Positioning device, positioning method, program, and system

Abstract

To provide a positioning device, a method for positioning, a program, and a system that conduct positioning while protecting the privacy of a subject.SOLUTION: A positioning device 10 includes: a generation unit 11 for measuring the position of a subject on the basis of a satellite signal received from a satellite and generating positioning information showing the position of the subject and date / time information showing the date and the time of the positioning; and a changing unit 12 for changing at least one of the positioning information and the date / time information according to a privacy violation area including a position where the privacy of the subject is violated.SELECTED DRAWING: Figure 1

Description

Technical Field

[0001] The technical field relates to a positioning device, a positioning method, a program, and a system for performing positioning while protecting the privacy of a person under investigation.

Background Art

[0002] GPS (Global Positioning System) investigation is an investigation in which a positioning device for measuring the position of a person under investigation is attached to the belongings of the person under investigation or the like against the will of the person under investigation that can be reasonably inferred, and the actions of the person under investigation are grasped.

[0003] However, in recent years, the Supreme Court has determined that GPS investigation violates the privacy of the person under investigation. The reason is that continuously and comprehensively obtaining the positioning information of the person under investigation is considered to violate the privacy of the person under investigation.

[0004] However, since GPS investigation is an effective investigation method, the development of a new GPS investigation that takes into account the infringement of the privacy of the person under investigation is desired.

[0005] As related technologies, Patent Document 1 discloses a technique for protecting location information by using the location information of a user and a pseudo-random number. Further, Patent Document 2 discloses a technique for restricting the disclosure of the location information of a place where a user wants to stay secretly. Furthermore, Patent Document 3 discloses a technique for providing a service that utilizes location information while correcting the location information of a user to protect privacy and allowing the user to be satisfied.

Prior Art Documents

Patent Documents

[0006]

Patent Document 1

Patent Document 2

Patent Document 3

[0007] However, the technologies described in Patent Documents 1, 2, and 3 are not applicable to GPS surveillance. In other words, the technologies in Patent Documents 1, 2, and 3 merely protect the geographical privacy of the user and do not acquire the location information required for GPS surveillance. Furthermore, the technologies in Patent Documents 1, 2, and 3 do not protect temporal privacy either.

[0008] One aspect of this project is to provide positioning devices, positioning methods, programs, and systems that perform positioning while protecting the privacy of the subject. [Means for solving the problem]

[0009] To achieve the above objective, the positioning device in one aspect is: A generation unit that determines the position of a target person based on satellite signals received from a satellite, and generates position information representing the position of the target person and date and time information representing the date and time of positioning, A modification unit modifies the location information and / or date and time information, or either of them, according to the privacy infringement area, which represents the area in which the privacy of the subject is infringed. It is characterized by having the following features.

[0010] Furthermore, in order to achieve the above objective, the positioning method on one side is: A generation step involves determining the position of a subject based on satellite signals received from a satellite, and generating position information representing the subject's position and date and time information representing the date and time of positioning. A modification step involves modifying the location information and / or date and time information, or either of them, depending on the area representing the area infringing on the privacy of the subject, It is characterized by having the following features.

[0011] Furthermore, in order to achieve the above objectives, one aspect of the program is: A generation step involves determining the position of a subject based on satellite signals received from a satellite, and generating position information representing the subject's position and date and time information representing the date and time of positioning. A modification step involves modifying the location information and / or date and time information, or either of them, depending on the area representing the area infringing on the privacy of the subject, It is characterized by causing the execution of [this action].

[0012] Furthermore, in order to achieve the above objectives, one aspect of the system is: The positioning device generates restricted area information, which includes location information representing the location of the subject and restricted area information indicating that the subject has entered the restricted area, if the subject's location is within a restricted area; if the subject's location is within a buffer area set around the restricted area, it generates buffer area information, which includes location information and buffer information indicating that the subject has entered the buffer area; and transmits the location information, the restricted area information, and the buffer area information to the terminal device. The terminal device receives the location information, the restricted area information, and the buffer area information, and uses the received location information, the restricted area information, and the buffer area information to display on the terminal device's screen that the subject has entered a restricted area or a buffer area. It is characterized by the following: [Effects of the Invention]

[0013] One aspect of this technology is that it allows for positioning while protecting the privacy of the subject. [Brief explanation of the drawing]

[0014] [Figure 1] Figure 1 is a diagram illustrating an example of a positioning device in Embodiment 1. [Figure 2] Figure 2 is a diagram illustrating an example of a system having a positioning device in Embodiment 1. [Figure 3]FIG. 3 is a diagram for explaining continuity and comprehensiveness. [Figure 4] FIG. 4 is a diagram for explaining the degradation of date and time information. [Figure 5] FIG. 5 is a diagram for explaining the degradation of position information and date and time information. [Figure 6] FIG. 6 is a diagram for explaining the degradation of position information. [Figure 7] FIG. 7 is a diagram for explaining an example of the operation of the positioning device in Embodiment 1. [Figure 8] FIG. 8 is a diagram for explaining an example of a system having the positioning device in Embodiment 2. [Figure 9] FIG. 9 is a diagram for explaining an intrusion prohibited area and a buffer area. [Figure 10] FIG. 10 is a diagram for explaining an example of the operation of the positioning device in Embodiment 2. [Figure 11] FIG. 11 is a diagram for explaining an example of the search display information to be displayed on the screen of the terminal device. [Figure 12] FIG. 12 is a diagram for explaining an example of the intrusion route display information to be displayed on the screen of the terminal device. [Figure 13] FIG. 13 is a diagram for explaining an example of the intruder detailed display information to be displayed on the screen of the terminal device. [Figure 14] FIG. 14 is a diagram for explaining an example of a computer that realizes the positioning device.

Embodiments for Carrying Out the Invention

[0015] First, an overview will be described to facilitate understanding of the embodiments described hereinafter. In an incident investigation using a vehicle-mounted positioning device (hereinafter referred to as GPS search), in order to achieve an appropriate balance between the public benefit brought by the search and the impact on the privacy of the suspect, it is necessary to clarify what privacy invasiveness is inherent in the search.

[0016] For example, according to the Supreme Court Grand Bench ruling dated March 15, 2017, which pointed out the privacy infringement caused by GPS surveillance, it can be inferred that, based on the premise that the continuity and comprehensiveness of tracking a suspect's movements through the acquisition of location information are inevitable, it is necessary to restrain the ease of conducting investigations through warrant procedures in order to address the feared risk of information abuse.

[0017] However, it has not been considered whether obtaining location information can reduce the continuity and comprehensiveness of tracking a suspect's movements.

[0018] Through the process described above, the inventor implemented a mechanism in the positioning device that degrades the acquired location information. This reduced the need for continuous and comprehensive tracking of suspects' movements through location information acquisition, which had previously been considered unavoidable, and also enabled the protection of privacy.

[0019] As a result, it is possible to obtain location information with the accuracy required for GPS investigations while protecting the privacy of the suspect.

[0020] Embodiments will be described below with reference to the drawings. In the drawings described below, elements having the same function or corresponding function will be denoted by the same reference numeral, and repeated descriptions may be omitted.

[0021] (Embodiment 1) The configuration of the positioning device in Embodiment 1 will be explained using Figure 1. Figure 1 is a diagram illustrating an example of the positioning device in Embodiment 1.

[0022] [Device configuration] The positioning device 10 is a device that has a positioning function capable of acquiring location information required for GPS surveillance while protecting the privacy of the subject in GPS surveillance. The positioning device 10 also has a generation unit 11 and a modification unit 12.

[0023] The generation unit 11 determines the position of the subject based on the satellite signal received from the satellite and generates position information representing the subject's position and date and time information representing the date and time the position was determined.

[0024] The modification unit 12 modifies location information and / or date and time information, or either of them, according to the privacy infringement area, which represents the area in which the privacy of the subject is violated.

[0025] In Embodiment 1, in areas where privacy is violated, location information and / or date and time information are degraded through degradation processing, thereby protecting the privacy of the subject in GPS surveillance while obtaining positioning results with the accuracy required for GPS surveillance. In other words, according to Embodiment 1, the selection of information that is performed during surveillance and stakeouts can be realized in advance and mechanically in GPS surveillance as well.

[0026] In GPS tracking, the positioning device 10 of Embodiment 1 is used by mounting it on a vehicle or the like. However, it may also be mounted on something other than a vehicle.

[0027] [System Configuration] Next, the configuration of the positioning device 10 in Embodiment 1 will be described in more detail using Figure 2. Figure 2 is a diagram illustrating an example of a system having the positioning device in Embodiment 1.

[0028] As shown in Figure 2, the system in Embodiment 1 includes a positioning device 10, a relay device 20, and a terminal device 30.

[0029] Let me explain the system. The positioning device 10 is, for example, a device having a programmable device such as a CPU (Central Processing Unit) or an FPGA (Field-Programmable Gate Array), or a circuit or computer equipped with one or more of these.

[0030] Specifically, the positioning device 10 includes an antenna unit 13, a generation unit 11, a control unit 14, a modification unit 12, and a communication unit 15.

[0031] The relay device 20 is, for example, a device owned by a service provider offering GPS services. The relay device 20 receives a positioning request, which is a command to initiate positioning, transmitted from the terminal device 30 via the communication network. The relay device 20 then transmits the received positioning request to the positioning device 10.

[0032] Furthermore, the relay device 20 receives the positioning result transmitted from the positioning device 10, which was determined by the positioning device 10. Subsequently, the relay device 20 transmits the received positioning result to the terminal device 30 via the communication network.

[0033] The terminal device 30 is, for example, an information processing device such as a personal computer or mobile terminal owned by an investigative agency. The terminal device 30 transmits a positioning request to the relay device 20 via a communication network. The terminal device 30 receives the positioning result transmitted from the relay device 20 via the communication network.

[0034] The positioning device of Embodiment 1 will now be described. The antenna unit 13 receives satellite signals (digital signals) transmitted from multiple satellites, such as those used in a global navigation satellite system.

[0035] The generation unit 11 uses satellite signals to perform positioning processing to generate location information representing the target person's location (latitude and longitude) and date and time information representing the date and time of positioning. Positioning processing can be performed using methods such as code positioning or carrier wave positioning. However, positioning processing is not limited to the above-described methods.

[0036] When the control unit 14 receives a positioning request from the communication unit 15, it outputs an instruction to the generation unit 11 to start positioning. Subsequently, the control unit 14 acquires the positioning results, namely location information and date / time information, generated by the generation unit 11.

[0037] Next, the control unit 14 outputs the positioning result to the modification unit 12. After that, when the control unit 14 receives the degraded positioning result from the modification unit 12, it outputs the degraded positioning result to the communication unit 15.

[0038] In the example shown in Figure 2, the control unit 14 is located inside the positioning device 10, but the functions of the control unit 14 may also be provided in a server computer located outside the positioning device 10.

[0039] The communication unit 15 communicates with the relay device 20 wirelessly, for example. The communication unit 15 receives a positioning request from the relay device 20. The communication unit 15 transmits the degraded positioning result to the relay device 20.

[0040] The modification unit 12 modifies location information and / or date and time information (positioning results) according to a pre-set privacy infringement area that represents an area where the privacy of the subject is violated.

[0041] Areas where privacy is violated include, for example, the subject's home or the medical facilities the subject uses (e.g., hospitals, pharmacies). Furthermore, areas where privacy is violated include areas where, if the subject is present, it is presumed that they may face unfair discrimination, prejudice, or other disadvantages based on their race, creed, social status, medical history, criminal record, history of having suffered harm due to a crime, or other factors.

[0042] The areas where privacy has been infringed are pre-stored in a memory unit (not shown) of the positioning device 10. Alternatively, the areas where privacy has been infringed may be set by investigators for each individual.

[0043] Modifying location information, date and time information, or either of these (positioning results) is a process that makes it difficult to identify that a subject was in a location that infringes on their privacy. Examples of such modifications include (1) deleting positioning results in areas where privacy is infringed, and (2) adding random numbers to disrupt the positioning results in areas where privacy is infringed. Furthermore, modifications may also include (3) degrading the positioning results in areas where privacy is infringed.

[0044] (3) We will explain the degradation of positioning results. Figure 3 is a diagram illustrating continuity and comprehensiveness. In the graph in Figure 3, the vertical axis represents the location specified by latitude and longitude (from A (starting point) to G (destination point)), and the horizontal axis represents the date and time (year, month, day, time, etc.). In addition, Δp shown in Figure 3 represents the distance interval set to acquire positioning results, and Δt represents the time interval set to acquire positioning results.

[0045] Here, continuity can be defined as the property of indicating a time-series sequence of positioning results, so the longer the period over which positioning results are acquired, the more continuous the data can be considered. Extensiveness can be defined as the property of acquiring positioning results without omission within a certain range, so the smaller the distance interval Δp and time interval Δt, the more extensive the data can be considered.

[0046] Therefore, continuity can be reduced by (3-1) limiting the period for acquiring positioning results, or (3-2) increasing the time interval Δt.

[0047] Furthermore, comprehensiveness can be reduced by (3-3) increasing the time interval Δt and the distance interval Δp. Alternatively, (3-4) it can be reduced by simply increasing the distance interval Δp.

[0048] In actual processing, to achieve (3-1), it is sufficient to limit the period for acquiring positioning results. To achieve (3-2), the time interval Δt should be increased as shown in Figure 4. Figure 4 is a diagram to explain the degradation of date and time information.

[0049] To achieve (3-3), the distance interval Δp and time interval Δt should be increased as shown in Figure 5. Figure 5 is a diagram illustrating the degradation of location information and date / time information.

[0050] To achieve (3-4), the distance interval Δp is increased as shown in Figure 6. Figure 6 is a diagram to explain the degradation of positional information. Note that increasing the distance interval Δp can be considered equivalent to widening the area.

[0051] In other words, the smaller the area represented by Δp × Δt, the higher the continuity and comprehensiveness, and the greater the amount of information obtained during the positioning period. Conversely, the larger the area, the lower the continuity and comprehensiveness, and the less information is obtained overall.

[0052] Therefore, as shown in Figures 4 to 6, the area of ​​Δp × Δt increases in all cases, and the amount of information shown by lines L1, L2, and L3 representing the behavioral history in Figures 4 to 6 is less than that shown by line L representing the behavioral history in Figure 3.

[0053] Specifically, as shown in Figure 6, if only the distance interval Δp is increased, the subject's location is only represented by latitude and longitude, resulting in only rough location information being obtained compared to Figure 3. Also, as shown in Figure 5, if the time interval Δt is increased while keeping the distance interval Δp the same as in Figure 3, the subject's location can be obtained with high accuracy, but the granularity of the date and time information becomes coarser.

[0054] Therefore, as mentioned above, the privacy of the subject in GPS surveillance can be protected by degrading the positioning information.

[0055] However, in actual GPS investigations, it is necessary to conduct a wide-area investigation because the area related to the suspected facts is unknown. In such cases, the distance interval Δp and the time interval Δt are increased, as shown in Figure 5. However, if the area not related to the suspected facts is known in advance, that area is designated, and the area Δp × Δt is increased within that area.

[0056] Specifically, the time interval Δt is determined by the modification unit 12, which, if the location indicated by the location information is included in a privacy infringement area, modifies the date and time information based on the date and time information modification process associated with the privacy infringement area, so that the time the subject stayed in the privacy infringement area cannot be determined.

[0057] In other words, the modification unit 12 increases the time interval Δt based on the date and time information modification process in the privacy infringement area. Note that the method of modifying the date and time information modification process may be changed depending on the type of privacy infringement area.

[0058] The date and time information modification process is a process that makes it difficult to identify the date and time when a vehicle passes over an object (such as a building) that is presumed to infringe on privacy. In the date and time information modification process, for example, the time interval Δt is changed to a size that is estimated to be the size that a predetermined number of vehicles would pass over the object presumed to infringe on privacy.

[0059] Alternatively, the date and time information modification process is, for example, a process that changes the time interval Δt to a size that is estimated to be the size at which a predetermined number of vehicles are estimated to be staying in an object that is presumed to infringe on privacy.

[0060] Furthermore, if the location indicated by the location information is included in a privacy infringement area, the modification unit 12 may acquire date and time information after a predetermined time has elapsed since the previous positioning.

[0061] Next, the distance interval Δp is specifically modified by the modification unit 12, if the location indicated by the location information is included in a privacy infringement area, to modify the location information so that the location of the subject cannot be identified, based on the location information modification process associated with the privacy infringement area.

[0062] In other words, the modification unit 12 increases the distance interval Δp in the privacy infringement area based on the location information modification process. Note that the method of modifying the location information modification process may be changed depending on the type of privacy infringement area.

[0063] Location information alteration processing is a process that reduces the likelihood of identification by disguising objects suspected of infringing privacy as objects among multiple other objects. However, it is necessary to be able to obtain the information required for the investigation. Therefore, the distance interval Δp is made small enough to allow for surveillance and stakeouts.

[0064] In actual processing, if the object suspected of violating privacy is a building, measures are taken to prevent the identification of the vehicle under investigation, the building, or either one of them. In other words, the distance interval Δp is set to a size that includes multiple buildings in the vicinity of the building in question.

[0065] Alternatively, the distance interval Δp may be set to a size that suggests multiple vehicles are simultaneously present around the vehicle under investigation.

[0066] Furthermore, it is desirable to set the magnitudes of the distance interval Δp and the time interval Δt based on experience and circumstances related to past cases. This is because the amount of information must be sufficient to uncover the truth of the case. Moreover, it must be kept to a level that protects privacy in a balance with the public interest of the investigation.

[0067] According to Embodiment 1, not only can human error and arbitrariness be eliminated, but appropriateness can also be ensured by having a neutral third-party organization certify tamper resistance, which means resistance to external analysis and tampering.

[0068] Furthermore, even without conducting investigations through warrant procedures, privacy can be respected by technically reducing the continuity and comprehensiveness of information acquisition. Therefore, both the achievement of investigative objectives and the protection of privacy can be achieved.

[0069] [Device operation] Next, the operation of the positioning device in Embodiment 1 will be explained using Figure 7. Figure 7 is a diagram illustrating an example of the operation of the positioning device in Embodiment 1. The following explanation will refer to the diagram as appropriate. In Embodiment 1, the positioning method is performed by operating the positioning device. Therefore, the explanation of the positioning method in Embodiment 1 will be replaced by the following explanation of the operation of the positioning device.

[0070] The communication unit 15 receives a positioning request from the relay device 20 (step A1). Next, when the control unit 14 receives a positioning request from the communication unit 15, it outputs an instruction to the generation unit 11 to start positioning (step A2).

[0071] Next, the generation unit 11 uses satellite signals to perform positioning processing to generate location information representing the subject's location (latitude and longitude) and date and time information representing the date and time of positioning (step A3).

[0072] Next, the control unit 14 acquires the position information and date / time information, which are the positioning results generated by the generation unit 11. Then, the control unit 14 outputs the positioning results to the modification unit 12.

[0073] Next, if the subject's current location (positioning result) is included in a privacy infringement area that includes a location that infringes on the subject's privacy, the modification unit 12 modifies the location information and / or the date and time information (positioning result) (step A4).

[0074] Modifying location information, date and time information, or either of these (positioning results) is a process that makes it difficult to identify that a person was in a location that infringes on their privacy. The modifications include (1) deleting positioning results in areas where privacy is infringed, (2) adding random numbers to disrupt positioning results in areas where privacy is infringed, and (3) degrading positioning results in areas where privacy is infringed.

[0075] Next, when the control unit 14 receives the positioning result that has undergone degradation processing from the modification unit 12, it outputs the positioning result that has undergone degradation processing to the communication unit 15. The communication unit 15 then transmits the positioning result that has undergone degradation processing to the relay device 20 (step A5).

[0076] [Effects of Embodiment 1] As described above, according to Embodiment 1, in areas where privacy is violated, by degrading location information and / or date and time information through degradation processing, it is possible to obtain positioning results with the accuracy required for GPS surveillance while protecting the privacy of the subject in GPS surveillance.

[0077] According to Embodiment 1, the selection of information that is typically performed during surveillance and stakeouts can be carried out in advance and mechanically even in GPS-based investigations.

[0078] Furthermore, according to Embodiment 1, human error and arbitrariness can be eliminated, and appropriateness can be ensured by having a neutral third-party organization certify tamper resistance, which means resistance to external analysis and tampering.

[0079] Furthermore, even without conducting investigations through warrant procedures, privacy can be respected by technically reducing the continuity and comprehensiveness of information acquisition. Therefore, both the achievement of investigative objectives and the protection of privacy can be achieved.

[0080] [program] The program in Embodiment 1 can be any program that causes a computer to execute steps A1 to A5 shown in Figure 7. By installing and running this program on a computer, the positioning device and positioning method in Embodiment 1 can be realized. In this case, the computer's processor functions as a generation unit 11, a control unit 14, and a modification unit 12, and performs the processing.

[0081] Furthermore, the program in Embodiment 1 may be executed by a computer system constructed by multiple computers. In this case, for example, each computer may function as either the generation unit 11, the control unit 14, or the modification unit 12.

[0082] (Embodiment 2) Embodiment 2 will now be described. With only the positioning device 10 described in Embodiment 1, there is a risk that the subject may escape from the searchable area during the GPS search. For example, the subject may escape to a foreign country. In such a case, Embodiment 2 detects the subject's escape in advance and prevents the subject from escaping.

[0083] [System Configuration] The configuration of the positioning device 10' in Embodiment 2 will be explained using Figure 8. Figure 8 is a diagram illustrating an example of a system having the positioning device in Embodiment 2.

[0084] As shown in Figure 8, the system in Embodiment 2 includes a positioning device 10', a relay device 20', and a terminal device 30'.

[0085] Let me explain the system. The positioning device 10' is, for example, a device having a programmable device such as a CPU or FPGA, or a circuit or computer equipped with one or more of these.

[0086] Specifically, the positioning device 10' includes an antenna unit 13, a generation unit 11, a control unit 14, a modification unit 12, a communication unit 15, and a determination unit 16.

[0087] In GPS surveillance, if the target person enters a pre-set restricted area, the positioning device 10' transmits restricted area information to the terminal device 30', indicating that the target person has entered a restricted area. Restricted areas are areas where facilities that the target person might use to escape exist, such as airports and ports.

[0088] Furthermore, if the subject enters a buffer zone that has been set in advance based on the no-entry zone, the positioning device 10' transmits buffer zone information to the terminal device 30' indicating that the subject has entered the buffer zone. The buffer zone is, for example, an area on concentric circles drawn with a certain radius from the no-entry zone, or an area arbitrarily set on the approach route to the no-entry zone and its surroundings.

[0089] Figure 9 is a diagram illustrating restricted access zones and buffer zones. Figure 9 shows a map displayed on the screen of terminal device 30'. In the example in Figure 9, pre-configured restricted access zones and buffer zones are displayed on the map. As shown in Figure 9, when a subject (positioning device 10':●) approaches the airport in the direction of the arrow, they first enter the buffer zone set around the airport, so positioning device 10' transmits buffer zone information. Next, when the subject enters the restricted access zone set at the airport, positioning device 10' transmits restricted access zone information.

[0090] The relay device 20' is, for example, a device owned by a service provider that provides GPS services. The relay device 20' receives a positioning request, which is a command to start positioning, transmitted from the terminal device 30' via the communication network. The relay device 20' then transmits the received positioning request to the positioning device 10.

[0091] Furthermore, the relay device 20' receives the positioning result transmitted from the positioning device 10', which was determined by the positioning device 10'. Subsequently, the relay device 20' transmits the received positioning result to the terminal device 30' via the communication network.

[0092] Furthermore, the relay device 20' receives the no-entry zone information or buffer zone information generated by the positioning device 10', which is transmitted from the positioning device 10'. Subsequently, the relay device 20' transmits the received no-entry zone information, buffer zone information, or both to the positioning device 10'.

[0093] Terminal device 30' is, for example, an information processing device such as a personal computer or mobile terminal owned by an investigative agency. Terminal device 30' transmits a positioning request to relay device 20' via a communication network. Terminal device 30' receives the positioning result transmitted from relay device 20' via the communication network.

[0094] Furthermore, the terminal device 30' receives intrusion-restricted area information or buffer area information transmitted from the relay device 20' via the communication network.

[0095] The positioning device of Embodiment 2 will now be described. The generation unit 11, modification unit 12, antenna unit 13, control unit 14, and communication unit 15 were described in Embodiment 1, so their descriptions will be omitted here.

[0096] The determination unit 16 generates restricted area information if the subject's location (latitude and longitude) is within a restricted area. The determination unit 16 also generates buffer area information if the subject's location (latitude and longitude) is within a buffer area. Subsequently, the determination unit 16 outputs the generated restricted area information or buffer area information to the communication unit 15.

[0097] Specifically, the determination unit 16 first obtains location information (latitude and longitude) representing the subject's location from the control unit 14. Next, the determination unit 16 determines whether the subject's location is within a restricted area or a buffer zone.

[0098] Next, if the determination unit 16 determines that the subject's location is within a restricted area, it generates restricted area information and outputs it to the communication unit 15. The restricted area information includes location information representing the subject's current location and restricted area information (e.g., a flag) indicating whether or not the subject has entered a restricted area.

[0099] Furthermore, if the determination unit 16 determines that the subject's location is within the buffer zone, it generates buffer zone information and outputs it to the communication unit 15. The buffer zone information includes location information representing the subject's current location and buffer information (e.g., a flag) indicating whether or not the subject has entered the buffer zone.

[0100] The communications unit 15 transmits information about restricted areas or buffer zones to the relay device 20'.

[0101] [Device operation] Next, the operation of the positioning device in Embodiment 2 will be explained using Figure 10. Figure 10 is a diagram illustrating an example of the operation of the positioning device in Embodiment 2. The following explanation will refer to the diagram as appropriate. In Embodiment 2, the positioning method is performed by operating the positioning device. Therefore, the explanation of the positioning method in Embodiment 2 will be replaced by the following explanation of the operation of the positioning device.

[0102] Steps A1 to A4 shown in Figure 10 were explained in Embodiment 1, so the explanation of steps A1 to A4 will be omitted here.

[0103] In step B1, the determination unit 16 generates information indicating that the subject has entered a restricted area or buffer area if the subject's current location (positioning result) is included in the restricted area or buffer area.

[0104] Furthermore, in step B1, if the determination unit 16 determines that the subject's current location (positioning result) is not included in the restricted area or buffer area, it generates restricted area information or buffer area information indicating that the subject has not entered.

[0105] Subsequently, the determination unit 16 outputs intrusion-restricted area information or buffer area information to the communication unit 15. It is desirable that steps A4 and B1 be executed in parallel, as shown in Figure 10.

[0106] In step B2, the communication unit 15 obtains the degraded positioning result from the control unit 14. The communication unit 15 also obtains intrusion-restricted area information or buffer area information from the determination unit 16. The communication unit 15 then transmits the degraded positioning result and the intrusion-restricted area information or buffer area information to the relay device 20'.

[0107] [Effects of Embodiment 2] As described above, Embodiment 2 allows for the acquisition of positioning results with the accuracy required for GPS surveillance while protecting the privacy of the subject in GPS surveillance, as explained in Embodiment 1.

[0108] Furthermore, according to Embodiment 2, even if there is a risk that the subject may escape from the searchable area during the GPS investigation, it is possible to detect that the subject has entered a restricted area or buffer zone, thereby detecting the subject's escape in advance and preventing it.

[0109] [program] The program in Embodiment 2 can be any program that causes a computer to execute steps A1 to A4, B1, and B2 shown in Figure 10. By installing and running this program on a computer, the positioning device and positioning method in Embodiment 2 can be realized. In this case, the computer's processor functions as a generation unit 11, a control unit 14, a modification unit 12, and a determination unit 16, and performs the processing.

[0110] Furthermore, the program in Embodiment 2 may be executed by a computer system constructed by multiple computers. In this case, for example, each computer may function as one of the following: generation unit 11, control unit 14, modification unit 12, or determination unit 16.

[0111] (Variation 1) Modification example 1 will be explained using Figure 11. Figure 11 is a diagram illustrating an example of the search display information to be shown on the screen of the terminal device.

[0112] The terminal device 30' receives information from the positioning device 10' via the relay device 20', such as at least no-entry zone information, buffer zone information, positioning device number, charging status, positioning device radio wave status information, and GPS radio wave status information. Subsequently, the terminal device 30' generates search display information using the received information.

[0113] The investigation display information is information displayed on the terminal device 30' of the operator conducting the GPS investigation. The investigation display information is displayed on the screen of the terminal device 30' or on the screen of a monitor connected to the terminal device 30'. As shown in Figure 11, the investigation display information is information that associates the alarm, the positioning device number, the operator's name, the charging status, the positioning device radio wave status, and the GPS radio wave status.

[0114] The alarm displays information indicating that the person has entered a restricted area or a buffer zone. The positioning device number displays information representing the number pre-assigned to each positioning device.

[0115] The Name field displays information representing the name of the person being tracked by GPS. The Charge Status field displays information representing the remaining capacity of the battery (not shown) installed in the positioning device 10' (e.g., the remaining capacity level). The Positioning Device Radio Wave Status field displays information representing the strength of the radio waves transmitted from the positioning device 10' (e.g., the radio wave strength level). The GPS Radio Wave Status field displays information representing the strength of the radio waves transmitted from the GPS (e.g., the radio wave strength level).

[0116] In the example in Figure 10, "Kizaki T. Taro," the subject of GPS surveillance using positioning device 10' with positioning device number "1," has entered a restricted area. Therefore, the indicator "〇" representing the entry into the restricted area is displayed in the restricted area. The indicator "〇" disappears when the subject leaves the restricted area. Furthermore, the indicator is not limited to "〇"; any indicator or output (e.g., audio) that can warn the subject that they have entered a restricted area is acceptable.

[0117] Furthermore, individuals who have entered restricted areas should be displayed with the highest priority. For example, they should be displayed at the top of the table in Figure 11. Also, since individuals may repeatedly enter restricted areas, the number of times an individual has entered a restricted area may be displayed.

[0118] Furthermore, in the example shown in Figure 11, "S-shuku H-ko," the target of GPS surveillance using positioning device 10' with positioning device number "2," has entered the buffer zone. Therefore, the indicator "〇" representing the entry into the buffer zone is displayed within the buffer zone. When the target leaves the buffer zone, the indicator "〇" disappears. The indicator is not limited to "〇"; any indicator or output (e.g., audio) that can warn that the target has entered the buffer zone is acceptable.

[0119] Furthermore, if no individuals have entered the restricted area, individuals who have entered the buffer zone will be displayed with the highest priority. Additionally, since individuals may repeatedly enter the buffer zone, the number of times an individual has entered the buffer zone may also be displayed.

[0120] (Modification 2) Modification 2 will be explained using Figure 12. Figure 12 is a diagram illustrating an example of intrusion route display information to be displayed on the screen of the terminal device. Furthermore, the terminal device 30' generates intrusion route display information.

[0121] The intrusion route information is displayed to the operator conducting the GPS investigation. The intrusion route information is displayed on the screen of terminal device 30' or on the screen of a monitor connected to terminal device 30'. If the subject enters a restricted area or buffer zone, the intrusion route information displays the subject's current location. As shown in Figure 12, it is conceivable to display the location from the time of intrusion to the present time on a map in chronological order (▲). However, the display of the subject's location is not limited to "▲".

[0122] (Variation 3) Modification 3 will be explained using Figure 13. Figure 13 is a diagram illustrating an example of intruder detail information to be displayed on the terminal device screen. Furthermore, the terminal device 30' generates the intruder detail information.

[0123] Figure 13 shows the detailed intruder information for "K. T. Sakizaki," the target of a GPS investigation using positioning device 10' with positioning device number "1," who entered a restricted area.

[0124] The intruder details information is displayed to the operator conducting the GPS investigation. The intruder details information is displayed on the screen of terminal device 30' or on the screen of a monitor connected to terminal device 30'. The intruder details information is information that associates the intruder's name, positioning device number, name and address of the no-entry zone, name and address of the buffer zone, image of the intruder, and detailed information of the intruder (address, date of birth, physical characteristics, etc.).

[0125] [Physical configuration] Here, a computer that implements a positioning device by executing the program in the embodiment will be described using Figure 14. Figure 14 is a diagram illustrating an example of a computer that implements a positioning device in the embodiment.

[0126] As shown in Figure 14, the computer 110 comprises a CPU 111, main memory 112, storage device 113, input interface 114, display controller 115, data reader / writer 116, and communication interface 117. Each of these components is connected to each other via a bus 121 to enable data communication. In addition to the CPU 111, or in place of the CPU 111, the computer 110 may also include a GPU (Graphics Processing Unit) or FPGA.

[0127] The CPU 111 loads the program (code) in the embodiment, stored in the storage device 113, into the main memory 112 and performs various calculations by executing them in a predetermined order. The main memory 112 is typically a volatile storage device such as DRAM (Dynamic Random Access Memory). The program in the embodiment is provided stored in a computer-readable recording medium 120. The program in the embodiment may be distributed over the internet connected via the communication interface 117. The recording medium 120 is a non-volatile recording medium.

[0128] Specific examples of the storage device 113 include hard disk drives and semiconductor storage devices such as flash memory. The input interface 114 mediates data transmission between the CPU 111 and input devices 118 such as a keyboard and mouse. The display controller 115 is connected to the display device 119 and controls the display on the display device 119.

[0129] The data reader / writer 116 mediates data transmission between the CPU 111 and the recording medium 120, reads programs from the recording medium 120, and writes processing results from the computer 110 to the recording medium 120. The communication interface 117 mediates data transmission between the CPU 111 and other computers.

[0130] Specific examples of the recording medium 120 include general-purpose semiconductor memory devices such as CF (Compact Flash®) and SD (Secure Digital), magnetic recording media such as Flexible Disks, and optical recording media such as CD-ROMs (Compact Disk Read Only Memory).

[0131] Furthermore, the positioning device 10 in this embodiment can also be implemented using hardware corresponding to each part, rather than a computer on which the program is installed. In addition, the positioning device 10 may be partially implemented by a program and the remaining part by hardware.

[0132] [Note] The following additional notes are disclosed regarding the embodiments described above. Some or all of the embodiments described above can be expressed by (Note 1) to (Note 15) below, but are not limited to the following descriptions.

[0133] (Note 1) A generation unit that determines the position of a target person based on satellite signals received from a satellite, and generates position information representing the position of the target person and date and time information representing the date and time of positioning, A modification unit modifies the location information and / or date and time information, or either of them, according to the privacy infringement area, which represents the area in which the privacy of the subject is infringed. A positioning device having the following features.

[0134] (Note 2) The positioning device described in Appendix 1, The modification unit modifies the location information so that the location of the subject cannot be identified, based on the location information modification process associated with the privacy infringement area, if the location indicated by the location information is included in the privacy infringement area. Positioning device.

[0135] (Note 3) The positioning device described in Appendix 1, The modification unit modifies the date and time information, based on the date and time information modification process associated with the privacy infringement area, if the location indicated by the location information is included in the privacy infringement area, so that the time the subject stayed in the privacy infringement area cannot be determined. Positioning device.

[0136] (Note 4) The positioning device described in Appendix 1, The determination unit determines whether the location of the subject is included in a no-entry zone or a buffer zone, and if the location of the subject is included in a no-entry zone, generates no-entry zone information having the location information and no-entry information indicating that the subject is in the no-entry zone, and if the location of the subject is included in a buffer zone set around the no-entry zone, generates buffer zone information having the location information and buffer information indicating that the subject is in the buffer zone. A positioning device having the following features.

[0137] (Note 5) The positioning device described in Appendix 4, The positioning device transmits the location information, the restricted area information, and the buffer area information to the terminal device, and the terminal device displays on its screen that the subject has entered a restricted area or buffer area. Positioning device.

[0138] (Note 6) A generation step involves determining the position of a subject based on satellite signals received from a satellite, and generating position information representing the subject's position and date and time information representing the date and time of positioning. A modification step involves modifying the location information and / or date and time information, or either of them, depending on the area representing the area infringing on the privacy of the subject, A positioning method having the following characteristics.

[0139] (Note 7) The positioning method described in Appendix 6, The modification step, if the location indicated by the location information is included in a privacy infringement area, modifies the location information based on the location information modification process associated with the privacy infringement area so that the location of the subject cannot be identified. Positioning method.

[0140] (Note 8) The positioning method described in Appendix 6, The modification step, if the location indicated by the location information is included in a privacy infringement area, modifies the date and time information based on the date and time information modification process associated with the privacy infringement area, so that the time the subject stayed in the privacy infringement area cannot be determined. Positioning method.

[0141] (Note 9) The positioning method described in Appendix 6, The system determines whether the location of the subject is included in a restricted area or a buffer zone. If the location of the subject is included in a restricted area, it generates restricted area information having the location information and restricted area information indicating that the subject is in the restricted area. If the location of the subject is included in a buffer zone set around the restricted area, it generates buffer zone information having the location information and buffer information indicating that the subject is in the buffer zone. Positioning method.

[0142] (Note 10) The positioning method described in Appendix 9, The location information, the restricted area information, and the buffer area information are transmitted to the terminal device, and the terminal device's screen displays that the subject has entered the restricted area or buffer area. Positioning method.

[0143] (Note 11) On the computer, A generation step involves determining the position of a subject based on satellite signals received from a satellite, and generating position information representing the subject's position and date and time information representing the date and time of positioning. A modification step involves modifying the location information and / or date and time information, or either of them, depending on the area representing the area infringing on the privacy of the subject, A program that executes the command.

[0144] (Note 12) The program described in Appendix 11, The modification step, if the location indicated by the location information is included in a privacy infringement area, modifies the location information based on the location information modification process associated with the privacy infringement area so that the location of the subject cannot be identified. program.

[0145] (Note 13) The program described in Appendix 11, The modification step, if the location indicated by the location information is included in a privacy infringement area, modifies the date and time information based on the date and time information modification process associated with the privacy infringement area, so that the time the subject stayed in the privacy infringement area cannot be determined. program.

[0146] (Note 14) The program described in Appendix 11, The program is transmitted to the computer, The system determines whether the subject's location is within a restricted area or a buffer zone. If the subject's location is within a restricted area, it generates restricted area information containing the location information and information indicating that the subject is in the restricted area. If the subject's location is within a buffer zone surrounding the restricted area, it generates buffer zone information containing the location information and information indicating that the subject is in the buffer zone. program.

[0147] (Note 15) The positioning device generates restricted area information, which includes location information representing the location of the subject and restricted area information indicating that the subject has entered the restricted area, if the subject's location is within a restricted area; if the subject's location is within a buffer area set around the restricted area, it generates buffer area information, which includes location information and buffer information indicating that the subject has entered the buffer area; and transmits the location information, the restricted area information, and the buffer area information to the terminal device. The terminal device receives the location information, the restricted area information, and the buffer area information, and uses the received location information, the restricted area information, and the buffer area information to display on the terminal device's screen that the subject has entered a restricted area or a buffer area. system.

[0148] Although the proposed invention has been described above with reference to embodiments, the proposed invention is not limited to the above embodiments. Various modifications to the structure and details of the proposed invention can be made within the scope of the proposed invention as can be understood by those skilled in the art. [Industrial applicability]

[0149] As described above, the invention allows for positioning while protecting the privacy of the subject. The invention is useful in fields where GPS tracking is necessary. [Explanation of Symbols]

[0150] 10, 10' Positioning device 11 Generation part 12 Changes 13 Antenna section 14 Control Unit 15 Communications Department 16 Judgment section 20, 20' Relay device 30, 30' Terminal device 110 Computer 111 CPU 112 Main Memory 113 Storage device 114 Input Interface 115 Display Controller 116 Data Readers / Writers 117 Communication Interface 118 Input devices 119 Display device 120 recording media 121 Bus

Claims

1. A generation means that determines the position of a target person based on satellite signals received from a satellite, and generates position information representing the position of the target person and date and time information representing the date and time of positioning, The system includes a modification means for modifying the location information and / or date and time information, which are positioning results, depending on the type of privacy infringement area that represents the area infringing on the privacy of the subject, The modification means, in order to reduce continuity, limits the period for acquiring the positioning results, or sets the time interval for acquiring the positioning results to an interval in which the positioning results can be degraded; and in order to reduce comprehensiveness, sets the distance interval for acquiring the positioning results to a size in which the positioning results can be degraded, or sets the time interval and the distance interval to intervals in which the positioning results can be degraded. A positioning device having the following features.

2. A positioning device according to Claim 1, The aforementioned areas of privacy infringement include the subject's home, the area where the medical facilities the subject uses are located, and areas where, if the subject is present, it is presumed that unfair discrimination, prejudice, or disadvantage will occur based on race, creed, social status, medical history, criminal record, facts of having suffered harm due to a crime, etc. Positioning device.

3. A positioning device according to claim 2, The modification means sets the distance interval to an interval that allows for tailing and surveillance. Positioning device.

4. Based on satellite signals received from a satellite, the position of the subject is determined, and location information representing the subject's position and date and time information representing the date and time of determination are generated. Depending on the type of privacy infringement area that represents the area infringing on the privacy of the aforementioned subject, the location information and / or the date and time information, which are the positioning results, are modified. Furthermore, in order to reduce continuity, the period for acquiring the positioning results may be limited, or the time interval for acquiring the positioning results may be set to an interval in which the positioning results can be degraded; and in order to reduce comprehensiveness, the distance interval for acquiring the positioning results may be set to a size in which the positioning results can be degraded, or the time interval and the distance interval may be set to an interval in which the positioning results can be degraded. Positioning method.

5. A positioning method according to claim 4, The aforementioned areas of privacy infringement include the subject's home, the area where the medical facilities the subject uses are located, and areas where, if the subject is present, it is presumed that unfair discrimination, prejudice, or disadvantage will occur based on race, creed, social status, medical history, criminal record, facts of having suffered harm due to a crime, etc. Positioning method.

6. A positioning method according to claim 5, The aforementioned distance interval is set to an interval that allows for tailing and surveillance to be carried out. Positioning method.

7. On the computer, Based on satellite signals received from a satellite, the system determines the position of the subject, generates location information representing the subject's position and date and time information representing the date and time of positioning, Depending on the type of privacy infringement area that represents the area infringing on the privacy of the subject, the location information and / or the date and time information, which are the positioning results, are modified. Furthermore, in order to reduce continuity, the period for acquiring the positioning results may be limited, or the time interval for acquiring the positioning results may be set to an interval in which the positioning results can be degraded; and in order to reduce comprehensiveness, the distance interval for acquiring the positioning results may be set to a size in which the positioning results can be degraded, or the time interval and the distance interval may be set to an interval in which the positioning results can be degraded. program.

8. The program according to claim 7, The aforementioned areas of privacy infringement include the subject's home, the area where the medical facilities the subject uses are located, and areas where, if the subject is present, it is presumed that unfair discrimination, prejudice, or disadvantage will occur based on race, creed, social status, medical history, criminal record, facts of having suffered harm due to a crime, etc. program.

9. The program according to claim 8, The aforementioned distance interval is set to an interval that allows for tailing and surveillance to be carried out. program.

Images