Control method for information processing device and information processing device

Abstract

To appropriately switch a login state and a logout state of an application used in a vehicle according to use of the vehicle.SOLUTION: An application associated with a vehicle 1 includes a login state in which the authentication of a communication device has been completed and a logout state in which the authentication of the communication device has not been completed. In the login state, it is possible to output information related to an occupant to the communication device. When power is turned off, an information processing apparatus 100 installed in the vehicle 1 executes control for putting the application into the logout state at the next start-up and control for continuing the login state of the application at the next start-up based on a first distance from a first position specified by latest position information acquired by a position information acquiring unit 125 to a predetermined place when the power is turned off, and a traveling distance from the first position to a position of the vehicle 1 when the power is turned off.SELECTED DRAWING: Figure 4

Description

[Technical Field]

[0001] The present invention relates to a control method for an information processing device and an information processing device. [Background technology]

[0002] In recent years, there has been a technology that requires a user to perform a login operation when using a specific application, and allows the user, who has been authenticated by the login operation, to use the application. In this case, it is conceivable that the user would log out every time they finish using the application, and if they want to use the application again after logging out, they would manually log in. However, if a login operation is required every time an application is used, this login operation may become cumbersome. Therefore, for example, a technology has been proposed that, when a user logs out and then logs in again, displays a setting screen that accepts job settings for the application that the user was using immediately before the previous logout (see, for example, Patent Document 1). [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Publication No. 2018-152870 Summary of the Invention [Problem to be solved by the invention]

[0004] In the above-described conventional technology, when a user logs in again after logging out, the user can use the device in the same state as immediately before the previous logout. Here, if multiple people use the device that is the target of the login operation, continuing the previous login state will cause the device to start up with the settings of the user who used it last time. In this case, there is a risk that the information of the user who used it last time will be used by another user who will use it next time, so it is important to switch between the login state and the logout state at the appropriate time.

[0005] The present invention aims to appropriately switch the login state and logout state of an application used in a vehicle depending on the use of the vehicle. [Means for solving the problem]

[0006] One aspect of the present invention is a control method for controlling an information processing device installed in a vehicle, the information processing device being capable of executing an application associated with the vehicle. The application has a login state in which authentication has been completed for a communication device associated with an occupant, and a logout state in which the authentication has not been completed for the communication device. In the login state, the application is capable of outputting information associated with the occupant to the communication device. The vehicle has a location information acquisition unit that acquires location information indicating the current location of the vehicle. The control method includes a control process that, when the information processing device is powered off, executes control to log out the application at the next startup or control to maintain the login state of the application at the next startup, based on a first distance from a first position identified by the latest location information of the vehicle acquired by the location information acquisition unit to a predetermined location and a traveling distance from the first position to the location of the vehicle at the time of power off. [Effects of the Invention]

[0007] According to the present invention, the login state and logout state of an application used in a vehicle can be switched depending on the running state of the vehicle, thereby appropriately switching the login state depending on the use of the vehicle. [Brief explanation of the drawings]

[0008] [Figure 1] FIG. 1 is a diagram showing an example of the external configuration of an imaging device and a display device. [Figure 2] FIG. 2 is a diagram showing an example of the external configuration of the imaging device and the display device. [Figure 3]FIG. 3 is a diagram illustrating an example of a system configuration of a management system that manages the login and logout states of information processing devices. [Figure 4] FIG. 4 is a block diagram showing an example of the functional configuration of an information processing device mounted on a vehicle. [Figure 5] FIG. 5 is a simplified diagram showing a route taken by a user who gets into a vehicle at a predetermined location, passes through a shopping mall and an amusement park, and returns to the predetermined location. [Figure 6] FIG. 6 is a diagram showing the relationship between the vehicle state, the vehicle session state, the vehicle login / logout state on the management server, the vehicle login / logout state, and the storage state of the token cache file on the vehicle side. [Figure 7] FIG. 7 is a simplified diagram showing an example of the session information DB and the content management DB in the storage unit of the management server. [Figure 8] FIG. 8 is a diagram showing an example of a vehicle exterior image and a vehicle interior image displayed on a display device, and an image displayed on a display unit of an electronic device. [Figure 9] FIG. 9 is a diagram showing an example of an image displayed on the display device when logging out, and an example of an image displayed on the display unit of the electronic device. [Figure 10] FIG. 10 is a diagram showing an example of determination when the predetermined location is in an underground parking lot. [Figure 11] FIG. 11 is a diagram showing an example of determination when the parking lot of a shopping mall where the vehicle is stopping is an underground parking lot. [Figure 12] FIG. 12 is a sequence chart showing an example of communication processing performed among an information processing device, a management server, and an electronic device. [Figure 13] FIG. 13 is a sequence chart showing an example of communication processing performed among an information processing device, a management server, and an electronic device. [Figure 14] FIG. 14 is a sequence chart showing an example of communication processing performed among an information processing device, a management server, and an electronic device. [Figure 15]FIG. 15 is a flowchart illustrating an example of a login control process in the information processing device. [Figure 16] FIG. 16 is a flowchart illustrating an example of a login control process in the information processing device. [Figure 17] FIG. 17 is a flowchart illustrating an example of a login control process in the management server. [Figure 18] FIG. 18 is a block diagram showing an example of the functional configuration of an information processing device mounted on a vehicle. DETAILED DESCRIPTION OF THE INVENTION

[0009] Hereinafter, an embodiment of the present invention will be described with reference to the accompanying drawings.

[0010] [Example of vehicle internal configuration] 1 and 2 are diagrams showing an example of the external configuration of the imaging devices 10, 20 and the display devices 30, 40. Note that Figs. 1 and 2 show a simplified view of the interior of the vehicle 1, and omit illustrations of only a dashboard 2, a steering wheel 3, a windshield 4, a rearview mirror 5, a car navigation device 6, a driver's seat 7, and a passenger seat 8. Fig. 1 shows an example of the external configuration when the area in front of the driver's seat 7 and passenger seat 8 is viewed from the rear of the vehicle 1, and Fig. 2 shows an example of the external configuration when the area in front of the rear seats is viewed from the rear of the vehicle 1.

[0011] The imaging device 10 is provided on the ceiling inside the vehicle 1 and captures an image of a subject inside the vehicle 1 to generate an image (image data). For example, the imaging device 10 can be provided above the windshield 4, i.e., above the rearview mirror 5. The imaging device 20 is provided at the left end of the dashboard 2 and captures an image of a subject outside the vehicle 1 to generate an image (image data). The imaging devices 10 and 20 are configured, for example, with one or more camera devices or image sensors capable of capturing an image of a subject. While this example illustrates an example in which at least two imaging devices 10 and 20 are provided, one or more imaging devices may be provided and some of the images from these imaging devices may be used. The installation locations of the imaging devices are not limited to the examples shown in FIGS. 1 and 2 and can be changed as appropriate. One or more devices, for example, a 360-degree camera, capable of capturing subjects in all directions around the vehicle 1 and subjects inside the vehicle 1 may also be used.

[0012] The display devices 30 and 40 are display devices that display various images under the control of the controller 140 (see FIG. 4). The display devices 30 and 40 can be, for example, touch panels that can accept user operations by touching the screen. The display device 30 can be called an assistant monitor, and the display device 40 can be called a rear monitor. Instead of the display device 30, various images may be displayed on the car navigation device 6.

[0013] Specifically, the display device 30 is provided on the passenger seat 8 side of the dashboard 2 so that it can be seen by a passenger seated in the passenger seat 8, and displays various images on the display unit 31. The display device 40 is provided near the center of the ceiling inside the vehicle 1 so that it can be seen by a passenger seated in the rear seat, and displays various images on the display unit 41. For example, the display device 40 may be a flip-down display device attached to the ceiling using a support member 42, i.e., a foldable display device. Note that while this example illustrates an example in which at least two display devices 30 and 40 are provided, one or three or more display devices may be provided, and display control may be performed for some of these display devices. Furthermore, the installation locations of the display devices are not limited to the examples shown in FIGS. 1 and 2 and can be changed as appropriate. Furthermore, display examples of the display devices 30 and 40 are shown in FIGS. 8 and 9.

[0014] [Management system configuration example] FIG. 3 is a diagram showing an example of the system configuration of the management system 50 that manages the login and logout states of the information processing device 100. As shown in FIG.

[0015] The management system 50 is a communication system for managing the login status, logout status, and content of each vehicle under management. The management system 50 is configured to enable communication between a management server 70 and other devices via a network 60. For example, the management server 70 is configured to enable communication between an information processing device 100, an electronic device 80, and the like of the vehicle 1 via the network 60. The electronic device 80 is a communication device carried by a passenger in the vehicle 1 and is a wireless device capable of connecting to the network 60 via wireless communication. The electronic device 80 is, for example, a communication-capable information processing device such as a smartphone, a tablet device, or a portable personal computer. The communication function may be built into the electronic device 80 or may be attached to the electronic device 80 as an external device. While FIG. 3 illustrates only the information processing device 100 installed in one vehicle 1 for ease of explanation, the present embodiment can also be applied to a case where multiple information processing devices are present. Although FIG. 3 illustrates an example in which one electronic device 80 is used in one vehicle 1 for ease of explanation, the present embodiment can also be applied to a case in which multiple electronic devices are used in one vehicle 1.

[0016] The information processing device 100 is an in-vehicle device installed in the vehicle 1 and is capable of executing an application associated with the vehicle 1. This application will be referred to as a management app hereinafter. The management app is capable of performing processes according to the use of the vehicle 1 and processes related to the vehicle 1. The processes according to the use of the vehicle 1 and processes related to the vehicle 1 are, for example, management processes for displaying and communicating images of the interior and exterior of the vehicle. The management app has a login state in which authentication has been completed for the electronic device 80 associated with the occupant of the vehicle 1, and a logout state in which authentication has not been completed for the electronic device 80. That is, a state in which the user is not in the login state is the logout state. In addition, in the login state, the management app can output information related to the occupant of the vehicle 1, such as image content, from the information processing device 100 to the electronic device 80 using a predetermined application corresponding to the user ID. This output is, for example, transmission from the information processing device 100 to the electronic device 80 via the network 60 and the management server 70, or direct transmission from the information processing device 100 to the electronic device 80 using short-range wireless communication.

[0017] In this embodiment, an example is shown in which the login state of an application is a state in which authentication has been completed for a device related to a vehicle occupant, and the logout state of the application is a state in which authentication has not been completed for that device. However, this embodiment is not limited to this, and can also be applied to a case in which a state in which some authentication process has been completed is the login state of an application, and a state in which that authentication process has not been completed is the logout state of the application. In other words, this embodiment can also be applied to various applications that have a login state and a logout state. Furthermore, the login described in this embodiment can also be referred to as logon, sign-in, etc. Furthermore, the logout described in this embodiment can also be referred to as logoff, sign-off, etc.

[0018] In this embodiment, the period from the start to the end of the communication enabled state between the information processing device 100 and the management server 70 during the period until the user U1 who rented the vehicle 1 returns the vehicle 1 will be referred to as a session. A state in which the session between the information processing device 100 and the management server 70 is valid and authentication of the electronic device 80 has been completed in the management server 70 will be referred to as the information processing device 100 being logged in. A state in which authentication of the electronic device 80 has not been completed in the management server 70 will be referred to as the information processing device 100 being logged out. Similarly, a state in which the session between the information processing device 100 and the management server 70 is invalid will also be referred to as the information processing device 100 being logged out.

[0019] As described above, in this embodiment, an example is shown in which a management app installed in the information processing device 100 is used. Therefore, when the information processing device 100 is said to be in a logged-in state, it means that the management app is in a logged-in state, and when the information processing device 100 is said to be in a logged-out state, it means that the management app is in a logged-out state. Similarly, when the vehicle 1 is said to be in a logged-in state, it means that the management app is in a logged-in state, and when the vehicle 1 is said to be in a logged-out state, it means that the management app is in a logged-out state.

[0020] The network 60 is a network such as a public line network or the Internet. Each device constituting the management system 50 is connected to the network 60 by a communication method using wireless communication or a communication method using wired communication, or by both methods.

[0021] The management server 70 includes a communication unit 71, a controller 72, and a storage unit 73. For example, the management server 70 can be a server that manages the login and logout states of the information processing device 100, manages image content transmitted from the information processing device 100 of the vehicle 1, and provides the image content in response to a request from the electronic device 80.

[0022] The communication unit 71 exchanges various types of information with other devices using wired or wireless communication under the control of the controller 72. That is, the communication unit 71 functions as an image receiving unit and an image transmitting unit.

[0023] The controller 72 controls each unit based on various programs stored in the storage unit 73. The controller 72 is realized by a processing device such as a CPU (Central Processing Unit). The controller 72 also includes, as functional components, a password issuing unit 75, a password recognition unit 76, a login / logout status management unit 77, and a content management unit 78. The password issuing unit 75, the password recognition unit 76, the login / logout status management unit 77, and the content management unit 78 will be described in detail with reference to FIGS. 12 to 14 and 17.

[0024] The password issuing unit 75 issues a session token corresponding to the session and a one-time password used to start the session when starting a session for the information processing device 100. The session token will be described in detail with reference to FIG.

[0025] The password recognition unit 76 executes password authentication processing using the one-time password issued by the password issuing unit 75 when starting a session with the information processing device 100 .

[0026] The login / logout status management unit 77 manages the login status and the logout status of the information processing device 100 by using the session information DB 200 (see FIG. 7A) in the storage unit 73.

[0027] The content management unit 78 manages the content transmitted from the information processing device 100 using the content management DB 210 (see FIG. 7B) in the storage unit 73, and transmits the managed content to the electronic device 80.

[0028] The storage unit 73 is a storage medium that stores various types of information. For example, the storage unit 73 stores various types of information required for the controller 72 to perform various processes (for example, a control program, a session information DB (see FIG. 7(A)), and a content management DB (see FIG. 7(B))). The storage unit 73 also stores various types of information acquired via the communication unit 71. The storage unit 73 can be, for example, a read-only memory (ROM), a random access memory (RAM), a hard disk drive (HDD), a solid state drive (SSD), or a combination thereof.

[0029] The electronic device 80 can display the image content transmitted from the management server 70 on a display unit 81 (see FIGS. 8 and 9). Although FIG. 3 shows an example in which information is exchanged between the electronic device 80 and the information processing device 100 via the network 60, information may also be exchanged directly between the electronic device 80 and the information processing device 100. In this case, for example, short-range wireless communication (for example, wireless LAN such as Wi-Fi, Bluetooth (registered trademark)) can be used.

[0030] [Configuration example of information processing device] 4 is a block diagram showing an example of the functional configuration of an information processing device 100 mounted on the vehicle 1. The information processing device 100 is an in-vehicle device in which the above-mentioned management application is installed, and when the management application is in a logged-in state, it can transmit each piece of content, including captured images generated by the imaging devices 10 and 20, to the management server 70. Furthermore, the content transmitted to the management server 70 can be transmitted to the electronic device 80 and displayed on the display unit 81 of the electronic device 80. Examples of these pieces of content are shown in FIGS. 8 and 9.

[0031] The information processing device 100 includes a controller 140, and is connected to a vehicle power supply system 110, sensors 120, a position information acquisition unit 125, a UI unit 130, a storage unit 150, a communication unit 160, and an image acquisition unit 170. Although this example shows an example in which the information processing device 100 includes only the controller 140, the information processing device 100 may include at least one of the units other than the controller 140 shown in FIG. 4. The controller 140 also includes a start / stop determination unit 141, a login continuation determination unit 142, a login control unit 143, a display control unit 144, a session information storage unit 145, and an image capture control unit 146.

[0032] The vehicle power supply system 110 supplies power to each part of the vehicle 1, and is formed, for example, from an on-board battery or a combination of a generator and an on-board battery.

[0033] The sensors 120 are various sensors installed in the vehicle 1. The sensors 120 output detection information and the like acquired by each sensor to the login continuation determination unit 142. The sensors are, for example, millimeter-wave radar, LIDAR (Light Detection and Ranging), sonar, a stroke sensor, an acceleration sensor, a lateral G sensor, a longitudinal G sensor, a vehicle speed sensor, a sound acquisition unit, and a seating sensor. The sound acquisition unit is provided inside or outside the vehicle 1, and acquires sounds around the vehicle 1 (sounds outside the vehicle) and sounds inside the vehicle based on the control of the controller 140. The sound acquisition unit may be, for example, one or more microphones or sound acquisition sensors. The travel distance of the vehicle 1 is measured by a vehicle speed sensor or the like. The total value of this travel distance is calculated as an odometry value. The odometry value is a value indicating the total travel distance of the vehicle 1.

[0034] The location information acquisition unit 125 acquires location information regarding the location where the vehicle 1 is located and outputs the acquired location information to the login continuation determination unit 142. For example, it can be realized by a GNSS receiver that acquires location information using a Global Navigation Satellite System (GNSS). The location information includes data regarding the location, such as latitude, longitude, and altitude, at the time of receiving the GNSS signal. The location information may also be acquired by other location information acquisition methods. For example, the location information may be derived using information from surrounding access points or base stations. The location information may also be acquired using beacons. The location information may also be derived using a position estimation technique using a navigation device. For example, the travel distance of the vehicle 1 may be calculated based on the vehicle speed acquired by a vehicle speed sensor or the like, and the location information may be derived based on this travel distance and map information.

[0035] The UI unit 130 functions as an interface that accepts operations from the occupants of the vehicle 1 and provides various types of information to the occupants of the vehicle 1, and is equipped with display devices 30 and 40. The UI unit 130 outputs the contents of the accepted operations to the controller 140 and provides various types of information under the control of the controller 140.

[0036] The image acquisition unit 170 acquires various images (still images, moving images, etc.) related to the vehicle 1, and includes the imaging devices 10 and 20. The imaging devices 10 and 20 output captured images (image data) generated by imaging processing to the controller 140.

[0037] The controller 140 controls each unit based on various programs stored in the storage unit 150. The controller 140 is realized by, for example, a processing device such as a CPU. Note that the vehicle ECU (Electronic Control Unit) of the vehicle 1 may also be used as the controller 140, or a processing device different from the vehicle ECU may be provided as the controller 140.

[0038] The start / stop determination unit 141 determines whether the vehicle 1 is started or stopped based on information from the vehicle power supply system 110, and outputs start / stop information relating to the start / stop to the login continuation determination unit 142. For example, the start / stop determination unit 141 determines that the vehicle 1 has been started when the vehicle 1 is turned on using the start switch of the vehicle 1 (or a start operation using a key), and determines that the vehicle 1 has been stopped when the vehicle 1 is turned off using the start switch of the vehicle 1. In this embodiment, it is assumed that the on / off of the vehicle 1 and the on / off of the power supply of the information processing device 100 are linked.

[0039] The login continuation determination unit 142 determines whether to continue the logged-in state of the information processing device 100 using the latest location information of the vehicle 1 acquired by the location information acquisition unit 125, an odometry value of the vehicle 1, and the like, and outputs the determination result to the login control unit 143. Specifically, the login continuation determination unit 142 determines whether there is a high possibility that the vehicle 1 is present at a predetermined location SL1 (see FIG. 5) (or within a predetermined range PR1 (see FIG. 5)) using the location information of the vehicle 1 and the odometry value of the vehicle 1, and determines not to continue the logged-in state if it is estimated that there is a high possibility that the vehicle 1 is present at the predetermined location SL1 (or within the predetermined range PR1). On the other hand, the login continuation determination unit 142 determines to continue the logged-in state if it is estimated that there is a high possibility that the vehicle 1 is present at a location away from the predetermined location SL1. The predetermined location SL1 and the predetermined range PR1 can be acquired based on map information stored in the storage unit 150.

[0040] The login control unit 143 controls the login state and logout state of the above-mentioned management app based on the determination result output from the login continuation determination unit 142. For example, when the information processing device 100 is powered on or off, the login control unit 143 controls the management app to transition to a logout state if it is estimated that there is a high possibility that the vehicle 1 is present at the predetermined location SL1 (or within the predetermined range PR1), and controls the management app to continue to be logged in if it is estimated that there is a high possibility that the vehicle 1 is present at a location away from the predetermined location SL1. These login control processes will be described in detail with reference to FIGS. 5 to 17.

[0041] The display control unit 144 controls the display devices 30, 40 to display various images. For example, the display control unit 144 superimposes a virtual object on a captured image generated by the imaging devices 10, 20 and displays it on the display devices 30, 40. In this case, the display control unit 144 may display the same image on both the display devices 30, 40, or may display different images on each of the display devices 30, 40. The display control unit 144 outputs the images displayed on the display devices 30, 40 to the imaging control unit 146. Display examples on the display devices 30, 40 are shown in FIGS. 8 and 9.

[0042] The session information storage unit 145 stores various pieces of information required to start and continue a session of the information processing device 100. Note that the various pieces of information stored in the session information storage unit 145 are deleted when the power of the information processing device 100 is turned off.

[0043] The photographing control unit 146 executes content management processing for transmitting the image displayed on the display device 30, 40 to the management server 70. Specifically, the photographing control unit 146 determines whether or not the shutter operation area 304 (see FIG. 8 ) has been pressed, and temporarily stores the image displayed on the display device 30, 40 when the shutter operation area 304 was pressed in the storage unit 150 as image content. Specifically, the photographing control unit 146 acquires the image displayed on the display device 30, 40 when the shutter operation area 304 was pressed from the display control unit 144, and temporarily stores the acquired image as image content in the storage unit 150. Note that video content may be stored in addition to still image content at the timing of the shutter operation area 304 being pressed. Furthermore, the photographing control unit 146 transmits the image content stored in the storage unit 150 to the management server 70 via the communication unit 160. In this way, the image content acquired when the shutter operation area 304 was pressed can be transmitted to the management server 70 and managed by the management server 70. This allows the image content managed by the management server 70 to be easily viewed using other devices, such as the electronic device 80 (see FIG. 3).

[0044] The storage unit 150 is a storage medium that stores various types of information. For example, the storage unit 150 stores various types of information (e.g., control programs, management applications, map information, virtual object information, and image content) required for the controller 140 to perform various processes. The storage unit 150 also stores various types of information acquired via the communication unit 160. For example, a ROM, a RAM, an HDD, an SSD, or a combination of these can be used as the storage unit 150. Note that the image content is a file of an image that was acquired based on a photographing operation by an occupant of the vehicle 1, among images displayed on the display devices 30 and 40. Note that in this embodiment, an example is shown in which the storage unit 150 is used as a non-volatile memory that stores information even after the information processing device 100 is powered off.

[0045] The communication unit 160 exchanges various types of information with other devices using wireless communication under the control of the controller 140. For example, when a session of the information processing device 100 starts or ends, various types of information are exchanged with the management server 70. Also, for example, under the control of the imaging control unit 146, the communication unit 160 transmits images displayed on the display devices 30 and 40 by the display control unit 144 to the management server 70 as image content via the network 60. Also, the communication unit 160 receives information transmitted from the management server 70 or other external devices via the network 60.

[0046] [Example of the relationship between vehicle position and designated location] FIG. 5 is a simplified diagram showing routes BR1 to BR3 taken by user U1 who boarded vehicle 1 at predetermined location SL1, passing through shopping mall SM1 and amusement park PL1, before returning to predetermined location SL1. Here, vehicle 1 is a vehicle used by multiple users, and predetermined location SL1 is a location where vehicle 1 is parked and where users boarding vehicle 1 switch. For example, it is assumed that vehicle 1 is a shared car, and predetermined location SL1 is a rental location or station for vehicle 1. It is also assumed that vehicle 1 is a rental car, and predetermined location SL1 is a rental car office or rental location.

[0047] 5 shows an example in which the predetermined range PR1 is a circular range of radius R1 based on the position of the predetermined place SL1. Note that the radius R1 can be set appropriately based on experimental data, etc., and can be set to a value of, for example, several meters to several tens of meters.

[0048] In this embodiment, the vehicle 1 being off means that the power supply to the vehicle 1 is completely off. That is, between a state in which the vehicle 1 is able to run and a state in which the power supply is completely off, there is a state in which the accessory power supply is on (in other words, a state in which the power supply is partially on). This accessory power supply on state is, for example, a state in which the vehicle power supply is on but the shift lever is in the P (Parking) position. In this way, when the accessory power supply is on, the vehicle 1 is considered to be in the on state.

[0049] As described above, the present embodiment illustrates an example in which the on / off of the vehicle 1 and the on / off of the power supply of the information processing device 100 are linked. That is, the power supply of the information processing device 100 is turned on when the vehicle 1 is turned on, and the power supply of the information processing device 100 is turned off when the vehicle 1 is turned off. However, when the accessory power supply is on in the vehicle 1, the power supply of the information processing device 100 may be turned off, and the power supply of the information processing device 100 may be turned off when the vehicle 1 is ready to run. These settings can be appropriately set according to the user's preferences or by an administrator who manages the vehicle 1.

[0050] Here, if the vehicle 1 is a shared car or a rental car, a change of user occurs at the location where the vehicle 1 is rented. For example, assume that captured images generated by the imaging devices 10 and 20 installed in the vehicle 1 are shared with the user who rented the vehicle 1 and his / her friends using a management app. In this case, assume that after user A rents and uses the vehicle 1, user B rents and uses the vehicle 1. In such a case, if the logged-in state of the management app continues even after the user renting the vehicle 1 changes, user B may be able to view captured images generated during user A's use. Therefore, to prevent other users from viewing the captured images, the user who rented the vehicle 1 may perform a login / logout operation each time the vehicle 1 is turned on or off. However, if the user who rented the vehicle 1 performs a login / logout operation each time the vehicle 1 is turned on or off, the login / logout operation becomes cumbersome.

[0051] Therefore, when the power of the information processing device 100 is turned on or off, if the vehicle 1 is in a predetermined location (predetermined location SL1 or within predetermined range PR1), it is conceivable to control the management app so that it transitions to a logged-out state, and if the vehicle 1 is not in the predetermined location, the management app continues to be logged in. However, if the vehicle 1 is in an environment where it is difficult to obtain appropriate location information, it is also expected that it will be difficult to appropriately determine whether the vehicle 1 is in the predetermined location.

[0052] For example, assume that a GNSS device is used as the location information acquisition unit 125. The GNSS device is also referred to as a GPS (Global Positioning System). It is expected that the GNSS device will have difficulty acquiring appropriate location information if the vehicle 1 is located in a location with low signal strength from satellites, such as an underground parking lot or a tunnel. It is also expected that the GNSS device itself will have difficulty acquiring appropriate location information due to some reason, such as a small number of satellites or a malfunction. In this way, if the vehicle 1 is turned off or on in a location where valid location information cannot be acquired by the GNSS device, it may not be possible to appropriately determine whether to log in or log out of the management app based on the location information acquired by the GNSS device.

[0053] Therefore, in this embodiment, when the vehicle 1 is turned off or on, that is, when the power of the information processing device 100 is turned off or on, the latest location information of the vehicle 1 acquired by the location information acquisition unit 125 and the odometry value of the vehicle 1 are used to estimate whether or not there is a high possibility that the vehicle 1 is present at the predetermined location SL1, and a login / logout determination of the management app is performed. Note that the latest location information of the vehicle 1 is the latest location information of the vehicle 1 that has been validly acquired by the location information acquisition unit 125.

[0054] Specifically, when the power of the information processing device 100 is turned off or on, it is determined whether to put the management app into a logged-in state or a logged-out state based on the distance (first distance) from the position (first position) identified by the latest position information of the vehicle 1 acquired by the position information acquisition unit 125 to the predetermined location SL1 and the distance traveled from the first position to the position of the vehicle 1 when the power was turned off or on. In this way, in this embodiment, the logged-in state established when the use of the vehicle 1 began is maintained until the vehicle 1 is returned.

[0055] Here, for example, it is assumed that the management app stops for some reason at a location far from the predetermined location SL1, and the vehicle 1 is then returned to the predetermined location SL1 in a state where the management app cannot be started. In this case, it is also assumed that a new user who newly rents the vehicle 1 starts using the management app at a location far from the predetermined location SL1. In such a case, the location of the vehicle 1 when the management app is started will be significantly different from the location of the vehicle 1 at the time of termination processing of the management app immediately before the start-up operation. Note that, as the odometry value of the vehicle 1 at the time of termination processing of the management app is stored in the storage unit 150, in such a case, the difference value between the current odometry value and the odometry value stored in the storage unit 150 will be large.

[0056] Therefore, when the vehicle 1 is turned on, if the difference between the current odometry value and the odometry value stored in the storage unit 150 is equal to or greater than the first threshold, it is determined that the management app should transition to a logout state. That is, if the position of the vehicle 1 when the management app startup operation is performed is significantly different from the position of the vehicle 1 at the time of the management app termination process immediately before the startup operation, that is, if the distance between the two positions is long, there is a possibility that the vehicle 1 has arrived at the predetermined location SL1 or the renter of the vehicle 1 has changed, so the vehicle 1 transitions to the logout state.

[0057] Here, it is assumed that the vehicle 1 will start moving immediately after the vehicle 1 is turned on. Furthermore, after the vehicle 1 is turned on, it takes a certain amount of time for the information processing device 100 and the management app to start. For this reason, if the vehicle 1 starts moving immediately after the vehicle 1 is turned on, it is assumed that the difference value between the odometry value stored in the storage unit 150, i.e., the odometry value when the vehicle 1 is turned off, and the odometry value when the management app is started, i.e., the current odometry value, will not become 0. In this case, if the state transitions to a logout state, a login operation will be required again, which will make the login operation cumbersome. Therefore, a first threshold is set to make an appropriate login / logout determination even in such a situation.

[0058] That is, the first threshold is set to a value equal to or greater than the distance that the vehicle 1 is expected to travel from when the vehicle 1 starts moving immediately after the on-state operation until the management application is started. For example, the first threshold can be set to a value of approximately 200 m to 500 m. Note that this value is an example, and the first threshold can be set appropriately based on experimental data, etc.

[0059] In this manner, in this embodiment, when the information processing device 100 is powered on, if the distance traveled from the position of the vehicle 1 when the management app was last terminated to the position of the vehicle 1 when the power is turned on is equal to or greater than the first threshold, the management app is controlled to transition to a logout state. In this manner, when the information processing device 100 is powered on, if it is determined that the vehicle has traveled a certain distance since the management app was last terminated, the information processing device 100 can be transitioned to a logout state.

[0060] Furthermore, for example, when the vehicle 1 is turned off, it is possible to determine whether to continue the logged-in state of the management app based on the latest location information at the time of the turn-off, i.e., the latest location information that has been effectively acquired by the location information acquisition unit 125. Specifically, it is possible to determine whether to continue the logged-in state of the management app based on whether the location (first location) identified by the latest location information at the time the vehicle 1 is turned off is away from the predetermined location SL1 by a second threshold or more. For example, when the first location is away from the predetermined location SL1 by the second threshold or more, it is estimated that the vehicle 1 is likely to be located away from the predetermined location SL1, and it is determined that the logged-in state of the management app should be continued. On the other hand, when the first location is less than the second threshold from the predetermined location SL1, it is estimated that the vehicle 1 is likely to be located at the predetermined location SL1, and it is determined that the management app should transition to a logged-out state.

[0061] Here, the second threshold is a value set to confirm that the vehicle 1 is likely to be located away from the predetermined location SL1, and is a value set to transition the vehicle 1 to the logout state when the vehicle 1 returns to the predetermined location SL1. Note that, in the determination using Equations 1 to 3 described below, the odometry value of the vehicle 1 and the location information of the vehicle 1 are used. Therefore, it is preferable to set the second threshold taking into account errors in the location information as well as errors in the traveled distance. For example, an error of approximately 100 meters can occur in the traveled distance. Furthermore, a GPS device can generate errors of approximately several tens of meters. Therefore, a value of approximately 200 to 500 meters can be set taking into account errors in the traveled distance and errors in the location information. By setting the second threshold in this manner, even if the vehicle 1 arrives at the predetermined location SL1 without being able to launch the management app, the vehicle 1 can be appropriately transitioned to the logout state. Note that these values ​​are merely examples and can be set appropriately based on experimental data, the accuracy of location information acquisition, and the like. It is also preferable that the second threshold be equal to or greater than the first threshold.

[0062] If the position information acquisition unit 125 is a GPS device, horizontal position accuracy information can be calculated in real time based on the number of satellites used for positioning, etc. Therefore, the second threshold value may be changed based on the position accuracy information of the position information acquisition unit 125. For example, based on the position accuracy information of the position information acquisition unit 125 at the last position information recording position LL11, the second threshold value can be set to a smaller value as the position accuracy of the position information acquisition unit 125 increases.

[0063] If the parking lot at the predetermined location SL1 is an underground parking lot, it may be difficult to properly acquire location information within the parking lot at the predetermined location SL1. Therefore, if the parking lot at the predetermined location SL1 is an underground parking lot, it may be possible to determine whether to continue the login state of the management app based on whether the first position is further away from the entrance to the underground parking lot at the predetermined location SL1 by a second threshold or more. If there are multiple entrances to the underground parking lot at the predetermined location SL1, it is preferable to determine whether to continue the login state of the management app based on whether the first position is further away from each of those entrances by a second threshold or more. An example of the case where the parking lot at the predetermined location SL1 is an underground parking lot is shown in FIG. 10.

[0064] Furthermore, for example, when vehicle 1 is turned on, it is possible to determine whether or not to continue the logged-in state of vehicle 1 based on whether the information processing device 100 or the management app was terminated normally when vehicle 1 was turned off immediately before the on-operation, and the distance traveled from the position of vehicle 1 at the time of the on-operation to the position of vehicle 1 when it was off immediately before the on-operation.

[0065] For example, it is preferable not to use data when the information processing device 100 or the management app has abnormally terminated. Therefore, when the vehicle 1 is turned on, if the information processing device 100 or the management app has not terminated normally when the vehicle 1 was turned off immediately before the on-operation, it is determined that the management app should transition to a logout state. Examples of this are shown in FIGS. 15 and 16.

[0066] [Example of the relationship between vehicle status and logon / logout of information processing device] 6 is a diagram showing the relationship between the state of vehicle 1, the session state of vehicle 1, the login / logout state of vehicle 1 in management server 70, the login / logout state of vehicle 1, and the storage state of the token cache file on vehicle 1. FIG. 6 shows an example of the relationship from when user U1 rents vehicle 1 at predetermined location SL1, as shown in FIG. 5, to when user U1 goes to shopping mall SM1 and amusement park PL1, and then returns vehicle 1 at predetermined location SL1.

[0067] The horizontal axis in FIG. 6 represents the time axis. Also, assume that user U1 parks vehicle 1 with the vehicle 1 turned off at shopping mall SM1 and amusement park PL1. Then, assume that user U1 turns vehicle 1 on at amusement park PL1, heads to predetermined location SL1, and returns vehicle 1 at predetermined location SL1. The on / off states of vehicle 1 in this case are shown in FIG. 6(A).

[0068] 6(A) shows the on state and off state of vehicle 1 as the state of vehicle 1. That is, vehicle 1 is in the off state before user U1 rents vehicle 1 at predetermined location SL1, between arrival at shopping mall SM1 and departure, between arrival at amusement park PL1 and departure, and after user U1 returns vehicle 1 at predetermined location SL1. Furthermore, vehicle 1 is in the on state while vehicle 1 is traveling along routes BR1 to BR3.

[0069] FIG. 6(B) shows the session state of the vehicle 1 managed by the management server 70. As described above, the session shown in this embodiment refers to the communication period from the start to the end of communication between the information processing device 100 and the management server 70 during the period from when the user U1 who rented the vehicle 1 returns the vehicle 1. In other words, the session is invalid before the user U1 rents the vehicle 1 at the predetermined location SL1 and after the user U1 returns the vehicle 1 at the predetermined location SL1. Furthermore, the session is valid from when the user U1 rents the vehicle 1 at the predetermined location SL1 until when the user U1 returns the vehicle 1 at the predetermined location SL1. The start and end timings of communication between the information processing device 100 and the management server 70 will be described in detail with reference to FIGS. 12 to 14, etc.

[0070] 6(C) shows the management status on the management server 70 side of the login state and logout state of the information processing device 100. Here, in this embodiment, an example is shown in which if a session between the information processing device 100 and the management server 70 is valid, the management server 70 side determines that the vehicle 1 is in a logged-in state, and if the session is invalid, the management server 70 side determines that the vehicle 1 is in a logged-out state.

[0071] 6(D) shows the management status on the vehicle 1 side of the login state and logout state of the information processing device 100. Here, in this embodiment, an example is shown in which, when a session between the information processing device 100 and the management server 70 is valid, the vehicle 1 side determines that the information processing device 100 is in a logged-in state, and when the session is invalid, the vehicle 1 side determines that the information processing device 100 is in a logged-out state. However, when the vehicle 1 is in an off state, the power supply of the information processing device 100 is also in an off state, and therefore the information processing device 100 is determined to be in an off state.

[0072] Here, the token cache file is a temporary storage file for a session token, which is a label for a session between the information processing device 100 and the management server 70. In other words, the token cache file is continuation information used to maintain the login state of the information processing device 100 when a session between the information processing device 100 and the management server 70 is valid. The token cache file is stored in the storage unit 150, which can store data even when the power of the information processing device 100 is turned off. The timing for saving the token cache file will be described in detail with reference to Figs. 12 to 14, etc.

[0073] [Administration server DB example] FIG. 7 is a simplified diagram showing an example of the session information DB 200 and the content management DB 210 in the storage unit 73 of the management server 70. As shown in FIG.

[0074] 7(A) shows a session information DB 200 for managing sessions between the information processing device of each vehicle and the management server 70 for a plurality of vehicles. The session information DB 200 stores a vehicle ID 201, a session 202, a session token 203, a one-time password 204, and a user ID 205 in association with each other. Note that FIG. 7(A) shows a simplified version of the information stored in the vehicle ID 201, the session token 203, the one-time password 204, and the user ID 205.

[0075] The vehicle ID 201 is identification information for identifying a vehicle that carries an information processing device that can start a session with the management server 70. The session 202 is information indicating whether a session between the information processing device of each vehicle and the management server 70 is valid or invalid for multiple vehicles.

[0076] The session token 203 is information indicating the session token, which is a label for a session between the information processing device of each vehicle and the management server 70. The one-time password 204 is a temporary password used when starting a session between the information processing device of each vehicle and the management server 70, and is composed of letters, numbers, symbols, or a combination of these. The one-time password 204 is deleted after a predetermined time has elapsed.

[0077] The user ID 205 is identification information for identifying a user who uses each vehicle. The user ID can be an ID of a web service, such as an SNS (Social Networking Service), that allows registered users to converse with each other and exchange various content. This ID can be, for example, a telephone number, an email address, or a web service ID. If multiple electronic devices are used in the vehicle 1, multiple user IDs for each electronic device can be stored in the user ID 205.

[0078] 7(B) shows a content management DB 210 that manages various contents related to a user who has started a session between an information processing device and the management server 70. The content management DB stores a vehicle ID 211 and content 212 in association with each other. The vehicle ID 211 corresponds to the user ID 205 shown in FIG. 7(A).

[0079] The content 212 is various types of content transmitted to the management server 70 using a management application by a user who has started a session between the information processing device and the management server 70. In this embodiment, an example of image content is shown as an example of content managed by the management server 70. Also, Fig. 7(B) shows simplified images of the images shown in the upper left and upper right of Fig. 8 as an example of content stored in the content 212.

[0080] For example, a user U1 whose session between the information processing device 100 and the management server 70 has ended can still obtain various contents from the content management DB 210 using the electronic device 80 based on the user ID even after the management application has logged out.

[0081] [Example of exterior and interior vehicle images] Fig. 8 is a diagram showing an example of display of an exterior image and an interior image of a vehicle displayed on the display devices 30 and 40, and an example of an image displayed on the display unit 81 of the electronic device 80. Specifically, Fig. 8 shows an example of image transition when switching the display mode of the image displayed on the display devices 30 and 40, and an example of an image displayed on the display unit 81 of the electronic device 80 after pressing the capture button. Fig. 8 also shows an example in which a vehicle image 306 representing a virtual vehicle and character images 305 and 321 representing characters that can ride in the virtual vehicle are displayed as virtual objects. Note that the character images 305 and 321 are the same character in different display modes.

[0082] The upper left of Fig. 8 shows an exterior display mode screen 300 that is displayed when the exterior display mode is set. The exterior display mode screen 300 displays a captured image generated by the imaging device 20, i.e., an image including a subject ahead of the vehicle 1. Fig. 8 shows a captured image including multiple vehicles traveling ahead of the vehicle 1, oncoming vehicles, etc. In this case, a composite image of a character riding in a virtual vehicle can be superimposed on the lower left of the captured image as a vehicle image 306 and a character image 305. In addition, on the exterior display mode screen 300, a mode switching area 301 and a shutter operation area 304 are superimposed on the captured image generated by the imaging device 20.

[0083] The upper right corner of Fig. 8 shows an interior display mode screen 320 that is displayed when the interior display mode is set. The interior display mode screen 320 displays a captured image generated by the imaging device 10, i.e., an image including a subject inside the vehicle 1. Fig. 8 shows a captured image including the driver in the driver's seat of the vehicle 1, passengers in the back seats, etc. In this case, a character image 321 can be superimposed on the driver's face. Furthermore, on the interior display mode screen 320, a mode switching area 301 and a shutter operation area 304 are superimposed on the captured image generated by the imaging device 10.

[0084] The mode switching area 301 is an area used when performing a switching operation to switch the display mode of an image displayed on the display devices 30 and 40. Specifically, the mode switching area 301 displays an exterior display mode switching button 302 and an interior display mode switching button 303.

[0085] For example, when the exterior display mode screen 300 is displayed, the interior display mode is set when the passenger presses the interior display mode switching button 303. In this case, an interior display mode switching screen (not shown) for notifying the user that the display mode will be switched to the interior display mode is temporarily displayed, and then an interior display mode screen 320 including an image in which a character image 321 is superimposed on a captured image generated by the imaging device 10 is displayed.

[0086] Furthermore, when the inside-vehicle display mode screen 320 is displayed, if the outside-vehicle display mode switching button 302 is pressed by the occupant, the outside-vehicle display mode is set. In this case, after an outside-vehicle display mode switching screen (not shown) for notifying the user that the display mode will be switched to the outside-vehicle display mode is temporarily displayed, the outside-vehicle display mode screen 300 is displayed, which includes an image in which a character image 305 and a vehicle image 306 are superimposed on a captured image generated by the imaging device 20.

[0087] The shutter operation area 304 is an area used when recording an image displayed on the display device 30, 40. Specifically, when the shutter operation area 304 is pressed by the occupant, the image displayed on the display device on which the pressing operation was performed is transmitted as image content to the management server 70. In this case, along with the image at the time of pressing, images captured within a predetermined time before and after the pressing may be transmitted to the management server 70 as still image content or video content. Furthermore, together with the still image, sound captured by a sound capture unit within the predetermined time may be transmitted as text information associated with the image. Furthermore, sound information may be transmitted associated with the video.

[0088] When the content management unit 78 of the management server 70 receives image content from the information processing device 100, it stores the received image content in content 212 of the content management DB 210 in the storage unit 73. Furthermore, the content management unit 78 transmits the image content stored in content 212 of the content management DB 210 to the electronic device 80 based on the user ID 211 of the content management DB 210. When the electronic device 80 receives image content from the management server 70, it displays the received image content on the display unit 81.

[0089] For example, when the shutter operation area 304 is pressed by a passenger while the exterior display mode screen 300 is displayed, image content corresponding to the exterior display mode screen 300 is transmitted to the electronic device 80. In this case, as shown in the lower left of FIG. 8, image content information 330 is displayed on the display unit 81 of the electronic device 80. Also, for example, when the shutter operation area 304 is pressed by a passenger while the interior display mode screen 320 is displayed, image content corresponding to the interior display mode screen 320 is transmitted to the electronic device 80. In this case, as shown in the lower right of FIG. 8, image content information 340 is displayed on the display unit 81 of the electronic device 80. Note that the character images 331 and 341 are the same characters as the character images 305 and 321, but in a modified display mode. The image content information 330 and 340 are displayed by a display process performed by a predetermined application corresponding to the user ID.

[0090] The display contents of the display devices 30 and 40 may be displayed in the same display mode, or may be displayed in different display modes.

[0091] [Example of image displayed when logged out] FIG. 9 shows an example of an image displayed on the display devices 30 and 40 and an image displayed on the display unit 81 of the electronic device 80 when logging out.

[0092] 9 shows a logout notification screen 360 that is displayed on the display devices 30 and 40 when the user logs out. The logout notification screen 360 is a screen for notifying the occupants of the vehicle 1 that they have logged out, and displays a character image 361 representing a character together with a message indicating that they have logged out. The character image 361 is the same character as the character images 305 and 321 shown in FIG. 8.

[0093] The right side of Fig. 9 shows logout notification information 370 that is displayed on the display unit 81 of the electronic device 80 when the user logs out. The logout notification information 370 is information for notifying the occupant carrying the electronic device 80 that the user has logged out, and displays a character image 371 representing a character together with messages 372 and 373 indicating that the user has logged out. Note that the character image 371 is the same character as the character images 305 and 321 shown in Fig. 8 and the character image 361 shown on the left side of Fig. 9. The logout notification information 370 is displayed by display processing using a predetermined application corresponding to the user ID.

[0094] [Example of judgment when the specified location is in an underground parking lot] FIG. 10 illustrates an example of a determination when the predetermined location SL1 is located in an underground parking lot. FIG. 10 illustrates an example in which the vehicle 1 returns to the predetermined location SL1 in the underground parking lot, as indicated by arrows AW11 and AW12. In this case, the radio wave reception strength of the location information acquisition unit 125 deteriorates near the entrance LL12 of the underground parking lot. For example, the position just before the entrance LL12 of the underground parking lot is the last position from which the location information acquisition unit 125 was able to effectively acquire location information. Thus, the last position from which the location information acquisition unit 125 was able to effectively acquire location information after the radio wave reception strength of the location information acquisition unit 125 deteriorates is the last recorded position LL11 of location information. The dotted line GB11 indicates the boundary between an area GW11 where the radio wave reception strength of the location information acquisition unit 125 is good and an area BW11 where the radio wave reception strength of the location information acquisition unit 125 is poor.

[0095] As shown in FIG. 10, assume that after the vehicle 1 returns to the basement parking lot at the predetermined location SL1, the off operation of the vehicle 1 is performed. Thus, when the off operation of the vehicle 1 is performed, based on the driving distance X11 of the vehicle 1 from the final recorded position LL11 of the position information to the predetermined location SL1 and the straight-line distance Y11 between the final recorded position LL11 of the position information and the predetermined location SL1, it is possible to determine whether to continue the login state of the vehicle 1. For example, when the following formula 1 is satisfied, it is determined that the login state of the vehicle 1 is continued, and when the following formula 1 is not satisfied, it is determined that the login state of the vehicle 1 is not continued. Y11≧X11+Second Threshold... Formula 1

[0096] Note that the straight-line distance Y11 can be calculated based on the latitude and longitude information corresponding to the final recorded position LL11 of the position information and the latitude and longitude information corresponding to the predetermined location SL1. Also, for the driving distance X11 of the vehicle 1, it can be calculated based on the difference value between the odometer value of the final recorded position LL11 of the position information and the odometer value of the predetermined location SL1.

[0097] In the example shown in FIG. 10, since the driving distance X11 of the vehicle 1 is longer than the straight-line distance Y11, Y11 < X11. That is, Y11 < X11 + Second Threshold, and the above-mentioned formula 1 is not satisfied. Therefore, since it is highly likely that the vehicle 1 has returned to the predetermined location SL1, it is determined not to continue the login state of the management application. Thus, when it is determined not to continue the login state of the management application, the token cache file stored in the storage unit 150 is discarded so as not to be used in the login process at the next startup. Thus, in this embodiment, when the vehicle 1 is returned or a new user starts using the vehicle 1, the session token is not stored in the vehicle 1.

[0098] In the above, an example of determining whether to continue the login state of the vehicle 1 using the straight-line distance Y11 between the final recording position LL11 of the position information and the predetermined location SL1 was shown. However, when the parking lot of the predetermined location SL1 is an underground parking lot, it is also assumed that after the vehicle 1 enters the underground, the position information of the vehicle 1 cannot be appropriately obtained. Therefore, when the parking lot of the predetermined location SL1 is an underground parking lot, the entrance PE11 of the underground parking lot of the predetermined location SL1 may be registered as the position of the predetermined location SL1, and the above-described determination may be made based on this entrance PE11 of the underground parking lot. That is, it may be determined whether to continue the login state of the vehicle 1 using the straight-line distance Y12 between the final recording position LL11 of the position information and the entrance PE11 of the underground parking lot. Also in this case, since the travel distance X11 of the vehicle 1 is longer than the straight-line distance Y12, Y12 < X11. That is, Y12 < X11 + the second threshold value, and the above-described formula 1 is not satisfied. For this reason, since there is a high possibility that the vehicle 1 has returned to the predetermined location SL1, it is determined not to continue the login state of the management application.

[0099] [Example of determination when the vehicle's stopping place exists in an underground parking lot] FIG. 11 is a diagram showing an example of determination when the parking lot of the shopping mall SM1, which is the stopping place of the vehicle 1, is an underground parking lot. In FIG. 11, as shown by the arrows AW21 and AW22, an example in which the vehicle 1 moves to the underground parking lot of the shopping mall SM1 is shown. In this case, similar to the example shown in FIG. 10, in the vicinity of the entrance of the underground parking lot, the reception radio wave state of the position information acquisition unit 125 deteriorates. Thus, the final position at which the reception radio wave state of the position information acquisition unit 125 deteriorates and the position information acquisition unit 125 can effectively acquire the position information is set as the final recording position LL21 of the position information. Note that the curve indicated by the dotted line GB21 means the boundary between the region GW21 where the reception radio wave intensity of the position information acquisition unit 125 is good and the region BW21 where the reception radio wave intensity of the position information acquisition unit 125 is poor.

[0100] Similarly in such a case, it can be determined whether or not to continue the logged-in state of vehicle 1 based on the distance X21 traveled by vehicle 1 from last location information recording position LL21 to the underground parking lot of shopping mall SM1 and the straight-line distance Y21 between last location information recording position LL21 and predetermined location SL1. For example, if the following formula 2 is satisfied, it is determined that the logged-in state of vehicle 1 should be continued, and if the following formula 2 is not satisfied, it is determined that the logged-in state of vehicle 1 should not be continued. Y21≧X21+2nd threshold value ...Equation 2

[0101] In the example shown in FIG. 11, it is assumed that the straight-line distance Y21 is greater than the mileage distance X21. For example, it is assumed that the distance between the location of vehicle 1 and predetermined location SL1 is 10 km or more, whereas the distance from the entrance to the underground parking lot of shopping mall SM1 to the underground parking lot is approximately 100 m. In this case, it is assumed that vehicle 1 will clearly not reach predetermined location SL1, and therefore it is determined that the login state of the management app should be continued. In other words, when the straight-line distance Y21 is greater than the mileage distance X21, the above-described formula 1 is satisfied, and therefore it is determined that the login state of the management app should be continued. In this way, when it is determined that the login state of the management app should be continued, the token cache file is saved in storage unit 150 and is used for login processing the next time the app is started.

[0102] In this way, even when the vehicle 1 is in an underground parking lot and valid location information cannot be acquired by the location information acquisition unit 125, the location information of the last location information recording positions LL11 and LL21 and the odometry value can be used to appropriately determine whether to log in or log out. Furthermore, when the vehicle 1 is in an underground parking lot, it is expected that the communication environment between the information processing device 100 and the management server 70 will also deteriorate. Even in an environment where the communication environment has deteriorated and appropriate communication between the information processing device 100 and the management server 70 is not possible, if the above-described formulas 1 and 2 are satisfied, the login process can be performed using the token cache file stored in the storage unit 150, and the logged-in state can be maintained.

[0103] [Example of communication processing between devices] 12 to 14 are sequence charts showing an example of communication processing performed between the information processing device 100, the management server 70, and the electronic device 80. Figs. 12 to 14 show an example in which the vehicle 1 moves along the routes BR1 to BR3 shown in Fig. 5. The vertical axis shown at the right end of each of Figs. 12 to 14 indicates the position where the vehicle 1 is located. This communication processing example will be explained with appropriate reference to Figs. 1 to 11.

[0104] In addition, in this embodiment, an example is shown in which the controller 140 receives an IGN signal (on / off signal) of the vehicle 1 and an odometry value signal via the CAN. In addition, in this embodiment, if an abnormality occurs in at least one of the IGN signal and the odometry value signal of the vehicle 1, the management app transitions to a logout state. Note that if an abnormality occurs in the IGN signal of the vehicle 1, for example, it is assumed that the IGN signal of the vehicle 1 cannot be received via the CAN. In addition, if an abnormality occurs in the odometry value signal, for example, it is assumed that the odometry value signal cannot be received via the CAN.

[0105] For example, if an odometry signal cannot be received even after a predetermined time, such as an odometry signal disruption diagnosis time, has elapsed since the vehicle 1 was turned on, the controller 140 can determine that the mileage cannot be acquired and transition to the logout state. However, the controller 140 may determine that the mileage cannot be acquired and transition to the logout state on the condition that a waiting time longer than the odometry signal disruption diagnosis time, such as a first odometry value reception waiting time, has elapsed. The first odometry value reception waiting time is, for example, a time for determining whether to log in or log out of the management app using the odometry value when an odometry signal has been received at least once after the vehicle 1 was turned on, and is set to a time longer than the odometry signal disruption diagnosis time.

[0106] Furthermore, this embodiment shows an example in which only normal location information is adopted from among the location information acquired by the location information acquisition unit 125, and abnormal location information is not adopted. That is, only location information with reliable accuracy is adopted from among the location information acquired by the location information acquisition unit 125. Note that a known abnormality determination method can be used to determine whether the location information acquired by the location information acquisition unit 125 is abnormal. For example, if the location information acquisition unit 125 is a GPS device, an abnormality can be determined by an abnormality determination based on a checksum included in the GPS data, an invalidity determination based on the GPS data, an accuracy determination based on the GPS data, or the like.

[0107] Furthermore, in this embodiment, while the management application is running, the controller 140 acquires valid position information acquired by the position information acquisition unit 125 in real time, and also acquires the odometry value at the time of acquisition of the valid position information. Then, the controller 140 associates the valid position information with the acquisition time and the odometry value at the acquisition time, sequentially updates the information, and stores it in the session information storage unit 145. In this way, the latest valid position information, the acquisition time, and the odometry value at the acquisition time are stored in the controller 140.

[0108] As shown in Figure 6(A), before user U1 rents vehicle 1, vehicle 1 is parked in a predetermined location SL1 and is in an off state. Also, in this state, as shown in Figures 6(B) to 6(D), the session of vehicle 1 with management server 70 is invalid, and vehicle 1 is in a logged-out state on both management server 70 and vehicle 1. Also, the token cache file storage state in vehicle 1 is in an empty state.

[0109] [Login process example (step S400)] First, in step S401, user U1 rents vehicle 1 at a predetermined location SL1 and uses the start switch to turn on vehicle 1. In step S402, the power supply to information processing device 100 is turned on in conjunction with turning on vehicle 1. That is, activation / stop determination unit 141 detects the activation of vehicle 1 based on information from vehicle power supply system 110, and outputs the activation / stop information to login continuation determination unit 142.

[0110] In step S403, the login continuation determination unit 142 sets the status of the management application. In this status setting process, a system status and a last status are set. In this embodiment, an example is shown in which these statuses are set to one of "Finished at a predetermined location," "Finished somewhere," and "Driving."

[0111] The system status is set to "driving" when the vehicle 1 is turned on. In addition, in the termination process of the management app (steps S527 and S532 shown in FIG. 16), one of "ended at a predetermined location," "ended somewhere," and "driving" is set based on the mileage of the vehicle 1, the stability of the location information acquisition unit 125, the last recorded location of the location information, etc. The system status is stored in the storage unit 150.

[0112] The last status refers to the latest system status stored in the storage unit 150, i.e., the system status at the time of the previous termination process of the management app. That is, when the vehicle 1 is turned on, the system status at the time of the previous termination process of the management app stored in the storage unit 150 is read, and the read system status is set as the last status. The last status is stored in the session information storage unit 145.

[0113] Furthermore, after the system status read from the storage unit 150 is set as the last status, the login continuation determination unit 142 sets the system status to "driving." That is, when the vehicle 1 is turned on, the system status is set to "driving." In other words, when the vehicle 1 is in a state other than the state in which the management app is being terminated, the system status is set to "driving."

[0114] In this way, after the information processing device 100 is powered on, the login continuation determination unit 142 executes a setting process to set the system status and the last status based on the system status stored in the storage unit 150. In this example, the previous management app stop process is performed after the vehicle 1 returns to the predetermined location SL1. Therefore, the storage unit 150 stores "Ended at the predetermined location" as the system status, and therefore stores "Ended at the predetermined location" as the last status.

[0115] In step S404, the login continuation determination unit 142 acquires the odometry value (saved value) stored in the storage unit 150 and the current odometry value (present value). The odometry value stored in the storage unit 150 is the odometry value saved after the previous off operation of the vehicle 1. In other words, it is the odometry value saved at the time of the previous stop processing of the management app. For example, in step S442 shown in FIG. 13, step S482 shown in FIG. 14, and step S520 shown in FIG. 16, the odometry value is saved at the time of the stop processing of the management app.

[0116] In step S405, the login continuation determination unit 142 executes a comparison process to compare the two odometry values ​​acquired in step S502, and determines whether the difference between the two odometry values ​​is equal to or greater than the first threshold value. That is, it determines whether the current value - the saved value is equal to or greater than the first threshold value. In this example, the vehicle 1 has not moved after the previous management app stop process. That is, it is assumed that the current value - the saved value is less than the first threshold value.

[0117] In step S406, the login continuation determination unit 142 determines whether the last status is "end somewhere." In this example, as described above, "end at a predetermined location" is set as the last status, so it is determined that the last status is not "end somewhere." If it is determined that the last status is not "end somewhere," a session start process is executed to start a new session.

[0118] In step S407, the login control unit 143 transmits a session start request to the management server 70 via the communication unit 160 as a request to start a session for the vehicle 1. This session start request includes a vehicle ID for identifying the vehicle 1.

[0119] In step S408, the management server 70 receives the session start request. Then, in step S409, the password issuing unit 75 of the management server 70 issues a session token corresponding to the session of vehicle 1 and a one-time password to be used when starting the session of vehicle 1. Next, in step S410, the password issuing unit 75 stores the issued session token and one-time password in the storage unit 73 in association with the vehicle ID included in the session start request transmitted from vehicle 1. For example, as shown in FIG. 7A, the session token 203 and the one-time password 204 are stored in the session information DB 200 of the storage unit 73 in association with the vehicle ID 201. Furthermore, the password issuing unit 75 transmits destination information for the electronic device 80 to access the management server 70 to the information processing device 100, together with the session token and one-time password, based on the vehicle ID of vehicle 1.

[0120] In step S411, the controller 140 receives the destination information, the session token, and the one-time password. Then, in step S412, the login control unit 143 stores the received destination information, the session token, and the one-time password as variables in the session information storage unit 145. Note that each piece of information stored as a variable is deleted when the information processing device 100 is powered off.

[0121] In step S413, the display control unit 144 displays the received destination information and one-time password on the display devices 30, 40. The destination information is, for example, a URL for accessing the management server 70. As the destination information, for example, image information from which the destination information can be obtained, such as a QR code (registered trademark), may be displayed. This allows the user U1 of the vehicle 1 to perform a login operation by viewing the destination information and one-time password displayed on the display devices 30, 40.

[0122] Specifically, in steps S414 and S415, the user U1 of the vehicle 1 operates the electronic device 80 using the destination information displayed on the display devices 30 and 40 to transmit a user ID capable of identifying the user U1 or the electronic device 80 to the management server 70. For example, if a QR code is used as image information from which the destination information can be acquired, the control unit of the electronic device 80 can acquire the destination information based on the QR code read by the imaging unit of the electronic device 80. The destination information includes the vehicle ID of the vehicle 1. Then, the control unit of the electronic device 80 associates the user ID of the user U1 with the vehicle ID based on the destination information and transmits them to the management server 70. The user ID is, for example, identification information for identifying the user U1, device identification information for identifying the electronic device 80, an email address, a telephone number, or other identification information used by the management server 70 to transmit various information to the electronic device 80. For example, image content can be transmitted using a specific application that enables registered users to exchange messages, audio, videos, and the like. In this case, by installing the specific application on the electronic device 80 and storing the user ID of the specific application in the user ID 205 of the session information DB 200 of the management server 70, it becomes possible to send image content to the electronic device 80.

[0123] In step S416, when the management server 70 receives the user ID and vehicle ID, the password recognition unit 76 associates the received user ID and vehicle ID and stores them in the storage unit 73. For example, as shown in FIG. 7(A), the user ID 205 is stored in the session information DB 200 in association with the vehicle ID 201. This makes it possible to link the session of the vehicle 1 with the user ID of the user U1 who uses the vehicle 1. Note that the user ID is stored here temporarily until password authentication is successful.

[0124] In step S417, the user U1 of the vehicle 1 performs a transmission operation to input and transmit the one-time password displayed on the display devices 30, 40 into the electronic device 80. Then, in step S418, the control unit of the electronic device 80 associates the one-time password input in step S417 with the user ID and transmits it to the management server 70. For example, the one-time password can be input using a user interface such as a touch panel.

[0125] In steps S419 and S420, when the controller 140 receives the one-time password, the password recognition unit 76 executes password recognition processing based on the received one-time password. Specifically, the password recognition unit 76 compares the received one-time password with the one-time password 204 stored in the session information DB 200 in association with the user ID transmitted in association with the one-time password, and determines whether the two match. If the two one-time passwords match, the password recognition unit 76 determines that password authentication has been successful. On the other hand, if the two one-time passwords do not match, the password recognition unit 76 determines that password authentication has failed. In this case, the password recognition unit 76 transmits instruction information or the like to the electronic device 80 to instruct the electronic device 80 to re-enter the one-time password, and notifies the user U1 that the correct one-time password has been transmitted.

[0126] In step S421, the password recognition unit 76 associates the user ID of the user U1 who sent the one-time password that was successfully authenticated, the vehicle ID of the vehicle 1, and the session token stored in association with this vehicle ID, and stores them in the storage unit 73. For example, as shown in FIG. 7(A), the vehicle ID 201, the session token 203, and the user ID 205 are stored in association with each other in the session information DB 200. This makes it possible to link the session of the vehicle 1 with the user ID of the user U1 who uses the vehicle 1. Note that the one-time password 204 that was stored in association with the session token 203 is deleted. Furthermore, the user ID and vehicle ID temporarily stored in step S416 are officially stored in association with the session of the vehicle 1. This completes the login to the information processing device 100 of the vehicle 1.

[0127] In step S422, the login / logout state management unit 77 transmits a login completion notification to the information processing device 100 to notify that the login to the information processing device 100 of the vehicle 1 has been completed.

[0128] In step S423, the login control unit 143 receives the login completion notification transmitted from the management server 70. Receipt of this login completion notification completes the login operation in the information processing device 100. Then, the information processing device 100 transitions to a main scene. For example, as shown in the upper left or upper right of FIG. 8, the display mode transitions to displaying an exterior display mode screen 300 that displays an exterior image of the vehicle 1, or an interior display mode screen 320 that displays an interior image of the vehicle 1.

[0129] [Example of display control processing and content management processing (step S430)] After the information processing device 100 transitions to the main scene, display control processing and content management processing are executed. Specifically, in step S431, the display control unit 144 causes the display devices 30 and 40 to display the captured image generated by the imaging device 10 or the imaging device 20. For example, as shown in Fig. 8, it is possible to switch between displaying an exterior display mode screen 300 including the captured image generated by the imaging device 20 and displaying an interior display mode screen 320 including the captured image generated by the imaging device 10 based on a user operation. Then, when the capture button is pressed while the exterior display mode screen 300 or the interior display mode screen 320 is displayed, the processing of steps S432 to S436 is executed.

[0130] Specifically, in step S432, the user U1 presses the shutter operation area 304 on the exterior display mode screen 300 or the interior display mode screen 320. When the pressing operation is performed, in step S433, the photography control unit 146 temporarily stores, as image content, the image that was displayed on the display device on which the pressing operation was performed, in the storage unit 150. The photography control unit 146 also transmits the image content and the session token (or the vehicle ID of the vehicle 1) stored in the session information storage unit 145 to the management server 70 via the communication unit 160. The image content temporarily stored in the storage unit 150 is deleted at a predetermined timing. This predetermined timing is, for example, the timing when transmission to the management server 70 is completed or the timing after a predetermined time has elapsed.

[0131] In step S434, when the controller 72 receives the image content and the vehicle ID from the information processing device 100, the content management unit 78 of the controller 72 refers to the session information DB 200 and extracts the user ID associated with the received session token (or the vehicle ID of the vehicle 1). Then, the content management unit 78 stores the received image content in the content 212 of the content management DB 210 in association with the extracted user ID.

[0132] In step S435, the content management unit 78 transmits the image content received in step S434 to the electronic device 80 based on the user ID extracted in step S434. In step S436, upon receiving the image content from the management server 70, the control unit of the electronic device 80 displays the image content on the display unit 81. For example, the image content is displayed on the display unit 81 as shown in the lower left or lower right of FIG.

[0133] [Example of login continuation processing (step S440)] The above-described display control process and content management process (step S430) are executed until the vehicle 1 is turned off. Furthermore, as shown in Fig. 13, when the vehicle 1 is turned off, the login continuation process is executed.

[0134] Specifically, in step S441, when the user U1 performs an operation to turn off the vehicle 1, the activation / stop determination unit 141 detects that the operation to turn off the vehicle 1 has been performed.

[0135] In step S442, the login continuation determination unit 142 stores the odometry values ​​of the vehicle 1 in the storage unit 150. The odometry values ​​stored in the storage unit 150 are used in the determination process after the vehicle 1 is turned on, as shown in steps S404 and S405. If a token cache file is not stored in the storage unit 150, the login continuation determination unit 142 stores in the storage unit 150 a token cache file corresponding to the session token stored in the session information holding unit 145 in step S412.

[0136] In step S444, the login continuation determination unit 142 calculates the straight-line distance Y between the position corresponding to the latest position information that has been validly acquired by the position information acquisition unit 125 (last recorded position of position information) and the predetermined location SL1, and also calculates the travel distance X of the vehicle 1 from the last recorded position of position information to the predetermined location SL1. Note that the calculation methods for the straight-line distance Y and the travel distance X are the same as the calculation methods shown in FIGS. 10 and 11. Then, the login continuation determination unit 142 determines whether the calculated straight-line distance Y and the travel distance X satisfy the following formula 3. Note that the second threshold is the same as the above-mentioned formulas 1 and 2. If formula 3 is satisfied, a process for continuing the logged-in state is executed. On the other hand, if formula 3 is not satisfied, a process for transitioning to a logout state is executed. The example shown in FIG. 13 illustrates a case where formula 3 is satisfied and the logged-in state is continued. Y≧X+second threshold value …Equation 3

[0137] In step S445, the login continuation determination unit 142 sets the status of the management app. In the example shown in FIG. 13, in order to satisfy Expression 3, a termination process is executed to set the system status to "End somewhere." Then, the login continuation determination unit 142 associates the system status at the time of the termination process, the odometry value at the time of the termination process, and the session token (token cache file) and stores them in the storage unit 150. Then, each piece of information stored in the storage unit 150 is used the next time the management app is started.

[0138] In step S446, the controller 140 executes a shutdown process to shut down the management application. Here, the shutdown is a process to stop the management application that is running. Then, the information processing device 100 is powered on.

[0139] Furthermore, the information processing device 100 waits in a power-off state until the vehicle 1 is turned on. Then, when the user U1 returns to the vehicle 1 and the vehicle 1 is turned on, the information processing device 100 is powered off in response to the vehicle 1 being turned on.

[0140] Specifically, in step S447, the user U1 turns on the vehicle 1. In addition, in step S448, the information processing device 100 is powered on in conjunction with the vehicle 1 being powered on.

[0141] In step S449, the login continuation determination unit 142 sets the status of the management application. In this example, the system status was set to "Ended somewhere" in the previous termination process of the management application (step S445). Therefore, "Ended somewhere" is set as the last status.

[0142] In steps S450 and S451, the login continuation determination unit 142 executes an acquisition process and a comparison process of the odometry value. The acquisition process and the comparison process are the same as the acquisition process and the comparison process (steps S404 and S405) shown in Fig. 12, and therefore a description thereof will be omitted here. The example shown in Fig. 13 shows an example in which the vehicle 1 has not moved after the previous management app stop process. In other words, it is assumed that the current value - the saved value < the first threshold value.

[0143] In step S452, the login continuation determination unit 142 determines whether the last status is "end somewhere." In this example, as described above, "end somewhere" is set as the last status, so the last status is determined to be "end somewhere." If it is determined that the last status is "end somewhere," processing is executed to continue the login state.

[0144] In step S454, the login control unit 143 transmits a login status confirmation request to the management server 70. This login status confirmation request is transmitted together with the session token and the vehicle ID. The session token is generated based on the token cache file stored in the storage unit 150. In this manner, the login status confirmation request is transmitted to the management server 70, and the login status in the management server 70 is confirmed. This makes it possible to continue the login status after confirming whether the session token corresponding to the token cache file stored in the storage unit 150 is the same as the session token actually managed by the management server 70. This makes it possible to improve the accuracy of management related to the process of continuing the login status.

[0145] In steps S455 and S456, when the management server 70 receives the login status confirmation request, the login / logout status management unit 77 checks the login status of the information processing device 100. Specifically, the login / logout status management unit 77 refers to the session information DB 200 and checks the login status of the information processing device 100 based on the session token or vehicle ID included in the received login status confirmation request. For example, if session 202 in the session information DB 200 is "valid," it is determined that vehicle 1 is in a logged-in state. On the other hand, if session 202 in the session information DB 200 is "invalid," it is determined that vehicle 1 is in a logged-out state. In this example, the session of vehicle 1 is validated in step S422, and session 202 in the session information DB 200 is "valid," so it is determined that vehicle 1 is in a logged-in state.

[0146] In step S457, the login / logout status management unit 77 transmits the confirmation result of the login status of the information processing device 100 to the information processing device 100. In this example, the confirmation result of the login status of the information processing device 100 indicates that the session of the vehicle 1 is valid and that the vehicle 1 is in a logged-in state, and this is transmitted as the login status of the information processing device 100.

[0147] In step S458, the confirmation result of the login state of the information processing device 100 is received. By these login continuation processes, the login state of the information processing device 100 is continued even after the vehicle 1 is turned off and the power of the information processing device 100 is turned off. Then, the information processing device 100 transitions to the main scene and executes display control processing and content management processing (step S460). Note that before transitioning to the main scene, processing for notifying that the login state has been automatically continued may be executed. For example, notification information to that effect may be displayed on the display devices 30 and 40, or may be output as audio. Furthermore, notification information to that effect may be output, for example, by display or audio output, from the electronic device 80. Note that when the login state of the information processing device 100 is continued, the session token corresponding to the token cache file stored in the storage unit 150 is stored in the session information storage unit 145.

[0148] [Example of display control processing, content management processing, and login continuation processing (steps S460, S465, S470)] The display control process and the content management process (step S460) are executed until the vehicle 1 is next turned off. If the vehicle 1 is next turned off, the login continuation process (step S465) is executed. The display control process and the content management process (step S470) are executed until the vehicle 1 is next turned off.

[0149] The display control process and content management process (steps S460, S470) correspond to the above-mentioned display control process and content management process (step S430), and therefore their explanations are omitted here. Also, the login continuation process (step S465) corresponds to the above-mentioned login continuation process (step S440), and therefore their explanations are omitted here.

[0150] [Example of logout processing (step S480)] The display control process, content management process, and login continuation process described above are repeatedly executed until the vehicle 1 is turned off at the predetermined location SL1.

[0151] In step S481, if the user U1 has performed an operation to turn off the vehicle 1, the activation / stop determination unit 141 detects that the operation to turn off the vehicle 1 has been performed.

[0152] In step S482, the login continuation determination unit 142 stores the odometry value of the vehicle 1 in the storage unit 150. The process of step S482 corresponds to the process of step S442 shown in FIG.

[0153] In step S484, the login continuation determination unit 142 calculates the straight-line distance Y and the traveled distance X, and determines whether the calculated straight-line distance Y and the traveled distance X satisfy the above-described formula 3. The determination process in step S484 corresponds to the determination process in step S444 shown in FIG. 13. In the example shown in FIG. 14, the vehicle 1 is turned off after the vehicle 1 arrives at the predetermined location SL1, so the straight-line distance Y and the traveled distance X become 0 (or a value close to 0). Therefore, it is determined that formula 3 is not satisfied. In this case, a process of transitioning to a logout state is executed.

[0154] In step S485, the login control unit 143 transmits a session end request to the management server 70 via the communication unit 160 to end the session started for the information processing device 100. This session end request includes the session token (or the vehicle ID of the vehicle 1) stored in the session information storage unit 145. Then, in step S486, the login control unit 143 deletes the token cache file stored in the storage unit 150.

[0155] In steps S487 and S488, when the management server 70 receives the session end request, the login / logout state management unit 77 invalidates the session of vehicle 1 based on the received session end request, and ends the session of vehicle 1. Specifically, the login / logout state management unit 77 executes invalidation processing on each piece of information stored in the session information DB 200 in association with the session token (or the vehicle ID of vehicle 1) included in the received session end request. For example, the login / logout state management unit 77 sets session 202 to "invalid" and deletes each piece of information, including session token 203 and user ID 205. This completes logout of the information processing device 100 of vehicle 1.

[0156] In step S489, the login / logout status management unit 77 transmits a session end notification to the information processing device 100 to notify that the session of the information processing device 100 of the vehicle 1 has ended.

[0157] In steps S490 and S491, upon receiving the session end notification transmitted from the management server 70, the login control unit 143 causes the display device 30, 40 to display a display screen indicating logout. For example, as shown on the left side of FIG. 9, a logout notification screen 360 is displayed on the display device 30, 40.

[0158] In step S492, the login continuation determination unit 142 sets the status of the management application. In the example shown in Fig. 14, since Expression 3 is not satisfied, an example is shown in which termination processing is executed to set "End at predetermined location" as the system status. Then, the login continuation determination unit 142 associates the system status at the time of the termination processing with the odometry value at the time of the termination processing and stores them in the storage unit 150.

[0159] In step S493, the controller 140 executes a shutdown process to shut down the management application, and then the information processing device 100 is powered on.

[0160] In step S494, the login / logout status management unit 77 transmits a session end notification to the electronic device 80 to notify that the session of the information processing device 100 of the vehicle 1 has ended.

[0161] In steps S495 and S496, upon receiving the session end notification transmitted from the management server 70, the control unit of the electronic device 80 causes a display screen indicating logout to be displayed on the display unit 81. For example, as shown on the right side of FIG. 9, logout notification information 370 is displayed on the display unit 81.

[0162] [Example of operation of information processing device] 15 and 16 are flowcharts showing an example of login control processing in the information processing device 100. This login control processing is executed by the controller 140 based on a program stored in the storage unit 150. This login control processing is executed after the vehicle 1 is turned on in response to an on-operation of the vehicle 1, the information processing device 100 is powered on in response to the on-operation of the vehicle 1, the management app is started, and the start-up of the management app is completed. This login control processing will be described with appropriate reference to FIGS. 1 to 14.

[0163] In step S501, the login continuation determination unit 142 sets the status of the management application. In this status setting process, a system status and a last status are set. This status setting process is similar to the status setting process (step S403) shown in FIG. 12, and therefore a description thereof will be omitted here.

[0164] In step S502, the login continuation determination unit 142 acquires the odometry value (saved value) stored in the storage unit 150 and the current odometry value (current value).

[0165] In step S503, the login continuation determination unit 142 compares the two odometry values ​​acquired in step S502 and determines whether the difference between the two odometry values ​​is equal to or greater than a first threshold. That is, it determines whether the current value minus the saved value is equal to or greater than the first threshold. For example, if the vehicle 1 has moved by more than the first threshold after the previous management app shutdown process, the relationship between the vehicle 1 and the predetermined location SL1 may have changed since the vehicle 1 moved, and the vehicle 1 may have moved near the predetermined location SL1. This possibility reduces the reliability of the previous system status. In this way, if the vehicle 1 has moved by more than the first threshold after the previous management app shutdown process, the reliability of the previous system status is low, so the system is transitioned to a logout state. If the current value minus the saved value is equal to or greater than the first threshold, the process proceeds to step S504. On the other hand, if the current value minus the saved value is less than the first threshold, the process proceeds to step S505. In step S503, it may also be determined whether the information processing device 100 or the management app was normally terminated when the vehicle 1 was turned off immediately before the vehicle 1 was turned on. In this case, if the information processing device 100 or the management app has abnormally terminated the previous time the vehicle 1 was turned off, the process proceeds to step S504. On the other hand, if the information processing device 100 and the management app have normally terminated the previous time the vehicle 1 was turned off, the process proceeds to step S505.

[0166] In step S504, the login continuation determination unit 142 sets "driving" as the last status.

[0167] In step S505, the login continuation determination unit 142 determines whether the last status is "ended somewhere." If the last status is "ended somewhere," the process proceeds to step S506, and processing (steps S506 to S508) is executed to continue the login state. On the other hand, if the last status is not "ended somewhere," that is, if the last status is "ended at a predetermined location" or "driving," the process proceeds to step S509.

[0168] In step S506, the login control unit 143 transmits a login status confirmation request to the management server .

[0169] In step S507, the login control unit 143 determines whether or not a confirmation result of the login status of the information processing device 100 has been received. If a confirmation result of the login status of the information processing device 100 has been received from the management server 70, the process proceeds to step S508. On the other hand, if a confirmation result of the login status of the information processing device 100 has not been received from the management server 70, the process continues monitoring until a confirmation result of the login status of the information processing device 100 is received.

[0170] In step S508, the login control unit 143 determines, based on the received login status confirmation result, whether the information processing device 100 is currently logged in. If the information processing device 100 is currently logged in, the process proceeds to step S518. On the other hand, if the information processing device 100 is not currently logged in, the process proceeds to step S513.

[0171] In step S509, the login control unit 143 determines whether or not a token cache file is stored in the storage unit 150. If a token cache file is stored, the process proceeds to step S510, where processing (steps S510 to S512) is executed to transition from the logged-in state to the logged-out state. Then, processing (steps S513 to S517) is executed to start a new session for the vehicle 1. On the other hand, if a token cache file is not stored, the process proceeds to step S513, where processing (steps S513 to S517) is executed to start a new session for the vehicle 1.

[0172] When the vehicle 1 is turned off at the predetermined location SL1, the token cache file is basically deleted from the storage unit 150. However, even when the vehicle 1 is turned off at the predetermined location SL1, it is assumed that the token cache file may remain stored in the storage unit 150 for some reason, such as a forced termination of the information processing device 100 or the management app. Therefore, the determination process of step S509 is executed, and the invalid token cache file stored in the storage unit 150 is deleted.

[0173] In step S510, the login control unit 143 transmits a session end request to end the session started for the information processing device 100 to the management server 70 via the communication unit 160.

[0174] In step S511, the login control unit 143 deletes the token cache file stored in the storage unit 150.

[0175] In step S512, the login control unit 143 determines whether a session end notification has been received from the management server 70. If a session end notification has been received, the process proceeds to step S513. On the other hand, if a session end notification has not been received, monitoring continues until a session end notification is received. After receiving the session end notification, a display screen indicating logout may be displayed on the display device 30, 40 based on the session end notification received in step S512. For example, as shown on the left side of FIG. 9, a logout notification screen 360 may be displayed on the display device 30, 40.

[0176] In step S513, the login control unit 143 transmits a session start request to the management server 70 via the communication unit 160 as a request to start a session for the vehicle 1. This session start request includes a vehicle ID for identifying the vehicle 1.

[0177] In step S514, the login control unit 143 determines whether or not the destination information, session token, and one-time password have been received from the management server 70. If this information has been received from the management server 70, the process proceeds to step S515. On the other hand, if this information has not been received from the management server 70, the process continues monitoring until this information is received.

[0178] In step S515, the login control unit 143 stores the received destination information, session token, and one-time password as variables in the session information storage unit 145. Note that each piece of information stored in the session information storage unit 145 is deleted when the information processing device 100 is powered off.

[0179] In step S516, the display control unit 144 displays the destination information and one-time password received in step S514 on the display devices 30 and 40. This display allows the user U1 of the vehicle 1 to view the destination information and one-time password displayed on the display devices 30 and 40 and perform a login operation.

[0180] In step S517, the login control unit 143 determines whether or not a login completion notification has been received from the management server 70. If a login completion notification has been received, the process proceeds to step S518. On the other hand, if a login completion notification has not been received, the process returns to step S516. Note that if a login completion notification has not been received within a predetermined time, information may be displayed in step S516 to prompt the user to perform a login operation.

[0181] In step S518, the controller 140 executes a display control process and a content management process. The display control process and the content management process correspond to the display control process and the content management process (steps S430, S460, S470) shown in Figs. 12 to 14, and therefore a description thereof will be omitted here.

[0182] In step S519, the activation / stop determination unit 141 determines whether or not an operation to turn off the vehicle 1 has been performed. If an operation to turn off the vehicle 1 has been performed, the process proceeds to step S520. On the other hand, if an operation to turn off the vehicle 1 has not been performed, the process returns to step S518.

[0183] In step S520, the login continuation determination unit 142 stores the odometry value of the vehicle 1 in the storage unit 150. The odometry value stored in the storage unit 150 is used in the determination process after the vehicle 1 is turned on, as shown in steps S502 and S503.

[0184] In step S521, the login continuation determination unit 142 determines whether a predetermined time has elapsed since the vehicle 1 was turned off. If the predetermined time has elapsed, the process proceeds to step S526. On the other hand, if the predetermined time has not elapsed, the process proceeds to step S522.

[0185] In step S522, the activation / stop determination unit 141 determines whether or not an on-operation has been performed on the vehicle 1. If an on-operation has been performed on the vehicle 1, the process returns to step S518. On the other hand, if an on-operation has not been performed on the vehicle 1, the process returns to step S521.

[0186] For example, it is assumed that the user U1 of the vehicle 1 may mistakenly turn off the vehicle 1. In this case, it is assumed that the user U1 will turn on the vehicle 1 immediately after realizing the mistake. Therefore, in order to enable the user U1 of the vehicle 1 to quickly return to the original state even if the user U1 of the vehicle 1 mistakenly turns off the vehicle 1, a predetermined time is set as a waiting time after the vehicle 1 is turned off before turning on the vehicle 1. The predetermined time can be set appropriately based on experimental data, etc., and can be set to a value of, for example, several seconds to several tens of seconds.

[0187] In step S526, the login continuation determination unit 142 calculates the straight-line distance Y between the position corresponding to the latest position information that has been validly acquired by the position information acquisition unit 125 (last recorded position of position information) and the predetermined location SL1, and also calculates the travel distance X of the vehicle 1 from the last recorded position of position information to the predetermined location SL1. Note that the calculation methods for the straight-line distance Y and the travel distance X are the same as those shown in FIGS. 10 and 11. Then, the login continuation determination unit 142 determines whether the calculated straight-line distance Y and the travel distance X satisfy the above-mentioned formula 3. If formula 3 is satisfied, the process proceeds to step S527. On the other hand, if formula 3 is not satisfied, the process proceeds to step S528.

[0188] In step S527, the login continuation determination unit 142 executes a termination process to set the system status to "End somewhere." Then, the login continuation determination unit 142 associates the system status "End somewhere" at the time of the termination process, the odometry value at the time of the termination process, and the session token (token cache file) with each other and stores them in the storage unit 150.

[0189] The process for transitioning from the logged-in state to the logged-out state (steps S528 to S530) is similar to the process described above (steps S510 to S512), and therefore a description thereof will be omitted here.

[0190] In step S531, based on the session end notification received in step S530, the display control unit 144 causes the display device 30, 40 to display a display screen indicating logout. For example, as shown on the left side of FIG. 9, a logout notification screen 360 is displayed on the display device 30, 40.

[0191] In step S532, the login continuation determination unit 142 executes a termination process to set the system status to "Ended at a predetermined location." Then, the login continuation determination unit 142 associates the system status "Ended at a predetermined location" at the time of the termination process with the odometry value at the time of the termination process and stores them in the storage unit 150. Note that if the information processing device 100 or the management app is forcibly terminated, the login continuation determination unit 142 executes a termination process to set the system status to "Driving."

[0192] In step S533, the controller 140 executes a shutdown process to shut down the management application. Here, the shutdown is a process to stop the management application that is running. Then, in step S534, the information processing device 100 is powered on.

[0193] 15 and 16 show an example in which the management app enters a logged-in state after the vehicle 1 is turned on, and when the vehicle 1 is turned off, a login / logout determination is made and the vehicle 1 is turned off. However, if the user does not perform a login operation using the electronic device 80 after the vehicle 1 is turned on, it is assumed that the logged-out state of the management app is maintained and the vehicle 1 is turned off in that logged-out state. It is also assumed that the vehicle 1 is turned off while the user is performing a login operation using the electronic device 80 after the vehicle 1 is turned on. In these cases, after the vehicle 1 is turned on in step S519 and it is determined in step S521 that a predetermined time has elapsed, the session token is deleted, the system status is set to "driving", and termination processing is performed, and then steps S533 and S534 are executed.

[0194] [Example of management server operation] 17 is a flowchart showing an example of login control processing in the management server 70. This login control processing is executed by the controller 72 based on a program stored in the storage unit 73. This login control processing is constantly executed for each control period. This login control processing will be explained with reference to FIGS. 1 to 16 as needed.

[0195] In step S541, the password issuing unit 75 determines whether or not a session start request has been received from the information processing device 100. If a session start request has been received, the process proceeds to step S542. On the other hand, if a session start request has not been received, the process proceeds to step S550.

[0196] In step S542, the password issuing unit 75 issues a session token corresponding to the session of the vehicle 1 and a one-time password to be used when starting the session of the vehicle 1.

[0197] In step S543, the password issuing unit 75 stores the issued session token and one-time password in the storage unit 73 in association with the vehicle ID included in the session start request sent from the vehicle 1. In addition, the password issuing unit 75 sends destination information for the electronic device 80 to access the management server 70 to the information processing device 100, together with the session token and one-time password, based on the vehicle ID of the vehicle 1.

[0198] In step S544, the password recognition unit 76 determines whether or not the user ID and vehicle ID have been received from the information processing device 100. If the user ID and vehicle ID have been received, the process proceeds to step S545. On the other hand, if the user ID and vehicle ID have not been received, the process continues monitoring until the user ID and vehicle ID are received.

[0199] In step S545, the password recognition unit 76 associates the user ID and vehicle ID received in step S544 and stores them in the session information DB 200 of the storage unit 73.

[0200] In step S546, the password recognition unit 76 determines whether or not a one-time password has been received from the electronic device 80. If a one-time password has been received, the process proceeds to step S547. On the other hand, if a one-time password has not been received, the process continues monitoring until a one-time password is received.

[0201] In step S547, the password recognition unit 76 executes password recognition processing based on the one-time password received in step S546. This password recognition processing is similar to the password recognition processing (step S420) shown in Fig. 12, and therefore a detailed description thereof will be omitted here. If password authentication fails, the password recognition unit 76 transmits instruction information to the electronic device 80 to instruct the user U1 to re-enter the one-time password, and notifies the user U1 to send the correct one-time password.

[0202] In step S548, the password recognition unit 76 associates the user ID of user U1 who sent the one-time password that was successfully authenticated, the vehicle ID of vehicle 1, and the session token stored in association with this vehicle ID, and stores them in the session information DB200 of the memory unit 73.

[0203] In step S549, the login / logout state management unit 77 validates the session of the vehicle 1 and transmits a login completion notification to the information processing device 100 to notify that the login to the information processing device 100 has been completed.

[0204] In step S550, the login / logout status management unit 77 determines whether or not a login status confirmation request has been received from the information processing device 100. If a login status confirmation request has been received, the process proceeds to step S551. On the other hand, if a login status confirmation request has not been received, the process proceeds to step S553.

[0205] In step S551, based on the login status confirmation request received in step S550, login / logout status management unit 77 confirms the login status of information processing device 100. This login status confirmation process is similar to the login status confirmation process (step S456) shown in Fig. 13, and therefore detailed description thereof will be omitted here.

[0206] In step S552, the login / logout status management unit 77 transmits the confirmation result of the login status of the information processing device 100 to the information processing device 100.

[0207] In step S553, the content management unit 78 executes a content management process. This content management process corresponds to the content management process (steps S430, S460, S470) shown in Figures 12 to 14, and therefore a description thereof will be omitted here.

[0208] In step S554, the login / logout status management unit 77 determines whether or not a session end request has been received from the information processing device 100. If a session end request has been received, the process proceeds to step S555. On the other hand, if a session end request has not been received, the operation of the login control process ends.

[0209] In step S555, the login / logout state management unit 77 invalidates the session of the vehicle 1 based on the session termination request received in step S554, and terminates the session of the vehicle 1.

[0210] In step S556, the login / logout status management unit 77 transmits a session end notification to the information processing device 100 and the electronic device 80 to notify that the session of the information processing device 100 has ended.

[0211] [Modification of information processing device] Although an example has been described above in which the login status of the information processing device 100 is managed by the management server 70, each process by the management server 70 may be executed in the information processing device 100. Therefore, Fig. 18 shows an example in which the login control process by the management server 70 is executed in the information processing device 100.

[0212] [Configuration example of information processing device] Fig. 18 is a block diagram showing an example of the functional configuration of an information processing device 600 mounted on the vehicle 1. Note that the information processing device 600 is a partial modification of the information processing device 100 shown in Fig. 4, and therefore parts common to the information processing device 100 are assigned the same reference numerals and description thereof will be omitted.

[0213] The information processing device 600 includes a controller 640. The controller 640 includes a login control unit 641, a password issuing unit 642, a password recognition unit 643, a login / logout status management unit 644, and a content management unit 645. These units correspond to the units of the same name in the management server 70 shown in FIG. 3 and the information processing device 100 shown in FIG. 4. Therefore, detailed description thereof will be omitted here. The session information DB 200 and the content management DB 210 shown in FIG. 7 are stored in the storage unit 150. Some of the processes shown in FIGS. 12 to 16 may be omitted. For example, since there is no need to identify the vehicle 1, the vehicle ID can be omitted, and the process using the vehicle ID may be omitted. The processes related to the token cache file shown in FIGS. 12 to 16 (steps S486, S509, S515, S529, etc.) may be omitted. Furthermore, when the content management unit 645 transmits content to the electronic device 80, the content may be transmitted directly using short-distance wireless communication, or indirectly via a network.

[0214] In this way, the login state of the management application installed in the information processing device 600 can be controlled only by the processing in the information processing device 600 mounted on the vehicle 1.

[0215] In the above, an example has been shown in which the login control process for controlling the login state of the management app is executed by the information processing device 100, the management server 70, and the information processing device 600. However, all or part of each process may be executed by other devices. In this case, a login control system is configured by the devices that execute part of each process. For example, at least part of the login control process may be executed by the electronic device 80 used by the user U1 of the vehicle 1, or various information processing devices such as servers that can be connected via a predetermined network such as the Internet, or various electronic devices.

[0216] In addition, in this embodiment, an example is shown in which the session information DB 200 and the content management DB 210 (see FIG. 7) are managed by the management server 70 or the information processing device 600. However, all or part of each DB may be managed by one or more devices other than the management server 70 and the information processing device 600, and information on each DB managed by the other devices may be acquired and used in the login control process.

[0217] Furthermore, a part (or all) of the login control system of the vehicle 1 that can execute the functions of the information processing device 100, the management server 70, and the information processing device 600 may be provided by an application that can be provided via a predetermined network such as the Internet. This application is, for example, SaaS (Software as a Service).

[0218] In this embodiment, an example has been shown in which login control is executed based on whether it is estimated that there is a high possibility that vehicle 1 is present at one predetermined location SL1 or in the vicinity thereof. However, login control may also be executed based on whether it is estimated that there is a high possibility that vehicle 1 is present at multiple predetermined locations or in the vicinity thereof. For example, it is conceivable that a user who rents a shared car at predetermined location C will return the shared car at another predetermined location D. Therefore, multiple locations where the shared car can be returned can be registered, and login control can be executed based on the multiple registered locations.

[0219] Although the above describes an example in which the login state of the information processing device 100 is controlled based on the odometry value, last position information, etc., of the vehicle 1, the login state of the information processing device 100 may also be controlled taking into consideration a time factor. For example, a user renting the vehicle 1 registers a reservation time for use of the vehicle 1, including a start time and an end time for use, in an external device, such as the management server 70 or a shared car reservation server. The management server 70 is also capable of acquiring the reservation time for use. In this case, the login state of the information processing device 100 can be controlled based on the reservation time for use. For example, when the information processing device 100 is powered off, if the usage time of the vehicle 1 has exceeded the reservation time, the login state of the information processing device 100 can be canceled and transitioned to a logged-out state. However, if the vehicle 1 is not present at the predetermined location and the usage time of the vehicle 1 has not exceeded the reservation time, the login state of the information processing device 100 is allowed to continue.

[0220] Furthermore, when the information processing device 100 is powered on, if the vehicle 1 is present at a predetermined location and the vehicle 1 is being powered on for the first time within the reserved use time, it is assumed that the information processing device 100 is already in a logged-in state. In this case, the logged-in state of the information processing device 100 is cancelled and the information processing device 100 is transitioned to a logged-out state. However, after transitioning to the logged-out state, the above-described login process (step S400) is executed to place the information processing device 100 in a new logged-in state. This makes it possible to prevent the previous user who rented the vehicle 1 from remaining in the logged-in state even though the user renting the vehicle 1 has changed. In other words, the security of information related to users can be improved.

[0221] As described above, according to the present embodiment, when the power of the information processing device 100 is turned on or off, it is possible to determine whether to transition the information processing device 100 to a logged-out state or a logged-in state based on the location information, the mileage, and the like. As a result, the vehicle 1 can be always in a logged-out state when the vehicle 1 is returned, or at least when the next user starts using the vehicle 1. Furthermore, even if the vehicle 1 is repeatedly turned on and off between when the vehicle 1 is rented and when it is returned, the logged-in state that was started immediately after the vehicle 1 was rented can be automatically continued until the vehicle 1 is returned. In this way, by switching the logged-in state and the log-out state of the management app used in the vehicle 1 according to the driving state of the vehicle 1, such as the location information and the mileage, the logged-in state can be appropriately switched according to the driving state of the vehicle 1.

[0222] [Configuration and Effects of This Embodiment] The control method according to this embodiment is a control method for controlling an information processing device 100 installed in a vehicle 1, which is capable of executing a management app (an example of an application) associated with the vehicle 1. The management app has a login state in which authentication has been completed for an electronic device 80 (an example of a communication device) associated with a user U1 (an example of a passenger), and a logout state in which authentication has not been completed for the electronic device 80, and in this login state, it is possible to output information related to the user U1 to the electronic device 80. In addition, the vehicle 1 has a location information acquisition unit 125 that acquires location information indicating the current location of the vehicle 1. This control method includes a control process (steps S441 to S446, S481 to S493, S519 to S534) for executing control to log out the management app at the next startup or control to maintain the login state of the management app at the next startup based on a first distance from a first position identified by the latest position information of the vehicle 1 acquired by the position information acquisition unit 125 to a predetermined location SL1 and the distance traveled from the first position to the position of the vehicle 1 at the time the power is turned off when the information processing device 100 is powered off.

[0223] According to this configuration, it is possible to estimate whether the location where the power of the information processing device 100 was turned off when the vehicle 1 was turned off is likely to be the predetermined location SL1, and to appropriately determine whether to put the management app into a logged-in state or a logged-out state the next time the information processing device 100 is started up. As a result, by switching the logged-in state and the logged-out state of the management app used in the vehicle 1 depending on the traveling state of the vehicle 1, it is possible to appropriately switch the logged-in state depending on the use of the vehicle 1.

[0224] Furthermore, the control method according to the present embodiment includes a control process (steps S401 to S423, S447 to S458, and S501 to S517) for executing control to transition a management app (an example of an application) to a logout state or control to maintain a logged-in state of the management app, based on a first distance from a first position identified by the latest position information of the vehicle 1 acquired by the position information acquisition unit 125 to the predetermined location SL1 and a mileage distance from the first position to the position of the vehicle 1 at the time of power-on when the information processing device 100 is powered on. For example, the system status at the time of power-off immediately before powering on the information processing device 100 is set based on the first distance and the mileage. Then, at the time of power-on, the system status can be used to determine whether to put the management app into a logged-in state or a logged-out state.

[0225] According to this configuration, it is possible to estimate whether the location where the information processing device 100 is powered on when the vehicle 1 is turned on is likely to be the predetermined location SL1, and to appropriately determine whether to put the management app into a logged-in state or a logged-out state at this startup. As a result, by switching the logged-in state and the logged-out state of the management app used in the vehicle 1 depending on the traveling state of the vehicle 1, it is possible to appropriately switch the logged-in state depending on the use of the vehicle 1.

[0226] In addition, the control method of this embodiment includes a control process (steps S503, S504, S505, S510 to S512) that controls the management app to transition to a logout state when the information processing device 100 is powered on if the distance traveled from the position of the vehicle 1 at the time the management app (an example of an application) was last terminated to the position of the vehicle 1 at the time the power is turned on is greater than or equal to a first threshold value (an example of a first predetermined value).

[0227] According to this configuration, when the specified location SL1 is in an environment where location information cannot be properly acquired, even if the management app stops for some reason at a location away from the specified location SL1 and the vehicle 1 is then returned to the specified location SL1 in a state where the management app cannot be started, it is possible to properly determine whether to log out the management app.

[0228] Furthermore, in the control method according to the present embodiment, in the control process (steps S526, S527), if the first distance is equal to or greater than the sum of the traveled distance and the second threshold (an example of the second predetermined value) when the information processing device 100 is powered off, control is executed to continue the login state of the management app at the next startup. Furthermore, in the control process (steps S526, S527, S505), if the first distance is equal to or greater than the sum of the traveled distance and the second threshold (an example of the second predetermined value) when the information processing device 100 is powered on, control is executed to continue the login state of the management app. For example, a login / logout determination is executed using the above-described formula 3.

[0229] According to this configuration, when the information processing device 100 is powered on or off, it is possible to determine whether the management application continues to be logged in using an appropriate second threshold value.

[0230] In addition, in the control method according to the present embodiment, the second threshold value (an example of the second predetermined value) is set to a value equal to or greater than the first threshold value (an example of the first predetermined value).

[0231] According to this configuration, an appropriate threshold can be set for determining whether to log in or log out.

[0232] Furthermore, in the control method according to this embodiment, based on the position accuracy information of the position information acquisition unit 125 at the first position, the second threshold value (an example of a second predetermined value) is set to be smaller as the position accuracy of the position information acquisition unit 125 increases.

[0233] According to this configuration, an appropriate threshold value can be set according to the position accuracy of the position information acquisition unit 125.

[0234] In addition, in the control method according to this embodiment, if the mileage of the vehicle 1 cannot be obtained when the power of the information processing device 100 is turned on or off, the control process executes control to transition the management app to a logged-out state.

[0235] According to this configuration, even if the mileage of the vehicle 1 cannot be acquired and an appropriate login / logout determination cannot be made, the management application can be put into a logged-out state.

[0236] Furthermore, in the control method according to this embodiment, in the control process (steps S527, S529), when the information processing device 100 is powered off, if control is executed to maintain the login state of the management app at the next startup, a token cache file (an example of continuation information) relating to the continuation of the login state is stored in the memory unit 150 of the information processing device 100, and if control is executed to put the management app into a logged-out state at the next startup, the token cache file stored in the memory unit 150 of the information processing device 100 is deleted.

[0237] According to this configuration, when the information processing device 100 is powered off, the saved state of the token cache file related to the continuation of the logged-in state can be appropriately managed.

[0238] Furthermore, in the control method according to this embodiment, in the control process (steps S506, S507, S511), when the information processing device 100 is turned on, if control is executed to maintain the login state of the management app, the login state of the management app is maintained using a token cache file (an example of continuation information), and if control is executed to transition the management app to a logged-out state, the token cache file stored in the memory unit 150 of the information processing device 100 is deleted.

[0239] According to this configuration, when the information processing device 100 is powered on, the saved state of the token cache file related to the continuation of the logged-in state can be appropriately managed.

[0240] Furthermore, in the control method according to the present embodiment, when the information processing device 100 is powered off, if control is executed to maintain the login state of the management app at the next startup, the control process causes at least one of the information processing device 100 and the electronic device 80 (an example of a communication device) to execute a process corresponding to the continuation of the login state, and if control is executed to place the management app in a logged-out state at the next startup, the control process causes at least one of the information processing device 100 and the electronic device 80 to execute a process corresponding to a transition to a log-out state. For example, after the processes of steps S423 and S517 and before transitioning to the main scene, the control process can cause the display device 30, 40 or the electronic device 80 to execute a display process or a sound output process for notifying that the login state has been automatically maintained. Furthermore, for example, as shown in FIG. 9 , as a process corresponding to a transition to a log-out state, the control process can cause the display device 30, 40 or the electronic device 80 to display a predetermined image.

[0241] According to this configuration, it is possible to easily notify the occupant of the vehicle 1 that the management application is transitioning to a logged-in state or a logged-out state.

[0242] In addition, in the control method according to this embodiment, when the power of the information processing device 100 is turned on or off, if control is executed to transition the management app to a logged-out state, and if image content (an example of information) related to the occupant is stored in the information processing device 100, the image content is deleted.

[0243] This configuration prevents image content related to the previous user from being stored even though the user riding in vehicle 1 has changed, thereby increasing the security of information related to users.

[0244] The information processing device 100 is an in-vehicle device installed in the vehicle 1 and includes a location information acquisition unit 125 that acquires location information indicating the current location of the vehicle 1. The information processing device is capable of executing a management app (an example of an application) associated with the vehicle 1. The management app has a login state in which authentication has been completed for an electronic device 80 (an example of a communication device) associated with a user U1 (an example of a passenger), and a logout state in which authentication has not been completed for the electronic device 80. In the login state, information related to the user U1, such as image content, can be output to the electronic device 80. The information processing device 100 also includes a control unit (login continuation determination unit 142, login control unit 143, 641) that, when the information processing device 100 is powered off, performs control to log out the management app at the next startup or to maintain the login state of the management app at the next startup, based on a first distance from a first position identified by the latest location information of the vehicle 1 acquired by the location information acquisition unit 125 to a predetermined location SL1 and a traveling distance from the first position to the position of the vehicle 1 at the time of powering off.

[0245] According to this configuration, it is possible to estimate whether the location where the power of the information processing device 100 was turned off when the vehicle 1 was turned off is likely to be the predetermined location SL1, and to appropriately determine whether to put the management app into a logged-in state or a logged-out state the next time the information processing device 100 is started up. As a result, by switching the logged-in state and the logged-out state of the management app used in the vehicle 1 depending on the traveling state of the vehicle 1, it is possible to appropriately switch the logged-in state depending on the use of the vehicle 1.

[0246] In addition, when the information processing device 100 is powered on, the information processing device 100 is equipped with a control unit (login continuation determination unit 142, login control unit 143, 641) that executes control to transition the management app (an example of an application) to a logout state or control to continue the login state of the management app based on a first distance from a first position identified by the latest position information of the vehicle 1 acquired by the position information acquisition unit 125 to a predetermined location SL1 and the distance traveled from the first position to the position of the vehicle 1 when the power is turned on.

[0247] According to this configuration, it is possible to estimate whether the location where the information processing device 100 is powered on when the vehicle 1 is turned on is likely to be the predetermined location SL1, and to appropriately determine whether to put the management app into a logged-in state or a logged-out state at this startup. As a result, by switching the logged-in state and the logged-out state of the management app used in the vehicle 1 depending on the traveling state of the vehicle 1, it is possible to appropriately switch the logged-in state depending on the use of the vehicle 1.

[0248] In addition, the information processing device 100 is equipped with a control unit (login continuation determination unit 142, login control unit 143, 641) that controls the management app to transition to a logout state when the information processing device 100 is powered on if the distance traveled from the position of the vehicle 1 at the time the management app (an example of an application) was last terminated to the position of the vehicle 1 at the time the power is turned on is greater than or equal to a first threshold value (an example of a first predetermined value).

[0249] According to this configuration, when the specified location SL1 is in an environment where location information cannot be properly acquired, even if the management app stops for some reason at a location away from the specified location SL1 and the vehicle 1 is then returned to the specified location SL1 in a state where the management app cannot be started, it is possible to properly determine whether to log out the management app.

[0250] Each process described in this embodiment is executed based on a program that causes a computer to execute each processing procedure. Therefore, this embodiment can also be understood as an embodiment of a program that realizes the function of executing each process and a recording medium that stores the program. For example, an update process for adding a new function to an information processing device can store the program in the storage device of the information processing device. This makes it possible to cause the updated information processing device to execute each process described in this embodiment.

[0251] Although the embodiments of the present invention have been described above, the above embodiments merely illustrate some of the application examples of the present invention, and it is not intended that the technical scope of the present invention be limited to the specific configurations of the above embodiments. [Explanation of symbols]

[0252] 1 Vehicle, 10, 20 Imaging device, 30, 40 Display device, 70 Management server, 71 Communication unit, 72 Controller, 73 Memory unit, 75, 642 Password issuing unit, 76, 643 Password recognition unit, 77, 644 Login / logout status management unit, 78, 645 Content management unit, 80 Electronic device, 100, 600 Information processing device, 110 Vehicle power supply system, 120 Sensors, 130 UI unit, 140, 640 Controller, 141 Start / stop determination unit, 142 Login continuation determination unit, 143, 641 Login control unit, 144 Display control unit, 145 Session information storage unit, 146 Photography control unit, 150 Memory unit, 160 Communication unit, 170 Image acquisition unit, 200 Session information DB, 210 Content management DB

Claims

1. 1. A control method for controlling an information processing device installed in a vehicle, the information processing device being capable of executing an application associated with the vehicle, the method comprising: the application has a login state in which authentication has been completed for a communication device related to an occupant, and a logout state in which authentication has not been completed for the communication device, and in the login state, information related to the occupant can be output to the communication device; the vehicle includes a location information acquisition unit that acquires location information indicating a current location of the vehicle; and a control process for executing, when the power supply of the information processing device is turned off, control for putting the application into the logged-out state at the next startup or control for continuing the logged-in state of the application at the next startup, based on a first distance from a first position specified by the latest position information of the vehicle acquired by the position information acquisition unit to a predetermined location and a traveling distance from the first position to the position of the vehicle at the time of power-off. Control method.

2. 1. A control method for controlling an information processing device installed in a vehicle, the information processing device being capable of executing an application associated with the vehicle, the method comprising: the application has a login state in which authentication has been completed for a communication device related to an occupant, and a logout state in which authentication has not been completed for the communication device, and in the login state, information related to the occupant can be output to the communication device; the vehicle includes a location information acquisition unit that acquires location information indicating a current location of the vehicle; and a control process for executing, when the information processing device is powered on, control for transitioning the application to the logged-out state or control for continuing the logged-in state of the application based on a first distance from a first position identified by the latest position information of the vehicle acquired by the position information acquisition unit to a predetermined location and a traveling distance from the first position to the position of the vehicle at the time of powering on. Control method.

3. 1. A control method for controlling an information processing device installed in a vehicle, the information processing device being capable of executing an application associated with the vehicle, the method comprising: the application has a login state in which authentication has been completed for a communication device related to an occupant, and a logout state in which authentication has not been completed for the communication device, and in the login state, information related to the occupant can be output to the communication device; a control process for controlling the application to transition to the logout state when the power of the information processing device is turned on and a travel distance from the position of the vehicle at the time of the previous termination of the application to the position of the vehicle at the time of power on is equal to or greater than a first predetermined value; Control method.

4. 2. The control method according to claim 1, In the control process, when the power supply of the information processing device is turned off, if the first distance is equal to or greater than the sum of the traveled distance and a second predetermined value, control is executed to continue the login state of the application at the next startup. Control method.

5. 3. The control method according to claim 2, In the control process, when the information processing device is powered on, if the first distance is equal to or greater than the sum of the traveled distance and a second predetermined value, control is executed to continue the logged-in state of the application. Control method.

6. 6. The control method according to claim 5, In the control process, when the power supply of the information processing device is turned on, if a travel distance from a position of the vehicle at the time of the previous termination of the application to a position of the vehicle at the time of power-on is equal to or greater than a first predetermined value, control is executed to transition the application to the logout state. Control method.

7. 7. The control method according to claim 6, The second predetermined value is equal to or greater than the first predetermined value. Control method.

8. 8. A control method according to any one of claims 4 to 7, comprising: based on position accuracy information of the position information acquisition unit at the first position, the second predetermined value is set to be smaller as the position accuracy of the position information acquisition unit increases; Control method.

9. 9. A control method according to any one of claims 1 to 8, comprising: In the control process, when the power supply of the information processing device is turned on or off, if the mileage of the vehicle cannot be acquired, control is executed to transition the application to the logout state. Control method.

10. 10. A control method according to any one of claims 1 to 9, In the control process, when the power supply of the information processing device is turned off, if control is executed to continue the login state of the application at the next startup, continuation information regarding the continuation of the login state is stored in the information processing device, and if control is executed to put the application into the logout state at the next startup, the continuation information stored in the information processing device is deleted. Control method.

11. 11. The control method according to claim 10, In the control process, when powering on the information processing device, if control is executed to continue the login state of the application, the login state of the application is continued using the continuation information, and if control is executed to transition the application to the logout state, the continuation information stored in the information processing device is deleted. Control method.

12. 12. A control method according to any one of claims 1 to 11, comprising: In the control process, when the power supply of the information processing device is turned off, if control is executed to continue the login state of the application at the next startup, at least one of the information processing device and the communication device is caused to execute a process corresponding to the continuation of the login state, and if control is executed to put the application into the logout state at the next startup, at least one of the information processing device and the communication device is caused to execute a process corresponding to the transition to the logout state. Control method.

13. 13. A control method according to any one of claims 1 to 12, comprising: In the control process, when the power supply of the information processing device is turned on or off, if control is executed to transition the application to the logout state, if information related to the occupant is stored in the information processing device, the information is deleted. Control method.

14. An information processing device is an in-vehicle device installed in a vehicle, the information processing device including a location information acquisition unit that acquires location information indicating a current location of the vehicle, the information processing device being capable of executing an application associated with the vehicle, the application has a login state in which authentication has been completed for a communication device related to an occupant, and a logout state in which authentication has not been completed for the communication device, and in the login state, information related to the occupant can be output to the communication device; a control unit that, when the information processing device is powered off, executes control to place the application in the logged-out state at the next startup or control to continue the logged-in state of the application at the next startup, based on a first distance from a first position identified by the latest position information of the vehicle acquired by the position information acquisition unit to a predetermined location and a traveling distance from the first position to the position of the vehicle at the time of powering off; Information processing device.

15. An information processing device is an in-vehicle device installed in a vehicle, the information processing device including a location information acquisition unit that acquires location information indicating a current location of the vehicle, the information processing device being capable of executing an application associated with the vehicle, the application has a login state in which authentication has been completed for a communication device related to an occupant, and a logout state in which authentication has not been completed for the communication device, and in the login state, information related to the occupant can be output to the communication device; a control unit that, when the information processing device is powered on, executes control to transition the application to the logged-out state or control to continue the logged-in state of the application based on a first distance from a first position identified by the latest position information of the vehicle acquired by the position information acquisition unit to a predetermined location and a traveling distance from the first position to the position of the vehicle at the time of power-on; Information processing device.

16. An information processing device that is an in-vehicle device installed in a vehicle and is capable of executing an application associated with the vehicle, the application has a login state in which authentication has been completed for a communication device related to an occupant, and a logout state in which authentication has not been completed for the communication device, and in the login state, information related to the occupant can be output to the communication device; a control unit that controls the application to transition to the logout state when the information processing device is powered on and a travel distance from a position of the vehicle at the time the application was last terminated to a position of the vehicle at the time the power was turned on is equal to or greater than a first predetermined value; Information processing device.

Images