Vehicle information system and on-board device

Abstract

To provide a vehicle information system and an on-vehicle device that can enhance security.SOLUTION: A vehicle information system 1 includes an on-vehicle device 10, peripheral devices 20, 20a, and 20b that generate peripheral device data 21, 21a, and 21b, and a server 30. The on-vehicle device includes a recording unit 13 that records on-vehicle device data 13ac generated by the on-vehicle device, and a determination unit 12 that determines update status of the peripheral devices. The determination unit determines the update status of the peripheral device, sorts the updated peripheral device data 13aa, 13ab obtained from the peripheral devices determined to be updated to a latest version and the un-updated peripheral device data 13ba, 13bb. obtained from the peripheral devices determined not to be updated to the latest version and causes the recording unit to record.SELECTED DRAWING: Figure 1

Description

[Technical Field]

[0001] The present invention relates to a vehicle information system and an in-vehicle device. [Background technology]

[0002] Conventionally, there is a vehicle information system in which an information center and an in-vehicle device are connected via wireless communication or the like, and a program is downloaded from the information center to the in-vehicle device. Patent Document 1 discloses a method for restoring a program for an in-vehicle terminal, which can easily restore the program as an emergency measure when a problem occurs in the new version of the program in a communication system in which a program for an in-vehicle terminal is updated via communication from the information center. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] Japanese Patent Application Laid-Open No. 2000-207681 Summary of the Invention [Problem to be solved by the invention]

[0004] In a vehicle information system, a peripheral device such as a handheld numeric keypad may be connected to an on-board device such as a tachograph. In this case, peripheral device data generated by the peripheral device may be stored in the on-board device and then output to a server. In this case, if the peripheral device program is not the latest version, the peripheral device data generated by the peripheral device may compromise the security of the server. Furthermore, even if peripheral device data based on the latest program (updated peripheral device data) and peripheral device data based on an older program (unupdated peripheral device data) are output to the server in a mixed state, a typical server cannot separate the unupdated peripheral device data from the updated peripheral device data. Therefore, the unupdated peripheral device data may also be subject to analysis by the server, potentially compromising the security of the server. Therefore, there is a need to improve the security of vehicle information systems.

[0005] An object of the present invention is to provide a vehicle information system and an in-vehicle device that can enhance security. [Means for solving the problem]

[0006] The vehicle information system of the present invention includes an on-board device mounted on a vehicle, a peripheral device connectable to the on-board device and generating peripheral device data, and a server provided outside the vehicle. The on-board device has an acquisition unit that acquires version information of the peripheral device, a recording unit that records the on-board device data generated by the on-board device, and a determination unit that determines the update status of the peripheral device. The determination unit determines the update status of the peripheral device based on the version information, and as a result of the determination, determines peripheral device data acquired from a peripheral device that has been determined to have been updated to the latest version as updated peripheral device data, and determines peripheral device data acquired from a peripheral device that has been determined not to have been updated to the latest version as updated peripheral device data. The peripheral device data is classified as unupdated peripheral device data, and the on-board device data, updated peripheral device data, and unupdated peripheral device data are recorded in a recording unit, and the on-board device data, updated peripheral device data, and unupdated peripheral device data are output from the recording unit to a server in the classified state, and the server has an analysis unit that stores data used for data analysis and an unupdated data storage unit that stores data not used for data analysis, and the on-board device data and updated peripheral device data are output from the recording unit to the analysis unit of the server and stored therein, and the unupdated peripheral device data is output from the recording unit to the unupdated data storage unit and stored therein.

[0007] The in-vehicle device of the present invention comprises an acquisition unit that acquires version information of peripheral devices, a judgment unit that judges the update status of the peripheral devices, and a recording unit that records in-vehicle device data generated by the device and peripheral device data generated by the peripheral devices, wherein the judgment unit judges the update status of the peripheral devices based on the version information, and as a result of the judgment, treats peripheral device data acquired from peripheral devices that are judged to have been updated to the latest version as updated peripheral device data, and treats peripheral device data acquired from peripheral devices that are judged not to have been updated to the latest version as unupdated peripheral device data, and sorts the in-vehicle device data, updated peripheral device data, and unupdated peripheral device data and records them in the recording unit, and the in-vehicle device data, updated peripheral device data, and unupdated peripheral device data are output from the recording unit in a sorted state to a server provided outside the vehicle. [Effects of the Invention]

[0008] In the vehicle information system and in-vehicle device according to the present invention, the determination unit sorts the in-vehicle device data, updated peripheral device data, and unupdated peripheral device data, and records the sorted data in the recording unit. The in-vehicle device data, updated peripheral device data, and unupdated peripheral device data are then output from the recording unit to the server in the sorted state. The vehicle information system and in-vehicle device according to the present invention have the advantage of being able to enhance security. [Brief explanation of the drawings]

[0009] [Figure 1] FIG. 1 is a conceptual diagram showing a vehicle information system and an in-vehicle device according to an embodiment. [Figure 2] FIG. 2 is a flowchart showing the operation of the vehicle information system according to the embodiment. DETAILED DESCRIPTION OF THE INVENTION

[0010] A vehicle information system and an in-vehicle device according to an embodiment of the present invention will be described in detail below with reference to the drawings. Note that the present invention is not limited to the embodiment. Furthermore, the components in the following embodiments include those that can be easily imagined by a person skilled in the art or that are substantially the same.

[0011] [Embodiment] An embodiment will be described with reference to Fig. 1 and Fig. 2. Fig. 1 is a conceptual diagram showing a vehicle information system and an on-board device according to an embodiment. Fig. 2 is a flowchart showing the operation of the vehicle information system according to an embodiment. The vehicle information system 1 according to an embodiment is applied to, for example, a vehicle capable of automatic driving (semi-automatic driving, fully automatic driving). Furthermore, the vehicle to which the vehicle information system 1 is applied may be a manually driven vehicle, and may be any of so-called privately owned cars, rental cars, shared cars, buses, taxis, and ride-share cars.

[0012] 1, a vehicle information system 1 according to the embodiment includes an in-vehicle device 10, a first peripheral device 20a, a second peripheral device 20b, and a server 30. In the following description, unless otherwise specified, the first peripheral device 20a and the second peripheral device 20b will be collectively referred to as the peripheral device 20.

[0013] The in-vehicle device 10 of the embodiment is a device mounted on a vehicle, and is, for example, a tachograph or other tachograph or a drive recorder. The peripheral device 20 is a device that generates data that cannot be generated by the in-vehicle device 10. The peripheral device 20 is connected to the in-vehicle device 10 by wire or wirelessly. In the embodiment, the first peripheral device 20a is a handheld numeric keypad, and the second peripheral device 20b is an NFC reader.

[0014] Here, the handy numeric keypad is a terminal for remotely controlling a vehicle equipped with the in-vehicle device 10. For example, the handy numeric keypad is provided with a numeric keypad, a cross key, various buttons, etc. An occupant can issue commands to the vehicle by inputting operations on the handy numeric keypad. For example, the handy numeric keypad outputs the occupant's input operations to the in-vehicle device 10 as first peripheral device data 21a. The NFC (Near Field Communication) reader is a device that reads an NFC tag or an NFC card with an IC chip built in. For example, the NFC reader reads an NFC card carried by a vehicle occupant when the occupant gets in or out of the vehicle, thereby acquiring the occupant's entry and exit records as second peripheral device data 21b and outputting the data to the in-vehicle device 10.

[0015] The server 30 is an information processing device such as a computer, etc. The server 30 is provided outside the vehicle in which the in-vehicle device 10 is installed, and analyzes data received from the in-vehicle device 10.

[0016] The in-vehicle device 10 includes an acquisition unit 11, a determination unit 12, a recording unit 13, and a data transmission unit 14.

[0017] The acquisition unit 11 acquires version information of the in-vehicle device 10 and version information of the peripheral device 20. Specifically, the acquisition unit 11 acquires and records the latest version information of the program of the in-vehicle device 10 via wireless communication from a data center or the like located outside the vehicle. The acquisition unit 11 also acquires and records the latest version information of the program 22 of the peripheral device 20. The peripheral device 20 also transmits version information of the actual program 22 to the in-vehicle device 10 for each operation. The in-vehicle device 10 causes the acquisition unit 11 to record the version information of the actual program 22 together with the latest version information of the program 22 of the peripheral device 20 acquired by the acquisition unit 11 via wireless communication as version information of the peripheral device 20.

[0018] The determination unit 12 acquires peripheral device data 21 generated by the peripheral device 20 connected to the in-vehicle device 10. Then, based on the version information of the peripheral device 20 recorded in the acquisition unit 11, the determination unit 12 determines whether the program 22 of the peripheral device 20 connected to the in-vehicle device 10 is the latest version.

[0019] Specifically, the judgment unit 12 judges whether the program 22 of the peripheral device 20 connected to the in-vehicle device 10 is the latest version based on whether the latest version information of the program 22 of the peripheral device 20 recorded in the acquisition unit 11 and acquired by the acquisition unit 11 from a data center or the like matches the version information of the actual program 22 of the peripheral device 20 connected to the in-vehicle device 10.

[0020] Furthermore, the determination unit 12 compares the latest version information of the program of the in-vehicle device 10, which is recorded in the acquisition unit 11 and acquired by the acquisition unit 11 via wireless communication, with the version information of the actual program of the in-vehicle device 10, and if the version of the actual program of the in-vehicle device 10 is not the latest (not updated), the determination unit 12 causes the in-vehicle device 10 to acquire the latest program via wireless communication. By this operation, the latest program is always executed in the in-vehicle device 10.

[0021] In the embodiment, a first peripheral device 20a and a second peripheral device 20b are connected to the in-vehicle device 10. The first peripheral device 20a generates peripheral device data 21 (first peripheral device data 21a) based on its own program 22 (first peripheral device program 22a). Similarly, the second peripheral device 20b generates peripheral device data 21 (second peripheral device data 21b) based on its own program 22 (second peripheral device program 22b).

[0022] The determination unit 12 then acquires the first peripheral device data 21a and the second peripheral device data 21b from the first peripheral device 20a and the second peripheral device 20b. Based on the version information recorded in the acquisition unit 11, the determination unit 12 determines whether the first peripheral device program 22a of the first peripheral device 20a and the second peripheral device program 22b of the second peripheral device 20b have been updated to the latest versions.

[0023] The recording unit 13 is a storage device such as a storage built into the in-vehicle device 10 or an SD card. As a result of the above determination, the determination unit 12 classifies the peripheral device data 21 acquired from the peripheral device 20 determined to have been updated to the latest version as updated peripheral device data, and the peripheral device data 21 acquired from the peripheral device 20 determined not to have been updated to the latest version as unupdated peripheral device data, and causes the recording unit 13 to record the in-vehicle device data 13ac, the updated peripheral device data 13aa, 13ab, and the unupdated peripheral device data.

[0024] For example, if the determination unit 12 determines that the first peripheral device program 22a of the first peripheral device 20a is the latest version, the peripheral device data 22a acquired from the first peripheral device 20a is recorded as updated first peripheral device data 13aa in the storage unit 13. Similarly, if the determination unit 12 determines that the second peripheral device program 22b of the second peripheral device 20b is the latest version, the second peripheral device data 22b acquired from the second peripheral device 20b is recorded as updated second peripheral device data 13ab in the storage unit 13.

[0025] If the determination unit 12 determines that the first peripheral device program 22a of the first peripheral device 20a is not the latest version, the peripheral device data 22a acquired from the first peripheral device 20a is recorded as unupdated first peripheral device data 13ba in the storage unit 13. Similarly, if the determination unit 12 determines that the second peripheral device program 22b of the second peripheral device 20b is not the latest version, the second peripheral device data 22b acquired from the second peripheral device 20b is recorded as unupdated second peripheral device data 13bb in the storage unit 13.

[0026] In this embodiment, the recording area of ​​the recording unit 13 is divided into an updated data recording unit 13a for recording in-vehicle device data 13ac and updated peripheral device data 13aa and 13ab, and an unupdated data recording unit 13b for recording unupdated peripheral device data 13ba and 13bb. In the following description, unless otherwise specified, the updated first peripheral device data 13aa and the updated second peripheral device data 13ab are collectively referred to as updated peripheral device data 13aa and 13ab. Similarly, the unupdated first peripheral device data 13ba and the unupdated second peripheral device data 13bb are collectively referred to as unupdated peripheral device data 13ba and 13bb.

[0027] The determination unit 12 records the in-vehicle device data 13ac and the updated peripheral device data 13aa and 13ab in the updated data recording unit 13a, and records the unupdated peripheral device data 13ba and 13bb in the unupdated data recording unit 13b.

[0028] Specifically, when recording the in-vehicle device data 13ac and the updated peripheral device data 13aa and 13ab in the recording unit 13, the determination unit 12 specifies a path (location information within the recording unit 13) corresponding to the updated data recording unit 13a and records them in the recording unit 13. When recording the unupdated peripheral device data 13ba and 13bb in the recording unit 13, the determination unit 12 specifies a path corresponding to the unupdated data recording unit 13b and records them in the recording unit 13.

[0029] The data transmission unit 14 is configured to be able to wirelessly communicate with the server 30. The data transmission unit 14 transmits the data recorded in the recording unit 13 to the server 30. In the embodiment, the data transmission unit 14 transmits the in-vehicle device data 13ac, the updated peripheral device data 13aa and 13ab, and the unupdated peripheral device data 13ba and 13bb, which are sorted and recorded in the updated data recording unit 13a and the unupdated data recording unit 13b, to the server 30 in the sorted state. Note that the data transmission unit 14 may be set in advance not to transmit data that the server 30 has rejected.

[0030] The server 30 stores the data received from the data transmission unit 14. The server 30 has an analysis unit 31 that stores data used for data analysis, and an unupdated data storage unit 32 that stores data not used for data analysis.

[0031] In an embodiment, the analysis unit 31 includes a first peripheral device data analysis unit 31a that stores and analyzes updated first peripheral device data 13aa, a second peripheral device data analysis unit 31b that stores and analyzes updated second peripheral device data 13ab, and an in-vehicle device data analysis unit 31c that stores and analyzes in-vehicle device data 13ac.

[0032] The unupdated data storage unit 32 also includes an unupdated first peripheral device data storage unit 32a that stores the unupdated first peripheral device data 13ba, and an unupdated second peripheral device data storage unit 32b that stores the unupdated second peripheral device data 13bb.

[0033] The data transmission unit 14 transmits the in-vehicle device data 13ac, the updated peripheral device data 13aa, 13ab, and the unupdated peripheral device data 13ba, 13bb in a sorted state. The server 30 determines the storage destination of each data based on this sorted state. With this configuration, the server 30 can determine the storage destination of each data without analyzing each data in detail.

[0034] In the embodiment, when the server 30 stores the in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab in the analysis unit 31, the server 30 converts the in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab into a format used for analysis and stores the converted data. On the other hand, when the server 30 stores the unupdated peripheral device data 13ba, 13bb in the unupdated data storage unit 32, the server 30 stores the unupdated peripheral device data 13ba, 13bb in the received format without changing the format.

[0035] The server 30 analyzes the in-vehicle device data 13ac and the updated peripheral device data 13aa and 13ab stored in the analysis unit 31. In the embodiment, analyzing the in-vehicle device data 13ac makes it possible to know the video recording of the vehicle while it is running, analyzing the updated first peripheral device data 13aa makes it possible to know the input operation of the occupant on the handy numeric keypad, and analyzing the updated second peripheral device data 13ab makes it possible to know the entry and exit record of the occupant to and from the vehicle. Note that the unupdated peripheral device data 13ba and 13bb stored in the unupdated data storage unit 32 may be analyzed separately from the in-vehicle device data 13ac and the updated peripheral device data 13aa and 13ab after undergoing a process such as scanning by antivirus software.

[0036] Next, the operation of the vehicle information system in this embodiment will be described with reference to the flowchart of FIG.

[0037] First, the in-vehicle device 10 acquires and records the latest version information of the program of the in-vehicle device 10 and the program 22 of the peripheral device 20 (step SP1).

[0038] Next, the in-vehicle device 10 uses the determination unit 12 to compare the latest version information of the program of the in-vehicle device 10 recorded in the acquisition unit 11 with the version information of the actual program of the in-vehicle device 10, and determines whether the actual program of the in-vehicle device 10 is the latest version (step SP2). If the determination result shows that the actual program of the in-vehicle device 10 is not the latest version, the process proceeds to step SP3. If the determination result shows that the actual program of the in-vehicle device 10 is the latest version, the process proceeds to step SP4.

[0039] In step SP3, the program of the in-vehicle device 10 is updated. In updating the program of the in-vehicle device 10, the latest version of the program is acquired by wireless communication or the like, and the old version of the program is replaced with the latest version of the program. Then, the process returns to step SP2.

[0040] In step SP4, the vehicle is driven. While the vehicle is in operation, various data relating to the vehicle's operating status are sorted and recorded in the updated data recording section 13a of the recording section 13 as in-vehicle equipment data 13ac in the in-vehicle device 10 via the determination section 12. Also, while the vehicle is in operation, steps SP5 to SP9, which will be described later, are performed.

[0041] In step SP5, it is confirmed whether or not a peripheral device 20 is connected to the in-vehicle device 10. If a peripheral device 20 is connected to the in-vehicle device 10, the process proceeds to step SP6. On the other hand, if no peripheral device 20 is connected to the in-vehicle device 10, the process proceeds to step SP10.

[0042] In step SP6, the in-vehicle device 10 acquires the peripheral device data 21 from the peripheral device 20. In the embodiment, the determination unit 11 of the in-vehicle device 10 acquires the peripheral device data 21 from the peripheral device 20 connected to the in-vehicle device 10. Then, the process proceeds to step SP7.

[0043] In step SP7, the determination unit 11 determines whether the program 22 of the peripheral device 20 is the latest version. In the embodiment, the determination unit 11 determines whether the program 22 of the peripheral device 20 is the latest version based on the version information of the peripheral device 20 recorded in the acquisition unit 11. If the result of the determination is that the program 22 of the peripheral device 20 is the latest version, the process proceeds to step SP8. On the other hand, if the result of the determination is that the program 22 of the peripheral device 20 is not the latest version (is an older version), the process proceeds to step SP9.

[0044] In step SP8, the peripheral device data 21 acquired from the peripheral device 20 is recorded as updated peripheral device data 13aa, 13ab in the recording unit 13. In the embodiment, the peripheral device data 21 is recorded in the updated data recording section 13a of the recording unit 13.

[0045] In step SP9, the peripheral device data acquired from the peripheral device 20 is recorded as unupdated peripheral device data 13ba, 13bb in the recording unit 13. In this embodiment, the peripheral device data is recorded in the unupdated peripheral device data storage unit 13b of the recording unit 13.

[0046] If a plurality of peripheral devices 20 are connected to the in-vehicle device 10, the determination unit 11 executes steps SP6 to SP9 for each peripheral device 10. With this function of the determination unit 11, the updated peripheral device data 13aa, 13ab and the unupdated peripheral device data 13ba, 13bb are sorted and recorded in the updated data recording unit 13a and the unupdated peripheral device data storage unit 13b.

[0047] After the vehicle operation is terminated (step SP10), the in-vehicle device data 13ac, the updated peripheral device data 13aa, 13ab, and the unupdated peripheral device data 13ba, 13bb recorded in the recording unit 13 are output to the server 30 in an allocated state (step SP11). Based on this allocated state, the server 30 stores the in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab in the analysis unit 31, and stores the unupdated peripheral device data 13ba, 13bb in the unupdated data storage unit 32. Thereafter, the server 30 analyzes the in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab stored in the analysis unit 31. Note that if no peripheral device 20 is connected to the in-vehicle device 10, only the in-vehicle device data 13ac recorded in the recording unit 13 is output to the server 30.

[0048] As described above, the vehicle information system 1 according to the embodiment includes the in-vehicle device 10 mounted on the vehicle, the peripheral devices 20, 20a, 20b connectable to the in-vehicle device 10 and generating peripheral device data 21, 21a, 21b, and the server 30 provided outside the vehicle. The in-vehicle device 10 includes an acquisition unit 11 that acquires version information of the peripheral devices 20, 20a, 20b, a recording unit 13 that records the in-vehicle device data 13ac generated by the in-vehicle device 10, and a determination unit 12 that determines the update states of the peripheral devices 20, 20a, 20b. The determination unit 12 determines the update states of the peripheral devices 20, 20a, 20b based on the version information, and sets the peripheral device data 21, 21a, 21b acquired from the peripheral devices 20, 20a, 20b that are determined to have been updated to the latest version as updated peripheral device data 13aa, 13ab, and sets the peripheral device data 21, 21a, 21b acquired from the peripheral devices 20, 20a, 20b that are determined to have not been updated to the latest version as updated peripheral device data 13aa, 13ab. The peripheral device data 21, 21a, 21b acquired from the peripheral device data acquisition unit 10a, 20b are set as unupdated peripheral device data 13ba, 13bb, and the in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab and the unupdated peripheral device data 13ba, 13bb are sorted and recorded in the recording unit 13. The in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab and the unupdated peripheral device data 13ba, 13bb are stored in the recording unit 13 in the sorted state. The in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab are output from the recording unit 13 to the server 30, and the server 30 has an analysis unit 31 that stores data used for data analysis and an unupdated data storage unit 32 that stores data not used for data analysis. The in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab are output from the recording unit 13 to the analysis unit 31 of the server 30 and stored therein, and the unupdated peripheral device data 13ba, 13bb are output from the recording unit 13 to the unupdated data storage unit 32 and stored therein.

[0049] With the above configuration, the vehicle information system 1 can enhance the security of the vehicle information system 1 by separating the unupdated peripheral device data 13ba, 13bb, which may compromise security, from the in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab and storing them in the unupdated data storage unit 13b.

[0050] In addition, in the vehicle information system 1 according to the embodiment, the determination unit 12 separates the recording areas in the recording unit 13 into those for recording the in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab and those for recording the unupdated peripheral device data 13ba, 13bb, thereby sorting the in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab and the unupdated peripheral device data 13ba, 13bb.

[0051] In the recording unit 13, by recording the in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab in separate recording areas from the unupdated peripheral device data 13ba, 13bb, it becomes easy to separately store the updated peripheral device data 13aa, 13ab and the unupdated peripheral device data 13ba, 13bb in the server 30.

[0052] In addition, in the vehicle information system 1 according to the embodiment, the in-vehicle device 10 further includes a data transmission unit 14 that transmits data to the server 30, and the in-vehicle device data 13ac, the updated peripheral device data 13aa, 13ab, and the unupdated peripheral device data 13ba, 13bb recorded in the recording unit 13 are output from the recording unit 13 to the server 30 via the data transmission unit 14.

[0053] In the above configuration, the data transmission unit 14 can wirelessly transmit the in-vehicle device data 13ac, the updated peripheral device data 13aa, 13ab, and the unupdated peripheral device data 13ba, 13bb, making it easy to transfer data to the server 30.

[0054] In addition, in the vehicle information system 1 according to the embodiment, the analysis unit 31 converts the in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab into a format used for analysis and stores them, and the unupdated data storage unit 32 stores the unupdated peripheral device data 13ba, 13bb without changing the format.

[0055] By storing the unupdated peripheral device data 13ba and 13bb in the unupdated peripheral device data storage unit 13b without changing the format, the server 30 does not need to read the unupdated peripheral device data 13ba and 13bb, which poses a high security risk, and therefore the server 30 can be prevented from being infected with a virus.

[0056] The in-vehicle device 10 according to the embodiment includes an acquisition unit 11 that acquires version information of the peripheral devices 20, 20a, and 20b, a determination unit 12 that determines the update status of the peripheral devices 20, 20a, and 20b, and a recording unit 13 that records in-vehicle device data 13ac generated by the device 10 and peripheral device data 21, 21a, and 21b generated by the peripheral devices 20, 20a, and 20b. The determination unit 12 determines the update status of the peripheral devices 20, 20a, and 20b based on the version information, and records the peripheral device data 21, 21a, and 21b acquired from the peripheral devices 20, 20a, and 20b that have been determined to have been updated to the latest version as an updated version. The peripheral device data 21, 21a, 21b acquired from the peripheral devices 20, 20a, 20b that have been determined not to have been updated to the latest version are designated as peripheral device data 13aa, 13ab, and the peripheral device data 21, 21a, 21b acquired from the peripheral devices 20, 20a, 20b that have been determined not to have been updated to the latest version are designated as unupdated peripheral device data 13ba, 13bb. The in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab, and the unupdated peripheral device data 13ba, 13bb are sorted and recorded in the recording unit 13, and the in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab, and the unupdated peripheral device data 13ba, 13bb are output from the recording unit 13 in the sorted state to a server 30 provided outside the vehicle.

[0057] With the above configuration, by storing the unupdated peripheral device data 13ba and 13bb, which may compromise security, separately from the in-vehicle device data 13ac and the updated peripheral device data 13aa and 13ab, data with a low security risk and data with a high security risk can be output to the server 30 separately, thereby improving security.

[0058] [First Modification] In the above embodiment, the recording area of ​​the recording unit 13 is divided into the updated data recording unit 13a and the unupdated data recording unit 13b. However, the present invention is not limited to this configuration. For example, the determination unit 13 may assign an identifier to at least one of the in-vehicle device data 13ac and the updated peripheral device data 13aa and 13ab and the unupdated peripheral device data 13ba and 13bb, thereby sorting the in-vehicle device data 13ac and the updated peripheral device data 13aa and 13ab from the unupdated peripheral device data 13ba and 13bb.

[0059] When data is output from the recording unit 13 to the server 30, the server 30 determines whether to store the data in the analysis unit 31 or in the unupdated data storage unit 32 based on the presence or absence of an identifier or the type of identifier. In this case, the recording area of ​​the recording unit 13 does not have to be divided into an updated data recording unit 13a and an unupdated data recording unit 13b.

[0060] In the vehicle information system 1 relating to the first variant, the judgment unit 12 assigns an identifier to at least one of the in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab and the unupdated peripheral device data 13ba, 13bb, thereby sorting the in-vehicle device data 13ac and the updated peripheral device data 13aa, 13ab from the unupdated peripheral device data 13ba, 13bb.

[0061] By assigning an identifier to at least one of the in-vehicle device data 13ac, the updated peripheral device data 13aa, 13ab, and the unupdated peripheral device data 13ba, 13bb, it becomes easy to store the updated peripheral device data 13aa, 13ab and the unupdated peripheral device data 13ba, 13bb separately in the server 30.

[0062] [Second Modification] Furthermore, in the above-described embodiment, an example has been described in which the in-vehicle device 10 includes the data transmission unit 14, but the present invention is not limited to this configuration. For example, the in-vehicle device 10 may not include the data transmission unit 14. In this case, the recording unit 13 is a storage device such as an SD card that can be separated from the housing of the in-vehicle device 10 that includes the acquisition unit 11, the determination unit 12, etc. For example, by removing the recording unit 13 from the housing of the in-vehicle device 10 and connecting it to the server 30, data such as the in-vehicle device data 13ac, the updated peripheral device data 13aa and 13ab, and the unupdated peripheral device data 13ba and 13bb recorded in the recording unit 13 are output to the server 30. [Explanation of symbols]

[0063] 1: Vehicle information system, 10: In-vehicle device, 21: Peripheral device data, 21a: first peripheral device data, 21b: second peripheral device data, 20: peripheral device, 20a: first peripheral device, 20b: second peripheral device, 30: server, 11: acquisition unit, 12: Determination unit, 13: Recording unit, 13ac: In-vehicle device data, 14: Data transmission unit; 13aa: Updated first peripheral device data; 13ab: updated second peripheral device data, 13ba: unupdated first peripheral device data, 13bb: Unupdated second peripheral device data, 31: Analysis unit, 32: Unupdated data storage unit

Claims

1. an on-board device mounted on a vehicle; a peripheral device connectable to the in-vehicle device and generating peripheral device data; a server provided outside the vehicle; Equipped with the in-vehicle device includes an acquisition unit that acquires version information of the peripheral device, a recording unit that records in-vehicle device data generated by the in-vehicle device, and a determination unit that determines an update status of the peripheral device; the determining unit determines an update state of the peripheral device based on the version information, and as a result of the determination, the peripheral device data acquired from the peripheral device determined to have been updated to the latest version is treated as updated peripheral device data, and the peripheral device data acquired from the peripheral device determined not to have been updated to the latest version is treated as unupdated peripheral device data, and causes the recording unit to record the in-vehicle device data, the updated peripheral device data, and the unupdated peripheral device data separately; the in-vehicle device data, the updated peripheral device data, and the non-updated peripheral device data are output from the recording unit to the server in a sorted state; the server has an analysis unit that stores data used for data analysis, and an unupdated data storage unit that stores data not used for data analysis, the in-vehicle device data and the updated peripheral device data are output from the recording unit to the analysis unit of the server and stored therein; The non-updated peripheral device data is output from the recording unit to the non-updated data storage unit and stored therein. A vehicle information system comprising:

2. The determination unit separates the in-vehicle device data, the updated peripheral device data, and the unupdated peripheral device data by dividing a recording area in the recording unit into areas for recording the in-vehicle device data, the updated peripheral device data, and the unupdated peripheral device data, or by assigning an identifier to at least one of the in-vehicle device data, the updated peripheral device data, and the unupdated peripheral device data. The vehicle information system of claim 1 .

3. the in-vehicle device further includes a data transmission unit that transmits data to the server, The in-vehicle device data, the updated peripheral device data, and the non-updated peripheral device data recorded in the recording unit are output from the recording unit to the server via the data transmission unit.

3. A vehicle information system according to claim 1 or 2.

4. the analysis unit converts the in-vehicle device data and the updated peripheral device data into a format used for analysis and stores the converted data; The unupdated data storage unit stores the unupdated peripheral device data without changing the format of the data.

3. A vehicle information system according to claim 1 or 2.

5. the analysis unit converts the in-vehicle device data and the updated peripheral device data into a format used for analysis and stores the converted data; The unupdated data storage unit stores the unupdated peripheral device data without changing the format of the data.

4. The vehicle information system of claim 3.

6. an acquisition unit for acquiring version information of a peripheral device; a determination unit for determining an update status of the peripheral device; a recording unit for recording the in-vehicle device data generated by the device and the peripheral device data generated by the peripheral device; Equipped with the determining unit determines an update state of the peripheral device based on the version information, and as a result of the determination, the peripheral device data acquired from the peripheral device determined to have been updated to the latest version is treated as updated peripheral device data, and the peripheral device data acquired from the peripheral device determined not to have been updated to the latest version is treated as unupdated peripheral device data, and causes the recording unit to record the in-vehicle device data, the updated peripheral device data, and the unupdated peripheral device data separately; the in-vehicle device data, the updated peripheral device data, and the non-updated peripheral device data are output from the recording unit in a sorted state to a server provided outside the vehicle; An in-vehicle device comprising:

Images