehicle 110-a is traveling.

[0110] The table comparison unit 213a stores in advance a classification condition table 300a for each region (see FIG. 19). The content of the classification condition table 300a is preset according to the regulations of each region (regulations related to the handling of personal data). The table comparison unit 213a compares the classification condition table 300 set in the second device 102-a with the classification condition table 300a of the region in which the vehicle 110-a is traveling. The table comparison unit 213a corrects the differences between the two tables 300 and 300a as necessary.

[0111] FIG. 19 is a diagram for explaining the process of correcting the classification condition table 300. Hereinafter, it is assumed that the vehicle 110-a is traveling in country A.

[0112] The second device 102-a sets the classification condition table 300 according to the driver's operation and transmits the classification condition table 300 to the first device 101-a. The classification condition specifying unit 213 stores the classification condition table 300.

[0113] The table comparison unit 213a receives the regional information from the roadside unit 181 and determines that the vehicle 110-a is traveling in country A. The table comparison unit 213a selects the classification condition table 300a corresponding to country A. The table comparison unit 213a compares the classification condition table 300 with the classification condition table 300a. Then, the table comparison unit 213a sets the final classification condition table 300b.

[0114] As shown in FIG. 19, in the classification condition table 300, the availability 302 of "name" is "○", but in the classification condition table 300a, the availability 302 of "name" is "×". In this case, the table comparison unit 213a sets the availability 302 of "name" to "×" in the classification condition table 300b.

[0115] In the classification condition table 300, the second data 304 of "out-of-vehicle camera image" is "○", but in the classification condition table 300a, the first data 303 of "out-of-vehicle camera image" is "○". In this case, the table comparison unit 213a sets the first data 303 of "out-of-vehicle camera image" to "○" in the classification condition table 300b.

[0116] In the classification condition table 300, the first data 303 of "vehicle identification number" is "○", and in the classification condition table 300a, the first data 303 of "vehicle identification number" is also "○". In this case, since the settings in the classification condition table 300 and the settings in the classification condition table 300a are the same, the table comparison unit 213a does not modify the settings in the classification condition table 300. That is, the table comparison unit 213a sets the first data 303 of "vehicle identification number" to "○" in the classification condition table 300b.

[0117] The classification condition specifying unit 213 saves the classification condition table 300b instead of the classification condition table 300. Therefore, the classification process execution unit 214 refers to the classification condition table 300b and classifies the vehicle data into the first data and the second data.

[0118] (Modification of the classification condition table) FIG. 20 is a flowchart for modifying the classification condition table 300. The flowchart in FIG. 20 is executed after the flowchart in FIG. 9 and before the flowchart in FIG. 10.

[0119] The table comparison unit 213a receives regional information from the roadside unit 181 (S2001). Next, the table comparison unit 213a selects a classification condition table 300a corresponding to the regional information (S2002). Next, the table comparison unit 213a compares the classification condition table 300 set in the second device 102-a with the classification condition table 300a corresponding to the regional information (S2003). Then, as described above, the table comparison unit 213a sets the final classification condition table 300b (S2004).

[0120] (Effect) It is assumed that rules related to the handling of personal data may differ by region. According to the above configuration, when there is a difference between the classification condition table 300 set in the second device 102-a and the classification condition table 300a corresponding to the regional information, the table comparison unit 213a corrects the difference and sets the final classification condition table 300b. The table comparison unit 213a can set the availability and classification conditions of vehicle data according to the region. It is possible to avoid the unintentional transmission of vehicle data prohibited in each region to the third device 103.

[0121] Although the roadside unit 181 is described as an example of a device that distributes regional information, other devices may be used as long as they can receive regional information.

[0122] The table comparison unit 213a may correct the setting only when there is a difference in the availability 302.

[0123] FIG. 21 is a diagram for explaining a modified example of the configuration of the second device 102-a in Example 4. The second device 102-a may display the screen 2101 on the display unit 112 before the operation of the vehicle 110-a is started. The driver selects the country to be visited on the screen 2101. The second device 102-a transmits information regarding the country to be visited to the first device 101-a. The table comparison unit 213a may compare the information regarding the country to be visited with the regional information received from the roadside unit 181. When the country to be visited is different from the regional information received from the roadside unit 181, the table comparison unit 213a may be configured not to modify the classification condition table 300.

[0124] <Example 5> FIG. 22 is a diagram showing the configuration of the first device 101-a in Example 5. The same components as those in Example 1 are denoted by the same reference numerals and their description is omitted. In this example, the first device 101-a is configured to be able to execute communication processing by means of vehicle-to-infrastructure (V2I) or vehicle-to-vehicle (V2V) communication. Hereinafter, this configuration will be described.

[0125] The first device 101-a includes an instruction transmission unit 260. The instruction transmission unit 260 is a device that transmits a data provision instruction to surrounding vehicles. The data provision instruction transmitted by the instruction transmission unit 260 includes at least a first instruction and a second instruction. The first instruction is an instruction transmitted when the vehicle 110-a is involved in a traffic accident. The second instruction is an instruction transmitted when the vehicle 110-a suffers damage from dangerous driving (tailgating). The instruction transmission unit 260 may be configured to automatically transmit a data provision instruction to surrounding vehicles. For example, the instruction transmission unit 260 may automatically transmit the first instruction triggered by the activation of the airbag. The instruction transmission unit 260 may detect dangerous driving using sensors mounted on the vehicle and automatically transmit the second instruction.

[0126] In another example, the instruction sending unit 260 may include buttons corresponding to the first instruction and the second instruction respectively. The driver may manually operate the buttons to send the first instruction and / or the second instruction to the surrounding vehicles. The above buttons may be buttons provided near the driver, or may be buttons displayed on the touch panel of the IVI.

[0127] Furthermore, the data collection device 210 includes an instruction interpretation unit 218. The instruction interpretation unit 218 receives, via the communication unit 220, a data provision instruction transmitted by the instruction sending unit 260 of another first device (101-b in FIG. 22). The instruction interpretation unit 218 determines whether the data provision instruction is the first instruction or the second instruction.

[0128] The instruction interpretation unit 218 stores in advance a specific classification condition table 2300 shown in FIG. 23. In the specific classification condition table 2300, classification conditions are set for each type of instruction. The specific classification condition table 2300 includes, as constituent items, an instruction type 2301, a classification condition 2302, and a transmission method 2303.

[0129] The instruction type 2301 represents the type of the data provision instruction (the first instruction or the second instruction). The classification condition 2302 includes information regarding whether vehicle data can be provided, and information regarding classification conditions for classifying the vehicle data into first data and second data. In the classification condition 2302, "0" indicates data not to be provided to the third device 103, "1" indicates the first data, and "2" indicates the second data. The transmission method 2303 is information regarding whether an approval operation by the driver is required or not.

[0130] The instruction interpretation unit 218 compares the classification condition table 300 set in the second device 102-a with the specific classification condition table 2300. The instruction interpretation unit 218 modifies the classification condition 2302 of the specific classification condition table 2300 according to the classification condition table 300 to set the final classification condition 2302a.

[0131] For example, assume that the instruction interpretation unit 218 receives a first instruction from another first device. The availability 302 of "vehicle control information" in the classification condition table 300 is "×", and the vehicle control information in the classification condition 2302 is "1". In this case, the instruction interpretation unit 218 sets the value corresponding to the vehicle control information to "0" in the classification condition 2302a.

[0132] Furthermore, although the first data 303 of "white line detection information" in the classification condition table 300 is "○", the "white line detection information" in the classification condition 2302 is "2". In this case, the instruction interpretation unit 218 corrects the value corresponding to the "white line detection information" to "1" in the classification condition 2302a. In this way, when setting the classification condition 2302a, the instruction interpretation unit 218 gives priority to the settings in the classification condition table 300.

[0133] The data processing unit 216a classifies the vehicle data into the first data 401 and the second data 402 according to the classification condition 2302a. Then, the data processing unit 216a transmits the first data 401 to the second device 102-a and transmits the second data 402 to the third device 103.

[0134] Hereinafter, an example in which the vehicle 110-a receives data provision instructions from each of the other vehicles 110-b and 110-c will be described more specifically. FIG. 24 is a diagram showing the entire information system in the fifth embodiment.

[0135] In FIG. 24, the dotted arrow represents vehicle-to-road communication. The dashed-dotted arrow represents vehicle-to-vehicle communication. The other vehicle 110-b is involved in a traffic accident. Furthermore, the other vehicle 110-c has suffered damage from dangerous driving by a following vehicle.

[0136] First, the data provision instruction transmitted from vehicle 110-b will be described. The instruction transmission unit 260 of the first device 101-b of vehicle 110-b transmits the first instruction 2401 to the first device 101-a of vehicle 110-a via vehicle-to-vehicle communication. The instruction interpretation unit 218 of the first device 101-a receives the first instruction 2401. As described above, the instruction interpretation unit 218 sets the final classification condition 2302a. Thereafter, the data processing unit 216a of the first device 101-a transmits the first data 401 to the second device 102-a and transmits the second data 402 to the third device 103 according to the classification condition 2302a.

[0137] Next, the data provision instruction transmitted from vehicle 110-c will be described. The instruction transmission unit 260 of the first device 101-c of vehicle 110-c transmits the second instruction 2402 to the first device 101-a of vehicle 110-a via vehicle-to-vehicle communication. The instruction interpretation unit 218 of the first device 101-a receives the second instruction 2402. As described above, the instruction interpretation unit 218 sets the final classification condition 2302a. Thereafter, the data processing unit 216a of the first device 101-a transmits the first data 401 to the second device 102-a and transmits the second data 402 to the third device 103 according to the classification condition 2302a.

[0138] Note that as shown in FIG. 24, the first instruction 2401 and the second instruction 2402 may be transmitted to the first device 101-a of vehicle 110-a via the roadside unit 2410.

[0139] (Transmission of the First Data and the Second Data) FIG. 25 is a flowchart for transmitting the first data and the second data in response to the first instruction 2401 or the second instruction 2402.

[0140] The instruction interpretation unit 218 receives a data provision instruction via the communication unit 220 (S2501). Next, the instruction interpretation unit 218 determines whether the data provision instruction is the first instruction 2401 or the second instruction 2402. Then, the instruction interpretation unit 218 acquires the classification condition 2302 corresponding to the type of the data provision instruction from the specific classification condition table 2300 (S2502).

[0141] The instruction interpretation unit 218 determines whether the classification condition table 300 is stored in the classification condition designation unit 213 (S2503). When the classification condition table 300 does not exist in the classification condition designation unit 213, the data processing unit 216a transmits the first data 401 to the second device 102-a and transmits the second data 402 to the third device 103 in accordance with the classification condition 2302 acquired in S2502 (S2507).

[0142] On the other hand, when the classification condition table 300 exists in the classification condition designation unit 213, the instruction interpretation unit 218 compares the classification condition 2302 with the classification condition table 300 (S2504). Next, the instruction interpretation unit 218 sets the final classification condition 2302a, giving priority to the settings in the classification condition table 300 as described above (S2505). The data processing unit 216a transmits the first data 401 to the second device 102-a and transmits the second data 402 to the third device 103 in accordance with the classification condition 2302a set in S2505 (S2506).

[0143] (Effect) According to the above configuration, when a traffic accident or dangerous driving occurs around vehicle 110-a, the first device 101-a can transmit vehicle data to the third device 103. For example, the first device 101-a can transmit data related to the situation of a traffic accident (e.g., an external camera image of the vehicle) and evidence data of dangerous driving (position information and time of occurrence) to the third device 103. Due to a traffic accident, components of the first device 101-b of vehicle 110-b may malfunction, and there is a possibility that the first device 101-b cannot transmit vehicle data to the third device 103. The first device 101-a can transmit vehicle data to the third device 103 in response to a data provision instruction (first instruction) from vehicle 110-b. Furthermore, the first device 101-a can classify vehicle data into first data and second data according to the type of the data provision instruction.

[0144] Furthermore, since the settings in the classification condition table 300 are prioritized, it is possible to avoid vehicle data including the driver's personal data from being inadvertently transmitted to the third device 103.

[0145] Note that the data provision instruction in this example may include instructions other than the first instruction and the second instruction. For example, the data provision instruction may include a third instruction transmitted when a vehicle failure occurs, a fourth instruction transmitted when the vehicle enters a traffic jam section, and the like.

[0146] Note that the above-described embodiments are merely examples, and the present invention is not limited to these contents as long as the features of the invention are not impaired. Other aspects conceivable within the scope of the technical idea of the present invention are also included in the scope of the present invention.

[0147] In all of the above embodiments, the data collection device 210 includes a storage, but is not limited to this configuration. For example, according to the form of the vehicle, the storage used by the data collection device 210 may be flexibly changed. For example, the data collection device 210 may utilize another ECU having a storage such as an MPU (Map Position Unit). The data collection device 210 may utilize the storage of a drive recorder.

Description of Symbols

[0148] 100: Information system 101-a, b, c: First device 102-a, b, c: Second device 103: Third device 110-a, b, c: Vehicle

Claims

1. A first device mounted on a vehicle, a second device operated by a driver of the vehicle, and a third device, comprising an information system, wherein the first device is configured to classify a plurality of types of vehicle data acquired in the vehicle into first data and second data according to preset classification conditions, the first data is data for which an approval operation by the driver is required, the second data is data for which the approval operation is not required, the first device is configured to transmit the first data to the second device and the second data to the third device, the second device receives the first data from the first device, and is configured to transmit the first data to the third device in response to the approval operation of the information system.

2. In the information system according to claim 1, the second device comprises a display unit, the second device displays a setting screen for setting the classification conditions on the display unit, and is configured to transmit the classification conditions to the first device in response to an operation of the driver on the setting screen of the information system.

3. In the information system according to claim 1, the second device comprises a display unit, the second device displays an approval screen for receiving the approval operation on the display unit, and is configured to transmit the first data to the third device in response to the approval operation on the approval screen of the information system.

4. In the information system according to claim 1, the second device comprises a storage device for storing the first data, the first device is configured to transmit the first data to the second device when the remaining capacity of the storage device is equal to or greater than a predetermined threshold value of the information system.

5. In the information system according to claim 1, the first device monitors the traffic volume of the network in the vehicle, and is configured to transmit the second data to the third device when the traffic volume is equal to or less than a predetermined threshold value of the information system.

6. In the information system according to claim 1, the first device is configured to assign an identifier for identifying the first data and the second data as a group of data to each of the first data and the second data of the information system.

7. In the information system according to claim 1, the second device ​ ​ ​ ​ Determine whether a connection with the communication device has been established, and after the connection with the communication device has been established, transmit the first data to the third device. configured as an information system.

8. In the information system according to claim 1, the second device is configured to transmit a first condition for classifying the vehicle data into the first data and the second data to the first device according to an operation of the driver, the first device stores in advance a second condition for classifying the vehicle data into the first data and the second data, the second condition being set for each region, the first device compares the first condition and the second condition to set the classification condition. configured as an information system.

9. In the information system according to claim 1, the first device is configured to transmit the first data to the second device and transmit the second data to the third device in response to a data provision instruction received from the outside. an information system.

10. In the information system according to claim 9, the data provision instruction includes a first instruction transmitted when another vehicle is involved in a traffic accident and a second instruction transmitted when another vehicle suffers damage from dangerous driving. an information system.

11. In the information system according to claim 10, the second device is configured to transmit a first condition for classifying the vehicle data into the first data and the second data to the first device according to an operation of the driver, the first device stores in advance a second condition for classifying the vehicle data into the first data and the second data, the second condition being set for each type of the data provision instruction, the first device compares the first condition and the second condition to set the classification condition. configured as an information system.

Images