Control system and control method

Abstract

To provide a control system and control method, capable of appropriately determining execution authority of a user about a target function of a vehicle.SOLUTION: A control system includes: a calculation section 52 provided in a vehicle 10; and an information terminal 60 carried by a user of the vehicle 10. The calculation section 52 includes: a first movement control section 55 for executing first movement control to move the vehicle 10 in a state where the user is riding in the vehicle 10; and a second movement control section 56 for executing second movement control to move the vehicle 10 in a state where the user is not riding in the vehicle 10. When receiving a request to execute the first movement control from the user, the first movement control section 55 executes first determination processing to determine execution authority of the user about the first movement control, and executes the first movement control on the basis of a result of the determination. When receiving a request to execute the second movement control from the user, the information terminal 60 executes second determination processing to determine execution authority of the user about the second movement control, and causes the calculation section 52 to execute the second movement control on the basis of a result of the determination.SELECTED DRAWING: Figure 3

Description

Technical Field

[0001] The present invention relates to a control system and a control method.

Background Art

[0002] In recent years, efforts have been actively made to provide access to a sustainable transport system that takes into account people in vulnerable positions among traffic participants. Toward this realization, research and development focusing on further improving traffic safety and convenience through research and development related to autonomous driving technology have been underway.

[0003] Conventionally, a remote parking system is known that uses a smartphone to remotely control a vehicle to park the vehicle in a designated predetermined parking space or to retrieve the vehicle from the parking space. Also known is a FOD (Function On Demand) system in which the target functions of a vehicle are released according to the user's contract status (payment management).

[0004] For example, Patent Document 1 describes an electronic key pre-registered as a device capable of remotely operating a vehicle, a portable communication device pre-registered as an item owned by a vehicle user, an in-vehicle authentication unit mounted on the vehicle that determines whether authentication of the electronic key and the portable communication device has been successful, and a permission determination unit that permits automatic driving control to drive the vehicle automatically to the user's position based on the determination that authentication of the electronic key and the portable communication device has been successful in the in-vehicle authentication unit. Patent Document 2 describes a method for remotely controlling a function of a vehicle in which a visual signal or an audible signal is generated at a predetermined position of the vehicle using a signal reception unit built into a portable control unit, and remote control is activated for a predetermined time after an authentication signal that has been recognized as valid and acquired by the vehicle has been acquired only when the visual signal or the audible signal is acquired by the signal reception unit.

Prior Art Documents

Patent Documents

[0005] [Patent Document 1] Patent No. 6354541 [Patent Document 2] Special Publication No. 2016-529767 [Overview of the project] [Problems that the invention aims to solve]

[0006] By the way, in the FOD system, for example, the target function is unlocked by performing operations on the navigation screen or personal authentication using the driver monitor camera. Therefore, in the case of a remote parking system that allows the vehicle to be remotely controlled using a smartphone, when the user starts remote operation from outside the vehicle, personal authentication inside the vehicle was not possible (or was cumbersome). In this case, one possible method is to send information from the smartphone to the vehicle via communication and perform personal authentication on the vehicle side. However, with this method, personal authentication is performed through communication between the smartphone and the vehicle, so it takes time for personal authentication to be established and there is a risk of information leakage due to the transmission and reception of personal information. Patent documents 1 and 2 do not disclose user authentication when the user is inside the vehicle or outside the vehicle, or the unlocking of remote functions based on authentication.

[0007] The present invention aims to provide a control system and control method capable of appropriately determining a user's execution rights regarding a vehicle's target function. Ultimately, this contributes to the development of sustainable transportation systems. [Means for solving the problem]

[0008] The present invention A control system comprising a control device provided by a mobile device, an information terminal owned by the user of the mobile device, and an external server, The control device is A first movement control unit that performs first movement control to move the mobile body while the user is riding on the mobile body, A second movement control unit that performs a second movement control to move the mobile body when the user is not riding on the mobile body, A first communication unit capable of communicating with the aforementioned external server, First input section and Equipped with, The aforementioned information terminal is The aforementioned external server can communicate 2nd Communications Department and, The second input section and It includes a memory unit, The external server stores the user's execution rights for the first movement control and the second movement control. The first movement control unit, state of riding on the aforementioned moving body From the aforementioned user via the first input unit Upon receiving the request to execute the first movement control, By making a query to the external server regarding the first movement control via the first communication unit and without going through the information terminal, A first determination process is performed to determine the user's execution rights regarding the first movement control, and the first movement control is executed based on the result of the first determination process. The aforementioned information terminal is Not riding on the aforementioned mobile body From the aforementioned user via the second input unit Upon receiving the request to execute the second movement control, Through the second communication unit, and without going through the control device, A second determination process is performed to determine the user's execution rights by querying the external server regarding the second movement control, and the second movement control is performed based on the result of the second determination process. Second Mobile Control Unit Let it run, The aforementioned information terminal is The results of the past second determination process are stored in the storage unit. If communication with the external server is not possible, the control device is instructed to execute the second movement control based on the result of the second determination process stored in the storage unit. It is a control system.

[0009] The present invention A control method in a control system including a control device provided by a mobile device, an information terminal owned by the user of the mobile device, and an external server, The control device is A first movement control unit that performs first movement control to move the moving object while the user is on the moving object; A second movement control unit that performs second movement control to move the moving object while the user is not on the moving object; A first communication unit capable of communicating with the aforementioned external server, First input section and It is provided with: The information terminal Is capable of communicating with the external server 2nd Communication unit, The second input section and Memory unit, and is provided with: The external server stores the execution authority of the user for the first movement control and the second movement control, The first movement control unit state of riding on the aforementioned moving body From the user via the first input unit When receiving a request to execute the first movement control, By making a query to the external server regarding the first movement control via the first communication unit and without going through the information terminal, Performs a first determination process to determine the execution authority of the user regarding the first movement control, and executes the first movement control based on the result of the first determination process, The information terminal Not riding on the aforementioned mobile body From the user via the second input unit When receiving a request to execute the second movement control, Through the second communication unit, and without going through the control device, Performs a second determination process to determine the execution authority of the user by making an inquiry to the external server regarding the second movement control, and based on the result of the second determination process, causes the second movement control to be executed in the Second Mobile Control Unit And causes it to be executed, The information terminal Causes the result of the past second determination process to be stored in the storage unit, When communication with the external server is not possible, causes the second movement control to be executed by the control device based on the result of the second determination process stored in the storage unit, It is a control method.

Effect of the Invention

[0010] According to the present invention, it is possible to provide a control system and a control method capable of appropriately determining the execution authority of a user regarding a target function of a vehicle. [Brief explanation of the drawing]

[0011] [Figure 1] This is a side view showing an example of a vehicle 10 equipped with a control device included in the control system of the present invention. [Figure 2] Figure 1 is a top view of the vehicle 10 shown in Figure 1. [Figure 3] Figure 1 is a block diagram showing an example of the internal configuration of vehicle 10. [Figure 4] This figure shows an example of the control system 1 of the present invention. [Figure 5] This figure shows an example of the hardware configuration of an information terminal 60 owned by user U1 of vehicle 10. [Figure 6] This sequence diagram shows an example of a first movement control that moves vehicle 10 while user U1 is riding in vehicle 10. [Figure 7] Figure 6 is a sequence diagram showing the case where user U1 does not have the authority to perform actions related to automatic parking in the first movement control. [Figure 8] This figure shows an example of a message screen displayed during the first movement control. [Figure 9] This figure shows an example of how the movement of vehicle 10 is controlled from outside the vehicle using an information terminal 60. [Figure 10] This is a sequence diagram showing an example of the second decision process in remote parking. [Figure 11] This sequence diagram shows an example of remote parking control performed based on the result of the second decision process. [Figure 12] This figure shows an example of a disclaimer screen 72 displayed on the terminal screen 71 of the information terminal 60. [Figure 13] This figure shows an example of a power-on screen 73 displayed on the terminal screen 71 of the information terminal 60. [Figure 14] This figure shows an example of an execution instruction reception screen 74 displayed on the terminal screen 71 of the information terminal 60. [Figure 15]Figure 10 is a sequence diagram showing the case in the second determination process where user U1 does not have the authority to perform remote parking. [Figure 16] This figure shows an example of a message screen displayed during the second movement control. [Modes for carrying out the invention]

[0012] Hereinafter, an embodiment of the control system and control method of the present invention will be described based on the attached drawings. The drawings should be viewed in the direction of the reference numerals. Furthermore, in order to simplify and clarify the explanation in this specification, the front, rear, left, right, and up directions will be described according to the direction as seen from the driver of the vehicle 10 shown in Figures 1 and 2, and in the drawings, the front of the vehicle 10 will be indicated as Fr, the rear as Rr, the left as L, the right as R, the top as U, and the bottom as D.

[0013] <Vehicle 10 configuration> Figure 1 is a side view showing an example of a vehicle 10 equipped with a control device included in the control system of the present invention. Figure 2 is a top view of the vehicle 10 shown in Figure 1. Vehicle 10 is an example of the "mobile body" of the present invention.

[0014] Vehicle 10 is an automobile having a drive source (not shown) and wheels including drive wheels and steerable wheels that are driven by the power of the drive source. In this embodiment, vehicle 10 is a four-wheeled automobile having a pair of left and right front wheels and rear wheels. The drive source of vehicle 10 is, for example, an electric motor. The drive source of vehicle 10 may be an internal combustion engine such as a gasoline engine or a diesel engine, or a combination of an electric motor and an internal combustion engine. Furthermore, the drive source of vehicle 10 may drive a pair of left and right front wheels, a pair of left and right rear wheels, or all four wheels including a pair of left and right front wheels and rear wheels. Both the front wheels and rear wheels may be steerable wheels, or either one of them may be a steerable wheel.

[0015] Vehicle 10 is further equipped with side mirrors 11L and 11R. Side mirrors 11L and 11R are mirrors (rearview mirrors) provided on the outside of the front passenger doors of vehicle 10 for the driver to check the area behind and to the rear side. Side mirrors 11L and 11R are each fixed to the body of vehicle 10 by a vertically extending pivot axis, and can be opened and closed by rotating around this pivot axis.

[0016] Vehicle 10 is further equipped with a front camera 12Fr, a rear camera 12Rr, a left-side camera 12L, and a right-side camera 12R. The front camera 12Fr is an imaging device (for example, a digital camera) located in front of vehicle 10 that images the area in front of vehicle 10. The rear camera 12Rr is a digital camera located behind vehicle 10 that images the area behind vehicle 10. The left-side camera 12L is a digital camera located on the left side mirror 11L of vehicle 10 that images the area to the left of vehicle 10. The right-side camera 12R is a digital camera located on the right side mirror 11R of vehicle 10 that images the area to the right of vehicle 10.

[0017] <Internal configuration of vehicle 10> Figure 3 is a block diagram showing an example of the internal configuration of the vehicle 10 shown in Figure 1. As shown in Figure 3, the vehicle 10 includes a sensor group 16, a navigation device 18, a control ECU (Electronic Control Unit) 20, an EPS (Electric Power Steering) system 22, and a communication IF 24. The vehicle 10 further includes a drive force control system 26 and a braking force control system 28.

[0018] The sensor group 16 acquires various detection values ​​used for control by the control ECU 20. The sensor group 16 includes a front camera 12Fr, a rear camera 12Rr, a left-side camera 12L, and a right-side camera 12R. The sensor group 16 also includes a front sonar group 32a, a rear sonar group 32b, a left-side sonar group 32c, and a right-side sonar group 32d. Furthermore, the sensor group 16 includes wheel sensors 34a and 34b, a vehicle speed sensor 36, and an operation detection unit 38.

[0019] The front camera 12Fr, rear camera 12Rr, left-side camera 12L, and right-side camera 12R acquire recognition data (e.g., surrounding images) for recognizing the outside world of the vehicle 10 by imaging the area around the vehicle 10. The images of the area around the vehicle 10 captured by the front camera 12Fr, rear camera 12Rr, left-side camera 12L, and right-side camera 12R are referred to as the front image, rear image, left-side image, and right-side image, respectively. The image composed of the left-side image and the right-side image may also be referred to as the side image. The image of the vehicle 10 and its surroundings generated by combining the images captured by the front camera 12Fr, rear camera 12Rr, left-side camera 12L, and right-side camera 12R is referred to as an overhead view image of the vehicle 10.

[0020] The forward sonar group 32a, the rear sonar group 32b, the left-side sonar group 32c, and the right-side sonar group 32d emit sound waves around the vehicle 10 and receive reflected sound from other objects. The forward sonar group 32a includes, for example, four sonars. The sonars constituting the forward sonar group 32a are located on the left front, front left, front right, and right front of the vehicle 10, respectively. The rear sonar group 32b includes, for example, four sonars. The sonars constituting the rear sonar group 32b are located on the left rear, rear left, rear right, and right rear of the vehicle 10, respectively. The left-side sonar group 32c includes, for example, two sonars. The sonars constituting the left-side sonar group 32c are located on the left front and left rear of the vehicle 10, respectively. The right-side sonar group 32d includes, for example, two sonars. The sonars constituting the right-side sonar group 32d are located on the front right side and the rear right side of the vehicle 10, respectively.

[0021] Wheel sensors 34a and 34b detect the rotation angle of the wheels of the vehicle 10. Wheel sensors 34a and 34b may be composed of angle sensors or displacement sensors. Wheel sensors 34a and 34b output a detection pulse each time the wheel rotates by a predetermined angle. The detection pulses output from wheel sensors 34a and 34b are used to calculate the rotation angle and rotation speed of the wheels. Based on the rotation angle of the wheels, the distance traveled by the vehicle 10 is calculated. Wheel sensor 34a detects, for example, the rotation angle θa of the left rear wheel. Wheel sensor 34b detects, for example, the rotation angle θb of the right rear wheel.

[0022] The vehicle speed sensor 36 detects the speed of the vehicle body 10, i.e., the vehicle speed V, and outputs the detected vehicle speed V to the control ECU 20. The vehicle speed sensor 36 detects the vehicle speed V based, for example, on the rotation of the transmission countershaft.

[0023] The operation detection unit 38 detects the user's operation using the operation input unit 14 and outputs the detected operation to the control ECU 20. The operation input unit 14 includes various user interfaces, such as a side mirror switch for switching the open / closed state of the side mirrors 11L and 11R, and a shift lever (selector lever or selector).

[0024] The navigation device 18 detects the current location of the vehicle 10, for example, using GPS (Global Positioning System), and guides the user on the route to the destination. The navigation device 18 has a storage device (not shown) equipped with a map information database.

[0025] The navigation device 18 includes a touch panel 42 and a speaker 44. The touch panel 42 functions as an input and display device for the control ECU 20. The speaker 44 outputs various guidance information to the user of the vehicle 10 by voice.

[0026] The touch panel 42 is configured to allow input of various commands to the control ECU 20. For example, the user can input commands related to vehicle movement assistance for the vehicle 10 via the touch panel 42. Movement assistance includes parking assistance and exit assistance for the vehicle 10. The touch panel 42 is also configured to display various screens related to the control content of the control ECU 20. For example, the touch panel 42 displays screens related to vehicle movement assistance for the vehicle 10. Specifically, the touch panel 42 displays a parking assistance button to request parking assistance for the vehicle 10 and an exit assistance button to request exit assistance. The parking assistance buttons include an auto parking button to request parking by automatic steering of the control ECU 20 and an auxiliary parking button to request assistance when parking by the user. The exit assistance buttons include an auto exit button to request exit by automatic steering of the control ECU 20 and an auxiliary exit button to request assistance when exiting by the user. Other components besides the touch panel 42, such as information terminals like smartphones and tablets, may be used as input or display devices.

[0027] The control ECU 20 includes an input / output unit 50, an arithmetic unit 52, and a storage unit 54. The arithmetic unit 52 is configured, for example, by a CPU (Central Processing Unit). The arithmetic unit 52 performs various controls by controlling each unit based on a program stored in the storage unit 54. The arithmetic unit 52 also inputs and outputs signals to and from each unit connected to the control ECU 20 via the input / output unit 50.

[0028] The arithmetic unit 52 includes a first movement control unit 55, a second movement control unit 56, a first communication unit 57, and a first input unit 58. The arithmetic unit 52 is an example of the "control device" of the present invention.

[0029] The first movement control unit 55 performs a first movement control to move the vehicle 10 while the user is inside the vehicle 10. When the first movement control unit 55 receives a first execution request from the user requesting the execution of the first movement control, it performs a first determination process to determine whether the user has the authority to execute the first movement control. The first movement control unit 55 executes the first movement control based on the result of the first determination process. In this embodiment, "first movement control" refers to controlling the movement of the vehicle 10 from inside the vehicle using the APS (Auto Parking System). "Determination process" refers to the process of authenticating the user (identifying who it is) and determining whether that user has the authority to execute the function of that movement control, for example, by communicating with an external server and querying the server.

[0030] The second movement control unit 56 performs a second movement control that allows the vehicle 10 to be moved when the user is not inside the vehicle 10. In this embodiment, the "second movement control" refers to controlling the movement of the vehicle 10 from outside the vehicle using the RPS (Remote Parking System). The second movement control unit 56 receives instructions to execute movement control from outside the vehicle 10 by communicating with an information terminal held by the user of the vehicle 10, for example, via the communication IF24.

[0031] The first communication unit 57 is a communication unit capable of communicating with an external, for example, a first server. The first server is a server that manages the license information of the vehicle 10. The first server may be a physical server or a virtual server.

[0032] The first input unit 58 is an input unit capable of receiving the first execution instruction of the first movement control. The first input unit 58 may be, for example, the touch panel 42 of the navigation device 18, an in-vehicle camera (drive monitor camera) that captures images of the user inside the vehicle, or an APS-SW. The SW may be a mechanical switch such as a push-button or slide-button, a capacitive switch, or a button displayed on the touch panel.

[0033] Furthermore, if the first determination process determines that the user has valid execution rights regarding the first movement control, the first movement control unit 55 controls the state of the first input unit 58 to accept execution instructions for the first movement control. If the first determination process does not determine that the user has valid execution rights regarding the first movement control, the first movement control unit 55 controls the state of the first input unit 58 to not accept execution instructions for the first movement control. The first movement control unit 55 makes a query to the first server via the first communication unit 57 to have the first determination process executed.

[0034] Furthermore, the first movement control unit 55 provides automatic parking assistance and automatic exit assistance for the vehicle 10 by automatic steering, which automatically operates the steering wheel 110 under the control of the first movement control unit 55. In automatic parking assistance and automatic exit assistance, the accelerator pedal (not shown), brake pedal (not shown), and operation input unit 14 are operated automatically. In addition, the first movement control unit 55 provides auxiliary parking assistance and auxiliary exit assistance when the user (driver) operates the accelerator pedal, brake pedal, and operation input unit 14 to manually park and manually exit the vehicle 10.

[0035] For example, the first movement control unit 55 performs movement control to move the vehicle 10 based on recognition data of the outside world of the vehicle 10 acquired by the front camera 12Fr, rear camera 12Rr, left side camera 12L, and right side camera 12R, and a predetermined parking space specified by the user. The movement control includes parking control to automatically park the vehicle 10 in the predetermined parking space (target parking position) and exit control to automatically exit the vehicle 10 from the predetermined parking space to the user's calling position (target exit position).

[0036] Furthermore, the second movement control unit 56 provides remote parking and remote exit assistance for the vehicle 10 through automatic steering, which automatically operates the steering wheel 110 under the control of the second movement control unit 56. During remote parking and remote exit assistance, the accelerator pedal (not shown), brake pedal (not shown), and operation input unit 14 are operated automatically. In addition, the second movement control unit 56 provides auxiliary parking and auxiliary exit assistance when the user (driver) operates the accelerator pedal, brake pedal, and operation input unit 14 to manually park and exit the vehicle 10. Note that during remote parking and remote exit assistance, the user may be outside the vehicle 10 (unoccupied) or the user may be inside the vehicle 10.

[0037] For example, the second movement control unit 56 performs movement control to move the vehicle 10 based on recognition data of the vehicle 10's external environment acquired by the front camera 12Fr, rear camera 12Rr, left-side camera 12L, and right-side camera 12R, and a predetermined parking space specified by the user. Movement control includes parking control to remotely park the vehicle 10 in a predetermined parking space (target parking position) and exit control to remotely exit the vehicle 10 from the predetermined parking space to a user-requested location (target exit position). The second movement control unit 56 can perform parking control and exit control according to execution instruction signals received from an external source via the communication IF 24. External inputs include wireless communication inputs from an information terminal 60 or the like held by the user of the vehicle 10. The second movement control unit 56 can also transmit information regarding parking control and exit control to an external information terminal 60 via the communication IF 24.

[0038] Furthermore, the first movement control unit 55 and the second movement control unit 56 register a predetermined parking space specified by the user as a designated parking space in the storage unit 54. Based on the recognition data of the vehicle 10's external environment acquired by the front camera 12Fr, rear camera 12Rr, left side camera 12L, and right side camera 12R, the first movement control unit 55 and the second movement control unit 56 register feature points related to the designated parking space in the storage unit 54. Based on the recognition data of the vehicle 10's external environment and the feature points of the designated parking space specified by the user, the first movement control unit 55 and the second movement control unit 56 perform parking control to park the vehicle 10 in the designated parking space and exit control to exit the designated parking space.

[0039] The EPS system 22 includes a steering angle sensor 100, a torque sensor 102, an EPS motor 104, a resolver 106, and an EPS ECU 108. The steering angle sensor 100 detects the steering angle θst of the steering 110. The torque sensor 102 detects the torque TQ applied to the steering 110.

[0040] The EPS motor 104 provides driving force or reaction force to the steering column 112 connected to the steering 110, thereby enabling assistance for the occupant's operation of the steering 110 and automatic steering during parking assistance. The resolver 106 detects the rotation angle θm of the EPS motor 104. The EPS ECU 108 controls the entire EPS system 22. The EPS ECU 108 is equipped with an input / output unit (not shown), a calculation unit (not shown), and a storage unit (not shown).

[0041] The communication IF24 enables wireless communication with other communication devices 120. Other communication devices 120 include base stations, communication devices in other vehicles, external servers, and information terminals such as smartphones or tablets owned by the user of vehicle 10. For example, the communication IF24 is equipped with a UWB interface capable of performing UWB (Ultra Wide Band) communication. In addition to UWB communication, other methods such as BLE (Bluetooth Low Energy), NFC (Near Field Communication), etc., may be used for wireless communication with the information terminal 60.

[0042] The drive force control system 26 includes a drive ECU 130. The drive force control system 26 controls the drive force of the vehicle 10. The drive ECU 130 controls the drive force of the vehicle 10 by controlling an engine (not shown) and other components (not shown) based on user operation of an accelerator pedal (not shown).

[0043] The braking force control system 28 includes a braking ECU 132. The braking force control system 28 controls the braking force of the vehicle 10. The braking ECU 132 controls the braking force of the vehicle 10 by controlling a braking mechanism (not shown) and the like based on user operation of a brake pedal (not shown).

[0044] <Dynamic Control System> Figure 4 shows an example of the control system 1 of the present invention. As shown in Figure 4, the control system 1 includes a server 90 which is an example of the "first server" and "second server" of the present invention, a vehicle 10 and an information terminal 60 that can communicate with the server 90. In this example, one vehicle 10 is shown, but there may be multiple vehicles.

[0045] Server 90 is an external server installed in a facility such as a management center. Server 90 manages permission information regarding the execution rights of vehicle 10, which is acquired when user U1 uses vehicle 10, and associates it with user U1 (user ID). The software for controlling the movement of vehicle 10 is managed by this server 90. Using this software is one of the permission pieces of information regarding the execution rights of vehicle 10. Users can download the software from this server 90. Control system 1 is, for example, a FoD (Function on demand) system.

[0046] Server 90 controls the enabling / disabling (ON / OFF) of functions provided by vehicle 10 when a user uses vehicle 10. Specifically, Server 90 controls the enabling / disabling of functions in vehicle 10 by sending function ON signals to enable functions and function OFF signals to disable functions.

[0047] The information terminal 60 is, for example, a smartphone or tablet owned by the user. After purchasing the vehicle 10, the user purchases execution rights for specific functions of the vehicle 10 online, for example, using the information terminal 60. By sending the execution rights ID obtained through the purchase from the information terminal 60 to the server 90, the user becomes able to use the purchased functions in the vehicle 10.

[0048] Vehicle 10 is a vehicle capable of so-called autonomous driving or assisted driving. The control of autonomous driving includes the first movement control by APS and the second movement control by RPS as described above. Vehicle 10 may be a vehicle whose users are limited, such as a vehicle owned by an individual, or it may be a vehicle whose users are not limited, such as a vehicle owned by a corporation. Those who can use a vehicle owned by an individual include, for example, the vehicle owner themselves, their family, relatives, and friends. Vehicles owned by a corporation include rental cars and car-sharing vehicles that are available to an unspecified number of users under a predetermined contract.

[0049] <Hardware configuration of information terminal 60> Figure 5 shows an example of the hardware configuration of an information terminal 60 owned by user U1 of vehicle 10. The information terminal 60 comprises a processor 61, memory 62, a communication interface 63, and a user interface 64. The processor 61, memory 62, communication interface 63, and user interface 64 are connected, for example, by a bus 65.

[0050] The processor 61 is a circuit that performs signal processing, and is, for example, a CPU (Central Processing Unit) that controls the entire information terminal 60. The processor 61 may also be implemented using other digital circuits such as an FPGA (Field Programmable Gate Array) or a DSP (Digital Signal Processor). Furthermore, the processor 61 may be implemented by combining multiple digital circuits.

[0051] Memory 62 includes, for example, main memory and auxiliary memory. Main memory is, for example, RAM (Random Access Memory). Main memory is used as the work area of ​​processor 61.

[0052] Auxiliary memory is non-volatile memory such as magnetic disks, optical disks, or flash memory. Various programs for operating the information terminal 60 are stored in the auxiliary memory. The programs stored in the auxiliary memory are loaded into main memory and executed by the processor 61.

[0053] Furthermore, the auxiliary memory may include portable memory that can be removed from the information terminal 60. Portable memory may include USB (Universal Serial Bus) flash drives, SD (Secure Digital) memory cards, and external hard disk drives.

[0054] The communication interface 63 is a communication interface that performs wireless communication with the outside of the information terminal 60 (for example, the communication IF24 of the vehicle 10). For example, the communication interface 63 includes a UWB interface for performing UWB communication with the vehicle 10. The communication interface 63 is controlled by the processor 61.

[0055] The user interface 64 includes, for example, an input device that accepts operation input from user U1 and an output device that outputs information to user U1. The input device can be implemented by, for example, a touch panel. The output device can be implemented by, for example, a display or a speaker. The user interface 64 is controlled by the processor 61.

[0056] The processor 61 performs movement control to instruct the movement of the vehicle 10. For example, the processor 61 instructs the vehicle 10 to perform movement control (including parking control and exit control) based on a specific operation performed by user U1 on the terminal screen 71 (see Figure 4) of the information terminal 60. Specific operations include, for example, a slide operation to move the vehicle 10, and a tap operation to reserve parking and exit plans. Slide operations include continuous position instruction operations (e.g., swipe operations) and rotation instruction operations in a predetermined rotation direction (e.g., rotation swipe operations). The processor 61 also generates guidance images to prompt user U1 to perform instruction operations on the terminal screen of the information terminal 60, and controls the display of the generated guidance images on the terminal screen.

[0057] Furthermore, when the processor 61 receives a second execution request from user U1 requesting the execution of the second movement control, it performs a second determination process to determine user U1's execution authority regarding the second movement control. Based on the result of the second determination process, the processor 61 causes the second movement control unit 56 of the vehicle 10 to execute the second movement control. The "second determination process" is a determination process that is executed without going through the second movement control unit 56 of the vehicle 10. That is, the second determination process is a determination process that is executed when the processor 61 of the information terminal 60 communicates with the server 90 without going through the calculation unit 52 of the vehicle 10 and queries the execution authority of user U1. "Casting the vehicle 10 to execute the second movement control" means, for example, moving the vehicle 10 by sending a movement instruction signal to the vehicle 10 in response to the reception of a rotation swipe operation on the terminal screen 71.

[0058] Furthermore, if the processor 61 determines through the second determination process that user U1 has valid execution rights regarding the second movement control, it controls the state of the touch panel on the terminal screen 71 to accept execution instructions for the second movement control. If the processor 61 determines through the second determination process that user U1 does not have valid execution rights regarding the second movement control, it controls the state of the touch panel on the terminal screen 71 to not accept execution instructions for the second movement control. The terminal screen 71 of the information terminal 60 is an input unit capable of receiving the second execution instruction for the second movement control, and is an example of the "second input unit" of the present invention.

[0059] Furthermore, the processor 61 executes a second determination process by querying server 90, which is an example of a second server, via the communication interface 63. The processor 61 and the communication interface 63 are a communication unit capable of communicating with the second server, and are an example of the "second communication unit" of the present invention. The second server may be the same as the first server or may be a different server. The second server may be a physical server or a virtual server. Also, the processor 61 and the user interface 64 are a communication unit capable of communicating with the terminal screen 71, and are an example of the "second communication unit" of the present invention.

[0060] Furthermore, if the processor 61 cannot communicate with the second server, it causes the second movement control unit 56 of the vehicle 10 to execute the second movement control based on the results of past second judgment processes stored in the memory 62. For example, in the case of underground areas (out of range) where radio waves cannot reach the server 90, personal authentication may be performed using the most recent history stored in the information terminal 60. In addition, the "results of past second judgment processes" stored in the memory 62 may be given an expiration date for use as personal authentication. Memory 62 is an example of the "storage unit" of the present invention.

[0061] The processor 61 transmits parking instructions for remote parking and exit instructions for remote exit to the vehicle 10 based on specific operations on the terminal screen 71 of the information terminal 60. The information terminal 60 has an application installed that enables movement control of the vehicle 10 by sending and receiving information related to the movement control of the vehicle 10 to and from the vehicle 10.

[0062] <Automatic movement control by vehicle 10> Figure 6 is a sequence diagram showing an example of a first movement control that moves the vehicle 10 while a user U1 is inside the vehicle 10. The first movement control in this example is an example of parking control when the vehicle 10 is automatically parked.

[0063] First, as shown in Figure 6, the vehicle 10 accepts an operation to activate the automatic parking function (step S11). The operation to activate the automatic parking function is the first request from the user to perform automatic parking (first movement control), and is, for example, a tap operation of the "parking assistance button" displayed on the touch panel 42 of the navigation device 18.

[0064] Next, vehicle 10 performs user authentication for user U1 (step S12). User authentication may be performed by having the user enter a user ID on the touch panel 42, or by facial recognition using camera imaging. Vehicle 10 sends the user information collected during user authentication and a query to the server 90 (first server) regarding whether the user has the authority to execute the first movement control (step S13).

[0065] When server 90 receives an inquiry regarding user U1's execution rights, it obtains execution rights information, which is managed in association with, for example, the user ID (step S14). In this example, it is assumed that user U1 has execution rights related to the automatic parking of vehicle 10. Server 90 sends execution rights information (authorized) to vehicle 10 indicating that user U1 has execution rights related to the automatic parking of vehicle 10 (step S15).

[0066] When vehicle 10 receives execution permission information (authorized) from server 90 in step S15, it activates the "APS switch" which accepts execution instructions for the first movement control by APS, and for example, lights up the "APS switch" button on touch panel 42 (step S16). Then, when the "APS switch" button on touch panel 42 is touched by user U1, vehicle 10 accepts the operation of the APS switch (step S17).

[0067] Next, vehicle 10 starts automatic parking based on the external environment recognition data acquired by each camera and the designated parking space (step S18). Once vehicle 10 has completed automatic parking (step S19), it turns off the ignition (step S20).

[0068] Note that user authentication in step S12 may be performed in advance, for example, when starting to drive vehicle 10. Also, although the first movement control in this example was described as a control to automatically park vehicle 10, it is not limited to this. For example, the first movement control may be a control to automatically exit vehicle 10. In the case of automatic exit, it is not necessary to turn off the ignition after the automatic exit is completed.

[0069] Figure 7 is a sequence diagram showing the case in the first movement control of Figure 6 where user U1 does not have the authority to perform actions related to automatic parking. As shown in Figure 7, the processes from step S11 to step S13 are the same as the processes from step S11 to step S13 described in Figure 6.

[0070] When server 90 receives an inquiry about user U1's execution rights in step S13, it obtains execution rights information that is managed in association with the user ID (step S14). In this example, user U1 does not have execution rights related to the automatic parking of vehicle 10 (no authority). Server 90 sends execution rights information (no authority) to vehicle 10 indicating that user U1 does not have execution rights related to the automatic parking of vehicle 10 (step S15).

[0071] When vehicle 10 receives execution permission information (no permission) from server 90 in step S15, it displays a message on touch panel 42 indicating that it does not have execution permission (step S21).

[0072] Furthermore, the first movement control is not limited to control for automatically parking the vehicle 10, but may also be control for automatically exiting the parking space.

[0073] <Message during the first movement control> Figure 8 shows an example of a message screen displayed during the first movement control. The message screen in this example is the screen displayed on the touch panel 42 in step S21 of the first movement control in Figure 7 when user U1 does not have the authority to perform the automatic parking operation.

[0074] As shown in Figure 8, the message screen 81 includes an execution permission message 81a, such as "You do not have permission to execute the APS function," which informs the user that they do not have the necessary execution permission. The message screen 81 also includes a "Purchase" button 81b for purchasing the APS function execution permission online, and a "Close" button 81c for stopping the operation that attempts to automatically park the vehicle 10.

[0075] <Remote movement control using information terminal 60> Next, with reference to Figures 9 to 16, we will explain the remote movement control of the vehicle 10 using the information terminal 60.

[0076] Figure 9 shows an example of controlling the movement of vehicle 10 from outside the vehicle using an information terminal 60. User U1 of vehicle 10, while not inside the vehicle 10, uses the information terminal 60 owned by user U1 to issue a second movement control execution instruction (parking instruction) to remotely park vehicle 10 in parking space P. This example shows remote parking, but the same applies to, for example, an exit instruction to remotely exit vehicle 10 from parking space P.

[0077] When the information terminal 60 receives a request from user U1 to execute the second movement control, it performs a second determination process with the server 90 to determine whether user U1 has the authority to execute the second movement control, and then causes the vehicle 10 to execute the second movement control based on the result of the second determination process.

[0078] Figure 10 is a sequence diagram showing an example of the second decision process in remote parking. First, as shown in Figure 10, the information terminal 60 held by user U1 receives an operation to activate the remote parking function (step S31). The operation to activate the remote parking function is a second execution request for remote parking (second movement control) from user U1, and is, for example, an operation to launch an application for issuing an execution instruction for movement control of vehicle 10 and tap the "remote parking button".

[0079] Next, the information terminal 60 performs user authentication for user U1 (step S32). User authentication may be performed by having the user enter their user ID on the terminal screen 71 of the information terminal 60, or by facial recognition using camera imaging. The information terminal 60 sends the user information collected during user authentication and a query to the server 90 (second server) regarding whether the user has the authority to execute the second movement control (step S33).

[0080] When server 90 receives an inquiry regarding user U1's execution rights, it obtains execution rights information, which is managed in association with, for example, the user ID (step S34). In this example, it is assumed that user U1 has execution rights related to the remote parking of vehicle 10. Server 90 sends execution rights information (authorized) indicating that user U1 has execution rights related to the remote parking of vehicle 10 to information terminal 60 (step S35).

[0081] When the information terminal 60 receives execution permission information (authorized) from the server 90 in step S35, it activates the "RPS switch" which accepts execution instructions for the second movement control by RPS, and for example, lights up the "RPS switch" button on the touch panel 42 (step S36). Then, when the user U1 touches the "RPS switch" button on the touch panel 42, the vehicle 10 accepts the operation of the RPS switch (step S37) and proceeds to the processing step shown in Figure 11.

[0082] Figure 11 is a sequence diagram showing an example of remote parking control performed based on the result of the second determination process. As explained in Figure 10, when it is determined that user U1 has the authority to perform remote parking of vehicle 10 and the operation of the RPS switch is accepted, the information terminal 60 displays a disclaimer (precautions specified regarding remote parking) on ​​the terminal screen 71 and accepts the agreement operation of user U1 who agrees to the disclaimer (step S38). The disclaimer screen will be described later in Figure 12.

[0083] Next, after receiving the disclaimer agreement operation from user U1, the information terminal 60 accepts a power-on operation to start the vehicle 10 (step S39). The screen for accepting the power-on operation will be described later in Figure 13. The information terminal 60 transmits the power-on instruction received in step S39 and the disclaimer agreement response information received in step S38 to the vehicle 10 (step S40).

[0084] Vehicle 10 selects the information terminal 60 that sent the agreed response information as the driver terminal for user U1, who has execution authority (step S41). As a result, the information terminal 60 becomes a driver terminal capable of instructing vehicle 10 to remotely park, and is connected to vehicle 10 via communication. Vehicle 10 sends a display instruction to the information terminal 60 selected as the driver terminal to display a reception screen that accepts instructions for vehicle 10's parking location (step S42).

[0085] When the information terminal 60 receives a display instruction from the vehicle 10, it displays a parking location reception screen on the terminal screen 71 and accepts the parking location instruction from user U1 (step S43). When the information terminal 60 accepts the parking location instruction, it transmits the accepted parking location instruction to the vehicle 10 (step S44).

[0086] When vehicle 10 receives a parking position instruction from information terminal 60, it sends a display instruction to information terminal 60 to display the screen for receiving instructions to execute remote parking (step S45).

[0087] When the information terminal 60 receives a request from the vehicle 10 to display a reception screen, it displays the reception screen on the terminal screen 71 and receives a remote parking execution instruction from user U1 (step S46). The reception screen for receiving remote parking execution instructions will be described later in Figure 14. When the information terminal 60 receives a remote parking execution instruction from user U1, it transmits the received remote parking execution instruction to the vehicle 10 (step S47).

[0088] When vehicle 10 receives a remote parking instruction from information terminal 60, it starts remote parking in accordance with the instruction (step S48). After completing remote parking (step S49), vehicle 10 turns off the ignition (step S50).

[0089] Note that user authentication in step S32 of Figure 10 may be performed in advance, for example, when the information terminal 60 is woken from sleep mode. Also, although the second movement control in this example was described as a control for remotely parking the vehicle 10, it is not limited to this. For example, the second movement control may be a control for remotely retrieving the vehicle 10. In the case of remote retrieval, it is not necessary to turn off the ignition after the remote retrieval is completed.

[0090] Figure 12 shows an example of a disclaimer screen 72 displayed on the terminal screen 71 of the information terminal 60. The disclaimer screen 72 is displayed when user U1 is deemed to have the authority to perform remote parking of vehicle 10. The disclaimer screen 72 is displayed, for example, in step S38 of Figure 11.

[0091] As shown in Figure 12, the disclaimer screen 72 includes an agreement statement 72a that represents the agreed content, for example, "Note: This function is not fully autonomous driving." The disclaimer screen 72 also includes an agreement button 72b that the user U1 operates when agreeing to the notes. Furthermore, the disclaimer screen 72 includes a statement such as "I agree to the notes" that is displayed when the agreement button 72b is swiped to indicate that the user has agreed to the notes.

[0092] Figure 13 shows an example of a power-up screen 73 displayed on the terminal screen 71 of the information terminal 60. The power-up screen 73 is displayed when the user U1 agrees to the disclaimer operation. The power-up screen 73 is displayed, for example, in step S39 of Figure 11.

[0093] As shown in Figure 13, the power-on screen 73 includes, for example, a vehicle image 73a of vehicle 10 and a power-on button 73b to proceed with remote parking. The power-on screen 73 also includes a close button 73c to close the power-on screen 73 when remote parking is to be canceled.

[0094] Figure 14 shows an example of an execution instruction reception screen 74 displayed on the terminal screen 71 of the information terminal 60. The execution instruction reception screen 74 is displayed when an instruction to display a reception screen for receiving a remote parking execution instruction is received from the vehicle 10. The execution instruction reception screen 74 is displayed, for example, in step S46 of Figure 11.

[0095] As shown in Figure 14, the execution instruction reception screen 74 includes a movement icon 74a that moves in accordance with the touch position of user U1, for example, by a rotational swipe operation. The execution instruction reception screen 74 also includes guidance messages 74b for initiating or temporarily pausing remote parking of vehicle 10, such as "Park by rotating and swiping" or "Stop when you release your finger." The movement icon 74a and guidance messages 74b are examples of guidance images that prompt user U1 to initiate remote parking. The execution instruction reception screen 74 also includes an execution status image 74c above the area where the movement icon 74a is displayed, showing the execution status of parking control for vehicle 10 (how the vehicle is moving). Furthermore, the execution instruction reception screen 74 includes a warning message 74d, for example to the right of the execution status image 74c, such as "Please check your surroundings directly," to alert user U1 performing the instruction operation. For example, while the information terminal 60 is accepting a rotational swipe operation of the movement icon 74a, it sends a remote parking movement instruction that commands the vehicle 10 to move, and when the rotational swipe operation of the movement icon 74a stops, it sends a remote parking stop instruction that commands the vehicle 10 to stop.

[0096] Figure 15 is a sequence diagram showing the case in the second determination process of Figure 10 where user U1 does not have the authority to perform remote parking. As shown in Figure 15, the processes from step S31 to step S33 are the same as the processes from step S31 to step S33 described in Figure 10.

[0097] When server 90 receives an inquiry regarding user U1's execution rights, it obtains execution rights information that is managed in association with the user ID (step S34). In this example, user U1 does not have execution rights related to the remote parking of vehicle 10 (no rights). Server 90 sends execution rights information (no rights) indicating that user U1 does not have execution rights related to the remote parking of vehicle 10 to information terminal 60 (step S35).

[0098] When the information terminal 60 receives execution permission information (no permission) from the server 90 in step S35, it displays a message on the terminal screen 71 indicating that it does not have execution permission (step S41).

[0099] In this example, the control is not limited to remote parking of vehicle 10, but may also be a control for remotely retrieving vehicle 10.

[0100] <Message during the second movement control> Figure 16 shows an example of a message screen displayed during the second movement control. The message screen in this example is the screen displayed on the terminal screen 71 of the information terminal 60 when user U1 does not have the authority to perform remote parking in step S41 of the process shown in Figure 15.

[0101] As shown in Figure 16, the message screen 75 includes an execution permission message 75a, such as "You do not have permission to execute the RPS function," which informs the user that they do not have the necessary execution permission. The message screen 75 also includes a "Purchase" button 75b for purchasing RPS function execution permission online, and a "Close" button 75c for stopping the operation that attempts to remotely park the vehicle 10.

[0102] As described above, in this embodiment, for the first movement control in which user U1 moves the vehicle 10 while user U1 is in the vehicle 10, the calculation unit 52 of the vehicle 10 performs a first determination process to determine whether user U1 has the authority to execute the first movement control. For the second movement control in which user U1 moves the vehicle 10 while user U1 is not in the vehicle 10, the information terminal 60 held by user U1 performs a second determination process to determine whether user U1 has the authority to execute the second movement control, without going through the calculation unit 52 of the vehicle 10. Therefore, even when user U1 is not in the vehicle 10, it is possible to determine whether user U1 has the authority to execute the vehicle 10. This makes it possible to shorten the response time when executing the determination process and prevent the leakage of the user's personal information compared to a configuration in which the information terminal 60 performs the execution authority determination process via, for example, the calculation unit 52 of the vehicle 10. Thus, it is possible to appropriately determine user U1's authority to execute the target functions of the vehicle 10.

[0103] The control method described in the above-mentioned embodiment can be implemented by executing a pre-prepared control program on a computer. This control program is recorded on a computer-readable storage medium and executed when read from the storage medium. This control program may also be provided in the form of a non-transient storage medium such as flash memory, or it may be provided via a network such as the Internet. The computer that executes this control program may be included in the control device and information terminal, or it may be included in an electronic device such as a smartphone, tablet terminal, or personal computer that can communicate with the control device and information terminal, or it may be included in a server device that can communicate with these control devices, information terminals, and electronic devices.

[0104] Although embodiments of the present invention have been described above, the present invention is not limited to the above embodiments, and modifications, improvements, etc., can be made as appropriate.

[0105] In the above embodiment, an example was described in which the moving body is a vehicle (a four-wheeled automobile), but it is not limited to this. For example, it may be a motorcycle, a Segway, or other type of vehicle. Furthermore, the concept of the present invention is not limited to vehicles, but can also be applied to robots, ships, aircraft, etc., that are equipped with a drive source and are able to move using the power of the drive source.

[0106] Furthermore, this specification includes at least the following information. Note that the components etc. in parentheses indicate those corresponding to the embodiments described above, but are not limited thereto.

[0107] (1) A control system (control system 1) that includes a control device (calculation unit 52) ​​provided by a mobile body (vehicle 10) and an information terminal (information terminal 60) possessed by the user of the mobile body, The control device is A first movement control unit (first movement control unit 55) performs first movement control to move the mobile body while the user is riding on the mobile body, A second movement control unit (second movement control unit 56) performs a second movement control to move the mobile body when the user is not riding on the mobile body, Equipped with, When the first movement control unit receives a request from the user to execute the first movement control, it performs a first determination process to determine the user's authority to execute the first movement control, and executes the first movement control based on the result of the first determination process. When the information terminal receives a request from the user to execute the second movement control, it performs a second determination process to determine the user's authority to execute the second movement control, and causes the control device to execute the second movement control based on the result of the second determination process. Control system.

[0108] According to (1), for the second movement control, which moves the mobile device when the user is not on the mobile device, the user's information terminal performs the execution permission determination process without going through the mobile device's control device. This allows the execution permission determination process to be performed even when the user is not on the mobile device, and compared to a configuration in which the information terminal performs the execution permission determination process via the mobile device's control device, it is possible to shorten the response time and prevent the leakage of personal information. This makes it possible to appropriately determine the user's execution permission regarding the target function of the mobile device.

[0109] (2) The control system described in (1), The control device is It is equipped with a first input unit (first input unit 58) capable of receiving an execution instruction for the first movement control, If the first determination process determines that the user's execution rights regarding the first movement control are valid, the first input unit is controlled to accept an execution instruction for the first movement control. The aforementioned information terminal is It is equipped with a second input unit (terminal screen 71) capable of receiving the execution instruction for the second movement control, If the second determination process determines that the user's execution rights regarding the second movement control are valid, the second input unit is controlled to accept an execution instruction for the second movement control. Control system.

[0110] According to (2), when the system determines that the user has the right to execute the second movement control, the information terminal can set the second input unit to accept execution instructions for the second movement control without going through the mobile device's control unit. This allows the system to accept execution rights even when the user is not on the mobile device, and compared to a configuration where the information terminal accepts execution rights via the mobile device's control unit, it is possible to shorten the response time and prevent the leakage of personal information. This makes it possible to appropriately determine the user's execution rights regarding the target functions of the mobile device.

[0111] (3) The control system described in (2), If the control device determines, through the first determination process, that the user's execution rights regarding the first movement control are not valid, the control device controls the first input unit to a state where it does not accept an execution instruction for the first movement control. If the second determination process does not determine that the user's execution rights regarding the second movement control are valid, the information terminal controls the second input unit to a state where it does not accept the execution instruction for the second movement control. Control system.

[0112] According to (3), if the system does not determine that the user's execution rights regarding the second movement control are valid, the information terminal will set the second input unit to a state where it will not accept execution instructions for the second movement control. This allows the system to recognize that execution rights cannot be accepted even when the user is not on the mobile device, and it also shortens response time and prevents leakage of personal information compared to a configuration in which the information terminal accepts execution rights via the mobile device's control unit. This allows the system to appropriately determine the user's execution rights regarding the target functions of the mobile device.

[0113] (4) A control system according to any one of (1) to (3), The control device includes a first communication unit (first communication unit 57) capable of communicating with the first server, and executes the first determination process by making an inquiry to the first server via the first communication unit. The information terminal includes a second communication unit (processor 61 and communication interface 63) capable of communicating with a second server that is the same as or different from the first server, and executes the second determination process by making a query to the second server via the second communication unit. Control system.

[0114] As shown in (4), by having the information terminal query the second server via the second communication unit without going through the mobile device's control unit and execute the second determination process, the execution permission determination process can be performed even when the user is not on the mobile device. Furthermore, compared to a configuration in which the information terminal performs the execution permission determination process via the mobile device's control unit, response time can be shortened and the leakage of personal information can be prevented. This makes it possible to appropriately determine the user's execution permission for the target functions of the mobile device.

[0115] (5) The control system described in (4), The aforementioned information terminal is It includes a storage unit (memory 62) that stores the results of the past second determination process, If communication with the second server is not possible, the control device is instructed to execute the second movement control based on the result of the second determination process stored in the storage unit. Control system.

[0116] According to (5), if communication with the second server fails, the information terminal performs the execution permission determination process based on the result of the second determination process stored in the memory unit without going through the mobile device's control unit. This allows the execution permission determination process to be performed even when the user is not on the mobile device and the communication environment is poor. Furthermore, compared to a configuration in which the information terminal performs the execution permission determination process via the mobile device's control unit, response time can be shortened and the leakage of personal information can be prevented. This makes it possible to appropriately determine the user's execution permission for the target functions of the mobile device.

[0117] (6) A control method in a control system including a control device provided by a mobile body and an information terminal possessed by the user of the mobile body, The control device is A first movement control unit that performs first movement control to move the mobile body while the user is riding on the mobile body, A second movement control unit that performs a second movement control to move the mobile body when the user is not riding on the mobile body, Equipped with, When the first movement control unit receives a request from the user to execute the first movement control, it performs a first determination process to determine the user's authority to execute the first movement control, and executes the first movement control based on the result of the first determination process. When the information terminal receives a request from the user to execute the second movement control, it performs a second determination process to determine the user's authority to execute the second movement control, and causes the control device to execute the second movement control based on the result of the second determination process. Control method.

[0118] According to (6), for the second movement control, which moves the mobile device when the user is not on the mobile device, the user's information terminal performs the execution permission determination process without going through the mobile device's control device. This allows the execution permission determination process to be performed even when the user is not on the mobile device, and compared to a configuration in which the information terminal performs the execution permission determination process via the mobile device's control device, it is possible to shorten the response time and prevent the leakage of personal information. This makes it possible to appropriately determine the user's execution permission regarding the target function of the mobile device. [Explanation of Symbols]

[0119] 10. Vehicles (mobile devices) 52. Arithmetic Unit (Control Device) 55 First Mobile Control Unit 56 Second Mobile Control Unit 57. First Communications Department 58 First Input Section 60 Information terminals 61 Processor (Second Communication Unit) 62 Memory (storage unit) 63. Communication Interface (Second Communication Section) 71 Terminal screen (second input section)

Claims

1. A control system comprising a control device provided by a mobile device, an information terminal owned by the user of the mobile device, and an external server, The control device is A first movement control unit that performs first movement control to move the mobile body while the user is riding on the mobile body, A second movement control unit that performs a second movement control to move the mobile body when the user is not riding on the mobile body, A first communication unit capable of communicating with the aforementioned external server, First input unit, Equipped with, The aforementioned information terminal is A second communication unit capable of communicating with the aforementioned external server, The second input section and It includes a memory unit, The external server stores the user's execution rights for the first movement control and the second movement control. When the first movement control unit receives a request to execute the first movement control from the user who is riding the moving body via the first input unit, it performs a first determination process to determine the user's right to execute the first movement control by querying the external server regarding the first movement control via the first communication unit and without going through the information terminal, and executes the first movement control based on the result of the first determination process. When the information terminal receives a request to execute the second movement control from the user who is not riding the mobile body via the second input unit, it performs a second determination process to determine the user's execution rights by querying the external server regarding the second movement control via the second communication unit and without going through the control device, and causes the second movement control unit to execute the second movement control based on the result of the second determination process. The aforementioned information terminal is The results of the past second determination process are stored in the storage unit. If communication with the external server is not possible, the control device is instructed to execute the second movement control based on the result of the second determination process stored in the storage unit. Control system.

2. A control system according to claim 1, The control device is If the first determination process determines that the user's execution rights regarding the first movement control are valid, the first input unit is controlled to accept an execution instruction for the first movement control. The aforementioned information terminal is If the second determination process determines that the user's execution rights regarding the second movement control are valid, the second input unit is controlled to accept an execution instruction for the second movement control. Control system.

3. A control system according to claim 2, If the control device determines, through the first determination process, that the user's execution authority for the first movement control is not valid, the control device controls the first input unit to a state where it does not accept an execution instruction for the first movement control. If the second determination process does not determine that the user has valid execution rights regarding the second movement control, the information terminal controls the second input unit to a state where it does not accept execution instructions for the second movement control. Control system.

4. A control system according to any one of claims 1 to 3, The first communication unit is capable of communicating with the same or a different first server as the external server. The first server stores the user's authority to execute the first movement control, The first movement control unit executes the first determination process by querying the first server via the first communication unit. Control system.

5. In the control system according to claim 1, The execution rights of the user are the execution rights of the functions of the mobile device, which are released according to the user's contract status. Control system.

6. A control method in a control system including a control device provided by a mobile device, an information terminal owned by the user of the mobile device, and an external server, The control device is A first movement control unit that performs first movement control to move the mobile body while the user is riding on the mobile body, A second movement control unit that performs a second movement control to move the mobile body when the user is not riding on the mobile body, A first communication unit capable of communicating with the aforementioned external server, First input unit, Equipped with, The aforementioned information terminal is A second communication unit capable of communicating with the aforementioned external server, The second input section and It includes a memory unit, The external server stores the user's execution rights for the first movement control and the second movement control. When the first movement control unit receives a request to execute the first movement control from the user who is riding the moving body via the first input unit, it performs a first determination process to determine the user's right to execute the first movement control by querying the external server regarding the first movement control via the first communication unit and without going through the information terminal, and executes the first movement control based on the result of the first determination process. When the information terminal receives a request to execute the second movement control from the user who is not riding the mobile body via the second input unit, it performs a second determination process to determine the user's execution rights by querying the external server regarding the second movement control via the second communication unit and without going through the control device, and causes the second movement control unit to execute the second movement control based on the result of the second determination process. The aforementioned information terminal is The results of the past second determination process are stored in the storage unit. If communication with the external server is not possible, the control device is instructed to execute the second movement control based on the result of the second determination process stored in the storage unit. Control method.

Images