Mobile service providing system, mobile service providing method, and mobile service providing device

Abstract

To protect privacy of a user by restricting sharing of information on service items to be used, in accordance with a relationship between the user and a reservation user, when the user who is provided with a mobility service that operates a vehicle is different from the reservation user who makes a reservation for the mobility service.SOLUTION: A control apparatus 2 determines (S30), when a user who is provided with a mobility service is different from a reservation user who makes a reservation for the mobility service, a relationship between the reservation user and the user by collating the reservation user and the user with a registrant database 23; and restricts (S31-S35) information to be shared between the reservation user and the user, out of information on service items to be used, which are matters available for the user in the mobility service, in accordance with the relationship between the reservation user and the user.SELECTED DRAWING: Figure 5

Description

[Technical Field]

[0001] The present invention relates to a mobile service providing system, a mobile service providing method, and a mobile service providing device. [Background technology]

[0002] Patent document 1 describes a notification method in which a supervisor who receives a request from a person being monitored (e.g., an elderly person) who uses on-demand transportation can make a reservation for on-demand transportation, and also sends notification information to the supervisor regarding the boarding and disembarking date and time, stopping points, names of people getting on and off, and whether the person being monitored boarded the vehicle as scheduled. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2016-212536 Summary of the Invention [Problem to be solved by the invention]

[0004] In a transportation service that operates a vehicle, if the user receiving the transportation service and the person reserving the transportation service are different parties, it may be preferable for the person reserving the transportation service to share information regarding the items that the user can use in the transportation service (hereinafter referred to as "service use items"). For example, if the user receiving the transportation service is a young child or an elderly person, it may be preferable for the person reserving the transportation service to share information indicating the user's current location. On the other hand, if all information is shared between the user and the reservation party, there is a risk that the user's privacy will not be protected. The present invention aims to protect the privacy of users by restricting the sharing of information regarding service usage items in accordance with the relationship between the user and the booking party when the user receiving a transportation service that operates a vehicle is different from the person who books the transportation service. [Means for solving the problem]

[0005] According to one aspect of the present invention, there is provided a mobility service provision system for operating vehicles. The mobility service provision system includes a vehicle provided for the mobility service and a control device that receives reservation information including at least information about a user who will receive the mobility service from an electronic device that is a terminal device operated by a person who makes a reservation for the mobility service, and arranges for the vehicle to be provided for use by the user in accordance with the reservation information. The control device includes a registrant database that stores registrants who have pre-registered to use the mobility service provision system and information regarding the relationship between the registrants. If the reserving person and the user are different, the control device determines the relationship between the reserving person and the user by comparing the reserving person and the user with the registrant database, and limits the information shared between the reserving person and the user, out of information regarding service usage items that the user can use in the mobility service, based on the relationship between the reserving person and the user. [Effects of the Invention]

[0006] According to the present invention, when a user who receives a transportation service that operates a vehicle is different from a person who reserves the transportation service, the sharing of information about service usage items is restricted according to the relationship between the user and the person who reserves the transportation service, thereby making it possible to protect the privacy of the user. [Brief explanation of the drawings]

[0007] [Figure 1] 1 is a schematic configuration diagram of an example of a mobility service providing system according to an embodiment; [Figure 2A] 2 is an explanatory diagram illustrating an example of a functional configuration of the first electronic device of FIG. 1; [Figure 2B] 2 is an explanatory diagram illustrating an example of a functional configuration of the control device of FIG. 1. FIG. [Figure 2C] 2 is an explanatory diagram illustrating an example of a functional configuration of the second electronic device of FIG. 1; [Figure 3] FIG. 10 is an explanatory diagram of an example of limiting the sharing of information regarding service usage items. [Figure 4]FIG. 10 is a sequence diagram of an example of an operation when reserving a transportation service. [Figure 5] 10 is a flowchart illustrating an example of a relationship determination process. [Figure 6] FIG. 10 is a sequence diagram of an example of an operation when using a mobility service. DETAILED DESCRIPTION OF THE INVENTION

[0008] Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the description of the drawings, identical or similar parts are designated by identical or similar reference numerals, and redundant explanations will be omitted. Each drawing is a schematic diagram and may differ from the actual product. The embodiments shown below exemplify devices and methods for embodying the technical concept of the present invention, and the technical concept of the present invention is not limited to the devices and methods exemplified in the following embodiments. The technical concept of the present invention can be modified in various ways within the technical scope described in the claims.

[0009] (composition) 1 is a schematic diagram of an example of a mobility service providing system according to an embodiment. The mobility service providing system 1 is a system that provides a mobility service for transporting users by operating a vehicle 3. In this specification, the vehicle 3 used for the mobility service provided by the mobility service providing system 1 is referred to as a "service vehicle." The mobility service providing system 1 includes at least a control device 2 and a service vehicle 3. Furthermore, the first electronic device 4 is a terminal device operated by a person who reserves a mobility service through the mobility service providing system 1 (hereinafter referred to as the "reservator"), and the second electronic device 5 is a terminal device operated by a person who receives the provision of mobility service through the mobility service providing system 1 (hereinafter referred to as the "user"). For example, the first electronic device 4 may be a portable information terminal that the reserving person can carry, a small computer that is easy to carry, or a computer installed on a desk. For example, the second electronic device 5 may be a portable information terminal that the reserving person can carry, or a small computer that is easy to carry.

[0010] When reserving a transportation service, the reserving party accesses the control device 2 using the first electronic device 4. Before reserving a transportation service, the reserving party may install dedicated application software for using the transportation service providing system 1 in the first electronic device 4 in advance, and make the reservation using the dedicated application software. In the following description, "application software" will be simply referred to as "software." Alternatively, the reserving party may use the browser function of the first electronic device 4 to reserve a transportation service on a website that accepts reservations for transportation services on the Internet. The first electronic device 4 accepts input operations by the person making a reservation for a mobility service. The first electronic device 4 generates reservation information for applying for a reservation for a mobility service based on the information input by the person making a reservation, and transmits the reservation information to the control device 2. The reservation information may include, for example, information about the user receiving the mobility service (e.g., user identification information), the boarding location and boarding date and time for boarding the service vehicle 3, and the disembarking location for disembarking from the service vehicle 3.

[0011] The first electronic device 4 includes a communication device 40, a human machine interface (HMI) 41, and a controller . The communication device 40 provides a communication function between the first electronic device 4 and an external device. The communication method used by the communication device 40 may be, for example, wireless communication via a public mobile communication network, satellite communication, etc. The first electronic device 4 transmits and receives data to and from the control device 2 and the second electronic device 5 via the communication device 40. The HMI 41 is an interface device that exchanges information between the first electronic device 4 and the reservation person. The HMI 41 includes a display device that can be seen by the reservation person, and a speaker or buzzer that outputs alarm sounds, notification sounds, and audio information. The HMI 41 also includes an operator and an audio input device that accepts operation inputs to the first electronic device 4 by the reservation person. The operator may be a button, switch, lever, dial, keyboard, touch panel, etc.

[0012] The controller 42 is an electronic control unit (ECU) that controls the operation of the first electronic device 4. The controller 42 includes a processor 43 and peripheral components such as a storage device 44. The processor 43 may be, for example, a central processing unit (CPU) or a micro-processing unit (MPU). The storage device 44 may include a non-transitory tangible storage medium such as a register, a cache memory, or a memory such as a read-only memory (ROM) or a random access memory (RAM) used as a main storage device. The functions of the first electronic device 4 described below are realized, for example, by the processor 43 executing a computer program stored in the storage device 44.

[0013] The control device 2 receives reservation information from the first electronic device 4 and arranges for a service vehicle 3 to be provided for use by the user in accordance with the reservation information. The control device 2 includes a processor 20, a storage device 21, a communication device 22, a registrant database (registrant DB) 23, a map database (map DB) 24, and a reservation database (reservation DB) 25. The processor 20 may be, for example, a CPU or an MPU. The storage device 21 may include a non-transitory tangible storage medium such as a register, a cache memory, or a memory such as a ROM or RAM used as a main storage device. The functions of the control device 2 described below are realized, for example, by the processor 20 executing a computer program stored in the storage device 21.

[0014] The communication device 22 provides a communication function between the control device 2 and an external device. The communication method used by the communication device 22 may be, for example, wired communication or wireless communication via a public mobile communication network, satellite communication, road-to-vehicle communication with the service vehicle 3, or the like. The control device 2 transmits and receives data to and from the service vehicle 3, the first electronic device 4, and the second electronic device 5 via the communication device 22.

[0015] The registrant DB23 is a database for registering persons who use the mobility service providing system 1. In the following description, persons registered in the registrant DB23 will be referred to as "registrants." For example, as persons who use the mobility service providing system 1, reserving persons who reserve mobility services through the mobility service providing system 1 and users who receive the mobility services are registered in the registrant DB23. Various modes can be adopted as a mode for registering a reserving party and a user in the registrant DB 23. For example, a reserving party and a user may be registered in the registrant DB 23 as persons who can both reserve and use a mobility service (i.e., persons who can use the mobility service providing system 1 as both a reserving party and a user).

[0016] Furthermore, for example, a person who can only reserve a mobility service (i.e., a person who can only use the mobility service providing system 1 as a reservation person) or a person who can both reserve and use a mobility service may be registered in the registrant DB23 as a primary registrant, and a person who can only use a mobility service (i.e., a person who can only use the mobility service providing system 1 as a user) may be registered as a secondary registrant associated with the primary registrant. Also, for example, a person who can only use mobile services or a person who can both reserve and use mobile services may be registered in the registrant DB23 as a primary registrant, and a person who can only reserve mobile services may be registered as a secondary registrant associated with the primary registrant.

[0017] Furthermore, if there is a relationship between different registrants registered in the registrant DB 23, the relationship between the registrants is registered in the registrant DB 23. As a relationship between such registrants, a registrant may be registered as a legal guardian of another registrant in the registrant DB 23. Examples of legal guardians include a registrant being a parent of another registrant, a guardian of another registrant, or a child of an elderly registrant. Furthermore, as a relationship between registrants, for example, it may be registered in the registrant DB 23 that a certain registrant provides nursing care services to another registrant. In this specification, a relationship in which one registrant is the legal supervisor of another registrant, or a relationship in which one registrant provides care services to another registrant, is referred to as a "primary relationship."

[0018] Furthermore, as a relationship between registrants, it may be registered in the registrant DB 23 that a registrant is entrusted with making reservations for transportation services for other registrants as a business. For example, it may be registered that a registrant is a secretary or butler of another registrant. In this specification, a relationship in which a registrant is entrusted with making reservations for mobility services for another registrant as a business is referred to as a "second relationship."

[0019] Various modes can be adopted as a mode for registering the relationship between registrants in the registrant DB 23. For example, when registering the relationship between registrants who are separately registered as persons who can both reserve and use a mobility service, link information associating these registrants with each other and relationship attribute information indicating the relationship between these registrants may be stored in the registrant DB 23. In addition, when registering the relationship between a secondary registrant registered in association with a primary registrant and the primary registrant, relationship attribute information indicating the relationship between the primary registrant and the secondary registrant may be added to the registration information of the primary registrant or the secondary registrant and stored in registrant DB23.

[0020] The map DB 24 stores map information of the area where the mobility service providing system 1 provides mobility services. The map information may be, for example, map data for navigation (hereinafter simply referred to as "navigation map"). When the control device 2 receives the reservation information from the first electronic device 4, it calculates a travel route from the boarding location included in the reservation information to the disembarking location based on the map information stored in the map DB 24. The control device 2 also predicts the disembarking date and time when the service vehicle 3 will depart at the boarding date and time included in the reservation information, travel along the travel route, and arrive at the disembarking location. The control device 2 stores the boarding location, boarding date and time, and disembarking location contained in the reservation information received from the first electronic device 4, as well as the driving route and disembarking date and time calculated by the control device 2, in the reservation DB 25 together with the user's identification information as the driving plan for the service vehicle 3 (i.e., the driving plan for the transportation service to be provided to the user). In addition, the control device 2 transmits to the service vehicle 3 a travel plan including the boarding location, boarding date and time, disembarking location, disembarking date and time, and travel route.

[0021] The service vehicle 3 is a vehicle that operates in response to user requests (a so-called demand-based transportation vehicle), and may be, for example, a shared taxi or a robot taxi. The service vehicle 3 is an autonomous vehicle that automatically drives the service vehicle 3 by the controller 36 according to a driving plan transmitted from the control device 2 without the involvement of a driver (human). When the service vehicle 3 receives the trip plan from the control device 2, it drives to the boarding location so as to arrive by the boarding date and time included in the trip plan. When the user gets on the service vehicle 3 at the boarding location, it drives to the disembarking location along the travel route included in the trip plan.

[0022] The service vehicle 3 includes a sensor 30, a positioning device 31, a map database (map DB) 32, a communication device 33, an in-vehicle terminal 34, an in-vehicle device 35, a controller 36, and an actuator 37. The sensors 30 include an object sensor that detects objects around the service vehicle 3, and a vehicle sensor that detects various information obtained from the service vehicle 3 (vehicle state). The object sensor detects the surrounding environment of the service vehicle 3, such as the relative position of the service vehicle 3 and an object present around the service vehicle 3, the distance between the service vehicle 3 and the object, and the direction in which the object is present. The object sensor may include, for example, a camera that captures the surrounding environment of the service vehicle 3. Furthermore, for example, the object sensor may include a distance measuring device such as a laser range finder (LRF), radar, or a laser radar of LiDAR (Light Detection and Ranging). The object sensor outputs surrounding environment information, which is information on the detected surrounding environment of the service vehicle 3, to the controller 36. The vehicle sensors may include, for example, a vehicle speed sensor that detects the traveling speed (vehicle speed) of the service vehicle 3, a wheel speed sensor that detects the rotational speed of each tire equipped on the service vehicle 3, a three-axis acceleration sensor (G sensor) that detects the acceleration (including deceleration) in three axial directions of the service vehicle 3, a steering angle sensor that detects the steering angle (including the turning angle), a gyro sensor that detects the angular velocity generated in the service vehicle 3, and a yaw rate sensor that detects the yaw rate. The vehicle sensors output vehicle state information to the controller 36.

[0023] The positioning device 31 measures the current position and attitude of the service vehicle 3. The positioning device 31 may include, for example, a Global Navigation System (GNSS) receiver. The GNSS receiver may be, for example, a Global Positioning System (GPS) receiver. The positioning device 31 may also include an inertial navigation system. The positioning device 31 outputs current position information of the measured current position to the controller 36. The map DB 32 stores map information. The map information may include map data for navigation (hereinafter simply referred to as a "navigation map") and high-precision map data suitable as a map for automated driving (hereinafter simply referred to as a "high-precision map"). The communication device 33 provides a communication function between the service vehicle 3 and an external device. The communication method used by the communication device 33 may be, for example, wireless communication via a public mobile communication network, satellite communication, road-to-vehicle communication, or the like. The service vehicle 3 transmits and receives data to and from the control device 2 via the communication device 33 .

[0024] The in-vehicle terminal 34 is a terminal device used by a user who gets into the service vehicle 3. The terminal device may be an information terminal device separate from the controller 36, or may be an HMI that exchanges information between the user and the controller 36. The user can use the in-vehicle terminal 34 to use various information providing services (for example, internet, news, video, and music distribution services) and obtain coupons. Furthermore, for example, the in-vehicle terminal 34 can be used for user authentication procedures when starting to use the service vehicle 3. Furthermore, for example, the user can use the in-vehicle terminal 34 to change the driving plan of the service vehicle 3. The in-vehicle equipment 35 includes a window opening / closing device, a door locking device, an air conditioning device, an audio device, and the like of the service vehicle 3.

[0025] The controller 36 is an electronic control unit that controls the service vehicle 3. For example, the controller 36 controls the autonomous driving of the service vehicle 3. The controller 36 includes a processor 38 and peripheral components such as a storage device 39. The processor 38 may be, for example, a CPU or an MPU. The storage device 39 may include non-transitory tangible storage media such as registers, cache memory, and memory such as ROM or RAM used as a main storage device. The functions of the controller 36 are realized, for example, by the processor 38 executing a computer program stored in the storage device 39. The controller 36 executes autonomous driving control to make the service vehicle 3 travel according to a travel plan based on the surrounding environment information and vehicle state information from the sensor 30, the positioning results of the positioning device 31, and the map information in the map DB 32. For example, the controller 36 calculates a target travel trajectory for the service vehicle 3 to travel based on the current position and attitude of the service vehicle 3, the travel route included in the travel plan, map information, and the surrounding environment of the service vehicle 3. For example, the controller 36 generates a route space map that represents the route around the service vehicle 3 and the presence or absence of objects, and a risk map that quantifies the risk of travel locations, and generates a target travel trajectory for the service vehicle 3 to travel based on the motion characteristics of the service vehicle 3, the vehicle state information, the route space map, and the risk map. The controller 36 drives the actuator 37 so that the service vehicle 3 travels along the generated target travel trajectory. The actuator 37 operates the steering device, drive device, and braking device of the service vehicle 3 in response to control signals from the controller 36, and generates vehicle behaviors of the service vehicle 3, thereby automatically driving the service vehicle 3. The actuator 37 includes a steering actuator, an accelerator opening actuator, and a brake control actuator. Furthermore, the actuator 37 operates door motors and the like of the service vehicle 3 in response to control signals from the controller 36, automatically opening and closing the doors of the service vehicle 3 (for example, the sliding door of the rear seat).

[0026] The second electronic device 5 is a terminal device used by a user of the service vehicle 3. For example, the second electronic device 5 may be used for authentication procedures of the user when starting to use the service vehicle 3, and may also be used by the user to change the travel plan of the service vehicle 3. When using a mobility service using the second electronic device 5, the user installs dedicated software for using the mobility service providing system 1 in the second electronic device 5 in advance.

[0027] The second electronic device 5 includes a positioning device 50 , a communication device 51 , an HMI 52 , and a controller 53 . The positioning device 50 measures the current position of the second electronic device 5 (i.e., the current position of the user). The positioning device 50 may include, for example, a Global Navigation System (GNSS) receiver. The GNSS receiver may be, for example, a Global Positioning System (GPS) receiver. The positioning device 50 may also include an inertial navigation system. The positioning device 50 outputs current position information of the second electronic device 5 to the controller 36.

[0028] The communication device 51 provides a communication function between the second electronic device 5 and an external device. The communication method used by the communication device 51 may be, for example, wireless communication via a public mobile communication network, satellite communication, etc. The second electronic device 5 transmits and receives data to and from the control device 2 and the first electronic device 4 via the communication device 51. The HMI 52 is an interface device that exchanges information between the second electronic device 5 and the user. The HMI 52 includes a display device that can be seen by the person making the reservation, and a speaker or buzzer that outputs alarm sounds, notification sounds, and audio information. The HMI 52 also includes an operator and an audio input device that accepts operation inputs from the person making the reservation to the second electronic device 5. The operator may be a button, switch, lever, dial, keyboard, touch panel, etc.

[0029] The controller 53 is an electronic control unit that controls the operation of the second electronic device 5. The controller 53 includes a processor 54 and peripheral components such as a memory device 55. The processor 54 may be, for example, a CPU or an MPU. The memory device 55 may include a non-transitory tangible storage medium such as a register, a cache memory, or a memory such as a ROM or RAM used as a main memory device. The functions of the second electronic device 5 described below are realized, for example, by the processor 54 executing a computer program stored in the storage device 55.

[0030] When a transportation service is provided in the transportation service providing system 1, the person reserving the transportation service may be different from the user receiving the transportation service. For example, there are cases where the person reserving the transportation service is the legal supervisor of the user (for example, when the user is a young child and the user's parent reserves a transportation service on behalf of the child), or where the person providing care services to the user reserves the transportation service on behalf of the user. In such cases, it may be preferable for the user and the reservation party to share information about the service usage items that the user can use in the transportation service so that the user can arrive safely at the drop-off location. For example, if the user receiving the transportation service is a young child or an elderly person, it may be preferable for the user and the reservation party to share information indicating the user's current location.

[0031] However, if the person making the reservation is different from the user, and the user and the person making the reservation share all of the information, the user's actions and other information may be constantly monitored by the person making the reservation, which could result in the user's privacy not being protected. For example, there are cases where the reserving party is a secretary or butler of a user who is entrusted with reserving transportation services for the user as part of his or her job. If the reserving party shares all of the information of such a user, even information that is not necessarily required for the job will always be disclosed to the reserving party, which could result in a violation of the user's privacy. Therefore, in the mobility service providing system 1 of the embodiment, when the reserver and the user are different, the relationship between the reserver and the user is determined by comparing the reserver and the user with the registrant DB 23. Then, depending on the relationship between the reserver and the user, the information shared between the reserver and the user from among the information related to the service usage items is restricted. This makes it possible to restrict the sharing of information about service use items when the relationship between the reservation person and the user is such that sharing of information about service use items is not desirable, thereby protecting the user's privacy.

[0032] The following describes details of the mobility service providing system 1. Figures 2A to 2C are explanatory diagrams showing examples of functional configurations of the first electronic device 4, the control device 2, and the second electronic device 5, respectively. The first electronic device 4 includes a reserver information transmitting unit 60, a reservation information generating unit 61, and an approval requesting unit 62. The control device 2 includes a reservation setting unit 70 , a location information acquisition unit 71 , a vehicle dispatch unit 72 , a driving plan setting unit 73 , a relational attribute determination unit 74 , and a restriction setting unit 75 . The second electronic device 5 includes a location information acquisition unit 80, a restriction state notification unit 81, a restriction change request unit 82, and a shared item approval unit 83.

[0033] When reserving a transportation service using the first electronic device 4, the subscriber information transmitting unit 60 transmits the identification information of the subscriber to the control device 2. For example, the subscriber information transmitting unit 60 may transmit the identification information of the subscriber to the control device 2 in order to authenticate the subscriber when logging in to the control device 2. Furthermore, the subscriber information transmitting unit 60 may transmit the identification information of the subscriber to the control device 2 simultaneously with the reservation information. When the person making a reservation operates the HMI 41 to input the information required to reserve a transportation service (information about the user, boarding location, boarding date and time, and disembarking location), the reservation information generation unit 61 generates reservation information. As described above, the reservation information includes the user's identification information and information about the boarding location, boarding date and time, and disembarking location. The reservation information generation unit 61 transmits the generated reservation information to the control device 2.

[0034] When the reservation setting unit 70 of the control device 2 receives the reservation information from the first electronic device 4, it registers the reservation information in the reservation DB 25, thereby setting a reservation for the transportation service for the user specified in the reservation information. When dedicated software for using the mobility service providing system 1 is installed in the second electronic device 5, the reservation setting unit 70 transmits reservation notification information notifying the user that a mobility service has been reserved to the second electronic device 5. For example, the reservation setting unit 70 may transmit the reservation notification information to the second electronic device 5 by push-type data transmission. This allows the dedicated software installed in the second electronic device 5 to quickly receive the reservation notification information.

[0035] The location information acquisition unit 80 of the second electronic device 5 acquires current location information of the second electronic device 5 (i.e., current location information of the user) from the positioning device 50. When the location information acquisition unit 80 receives reservation notification information from the control device 2, it transmits the current location information of the second electronic device 5 to the control device 2. For example, the location information acquisition unit 80 may periodically transmit the current location information to the control device 2 until the transportation service ends (for example, until the user gets off the service vehicle 3 at the drop-off location). Furthermore, for example, the location information acquisition unit 80 may periodically transmit the current location information to the control device 2 until the user gets on the service vehicle 3 at the boarding location.

[0036] The location information acquisition unit 71 of the control device 2 receives the current location information of the second electronic device 5 transmitted from the second electronic device 5. It also receives the current location information of the service vehicle 3 transmitted from the service vehicle 3. The vehicle allocation unit 72 determines the service vehicle 3 to be provided for use by the user based on the boarding location included in the reservation information and the current location of the service vehicle 3. For example, the vehicle allocation unit 72 may select the service vehicle 3 located closest to the boarding location from among the service vehicles 3 that are not currently being used by other users and that can arrive at the boarding location by the boarding date and time. Then, the vehicle allocation unit 72 stores the identification information of the selected service vehicle 3 in the reservation DB 25.

[0037] Next, the driving plan setting unit 73 calculates a driving route from the boarding location to the disembarking location based on the map information stored in the map DB 24. The driving plan setting unit 73 also predicts a disembarking date and time when the service vehicle 3 will depart at the boarding date and time, travel along the travel route, and arrive at the disembarking location. The driving plan setting unit 73 stores the calculated travel route and disembarking date and time in the reservation DB 25. As a result, the boarding location, boarding date and time, and disembarking location included in the reservation information, and the disembarking date and time and travel route calculated by the driving plan setting unit 73 are stored in the reservation DB 25 as a driving plan for the transportation service provided to the user. The driving plan setting unit 73 transmits driving plan information relating to the driving plan to the service vehicle 3 selected by the vehicle allocation unit 72 (that is, the service vehicle 3 to be provided for use by the user).

[0038] Next, the relationship attribute determination unit 74 determines whether the reserver and the user are different based on the identification information of the reserver received from the first electronic device 4 and the identification information of the user included in the reservation information. If the reserver and the user are different, the relationship attribute determination unit 74 determines the relationship between the reserver and the user by comparing the identification information of the reserver and the identification information of the user with the registrant DB 23. For example, the relationship attribute determination unit 74 determines whether the relationship between the reserving person and the user is a first relationship (i.e., a relationship in which the reserving person is the legal supervisor of the user, or a relationship in which the reserving person is a provider of care services to the user). Also, for example, the relationship attribute determination unit 74 determines whether the relationship between the reserving person and the user is a second relationship (i.e., a relationship in which the reserving person is entrusted with booking transportation services for the user as a business).

[0039] The restriction setting unit 75 sets restrictions on the information that can be shared between the reserver and the user among the information related to the service use items, depending on the relationship between the reserver and the user. For example, the restriction setting unit 75 restricts the sharing of information related to a pre-designated service use item among the information related to the service use items between the reserver and the user. Here, the pre-specified service usage items may include, for example, changes to the driving plan (i.e., changes to at least one of the boarding location, boarding date and time, disembarking location, disembarking date and time, or driving route, or setting of intermediate stops), operation of the in-vehicle terminal 34, and operation of the in-vehicle equipment 35.

[0040] 3 is an explanatory diagram showing an example of limiting the information related to service use items that can be shared between a reserver and a user, which is set by the limit setting unit 75. For example, when the relationship between the reserver and the user is the first relationship, the limit setting unit 75 permits the sharing of all information related to service use items between the reserver and the user. Furthermore, for example, when the relationship between the reservation person and the user is the second relationship, the sharing of information regarding the boarding location, boarding date and time, disembarking location, disembarking date and time, and the user's current location before boarding the service vehicle 3 is permitted between the reservation person and the user. In addition, the sharing of other information between the reservation person and the user is restricted (prohibited).

[0041] That is, when the relationship between the reserver and the user is the first relationship, the control device 2 allows all information related to the service use items to be shared. In addition, when the relationship between the reserver and the user is the second relationship, the control device 2 limits the information related to the service use items to be shared. In FIG. 3, a change in boarding location and a change in alighting location are described as "change of boarding / alighting location," and a change in boarding date and time and a change in alighting date and time are described as "change of boarding / alighting time." In addition, in FIG. 3, the current location of the user before boarding the service vehicle 3 is described as "current location (before boarding)," and the current location of the user while boarding the service vehicle 3 is described as "current location (while boarding)." Furthermore, in FIG. 3, the current location of the user after alighting from the service vehicle 3 is described as "current location (after alighting)," and operations of the in-vehicle terminal 34 and the in-vehicle device 35 are described as "in-vehicle device operations." In addition, "change of seating position" described in FIG. 3 indicates that a user who sat in a seat designated by the reservation person sits in a seat different from the seat designated by the reservation person. In addition, the state of the user sitting in the seat is detected, for example, using a camera capable of capturing images of the interior of the vehicle or a pressure-sensitive sensor placed in the seat. In addition, the restriction setting unit 75 may restrict all of the pre-specified service usage items (for example, the service usage items listed in Figure 3) when, for example, the relationship between the reservation holder and the user is neither the first relationship nor the second relationship.

[0042] The restriction setting unit 75 stores restriction information, which is information that restricts the sharing of information related to service usage items between the reserving party and the user, in the reservation DB 25. For example, the restriction information may be information that indicates whether the sharing of information related to the service usage items is restricted (prohibited) or permitted. For example, the value "1" may be set if the information is restricted (prohibited), and the value "0" may be set if the information is permitted. The restriction setting unit 75 transmits the restriction information to the service vehicle 3, the first electronic device 4, and the second electronic device 5. When the controller 36 of the service vehicle 3 receives the restriction information from the control device 2, it displays the restriction status regarding the sharing of information related to the service usage items on the display screen of the in-vehicle terminal 34. This allows the user to confirm how the sharing of information related to the service usage items is restricted. Furthermore, the controller 36 restricts the sharing of information related to service usage items in accordance with the restriction information. For example, if the sharing of information related to changes in the driving plan is restricted (prohibited), the controller 36 restricts (prohibits) the sharing of information about changes to the driving plan made by the user operating the in-vehicle terminal 34 with the person who made the reservation.

[0043] When the restriction status notification unit 81 of the second electronic device 5 receives the restriction information from the control device 2, it displays the state in which sharing of information related to the service usage item is restricted on the display device of the HMI 52. This allows the user to confirm how sharing of information related to the service usage item with the person who made the reservation is restricted. In addition, in consideration of cases where a user wishes to change service usage items for which information sharing with the person making the reservation is restricted, it may be possible to operate the first electronic device 4 to change service usage items for which information sharing is restricted.

[0044] In this case, for example, the HMI 52 accepts a change operation by the user to change the service availability item to be restricted. Upon accepting the change operation by the user, the restriction change request unit 82 generates change request information requesting a change to the service availability item to be restricted. The restriction change request unit 82 transmits the change request information to the control device 2. When the restriction setting unit 75 of the control device 2 receives the change request information, the restriction setting unit 75 changes the restriction information stored in the reservation DB 25 based on the change request information. The restriction setting unit 75 transmits the changed restriction information to the service vehicle 3 and the first electronic device 4.

[0045] When the approval request unit 62 of the first electronic device 4 receives the restriction information from the control device 2, it displays the state in which the sharing of information related to the service use items with the user is restricted on the display device of the HMI 41. This allows the reserving party to confirm how the sharing of information related to the service use items with the user is restricted. Considering the case where a user allows the sharing of information about a service usage item for which sharing is restricted (prohibited), it may be possible for the subscriber to request approval from the user to share information about the service usage item. In this case, for example, the HMI 41 accepts a request operation by the reserver requesting approval for the reserver and the user to share information about a service usage item for which sharing is restricted (prohibited). Upon accepting the request operation by the reserver, the approval request unit 62 transmits approval request information requesting approval to share the information to the second electronic device 5. The approval request information may be transmitted to the second electronic device 5 via the control device 2.

[0046] When the shared item approval unit 83 of the second electronic device 5 receives the approval request information from the approval request unit 62, it displays the approval request from the reserver on the display device of the HMI 52. For example, the shared item approval unit 83 displays, on the display device of the HMI 52, the service usage items for which the reserver has requested approval for use. The HMI 52 accepts an approval operation by the user to approve or deny the sharing of information related to the service usage items with the subscriber. When the shared item approval unit 83 accepts the approval operation by the user, it generates approval information informing the service usage items for which the information sharing is approved. The shared item approval unit 83 transmits the generated approval information to the control device 2. The user may perform the approval or denial operation by operating the in-vehicle terminal 34. In this case, the in-vehicle terminal 34 of the service vehicle 3 may be provided with a shared item approval unit 83.

[0047] When the restriction setting unit 75 of the control device 2 receives the approval information from the second electronic device 5, it removes the restriction on the service usage items for which the user has approved the sharing of information with the reserving person. Specifically, the restriction setting unit 75 removes the restriction on the service usage items for which the user has approved the sharing of information by changing the restriction information stored in the reservation DB 25. For example, the restriction setting unit 75 may change the restriction information for the service usage items for which the user has approved the sharing of information from the value "1" indicating restriction (prohibition) to the value "0" indicating permission. The restriction setting unit 75 stores the changed setting information in the reservation DB 25. Furthermore, the restriction setting unit 75 transmits the changed setting information to the service vehicle 3. The controller 36 of the service vehicle 3 limits the service use items for which information can be shared between the user and the reservation person in accordance with the changed restriction information.

[0048] On the other hand, when the shared item approval unit 83 of the second electronic device 5 receives a denial operation from the user, it does not send approval information to the control device 2. As a result, the restriction on sharing of information related to the service use item with the user who made the reservation is not lifted. In this case, the shared item approval unit 83 may send denial information to the first electronic device 4 informing that sharing of information related to the service use item has been denied. The denial information may also be sent to the first electronic device 4 via the control device 2. When the approval request unit 62 of the first electronic device 4 receives the denial information from the second electronic device 5, it may display a notice on the display device of the HMI 41 informing that sharing of information related to the service use item has been denied to the user.

[0049] (operation) FIG. 4 is a sequence diagram of an example of the operation of the mobility service providing system 1 when reserving a mobility service. In step S1, the first electronic device 4 accepts an operation by a reserver to log in to the control device 2. In step S2, the reserver information transmitting unit 60 transmits the identification information of the reserver to the control device 2. In step S3, the control device 2 authenticates the reserving person based on the received identification information.

[0050] In step S4, the reservation information generating unit 61 generates reservation information including the user's identification information and information on the boarding location, boarding date and time, and disembarking location based on the input operation of the person making the reservation. In step S5, the reservation information generating unit 61 transmits the reservation information to the control device 2. In step S6, the reservation setting unit 70 of the control device 2 sets a reservation for the transportation service for the user specified in the reservation information. In step S7, the reservation setting unit 70 transmits reservation notification information to the second electronic device 5 to notify the user that a reservation for a transportation service has been made. In step S8, the location information acquisition unit 80 of the second electronic device 5 starts transmitting the current location information of the second electronic device 5.

[0051] In step S9, the service vehicle 3 transmits its current position information. In step S10, the dispatch unit 72 of the control device 2 determines the service vehicle 3 to be provided for use by the user based on the boarding location included in the reservation information and the current location of the service vehicle 3. The driving plan setting unit 73 calculates the driving route of the service vehicle 3 from the boarding location to the disembarking location and the expected date and time of disembarking. In step S11 , the travel plan setting unit 73 transmits the travel plan information for the service vehicle 3 to the service vehicle 3 . In step S12, the relationship attribute determination unit 74 of the control device 2 determines whether the reserver and the user are different. If the reserver and the user are different, the relationship attribute determination unit 74 and the restriction setting unit 75 execute a relationship determination process to restrict information shared between the reserver and the user from among information related to service usage items, according to the relationship between the reserver and the user.

[0052] FIG. 5 is a flowchart illustrating an example of the relationship determination process. In step S30, the relational attribute determination unit 74 checks the identification information of the reserving person and the identification information of the user against the registrant DB 23. In step S31, the relationship attribute determination unit 74 determines whether the relationship between the reserver and the user is the first relationship. If the relationship between the reserver and the user is the first relationship (step S31: Y), the process proceeds to step S32. If the relationship between the reserver and the user is not the first relationship (step S31: N), the process proceeds to step S33.

[0053] In step S32, the restriction setting unit 75 permits the sharing of all information relating to preset service use items (see, for example, FIG. 3) between the reserver and the user, after which the relationship determination process ends. In step S33, the relationship attribute determination unit 74 determines whether the relationship between the reserver and the user is the second relationship. If the relationship between the reserver and the user is the second relationship (step S33: Y), the process proceeds to step S34. If the relationship between the reserver and the user is not the second relationship (step S33: N), the process proceeds to step S35.

[0054] In step S34, the restriction setting unit 75 allows the reserver and the user to share some of the information relating to the preset service use items (see, for example, FIG. 3), after which the relationship determination process ends. In step S35, the restriction setting unit 75 restricts (prohibits) the sharing of all information relating to preset service use items (see, for example, FIG. 3) between the reserver and the user, after which the relationship determination process ends.

[0055] See Fig. 4. In step S13, the restriction setting unit 75 transmits restriction information, which is information that restricts the sharing of information about service use items between the reservation person and the user, to the service vehicle 3, the first electronic device 4, and the second electronic device 5. The controller 36 of the service vehicle 3 restricts the information about service use items that can be shared between the reservation person and the user in accordance with the restriction information. In step S14, the restriction status notification unit 81 of the second electronic device 5 displays on the display device of the HMI 52 a status in which sharing of information related to the service usage items is restricted.

[0056] In step S15, the approval request unit 62 of the first electronic device 4 displays on the display device of the HMI 41 a state in which sharing of information on the service usage items with the user is restricted. In step S16, the approval request unit 62 accepts a request operation by the reserver to request approval for the reserver and the user to share information on the service use item for which sharing is restricted (prohibited). In step S17, the approval request unit 62 transmits to the second electronic device 5 approval request information requesting approval to share the information.

[0057] In step S18, the shared item approval unit 83 of the second electronic device 5 displays the approval request from the reserver on the display device of the HMI 52. Then, the shared item approval unit 83 accepts an approval operation by the user to approve the sharing of information about the service usage item for which sharing is restricted (prohibited) between the reserver and the user. In step S19, the shared item approval unit 83 transmits approval information to the control device 2, which notifies information about the service use items that are approved for sharing between the reserver and the user. In step S20, the restriction setting unit 75 of the control device 2 removes the restriction on the information on the service usage items that the user has approved to be shared between the user and the reserver. Furthermore, the restriction setting unit 75 changes the restriction information stored in the reservation DB 25 based on the approval information.

[0058] In step S21, the restriction setting unit 75 transmits the changed restriction information to the first electronic device 4. In step S22, the approval request unit 62 of the first electronic device 4 displays, on the display device of the HMI 41, a state in which the restrictions on sharing information related to the service use items with the user have been changed.

[0059] FIG. 6 is a sequence diagram of an example of operations when using a mobility service. The operation shown in FIG. 6 is an operation that occurs after the relationship attribute determination unit 74 determines in step S33 that the relationship between the reserver and the user is the second relationship. In step S40, the user boards the service vehicle 3 at the boarding location specified in the reservation information. At this time, the user uses the second electronic device 5 to perform an authentication operation to use the transportation service. When the authentication operation is performed, in step S41, the second electronic device 5 transmits the user's identification information to the control device 2. Note that in steps S40 and S41, the authentication operation may be performed using the in-vehicle terminal 34 provided in the service vehicle 3 instead of the second electronic device 5.

[0060] In step S42, the control device 2 authenticates the user based on the received identification information. If the user authentication is successful, the control device 2 transmits to the service vehicle 3, in step S43, opening instruction information including an instruction to automatically open the door. In step S44, the controller 36 of the service vehicle 3 operates the actuator 37 in response to the open instruction information to operate the door motor and the like of the service vehicle 3, thereby opening the door of the service vehicle 3.

[0061] In step S45, the controller 36 transmits to the control device 2 seating information indicating that the user has sat in the seat. In step S46, the control device 2 transmits to the service vehicle 3 closing instruction information including an instruction to automatically close the door based on the seating information received. In step S47, the controller 36 of the service vehicle 3 operates the actuator 37 in response to the close instruction information to operate the door motor and the like of the service vehicle 3, and closes the door of the service vehicle 3. In step S48, the controller 36 transmits to the control device 2 boarding completion information indicating that the user has boarded the service vehicle 3. In step S49, when the restriction setting unit 75 of the control device 2 receives the boarding completion information, it terminates (prohibits) the sharing of all information related to the service utilization items between the reserver and the user.

[0062] In other words, when the relationship between the reservation person and the user is the second relationship, the control device 2 causes the reservation person and the user to share information regarding the service use items until the user boards the service vehicle 3. Although not shown in the figure, when the relationship between the reservation person and the user is the first relationship, the control device 2 causes the reservation person and the user to share information regarding the service usage items until the user gets off the service vehicle 3. In step S50, the restriction setting unit 75 transmits to the first electronic device 4 sharing end information indicating that sharing between the reserver and the user has ended for all information related to the service use items. In step S51, the approval request unit 62 of the first electronic device 4 displays on the display device of the HMI 41 a state in which sharing of information regarding service usage items with the user is restricted (a state in which sharing of all information regarding service usage items is restricted). In step S52, the control device 2 transmits authentication completion notification information to the service vehicle 3. Upon receiving the authentication completion notification information, the controller 36 of the service vehicle 3 starts the service vehicle 3 and starts driving toward the disembarkation location in accordance with the travel plan received from the control device 2. Note that the process of transmitting the authentication completion notification information to the service vehicle 3 may be performed after the boarding completion information is transmitted to the control device 2.

[0063] (Effects of the embodiment) (1) A mobility service providing system 1 for operating vehicles, a mobility service providing method, and a mobility service providing device include a service vehicle 3 provided for the mobility service, and a control device 2 that receives reservation information including at least information about the user receiving the mobility service from a first electronic device 4, which is a terminal device operated by a person who makes a reservation for the mobility service, and arranges for the service vehicle 3 to be provided for use by the user in accordance with the reservation information. The control device 2 is provided with a registrant DB23 that stores registrants who have been registered in advance to use the mobility service providing system and information regarding the relationships between the registrants, and when the reservation and the user are different, the relationship between the reservation and the user is determined by comparing the reservation and the user with the registrant DB23, and, depending on the relationship between the reservation and the user, restricts the information shared between the reservation and the user from among information regarding service usage items, which are items that the user can use in the mobility service. This makes it possible to restrict the sharing of information about service use items when the relationship between the reservation person and the user is such that sharing of information about service use items is not desirable, thereby protecting the user's privacy.

[0064] (2) The control device 2 may determine the relationship between the reservation person and the user as to whether the reservation person is the user's legal supervisor, a person who provides care services to the user, or a person who has been commissioned to make reservations for transportation services for the user as part of his or her job. This makes it possible to determine whether or not it is necessary to restrict the sharing of information regarding service usage items that can be used by the user, depending on the relationship between the user and the person who made the reservation.

[0065] (3) When the relationship between the reservation person and the user is a first relationship, the control device 2 allows the sharing of all information regarding the service usage items, and when the relationship between the reservation person and the user is a second relationship, the control device 2 restricts the information regarding the service usage items that can be shared. This makes it possible to change the information to be shared among the information regarding service usage items depending on the relationship between the user and the reservation holder, and makes it possible to protect the user's privacy depending on the relationship between the user and the reservation holder.

[0066] (4) When the relationship between the reservation person and the user is the first relationship, the control device 2 shares information about the service use items until the user gets off the service vehicle 3. In addition, when the relationship between the reservation person and the user is the second relationship, the control device 2 shares information about the service use items until the user gets on the service vehicle 3. This makes it possible to change the conditions for sharing information about service usage items depending on the relationship between the user and the person making the reservation, and to protect the user's privacy depending on the relationship between the user and the person making the reservation.

[0067] (5) The first relationship is that the person making the reservation is the legal supervisor of the user or a person who provides care services to the user, and the second relationship is that the person making the reservation for transportation services on behalf of the user on a contract basis. This makes it possible to determine whether or not it is necessary to limit the service availability items available to the user, depending on the relationship between the user and the person who made the reservation.

[0068] (Modification of the first embodiment) (1) In the first embodiment, if it is determined that the relationship between the reserver and the user is not the second relationship, the restriction setting unit 75 restricts (prohibits) the sharing of all information related to the preset service usage items between the reserver and the user in step S35. However, the present invention is not limited to this. In other words, even if it is determined that the relationship between the reservation person and the user is not the second relationship, the configuration may be such that some of the information regarding the pre-set service usage items is permitted to be shared between the reservation person and the user, similar to the processing performed by the restriction setting unit 75 in step S34. [Explanation of symbols]

[0069] 1...mobile service providing system, 2...control device, 3...service vehicle, 4...first electronic device, 5...second electronic device, 20, 38, 43, 54...processor, 21, 39, 44, 55...storage device, 22, 33, 40, 51...communication device, 23...registrant database, 24, 32...map database, 25...reservation database, 30...sensor, 31, 50...positioning device, 34...in-vehicle terminal, 35...in-vehicle equipment, 36, 42, 53...Controller, 37...Actuator, 41, 52...Human-machine interface, 60...Reservor information transmission unit, 61...Reservation information generation unit, 62...Approval request unit, 70...Reservation setting unit, 71...Location information acquisition unit, 72...Vehicle dispatch unit, 73...Driving plan setting unit, 74...Relationship attribute determination unit, 75...Restriction setting unit, 80...Location information acquisition unit, 81...Restriction state notification unit, 82...Restriction change request unit, 83...Shared item approval unit

Claims

1. A transportation service providing system that operates a vehicle, a vehicle provided for the mobility service; a control device that receives reservation information including at least information on a user who will receive the transportation service from an electronic device that is a terminal device operated by a person who makes a reservation for the transportation service, and arranges for a vehicle to be provided for use by the user in accordance with the reservation information; Equipped with The control device a registrant database that stores registrants who have been registered in advance to use the mobile service providing system and information on relationships between the registrants; If the reservation person and the user are different, determining the relationship between the reservation person and the user by comparing the reservation person and the user with the registered user database; limiting information shared between the reservation person and the user among information relating to service use items that are items that the user can use in the mobility service, depending on the relationship between the reservation person and the user; A mobile service providing system.

2. The mobility service providing system of claim 1, characterized in that the control device determines the relationship between the reservation person and the user as to whether the reservation person is the user's legal supervisor, a person who provides care services to the user, or a person who has been commissioned to make reservations for the mobility service on behalf of the user as part of their job.

3. The control device When the relationship between the subscriber and the user is a first relationship, all sharing of information related to the service use item is permitted; When the relationship between the reserving person and the user is a second relationship, the information to be shared among the information regarding the service use items is limited.

3. The mobile service providing system according to claim 1 or 2.

4. The control device When the relationship between the reservation person and the user is a first relationship, information regarding the service use item is shared until the user gets off the vehicle; When the relationship between the reservation person and the user is a second relationship, information regarding the service use items is shared until the user gets into the vehicle.

4. The mobile service providing system according to claim 1, wherein the mobile service providing system comprises: a mobile terminal;

5. the first relationship is that the reserving party is a legal supervisor of the user or a person who provides care services to the user; 5. The transportation service providing system according to claim 3, wherein the second relationship is that the reservation party is a party that makes reservations for the transportation service on behalf of the user under a contract as a business.

6. A method for providing a transportation service by operating a vehicle, comprising: Registrants who have been registered in advance to use the mobile service providing method and information on relationships between the registrants are stored in a registrant database in advance; An electronic device, which is a terminal device operated when reserving the transportation service, accepts an operation by a person reserving the transportation service and transmits reservation information including at least information on a user who will receive the transportation service to a control device; The control device Arranging a vehicle for use by the user in accordance with the reservation information; If the reservation person and the user are different, determining the relationship between the reservation person and the user by comparing the reservation person and the user with the registered user database; limiting information shared between the reservation person and the user among information relating to service use items that are items that the user can use in the mobility service, depending on the relationship between the reservation person and the user; A method for providing a mobile service.

7. A transportation service providing device that operates a vehicle, A registrant database stores in advance information about registrants who have been registered in advance to use the mobile service providing device and information about relationships between the registrants; a process in which an electronic device, which is a terminal device operated when reserving the transportation service, receives an operation by a person reserving the transportation service and transmits reservation information including at least information on a user who will receive the transportation service to a control device; A process of arranging a vehicle for use by the user in accordance with the reservation information; a process of determining a relationship between the reserving person and the user by comparing the reserving person and the user with the registered user database when the reserving person and the user are different; A process of limiting information shared between the reservation person and the user among information related to service use items that are items that the user can use in the mobility service, according to the relationship between the reservation person and the user; A mobile service providing device comprising a computer that executes the above.

Images