Control device, control method, and control program

Abstract

To provide a technology capable of properly protecting the privacy between users who utilize a riding-together vehicle.SOLUTION: A control device controls displayed details displayed on screens of respective information terminal devices of multiple users who utilize a shared riding-together vehicle. The control device includes an information processing device and a communicating device. The information processing device is configured to execute: extracting, on the basis of pieces of customer information on the multiple users, a group of the user having a personal relation between the users belonging to a predetermined personal relation, among the multiple users; transmitting, to the information terminal device of the user belonging to the group, first display information representing the present location of the riding-together vehicle via the communicating device; and transmitting, via the communicating device, when the group involves a user subjected to protection and satisfying a predetermined privacy protection condition, second display information having undergone a process for the privacy protection for the user subjected to the protection to the information terminal device of the user not belonging to the group.SELECTED DRAWING: Figure 7

Description

Technical Field

[0001] The present disclosure relates to a control device, a control method, and a control program for controlling display content displayed on a screen of an information terminal device held by a user who uses a shared vehicle.

Background Art

[0002] Patent Document 1 discloses a technique for protecting the privacy of some of a plurality of users when the plurality of users are riding in a shared vehicle. In this technique, when some of the plurality of users get off the vehicle, whether to protect the privacy of that part of the users is determined based on attributes including the gender and age of the users, combinations of such attributes, and the like. And when it is determined that privacy protection is to be performed, a predetermined protection operation is performed.

Prior Art Documents

Patent Documents

[0003]

Patent Document 1

Patent Document 2

Summary of the Invention

Problems to be Solved by the Invention

[0004] Incidentally, among multiple users who use a carpool vehicle, it is assumed that there are users whose relationship with each other is an acquaintance, such as family or friends. Therefore, when users who are acquaintances get on the carpool vehicle, consider the case where the boarding position is different for each user. When the above prior art is applied to such a case, although the users are acquaintances, the privacy of the user who boarded the carpool vehicle first is protected from the user who boards the carpool vehicle later. That is, the user who boards the carpool vehicle later cannot know the exact position of the user who boarded the carpool vehicle first. This is because the human relationship between users is not considered in determining whether to protect the privacy of some users. Therefore, the above prior art may lack convenience for some users.

[0005] One object of the present disclosure is to provide a technology capable of appropriately protecting privacy among users who use a carpool vehicle.

Means for Solving the Problem

[0006] A first aspect is a control device that controls the display content displayed on the screens of information terminal devices held by multiple users who use the same carpool vehicle, and has the following features. The control device includes an information processing device and a communication device. The information processing device extracts, based on the customer information of multiple users, a group of users whose relationship between users belongs to a predetermined human relationship from among the multiple users, and transmits, to the information terminal devices held by the users belonging to the group, first display information indicating the current position of the carpool vehicle via the communication device. When the group includes protected users who satisfy a predetermined privacy protection condition, the information processing device transmits, to the information terminal devices held by the users who do not belong to the group, second display information that has been processed for the privacy protection of the protected users via the communication device. When the position of the carpool vehicle is outside a predetermined area based on the position where the protected user got off the carpool vehicle, the display content transmitted to the information terminal device held by a user not belonging to the group is switched from the second display information to the first display information, and It is configured to execute the above.

[0007] In addition to the first aspect, the second aspect further has the following features. When the position of the carpool vehicle is outside a predetermined area based on the position where the protected user got off the carpool vehicle, Furthermore, it is configured to switch the display content transmitted to the information terminal device held by the protected user from the first display information to the second display information.

[0008] The third aspect is In addition to the first aspect, it further has the following features. The predetermined privacy protection conditions are: a first condition where a user belonging to the group has boarded the carpool vehicle before a user not belonging to the group and the reservation of the carpool vehicle by the user not belonging to the group is not confirmed; a second condition where when a user belonging to the group boards the carpool vehicle before a user not belonging to the group, the reservation of the carpool vehicle by the user not belonging to the group is confirmed and the carpool vehicle is located within a predetermined area based on the position where the user belonging to the group boards the carpool vehicle; and a third condition where when a user belonging to the group gets off the carpool vehicle before a user not belonging to the group boards the carpool vehicle, the reservation of the carpool vehicle by the user not belonging to the group is confirmed and the carpool vehicle is located within a predetermined area based on the position where the user belonging to the group gets off the carpool vehicle. It includes at least one of these.

[0009] The fourth aspect is It is a control device that controls the display content displayed on the screens of the information terminal devices held by a plurality of users using the same carpool vehicle, and has the following features. The control device includes an information processing device and a communication device. The information processing device is configured to extract a group of users whose relationship between users belongs to a predetermined personal relationship from among the plurality of users based on the customer information of the plurality of users, transmit the first display information indicating the current position of the carpool vehicle to the information terminal device held by the user belonging to the group via the communication device, and when a protected user satisfying a predetermined privacy protection condition is included in the group, transmit the second display information subjected to processing for protecting the privacy of the protected user to the information terminal device held by the user not belonging to the group via the communication device. The predetermined privacy protection conditions include at least one of the following: a first condition where users belonging to a group board the carpool vehicle before users not belonging to the group and the reservation of the carpool vehicle by a user not belonging to the group is not confirmed; a second condition where when users belonging to a group board the carpool vehicle before users not belonging to the group, the reservation of the carpool vehicle by a user not belonging to the group is confirmed and the carpool vehicle is located within a predetermined area based on the position where the users belonging to the group board the carpool vehicle; and a third condition where when users belonging to a group get off the carpool vehicle before a user not belonging to the group boards the carpool vehicle, the reservation of the carpool vehicle by a user not belonging to the group is confirmed and the carpool vehicle is located within a predetermined area based on the position where the users belonging to the group get off the carpool vehicle.

[0010] In addition to the fourth aspect, the fifth aspect further has the following features. The second and third conditions further include that the time distance from the current position of the carpool vehicle to the position where the user not belonging to the group boards the carpool vehicle is equal to or greater than a threshold value.

[0011] In addition to any one of the first to fifth aspects, the sixth aspect further has the following features. The human relationship includes at least one of the following: the reserving users are the same users; the users with the same address; and the users with the same boarding and alighting positions.

[0012] The seventh aspect further has the following features in addition to any one of the first to fifth aspects. The second display information is information for causing the information terminal device to display a dummy position different from the current position of the carpool vehicle. The dummy position is represented by at least one of an arbitrary position on the travel record route, an arbitrary position on the planned travel route, an arbitrary position on a different route from the travel route, the latest position obtained when the cycle of acquiring the current position is set to low speed, and a heat map with the display fineness of the current position coarsened.

[0013] The eighth aspect is a control method for controlling the display content displayed on the screens of information terminal devices held by a plurality of users who use the same carpool vehicle, and has the following features. The control method includes extracting, based on the customer information of the plurality of users, a group of users whose relationship among the plurality of users belongs to a predetermined personal relationship, transmitting, to the information terminal devices held by the users belonging to the group, first display information indicating the current position of the carpool vehicle via a communication device, and when the group includes a protected user who satisfies a predetermined privacy protection condition, transmitting, to the information terminal devices held by the users not belonging to the group, second display information subjected to processing for protecting the privacy of the protected user via the communication device. When the position of the carpool vehicle is outside a predetermined area based on the position where the protected user got off the carpool vehicle, switch the display content transmitted to the information terminal device held by a user who does not belong to the group from the second display information to the first display information, and including.

[0014] The ninth aspect is a control program for controlling the display content displayed on the screens of information terminal devices held by a plurality of users who use the same carpool vehicle, and has the following features. The control program includes extracting, based on the customer information of the plurality of users, a group of users whose relationship among the plurality of users belongs to a predetermined personal relationship, transmitting, to the information terminal devices held by the users belonging to the group, first display information indicating the current position of the carpool vehicle via a communication device, and when the group includes a protected user who satisfies a predetermined privacy protection condition, transmitting, to the information terminal devices held by the users not belonging to the group, second display information subjected to processing for protecting the privacy of the protected user via the communication device. When the position of the carpool vehicle is outside a predetermined area based on the position where the protected user got off the carpool vehicle, switch the display content transmitted to the information terminal device held by a user who does not belong to the group from the second display information to the first display information, and configured to cause a computer to execute.

Advantages of the Invention

[0015] According to the control device, control method, and control program of the present disclosure, a group of users whose relationship among a plurality of users belongs to a predetermined personal relationship is extracted from among the plurality of users, and information indicating the current position of the carpool vehicle is displayed on the information terminal devices held by the users belonging to the group. On the other hand, when the group includes a protected user who satisfies a predetermined privacy protection condition, information subjected to processing for protecting the privacy of the protected user is displayed on the information terminal devices held by the users who do not belong to the group. Furthermore, when the position of the carpool vehicle is outside a predetermined area based on the position where the protected user got off the carpool vehicle, the display content transmitted to the information terminal device held by a user who does not belong to the group is switched from the information subjected to the process for protecting the privacy of the protected user to the information indicating the current position of the carpool vehicle. Therefore, it becomes possible to appropriately protect the privacy of the protected user based on the personal relationship among the users who use the carpool vehicle. As a result, it becomes possible to achieve both the convenience of the users by providing accurate position information of the carpool vehicle and the protection of the privacy of the protected user.

Brief Description of the Drawings

[0016]

Figure 1

Figure 2

Figure 3

Figure 4

Figure 5

Figure 6

Figure 7

Figure 8

Figure 9

Figure 10

Embodiments for Carrying Out the Invention

[0017] With reference to the accompanying drawings, a control device, a control method, and a control program according to an embodiment of the present disclosure will be described. Note that the control method and the control program according to the embodiment are realized by computer processing of the control device according to the embodiment.

[0018] Embodiment 1 1. Outline For users who use carpooling vehicles, it is convenient if they can check the current position of the carpooling vehicle using an information terminal device (e.g., smartphone, tablet PC, etc.) they own. One reason is that it becomes possible to estimate the arrival times at the boarding position and the alighting position used by the user. Another reason is that even when there are multiple carpooling vehicles with the same or similar shapes, colors, etc., it becomes possible to identify the carpooling vehicle that the user uses.

[0019] However, since carpooling vehicles are used by multiple users, there may be a privacy problem that places related to personal information such as home and workplace are identified by other users from information on the boarding position or the alighting position. Specifically, information on at least one of the boarding position and the alighting position of a user who boards the carpooling vehicle first is transmitted to other users who board the carpooling vehicle later. Therefore, when displaying information on the position of the vehicle on the information terminal device the user owns, it is necessary to consider the privacy of other users.

[0020] Here, consider the relationship among users who use carpooling vehicles. For example, when the relationship among users corresponds to a predetermined personal relationship such as friends, each user is likely to know in advance places related to personal information such as the homes or workplaces of other users. In this case, it is considered that there is no problem even if the accurate boarding and alighting positions of a certain user are known to other users. Therefore, if the relationship among users who use carpooling vehicles belongs to a predetermined personal relationship, there is no problem even if the information terminal devices held by each user display the information on their accurate boarding and alighting positions.

[0021] On the other hand, if the relationship among users who use carpooling vehicles does not belong to a predetermined personal relationship, it is desirable that the information terminal devices held by each user do not display the information on their accurate boarding and alighting positions. Note that the determination as to whether the relationship among users belongs to a predetermined personal relationship can be made based on the customer information registered by the users when using the carpooling vehicle. The customer information includes the attribute information (name, address, gender, age, etc.) of the users registered in the information terminal device and the reservation information (boarding position, alighting position, reserving person, etc.) of the users.

[0022] Here, assume a case where there are multiple groups of users whose relationships belong to a predetermined personal relationship, and one of the groups includes a user (hereinafter referred to as the protected user) who requires privacy protection. In such a case, a mechanism is required to extract the group of users whose relationships belong to a predetermined personal relationship from among the multiple users and to identify the protected users included in the extracted group.

[0023] In the control device according to the present embodiment, based on the customer information of users, a group of users whose relationship among a plurality of users belongs to a predetermined personal relationship is extracted from among the plurality of users. Then, information on the current position of the carpool vehicle is displayed on the information terminal devices held by the users belonging to the group. Further, if the group does not include a protected user who satisfies the privacy protection conditions, information on the current position of the carpool vehicle is also displayed on the information terminal devices held by the users who do not belong to the group. However, when the group includes a protected user who satisfies the privacy protection conditions, information subjected to processing for protecting the privacy of the protected user is displayed on the information terminal devices held by the users who do not belong to the group. Thereby, it becomes possible to achieve both the convenience of the users by providing accurate position information of the carpool vehicle and the protection of the privacy of the protected users.

[0024] Hereinafter, the control device according to Embodiment 1 will be described in detail.

[0025] 2. Specific example 2-1. Application example of the control device FIG. 1 shows an application example of the control device 10 according to Embodiment 1. The control device 10 is a server capable of communicating with the information terminal devices held by the users who use the carpool vehicle 1. The carpool vehicle 1 may be a manually drivable vehicle or an automatically drivable vehicle. When there is a reservation for the boarding position and the alighting position from a user who uses the carpool vehicle 1, the control device 10 acquires customer information via the information terminal device held by the user. When there are reservations from a plurality of users, the control device 10 acquires the customer information of the plurality of users via the information terminal devices held by the respective users. For example, as shown in FIG. 1, in the control device 10, when there are reservations for the boarding position and the alighting position from user A and user B who use the carpool vehicle 1, the customer information for each user is acquired via the information terminal devices held by user A and user B.

[0026] Further, based on the acquired customer information, the control device 10 performs processing in the following flow, for example. The control device 10 extracts a group of users whose relationships among the plurality of users belong to a predetermined personal relationship. The control device 10 identifies a user to be protected from the extracted group. Thereafter, the control device 10 transmits display information corresponding to each user to the information terminal devices held by the users belonging to the same group as the user to be protected and the users not belonging to the group. Details of each procedure will be described later.

[0027] 2-2. Group Extraction Here, an example of the procedure for extracting a group of users whose relationships among the users performed by the control device 10 belong to a predetermined personal relationship will be described. As a method for performing group extraction, first, it is determined whether or not the relationships between the users belong to a predetermined personal relationship. Specifically, based on the customer information of the users acquired from the information terminal devices held by the users, it is determined whether or not there are items of customer information common among the users. If there is at least one item of customer information common among the users, it is determined that the relationships between the users belong to a predetermined personal relationship. If there is no item of customer information common among the users, it is determined that the relationships between the users do not belong to a predetermined personal relationship.

[0028] As a more detailed example, as shown in FIG. 2, consider the case where the same shared vehicle 1 is used by five users A, B, C, D, and E. As a result of determining whether the relationship between users belongs to a predetermined personal relationship based on customer information including attribute information and reservation information for each user, the address items in the customer information of user A and user C were the same. Also, the reservation items in the customer information of user B and user D were both the same and were user B. On the other hand, for user E, there were no items of customer information in common with other users. In this case, it is determined that user A and user C are users belonging to a predetermined personal relationship, and it is determined that user B and user D are users belonging to a predetermined personal relationship. On the other hand, it is determined that user E is not a user belonging to a predetermined personal relationship with any of users A, B, C, and D. Note that the personal relationship includes at least one of the following: users having the same reservation, users having the same address, and users having the same boarding and alighting positions.

[0029] After determining whether the relationship between users belongs to a predetermined personal relationship, a group of users belonging to the predetermined personal relationship is extracted. Specifically, as shown in FIG. 2, since user A and user C are users belonging to a predetermined personal relationship, user A and user C are extracted as the same group of users (hereinafter referred to as the first group). Also, since user B and user D are also users belonging to a predetermined personal relationship, user B and user D are extracted as the same group of users (hereinafter referred to as the second group). On the other hand, user E is extracted as another group of users (the third group shown in FIG. 2) that does not belong to either the first or second group.

[0030] In this way, by determining whether the relationship between users belongs to a predetermined personal relationship, even when there are a plurality of users, a plurality of groups can be extracted for each pair of users whose relationship belongs to a predetermined personal relationship. Note that each of the extracted groups is configured such that one or more users belong to it.

[0031] 2-3. Identification of Users to be Protected Here, an example of the procedure for identifying users to be protected from among the extracted groups performed by the control device 10 will be described. First, in identifying users to be protected, the following problem cases are assumed. Even if there are multiple groups, depending on the usage status of the users using the carpool vehicle 1, there may be cases where no user to be protected is included in any of the groups. Also, even if there is a user to be protected in any of the multiple groups, there may be cases where the privacy of the user to be protected cannot be protected.

[0032] Based on the above cases, in identifying users to be protected, it is determined whether the privacy protection conditions for the users who previously used the carpool vehicle 1 are satisfied based on the status of the users using the carpool vehicle 1. The details of the privacy protection conditions will be described with reference to FIG. 3, which will be described later.

[0033] FIG. 3 is a diagram showing a case where privacy protection conditions for users who use the carpool vehicle 1 first are satisfied. In FIG. 3, the user who uses the carpool vehicle 1 first is referred to as user A, and the user who uses the carpool vehicle 1 later is referred to as user B. Also, in FIG. 3, for the sake of easy understanding of the explanation, it is assumed that user A and user B belong to different user groups, and each group consists of one person. As shown in FIG. 3, the privacy protection conditions include at least one of three cases (case 1 is referred to as the first condition, case 2 is referred to as the second condition, and case 3 is referred to as the third condition). Case 1 (the first condition) shown in FIG. 3 indicates a state where user A is on board the carpool vehicle 1 and user B has not yet confirmed a reservation for the carpool vehicle 1. Case 2 (the second condition) shown in FIG. 3 indicates a state where user A is boarding the carpool vehicle 1, user B has confirmed a reservation for the carpool vehicle 1, and is in a state before boarding the carpool vehicle 1. Case 3 (the third condition) shown in FIG. 3 indicates a state where user A is getting off the carpool vehicle 1, user B has confirmed a reservation for the carpool vehicle 1, and is in a state before boarding the carpool vehicle 1.

[0034] In the case of Case 1 shown in FIG. 3, from the perspective of User A, there is no problem even if User B knows the exact position of the carpool vehicle 1. On the other hand, from the perspective of User B, there is no problem even if they do not know the exact position of the carpool vehicle 1. In this case, there is no need to deliberately convey the exact position of the carpool vehicle 1 to users whose reservation for the carpool vehicle 1 has not been confirmed. Therefore, the privacy of User A is protected from User B. In the case of Case 2 shown in FIG. 3, from the perspective of User A, it is better that the exact position when boarding the carpool vehicle 1 is not known to User B from the perspective of privacy. Similarly to Case 2, in Case 3 shown in FIG. 3, from the perspective of User A, it is better that the exact position when getting off the carpool vehicle 1 is not known to User B from the perspective of privacy. Therefore, in Case 2 and Case 3 as well, the privacy of User A is protected from User B. Thus, since the privacy protection conditions are satisfied in all of Case 1, 2, and 3, User A in each case can be specified as the user to be protected. In the example shown in FIG. 3, a case where there is only one user to be protected is shown, but there may be multiple users to be protected. More specifically, when there are other users traveling together with User A, whether User A and the other users are in the same group or different groups, the other users may be specified as the users to be protected.

[0035] Still, in Case 2 shown in FIG. 3, if the shared vehicle 1 is located at a position that is a certain distance or more away from the boarding position of User A (position P0 shown in FIG. 3), the boarding position of User A will not be specified for User B, so the privacy of User A will be protected from User B. Therefore, when the position of the shared vehicle 1 is included in a predetermined area based on the boarding position of User A, User A may be specified as the user to be protected. Similarly to Case 2 shown in FIG. 3, in Case 3, if the shared vehicle 1 is located at a position that is a certain distance or more away from the alighting position of User A (position P0 shown in FIG. 3), the alighting position of User A will not be specified for User B, so the privacy of User A will be protected from User B. Therefore, when the position of the shared vehicle 1 is included in a predetermined area based on the alighting position of User A, User A may be specified as the user to be protected.

[0036] 2-4. Display Information FIG. 4 is a diagram showing a display example of the display information transmitted to the information terminal device held by the user of the shared vehicle 1. FIG. 4 shows a display example of the display information transmitted to the information terminal devices held by each user when User A, who is the user to be protected, boards at position P0 and then User B, who belongs to a different group from User A, boards at position P1. In this case, on the screen of the information terminal device held by a user who does not belong to the same group as the user to be protected, display information is displayed so that the boarding position of the user to be protected is not known. Specifically, the current position of the shared vehicle 1 is displayed on the screen of the information terminal device held by User A. On the other hand, a dummy position different from the current position of the shared vehicle 1 is displayed on the screen of the information terminal device held by User B.

[0037] Examples of what is displayed on the screen of the information terminal device held by User B may include a display indicating that the shared vehicle 1 is decelerating, or a display indicating that it has stopped at a position different from the position where User A got off. Examples of dummy positions include any position on the actual travel route, any position on the planned travel route, any position on a different route from the travel route, the latest position obtained when the period for acquiring the current position is set to a low speed, a heat map with a low display resolution of the current position, etc. Note that the dummy position is represented by at least one of these.

[0038] FIG. 5 is a diagram showing an example of display information displayed on the information terminal device of a user based on the usage state of the shared vehicle 1 of a user belonging to a group different from the protected user and the protected user. FIG. 5 shows examples of the display information displayed on the information terminal device of the user in the case where the protected user, User A, uses the shared vehicle 1 earlier than User B and in the case where this is not so.

[0039] Specifically, when User A uses the shared vehicle 1 earlier than User B and the usage state of User B is before the reservation is confirmed, a dummy position is displayed on the information terminal device of User B. Also, when User A uses the shared vehicle 1 earlier than User B and the usage state of User B is after the reservation is confirmed and before boarding, a dummy position is displayed on the information terminal device of User B. On the other hand, when User A uses the shared vehicle 1 earlier than User B and the usage state of User B is after the reservation is confirmed and User B is in any of the states of boarding, during boarding, or getting off, the current position of the shared vehicle 1 is displayed on the information terminal device of User B. Further, when User A does not use the shared vehicle 1 earlier than User B, the current position of the shared vehicle 1 is displayed on the information terminal device of User B.

[0040] In this way, display information indicating a dummy position is transmitted to the information terminal device held by a user who does not belong to the same group as the user to be protected. Thereby, it is possible to prevent the boarding position or alighting position of the user to be protected who uses the shared vehicle 1 earlier than the said user from being known to the said user.

[0041] 3. Control Device 3-1. Configuration Example FIG. 6 is a block diagram showing a configuration example of the control device 10 according to Embodiment 1. The control device 10 includes an information processing device 20 and a communication device 30. The information processing device 20 includes a processor 21 and a storage device 22.

[0042] The information processing device 20 performs various information processes. For example, the information processing device 20 includes an ECU (Electronic Control Unit) or the like. The information processing device 20 includes one or more processors 21 (hereinafter simply referred to as the processor 21) and one or more storage devices 22 (hereinafter simply referred to as the storage device 22). The processor 21 executes various processes. For example, the processor 21 includes a CPU (Central Processing Unit). Examples of the storage device 22 include a volatile memory, a non-volatile memory, an HDD (Hard Disk Drive), an SSD (Solid State Drive), and the like. The functions of the control device 10 are realized by the processor 21 executing a control program which is a computer program. The control program is stored in the storage device 22. The control program may be recorded on a computer-readable storage medium. The control program may be provided via a network.

[0043] The communication device 30 transmits first display information indicating the current position of the shared vehicle 1 to the information terminal device held by a user who belongs to the same group as the user to be protected. In addition, the communication device 30 transmits second display information indicating a dummy position different from the current position of the shared vehicle 1 to the information terminal device held by a user who belongs to a group different from the user to be protected.

[0044] 3-2. Processing Example FIG. 7 is a flowchart showing a processing example of the information processing apparatus 20. The routine shown in FIG. 7 is repeatedly executed at a predetermined cycle.

[0045] In step S100, the information processing apparatus 20 acquires various information stored in the storage device 22. Thereafter, the process proceeds to step S101. Examples of the various information include the customer information of the user, the position information of the carpool vehicle 1, and the like.

[0046] In step S101, the information processing apparatus 20 extracts a group of users whose relationship between users belongs to a predetermined personal relationship from among the plurality of users based on the customer information of the plurality of users. Thereafter, the process proceeds to step S102.

[0047] In step S102, the information processing apparatus 20 determines whether there is a group including the user to be protected. If there is a group including the user to be protected (step S102; Yes), the process proceeds to step S103. Otherwise (step S102; No), the process proceeds to step S106.

[0048] In step S103, the information processing apparatus 20 determines whether it is a user of the group including the user to be protected. If it is a user of the group including the user to be protected (step S103; Yes), the process proceeds to step S104. Otherwise (step S103; No), the process proceeds to step S105.

[0049] In step S104, the information processing apparatus 20 selects first display information as display information to be displayed on the information terminal device held by the user belonging to the group. Thereafter, the process proceeds to step S107.

[0050] In step S105, the information processing apparatus 20 selects second display information as display information to be displayed on the information terminal device held by the user who does not belong to the group. Thereafter, the process proceeds to step S107.

[0051] In step S106, the information processing apparatus 20 selects first display information as display information to be displayed on the information terminal devices held by all users who use the shared vehicle 1. Then, the process proceeds to step S107.

[0052] In step S107, the information processing apparatus 20 transmits the display information selected for each user to the information terminal device of each user.

[0053] 4. Modification Example 1 FIG. 8 shows a modification example of the privacy protection conditions in case 2 and case 3 shown in FIG. 3 described above. In case 2 and case 3 shown in FIG. 3 described above, when the position of the shared vehicle 1 is included within a predetermined area based on the boarding position and the alighting position of the user who has previously used the shared vehicle 1, the privacy of the user is protected. However, even when the position of the shared vehicle 1 is included within the predetermined area, inconveniences may occur. As an example, as shown in FIG. 8, when user A who has previously used the shared vehicle 1 is about to board at the boarding position (position P0), a state where user B who will later use the shared vehicle 1 is scheduled to board at the boarding position (position P1) can be cited. In this case, when the time distance from the boarding position (position P0) of user A to the boarding position (position P1) of user B is short, there is a possibility that the boarding position of user A will be known to user B. Similarly, when user A alights at the alighting position (position P0), when the time distance from the alighting position (position P0) of user A to the boarding position (position P1) of user B is short, there is a possibility that the boarding position of user A will be known to user B.

[0054] Therefore, the privacy protection conditions of Modification Example 1 include that when there are users who use the carpool vehicle 1 first (hereinafter referred to as the first user) and users who use the carpool vehicle 1 later (hereinafter referred to as the second user), the time distance from the boarding position of the first user to the boarding position of the second user is equal to or greater than the threshold value. In addition, the privacy protection conditions of Modification Example 1 include that the time distance from the alighting position of the first user to the boarding position of the second user is equal to or greater than the threshold value.

[0055] FIG. 9 is a diagram showing an example of display information displayed on the information terminal device of a user based on the usage state of the carpool vehicle 1 of a user belonging to a group different from the protected user and the protected user in Modification Example 1. Here, the difference from FIG. 5 described above will be explained. In FIG. 5 described above, when user A uses the carpool vehicle 1 earlier than user B, when the usage state of user B is the state after the reservation is confirmed and before boarding, a dummy position is displayed on the information terminal device of user B. On the other hand, in Modification Example 1, in this state, further, when the time distance from the boarding position or alighting position of user A to the boarding position of user B is equal to or greater than the threshold value, a dummy position is displayed on the information terminal device of user B.

[0056] 5. Modification Example 2 FIG. 10 shows an example of changing the protected user to a user who does not belong to the same group as the protected user. Specifically, when user A, who is the protected user, alights from the carpool vehicle 1, privacy protection for user A becomes unnecessary. In this case, user A, who has alighted from the carpool vehicle 1, is excluded from the right to receive privacy protection as the protected user. However, after user A alights, there is a possibility that the alighting position of user A may be known to a user who plans to board from another boarding position. Therefore, it is desirable to protect the privacy of user A for a while after user A alights. Therefore, in Modification Example 2, when the position of the carpool vehicle 1 is outside the predetermined area based on the alighting position of user A, user A is excluded from the right to receive privacy protection.

[0057] Furthermore, after the above rights are changed from user A to user B, the display content transmitted to the information terminal device held by user A is switched from the first display information to the second display information. Also, the display content transmitted to the information terminal device held by user B is switched from the second display information to the first display information. As a result, even after the protected user gets off the vehicle, the privacy of the protected user is protected for a certain period of time.

[0058] 6. Modification Example 3 The control device 10 of the present disclosure is a server that can communicate with an information terminal device held by a user who uses the shared vehicle 1, and it is assumed that the control device 10 is installed inside a building. On the other hand, in a modification example of the present embodiment, not only can the control device 10 be installed inside a building, but it can also be mounted on the shared vehicle 1.

[0059] Other Embodiments According to the control device 10 of the present disclosure, it can be applied even when the embodiments are different. For example, on the screen of an information terminal device held by a user who does not belong to the same group as the protected user, not only can the second display information be displayed, but it is also possible to make the position information non-displayed. By making the position information on the screen of the information terminal device held by a user who does not belong to the same group as the protected user non-displayed, it becomes possible to reduce the processing load of generating the display information in the control device 10.

Explanation of Reference Numerals

[0060] 1 Shared vehicle 10 Control device 20 Information processing device 21 Processor 22 Storage device 30 Communication device

Claims

1. A control device for controlling display content displayed on a screen of an information terminal device held by a plurality of users who use the same carpool vehicle, comprising an information processing device and a communication device, wherein the information processing device extracts a group of users whose relationship among the plurality of users belongs to a predetermined personal relationship from among the plurality of users based on the customer information of the plurality of users, transmits first display information indicating the current position of the carpool vehicle to an information terminal device held by a user belonging to the group via the communication device, when a protected user for whom a predetermined privacy protection condition is satisfied is included in the group, transmits second display information subjected to processing for protecting the privacy of the protected user to an information terminal device held by a user not belonging to the group via the communication device, when the position of the carpool vehicle is outside a predetermined area based on the position where the protected user gets off the carpool vehicle, switches the display content transmitted to an information terminal device held by a user not belonging to the group from the second display information to the first display information, and is configured as described above, characterized in that it is a control device.

2. The control device according to claim 1, wherein when the position of the carpool vehicle is outside a predetermined area based on the position where the protected user gets off the carpool vehicle, the information processing device further switches the display content transmitted to an information terminal device held by the protected user from the first display information to the second display information, and is configured as described above, characterized in that it is a control device.

3. The control device according to claim 1, wherein the predetermined privacy protection condition is a first condition that a user belonging to the group boards the carpool vehicle earlier than a user not belonging to the group and the reservation of the carpool vehicle by the user not belonging to the group is not confirmed, and a second condition that when a user belonging to the group boards the carpool vehicle earlier than a user not belonging to the group, the reservation of the carpool vehicle by the user not belonging to the group is confirmed and the carpool vehicle is located within a predetermined area based on the position where the user belonging to the group boards the carpool vehicle. When a user who does not belong to the group gets off the carpool vehicle before a user who belongs to the group gets on the carpool vehicle, the reservation of the carpool vehicle by the user who does not belong to the group is confirmed, and the carpool vehicle is located within a predetermined area based on the position where the user who belongs to the group gets off the carpool vehicle. A third condition which is a state; A control device characterized by including at least one of the above.

4. A control device that controls the display content displayed on the screens of information terminal devices held by a plurality of users who use the same carpool vehicle, Comprising an information processing device and a communication device; The information processing device, Based on the customer information of the plurality of users, extracts a group of users whose relationship between users belongs to a predetermined personal relationship from among the plurality of users, Transmits first display information indicating the current position of the carpool vehicle to the information terminal device held by the user belonging to the group via the communication device, When the group includes a protected user who satisfies a predetermined privacy protection condition, second display information subjected to processing for protecting the privacy of the protected user is transmitted to the information terminal device held by the user who does not belong to the group via the communication device. Configured as, The predetermined privacy protection condition is, A first condition that a user belonging to the group gets on the carpool vehicle before a user who does not belong to the group, and the reservation of the carpool vehicle by the user who does not belong to the group is not confirmed; When a user belonging to the group gets on the carpool vehicle before a user who does not belong to the group, the reservation of the carpool vehicle by the user who does not belong to the group is confirmed, and the carpool vehicle is located within a predetermined area based on the position where the user belonging to the group gets on the carpool vehicle. A second condition which is a state; When a user who does not belong to the group gets off the carpool vehicle before a user who belongs to the group gets on the carpool vehicle, the reservation of the carpool vehicle by the user who does not belong to the group is confirmed, and the carpool vehicle is located within a predetermined area based on the position where the user who belongs to the group gets off the carpool vehicle. A third condition which is a state; including at least one of them A control device characterized by the above.

5. The control device according to claim 4, wherein the second and third conditions further include that the time distance from the current position of the shared vehicle to the position where a user not belonging to the group boards the shared vehicle is equal to or greater than a threshold value. A control device characterized by the above.

6. The control device according to any one of claims 1 to 5, wherein the human relationship includes at least one of the following: the reserving users are the same users, the users with the same address are the same users, and the users with the same boarding position and alighting position are the same users. A control device characterized by the above.

7. The control device according to any one of claims 1 to 5, wherein the second display information is information for causing the information terminal device to display a dummy position different from the current position of the shared vehicle, and the dummy position is represented by at least one of an arbitrary position on the actual travel route, an arbitrary position on the planned travel route, an arbitrary position on a different route from the travel route, the latest position obtained when the period for acquiring the current position is set to a low speed, and a heat map with the display fineness of the current position coarsened. A control device characterized by the above.

8. A control method for controlling the display content displayed on the screens of information terminal devices held by a plurality of users using the same shared vehicle, comprising extracting, based on the customer information of the plurality of users, a group of users whose relationship between the users belongs to a predetermined human relationship from among the plurality of users; transmitting, via a communication device, first display information indicating the current position of the shared vehicle to the information terminal devices held by the users belonging to the group; when a protected user who satisfies a predetermined privacy protection condition is included in the group, transmitting, via the communication device, second display information subjected to processing for protecting the privacy of the protected user to the information terminal devices held by the users not belonging to the group; and when the position of the shared vehicle is outside a predetermined area based on the position where the protected user alights from the shared vehicle, switching the display content transmitted to the information terminal devices held by the users not belonging to the group from the second display information to the first display information. A control method characterized by including the above steps.

9. A control program for controlling display content displayed on a screen of an information terminal device held by a plurality of users who use the same carpool vehicle, extracting, based on the customer information of the plurality of users, a group of users whose relationship between users belongs to a predetermined personal relationship from among the plurality of users; transmitting, to an information terminal device held by a user belonging to the group, first display information indicating the current position of the carpool vehicle via a communication device; when the group includes a protected user who satisfies a predetermined privacy protection condition, transmitting, to an information terminal device held by a user who does not belong to the group, second display information subjected to processing for protecting the privacy of the protected user via the communication device; when the position of the carpool vehicle is outside a predetermined area based on the position where the protected user gets off the carpool vehicle, switching the display content transmitted to the information terminal device held by a user who does not belong to the group from the second display information to the first display information; configured to cause a computer to execute; A control program characterized by the above.

Images