Personal information protection device

Abstract

To provide a personal information protection apparatus that saves encrypted image information of a crew member at an appropriate timing.SOLUTION: A personal information protection apparatus 1 includes a state detection unit 110 that detects a state of a crew member or a cabin, a data acquisition unit 120 that acquires state data from the state detection unit 110, and a data processing unit 200 that performs processing on the state data. A processor 210 of the data processing unit 200 obfuscates the state data, saves the obfuscated state data in a first memory 221, and when acquiring prediction information on an accident of the own vehicle, encrypts the obfuscated state data saved in the first memory 221, saves the encrypted state data in a second memory 222, and upon acquiring the prediction information or occurrence information of the accident of the own vehicle, starts processing the encrypted state data to be stored in a third memory 23.SELECTED DRAWING: Figure 1

Description

【Technical Field】 【0001】 The present invention relates to a personal information protection device. 【Background Art】 【0002】 In recent years, for example, based on the image information of vehicle occupants obtained by an imaging device, a device that monitors the behavior, expression, and physical condition including the health condition of vehicle occupants, executes vehicle driving control, or transmits information to a proper institution when the health condition of the occupant is not satisfactory has been in operation. In addition, for example, as a means for identifying the cause of an accident, a drive recorder that stores images around the vehicle and in the vehicle interior has also become widespread against the backdrop of current social circumstances. 【0003】 Although all of the above devices are useful, for example, when a collision accident or the like occurs in a vehicle, the image information remains in a state visible to anyone, and there is a risk of personal information leakage. 【0004】 To address such risks, for example, a collision detection means for detecting the occurrence or high probability of a collision, a first video storage means for photographing and storing the video before and after that time when the occurrence or high probability of a collision is detected, a first transmission means for wirelessly transmitting a photographing request signal when the occurrence or high probability of a collision is detected, a first reception means for receiving the photographing request signal, a second video storage means for photographing, encrypting, and storing the video before and after that time when the photographing request signal is received, a second transmission means for wirelessly transmitting the encrypted video, a second reception means for receiving the encrypted video, and a third video storage means for storing the encrypted video when the encrypted video is received have been disclosed in, for example, Patent Document 1. 【Prior Art Documents】 【Patent Documents】 【0005】 【Patent Document 1】 Japanese Patent Publication No. 2009-157554 [Overview of the project] [Problems that the invention aims to solve] 【0006】 However, image information inherently contains a large amount of data, and considering memory capacity and other factors, a process of compressing (obfuscating) the video information before encrypting it is appropriate. However, this process is computationally intensive, and there is a challenge in that it is difficult to process image information in real time when an incident occurs while protecting personal information. 【0007】 Therefore, the present invention has been made in view of the above-mentioned problems, and aims to provide a personal information protection device that stores encrypted crew image information at an appropriate time. [Means for solving the problem] 【0008】 Embodiment 1; One or more embodiments of the present invention propose a personal information protection device comprising: a state detection unit for detecting the state of an occupant or the interior of a vehicle; a data acquisition unit for acquiring state data from the state detection unit; and a data processing unit for performing processing on the state data, wherein the data processing unit comprises one or more processors and one or more memories communicably connected to the one or more processors, wherein the one or more processors obfuscate the state data, store the obfuscated state data in a first memory, and when they acquire first trigger information relating to accident prediction information for their own vehicle, encrypt the obfuscated state data stored in the first memory and store the encrypted state data in a second memory, and when they acquire second trigger information relating to accident prediction information or occurrence information for their own vehicle, they initiate a process to store the encrypted state data in a third memory. 【0009】 Embodiment 2; One or more embodiments of the present invention propose a personal information protection device characterized in that, upon acquiring the second trigger information, one or more processors prohibit the writing of newly obfuscated state data to the first memory. 【0010】 Embodiment 3; One or more embodiments of the present invention propose a personal information protection device characterized in that, upon acquiring the second trigger information, one or more processors perform control to reduce the amount of new data to be written to the first memory. 【0011】 Embodiment 4; One or more embodiments of the present invention propose a personal information protection device comprising a transmitting / receiving unit that transmits the encrypted data stored in the third memory to an external device, wherein one or more processors, after acquiring the second trigger information, cause the transmitted / receiving unit to transmit the encrypted state data stored in the third memory to a specific external device. 【0012】 Embodiment 5; One or more embodiments of the present invention propose a personal information protection device characterized in that, when the transmitting / receiving unit receives a data transmission request from another external device, one or more processors, after acquiring the second trigger information, transmit the encrypted state data stored in the third memory to the other external device via the transmitting / receiving unit. [Effects of the Invention] 【0013】 According to one or more embodiments of the present invention, there is an effect that encrypted occupant image information can be appropriately stored at an appropriate time. [Brief explanation of the drawing] 【0014】 [Figure 1] This figure shows the configuration of a personal information protection device according to the first embodiment of the present invention. [Figure 2]It is a diagram showing the processing flow of the personal information protection device according to the first embodiment of the present invention. [Figure 3] It is a diagram showing the configuration of the personal information protection device according to the second embodiment of the present invention. [Figure 4] It is a diagram showing the processing flow of the personal information protection device according to the second embodiment of the present invention. [Figure 5] It is a diagram showing the configuration of the personal information protection device according to the third embodiment of the present invention. [Figure 6] It is a diagram showing the processing flow of the personal information protection device according to the third embodiment of the present invention. 【Mode for Carrying Out the Invention】 【0015】 Hereinafter, embodiments of the present invention will be described with reference to FIGS. 1 to 6. 【0016】 <First Embodiment> The personal information protection device 1 according to the present embodiment will be described with reference to FIGS. 1 and 2. 【0017】 <Configuration of Personal Information Protection Device 1> As shown in FIG. 1, the personal information protection device 1 according to the present embodiment includes a state detection unit 110, a data acquisition unit 120, a transmission / reception unit 130, and a data processing unit 200. 【0018】 The state detection unit 110 detects the state of the occupant or the interior of the vehicle. Specifically, for example, the state detection unit 110 captures an image of the occupant or the interior of the vehicle by an imaging device provided in the front of the vehicle interior. The image information captured by the state detection unit 110 is output as image data as state data to the data acquisition unit 120 described later. Here, the "state data" is image data that captures the state of the occupant or the interior of the vehicle. 【0019】 The data acquisition unit 120 acquires state data from the state detection unit 110. The data acquisition unit 120 sequentially outputs the state data acquired from the state detection unit 110 to the data processing unit 200, which will be described later. 【0020】 The transmitting / receiving unit 130 transmits encrypted data stored in the third memory 223 (described later) to the first external device 500. Specifically, the transmitting / receiving unit 130 transmits encrypted state data stored in the third memory 223 to the first external device 500 after the second trigger information acquisition unit (described later) in the data processing unit 200 acquires accident prediction information or accident occurrence information related to an accident involving its own vehicle as second trigger information. Here, the first external device 500 can be exemplified by a predetermined specific external device, such as a server in a system for responding to emergencies. Furthermore, when the transmitting / receiving unit 130 receives a data transmission request from a second external device 600, which is different from the first external device, the second trigger information acquisition unit (described later) within the data processing unit 200 acquires accident prediction information or accident occurrence information related to the vehicle's accident as second trigger information, and then transmits the encrypted state data stored in the third memory 223 to the second external device 600. Here, the second external device 600 can be exemplified by equipment in hospitals, police stations, fire stations, etc., or a server in a system for diagnosing the faults of the vehicle itself. 【0021】 The data processing unit 200 includes a processor 210 and a memory 220. Furthermore, the processor 210 is configured to include an obfuscation processing unit 211, a first trigger information acquisition unit 212, an encryption processing unit 213, a second trigger information acquisition unit 214, and a storage information processing unit 215. Furthermore, the memory 220 is composed of a first memory 221, a second memory 222, and a third memory 223. 【0022】 The obfuscation processing unit 211 obfuscates the state data input from the data acquisition unit 120 by compressing it. The state data obfuscated by the obfuscation processing unit 211 is stored in the first memory 221. Examples of compression methods include run-length encoding, area image compression, predictive coding, entropy coding, adaptive dictionary algorithms such as LZW, Deflate, and chaincode. 【0023】 The first trigger information acquisition unit 212 acquires accident prediction information from the occupant monitoring system, ADAS (Advanced Driver-Assistance Systems), or pre-sensing device 400, etc., as the first trigger information. When the first trigger information acquisition unit 212 acquires accident prediction information, this fact is notified to the encryption processing unit 213, which will be described later, and the encryption processing unit 213 is activated. 【0024】 The encryption processing unit 213 performs the process of encrypting the obfuscated state data stored in the first memory 221. Examples of encryption methods include symmetric-key encryption methods (private-key methods) such as DES (Data Encryption Standard), RC4 (Rivest Cipher 4), and AES (Advanced Encryption Standard), or public-key encryption methods such as RSA and elliptic curve cryptography. 【0025】 The second trigger information acquisition unit 214 acquires accident prediction information or accident occurrence information. Specifically, if the accident prediction information from the DMS is the first trigger information, then the accident prediction information from the ADAS, presensing device 400, etc., or the accident occurrence information from the collision detection sensor, etc., becomes the second trigger information. Furthermore, if the accident prediction information from the ADAS is the first trigger information, then the accident prediction information from the presensing device 400, etc., or the accident occurrence information from the collision detection sensor, etc., becomes the second trigger information. In addition, if the accident prediction information from the presensing device 400, etc., is the first trigger information, then the accident occurrence information from the collision detection sensor, etc., becomes the second trigger information. Furthermore, when the second trigger information acquisition unit 214 acquires accident prediction information or accident occurrence information, this fact is notified to the storage information processing unit 215, which will be described later. 【0026】 When the memory information processing unit 215 receives notification from the second trigger information acquisition unit 214 that it has acquired accident prediction information or accident occurrence information as second trigger information, it reads some or all of the encrypted state data stored in the second memory 222 and stores it in the third memory 223. 【0027】 For example, the first memory 221 and the second memory 222 can be RAM (Random Access Memory), and the third memory 223 can be NAND flash memory. 【0028】 <Processing by personal information protection device 1> The processing of the personal information protection device 1 according to this embodiment will be explained using Figure 2. 【0029】 As shown in Figure 2, the state detection unit 110 captures an image of the occupants or the interior of the vehicle (step S110) in order to detect the state of the occupants or the interior of the vehicle, and outputs the captured state data to the data acquisition unit 120. The data acquisition unit 120 receives the state data from the state detection unit 110 and outputs the state data to the obfuscation processing unit 211 (step S111). 【0030】 The obfuscation processing unit 211 obfuscates the state data input from the data acquisition unit 120 by compressing it (step S112), and stores the obfuscated state data in the first memory 221 (step S113). 【0031】 The processor 210 determines whether the first trigger information acquisition unit 212 has acquired the first trigger information (step S114). If the processor 210 determines that the first trigger information acquisition unit 212 has not acquired the first trigger information (NO in step S114), it returns to the original state and transitions to standby mode. 【0032】 On the other hand, if the processor 210 determines that the first trigger information acquisition unit 212 has acquired the first trigger information (YES in step S114), it notifies the encryption processing unit 213 of this fact. 【0033】 The encryption processing unit 213 reads the obfuscated state data from the first memory 221, performs encryption processing, and saves the encrypted state data to the second memory 222 (step S115). 【0034】 The processor 210 determines whether the second trigger information acquisition unit 214 has acquired the second trigger information (step S116). If the processor 210 determines that the second trigger information acquisition unit 214 has not acquired the second trigger information (NO in step S116), it returns to the original state and transitions to standby mode. 【0035】 On the other hand, if the processor 210 determines that the second trigger information acquisition unit 214 has acquired the second trigger information (YES in step S116), it reads some or all of the encrypted state data stored in the second memory 222 to the storage information processing unit 215 and stores it in the third memory 223 (step S117). 【0036】 Then, the processor 210 checks the transmit flag (step S118) and causes the first external device 500, which is a specific external device with a transmit flag, to transmit the encrypted state data stored in the third memory 223 via the transmit / receive unit 130 (step S120). 【0037】 On the other hand, if the processor 210 has already sent status data to the first external device 500 (NO in step S118), it determines whether or not there is a transmission request (step S119). If there is a transmission request, it causes the second external device 600, which is another external device, to send the encrypted status data stored in the third memory 223 via the transmitting / receiving unit 130 (step S120). 【0038】 On the other hand, if the processor 210 determines that there is no transmission request ("NO" in step S119), it reverses its processing and enters standby mode. 【0039】 <Effects and Actions> As described above, in the personal information protection device 1 according to this embodiment, the processor 210 of the data processing unit 200 obfuscates the state data acquired by the data acquisition unit 120 from the state detection unit 110 using the obfuscation processing unit 211, and stores the obfuscated state data in the first memory 221. When the first trigger information acquisition unit 212 acquires predictive information regarding an accident involving the vehicle as first trigger information, the processor 210 encrypts the obfuscated state data stored in the first memory 221 using the encryption processing unit 213, and stores the encrypted state data in the second memory 222. Furthermore, when the processor 210 acquires predictive information or occurrence information regarding an accident involving the vehicle as second trigger information from the second trigger information acquisition unit 214, it starts the process of storing the encrypted state data in the third memory 223. In other words, the processor 210 of the data processing unit 200 in the personal information protection device 1 obfuscates the state data acquired by the data acquisition unit 120 from the state detection unit 110, and further encrypts the obfuscated state data before storing it in the third memory 223. Therefore, sufficient protection can be taken for status data, which is personal information. Furthermore, the processor 210 of the data processing unit 200 in the personal information protection device 1 performs parallel processing of obfuscation of the state data acquired by the data acquisition unit 120 from the state detection unit 110, and then encryption of the obfuscated state data. In other words, the process of obfuscating the state data and then encrypting the obfuscated state data is performed in a time-distributed manner. Therefore, the overall processing time can be shortened, and encrypted state data can be saved at the appropriate time. Furthermore, by using a third memory 223 for storing encrypted state data, such as NAND flash memory, which maintains its memory state even when the power is turned off, is resistant to vibration and shock, and has high writing and erasing speeds but low reading speeds, the requirements for the appropriate protection of state data, which is personal information, can be met. Furthermore, in the personal information protection device 1, the processor 210 of the data processing unit 200 acquires predictive information regarding accidents involving the vehicle as first trigger information via the first trigger information acquisition unit 212. The first trigger information acquisition unit 212 then encrypts the obfuscated state data stored in the first memory 221 using the encryption processing unit 213, and stores the encrypted state data in the second memory 222. Furthermore, when the processor 210 obtains prediction information or occurrence information regarding an accident involving its own vehicle as second trigger information from the second trigger information acquisition unit 214, it starts the process of storing encrypted state data in the third memory 223. Here, if the accident prediction information from the DMS is the first trigger information, then the accident prediction information from the ADAS, presensing device 400, etc., or the accident occurrence information from the collision detection sensor, etc., is used as the second trigger information. If the accident prediction information from the ADAS is the first trigger information, then the accident prediction information from the presensing device 400, etc., or the accident occurrence information from the collision detection sensor, etc., is used as the second trigger information. If the accident prediction information from the presensing device 400, etc., is the first trigger information, then the accident occurrence information from the collision detection sensor, etc., is used as the second trigger information. In this case, the process of storing the encrypted state data in the third memory 223 can be executed at an appropriate timing. 【0040】 Furthermore, the personal information protection device 1 according to this embodiment includes a transmitting / receiving unit 130 that transmits encrypted state data stored in the third memory 223 to the first external device 500. The processor 210 obtains prediction information or occurrence information regarding an accident involving its own vehicle as second trigger information from the second trigger information acquisition unit 214, and then transmits the encrypted state data stored in the third memory 223 to the first external device 500 via the transmitting / receiving unit 130. Therefore, while appropriately concealing status data including personal information, it is possible to quickly transmit information about the situation before and after an accident, as well as the condition of the occupants, to a predetermined external device. 【0041】 Furthermore, in the personal information protection device 1 according to this embodiment, when the transmitting / receiving unit 130 receives a data transmission request from the second external device 600, it obtains predictive or occurrence information regarding an accident involving its own vehicle, and then transmits encrypted state data stored in the third memory 223 to the second external device 600 via the transmitting / receiving unit 130. Therefore, while appropriately concealing status data including personal information, it is possible to promptly transmit information about the circumstances before and after an accident, as well as the condition of the occupants, to a predetermined external device upon request. This allows, for example, if the second external device 600 is a hospital device, to quickly learn about the situation before and after the accident and the condition of the occupants, thereby enabling rapid preparation for treating the occupants. 【0042】 <Example 1> In this embodiment, the second external device 600 is exemplified as equipment in a hospital or the like, but it could also be, for example, a server that manages a system in which all kinds of things such as vehicles and landmarks are connected via a network. In this case, by obtaining encrypted state data from the server, etc., it is possible to appropriately protect personal information while understanding the scale and extent of the accident and promptly providing appropriate information to other vehicles traveling in the vicinity. Furthermore, if pre-accident information is included, it is possible to retrospectively determine the cause of the accident based on the vehicle's behavior before the accident. Furthermore, it is possible to obtain information before an accident occurs, and if the cause of the accident is a vehicle malfunction, it is expected that the accident can be prevented through remote control. 【0043】 <Modification 2> 【0044】 In this embodiment, the state detection unit 110 simply captures images of the occupants or the interior of the vehicle. However, if the state detection unit 110 has a function to encrypt and transmit the captured images, that function may be used. In this case, a function to decrypt the encrypted captured images from the state detection unit 110 would be added to the data acquisition unit 120 or the obfuscation processing unit 211 within the data processing unit 200. As a result, data that was previously transmitted without encryption between the state detection unit 110 and the data acquisition unit 120 and the obfuscation processing unit 211 is now encrypted, further enhancing the protection of personal information. This is particularly useful in systems where the state detection unit 110 is provided as a separate component. <Second Embodiment> The personal information protection device 1A according to this embodiment will be explained using Figures 3 and 4. 【0045】 <Configuration of Personal Information Protection Device 1A> As shown in Figure 3, the personal information protection device 1A according to this embodiment is configured to include a state detection unit 110, a data acquisition unit 120, a transmission / reception unit 130, and a data processing unit 200A. Note that components that are denoted by the same reference numerals as those in the first embodiment have similar functions, and therefore, a detailed explanation of them will be omitted. 【0046】 The data processing unit 200A is comprised of a processor 210A and a memory 220. Furthermore, the processor 210A is configured to include an obfuscation processing unit 211, a first trigger information acquisition unit 212, an encryption processing unit 213, a second trigger information acquisition unit 214, a storage information processing unit 215, and a write control unit 216. Furthermore, the memory 220 is composed of a first memory 221, a second memory 222, and a third memory 223. 【0047】 When the second trigger information acquisition unit 214 acquires prediction information or occurrence information regarding an accident involving the vehicle as second trigger information, the write control unit 216 prohibits the writing of newly obfuscated state data to the first memory 221. 【0048】 <Processing of personal information protection device 1A> The processing of the personal information protection device 1A according to this embodiment will be explained using Figure 4. 【0049】 As shown in Figure 4, the state detection unit 110 captures an image of the occupants or the interior of the vehicle (step S110) in order to detect the state of the occupants or the interior of the vehicle, and outputs the captured state data to the data acquisition unit 120. The data acquisition unit 120 receives the state data from the state detection unit 110 and outputs the state data to the obfuscation processing unit 211 (step S111). 【0050】 The obfuscation processing unit 211 obfuscates the state data input from the data acquisition unit 120 by compressing it (step S112), and stores the obfuscated state data in the first memory 221 (step S113). 【0051】 The processor 210A determines whether the first trigger information acquisition unit 212 has acquired the first trigger information (step S114). If the processor 210A determines that the first trigger information acquisition unit 212 has not acquired the first trigger information (NO in step S114), it returns to the original state and transitions to standby mode. 【0052】 On the other hand, if the processor 210A determines that the first trigger information acquisition unit 212 has acquired the first trigger information (YES in step S114), it notifies the encryption processing unit 213 of this fact. 【0053】 The encryption processing unit 213 reads the obfuscated state data from the first memory 221, performs encryption processing, and saves the encrypted state data to the second memory 222 (step S115). 【0054】 On the other hand, if the processor 210A determines that the second trigger information acquisition unit 214 has acquired the second trigger information (YES in step S116), the processor 210A, using the write control unit 216, prohibits the writing of newly obfuscated state data to the first memory 221 (step S210). 【0055】 Then, the processor 210A reads some or all of the encrypted state data stored in the second memory 222 to the memory information processing unit 215 and stores it in the third memory 223 (step S117). 【0056】 Then, the processor 210A checks the transmit flag (step S118) and causes the first external device 500, which is a specific external device with a transmit flag, to transmit the encrypted state data stored in the third memory 223 via the transmit / receive unit 130 (step S120). 【0057】 On the other hand, if the processor 210A has already sent status data to the first external device 500 (NO in step S118), it determines whether or not there is a transmission request (step S119). If there is a transmission request, it causes the second external device 600, which is another external device, to send the encrypted status data stored in the third memory 223 via the transmitting / receiving unit 130 (step S120). 【0058】 On the other hand, if processor 210A determines that there is no transmission request ("NO" in step S119), it reverses its processing and enters standby mode. 【0059】 <Effects and Actions> As described above, in the personal information protection device 1A according to this embodiment, when the second trigger information acquisition unit 214 acquires prediction information or occurrence information regarding an accident of the vehicle as second trigger information, the write control unit 216 prohibits the writing of newly obfuscated state data to the first memory 221. In other words, if the focus is on information prior to an accident involving the vehicle, the above process prevents overwriting of the information in the first memory 221, thus allowing only the necessary information to be appropriately saved. 【0060】 <Third Embodiment> The personal information protection device 1B according to this embodiment will be described using Figures 5 and 6. 【0061】 <Configuration of Personal Information Protection Device 1B> As shown in Figure 5, the personal information protection device 1B according to this embodiment is configured to include a state detection unit 110, a data acquisition unit 120, a transmission / reception unit 130, and a data processing unit 200B. Note that components that are denoted by the same reference numerals as those in the first and second embodiments have similar functions, and therefore, a detailed description thereof will be omitted. 【0062】 The data processing unit 200B is comprised of a processor 210B and memory 220. Furthermore, the processor 210B is configured to include an obfuscation processing unit 211, a first trigger information acquisition unit 212, an encryption processing unit 213, a second trigger information acquisition unit 214, a storage information processing unit 215, and a frame rate change unit 217. Furthermore, the memory 220 is composed of a first memory 221, a second memory 222, and a third memory 223. 【0063】 When the second trigger information acquisition unit 214 acquires prediction information or occurrence information regarding an accident involving the vehicle as second trigger information, the frame rate change unit 217 changes the frame rate to reduce the frequency of writing newly obfuscated state data to the first memory 221. 【0064】 <Processing by personal information protection device 1B> The processing of the personal information protection device 1B according to this embodiment will be explained using Figure 6. 【0065】 As shown in Figure 6, the state detection unit 110 captures an image of the occupants or the interior of the vehicle (step S110) in order to detect the state of the occupants or the interior of the vehicle, and outputs the captured state data to the data acquisition unit 120. The data acquisition unit 120 receives the state data from the state detection unit 110 and outputs the state data to the obfuscation processing unit 211 (step S111). 【0066】 The obfuscation processing unit 211 obfuscates the state data input from the data acquisition unit 120 by compressing it (step S112), and stores the obfuscated state data in the first memory 221 (step S113). 【0067】 The processor 210B determines whether the first trigger information acquisition unit 212 has acquired the first trigger information (step S114). If the processor 210B determines that the first trigger information acquisition unit 212 has not acquired the first trigger information (NO in step S114), it returns to the original state and transitions to standby mode. 【0068】 On the other hand, if the processor 210B determines that the first trigger information acquisition unit 212 has acquired the first trigger information (YES in step S114), it notifies the encryption processing unit 213 of this fact. 【0069】 The encryption processing unit 213 reads the obfuscated state data from the first memory 221, performs encryption processing, and saves the encrypted state data to the second memory 222 (step S115). 【0070】 On the other hand, if the processor 210B determines that the second trigger information acquisition unit 214 has acquired the second trigger information (YES in step S116), the processor 210B changes the frame rate using the frame rate change unit 217 to reduce the frequency of writing newly obfuscated state data to the first memory 221 (step S220). 【0071】 Then, the processor 210B reads some or all of the encrypted state data stored in the second memory 222 to the memory information processing unit 215 and stores it in the third memory 223 (step S117). 【0072】 Then, the processor 210B checks the transmit flag (step S118) and causes the first external device 500, which is a specific external device with a transmit flag, to transmit the encrypted state data stored in the third memory 223 via the transmit / receive unit 130 (step S120). 【0073】 On the other hand, if the processor 210B has already sent status data to the first external device 500 ("NO" in step S118), it determines whether or not there is a transmission request (step S119). If there is a transmission request, it causes the second external device 600, which is another external device, to send the encrypted status data stored in the third memory 223 via the transmitting / receiving unit 130 (step S120). 【0074】 On the other hand, if processor 210B determines that there is no transmission request ("NO" in step S119), it reverses its processing and enters standby mode. 【0075】 <Effects and Actions> As described above, in the personal information protection device 1B according to this embodiment, when the second trigger information acquisition unit 214 acquires prediction information or occurrence information regarding an accident of the vehicle as second trigger information, the frame rate change unit 217 changes the frame rate to reduce the frequency of writing newly obfuscated state data to the first memory 221. In other words, if the information after an accident involving the vehicle is important, the above process allows the frame rate to be changed so that when the second trigger information acquisition unit 214 acquires predictive or occurrence information regarding the vehicle's accident as second trigger information, the frequency of writing newly obfuscated state data to the first memory 221 is reduced, thereby allowing the information after an accident involving the vehicle to be stored in the first memory 221 for a longer period. 【0076】 <Variation 3> In the above embodiment, when the processors 210, 210A, and 210B determine that the second trigger information acquisition unit 214 has acquired the second trigger information, the storage information processing unit 215 reads some or all of the encrypted state data stored in the second memory 222 and stores it in the third memory 223. Here, a portion of the encrypted state data stored in the second memory 222 that the memory information processing unit 215 reads may be any set of state data, such as the most recent set of state data written to the second memory 222 or the initial set of state data written. By doing so, it is possible to appropriately store only specific sets of state data according to their intended use, thereby reducing the processing load. <Modification 4> In the third embodiment, when the second trigger information acquisition unit 214 acquires prediction information or occurrence information regarding an accident involving the vehicle as second trigger information, a frame rate changing unit 217 is provided to change the frame rate so as to reduce the frequency of writing newly obfuscated state data to the first memory 221. However, since this is intended to reduce the amount of new data that needs to be written to the first memory when predictive or actual accident information related to the vehicle is acquired, it may be done by methods such as reducing the cropping size in image cropping. 【0077】 Furthermore, the personal information protection devices 1, 1A, and 1B of the present invention can be realized by recording the processing of processors 210, 210A, and 210B onto a recording medium readable by a computer system, and then loading and executing the program recorded on this recording medium into processors 210, 210A, and 210B. The computer system referred to here includes hardware such as an operating system and peripheral devices. 【0078】 Furthermore, "computer system" includes the homepage provisioning environment (or display environment) if the WWW (World Wide Web) system is being used. The above program may also be transmitted from the computer system in which the program is stored to another computer system via a transmission medium or by transmission waves within the transmission medium. Here, "transmission medium" for transmitting the program refers to a medium that has the function of transmitting information, such as a network (communication network) such as the Internet or a communication line (communication line) such as a telephone line. 【0079】 Furthermore, the above program may be intended to implement some of the functions described above. It may also be a so-called differential file (differential program) that can implement the aforementioned functions in combination with programs already recorded in the computer system. 【0080】 While embodiments of this invention have been described in detail above with reference to the drawings, the specific configuration is not limited to these embodiments and includes designs and the like that do not depart from the spirit of this invention. [Explanation of symbols] 【0081】 1; Personal information protection device 1A; Personal information protection device 1B; Personal information protection device 110; State detection unit 120; Data acquisition unit 130; Transmitter / Receiver 200; Data Processing Processing Unit 200A; Data Processing Unit 200B; Data Processing Section 210; Processor 210A; Processor 210B; Processor 211; Obfuscation Processing Unit 212; First trigger information acquisition unit 213; Encryption Processing Unit 214; Second trigger information acquisition unit 215; Recording Information Processing Unit 216; Writing control unit 217; Frame rate change section 220; memory 221; First memory 222; Second memory 223; Third memory 300;External equipment 400; Sensor 500; First external device 600; Second external device

Claims

[Claim 1] A state detection unit that detects the state of the occupants or the interior of the vehicle, A data acquisition unit that acquires state data from the state detection unit, A data processing unit that performs processing on the aforementioned state data, Equipped with, The data processing unit comprises one or more processors and one or more memories that are communicably connected to the one or more processors. A personal information protection device characterized in that, upon obtaining first trigger information relating to accident prediction information for the vehicle, one or more processors obfuscate the state data, store the obfuscated state data in a first memory, encrypt the obfuscated state data stored in the first memory, store the encrypted state data in a second memory, and upon obtaining second trigger information relating to accident prediction information or occurrence information for the vehicle, initiate a process to store the encrypted state data in a third memory. [Claim 2] The personal information protection device according to claim 1, characterized in that when one or more processors acquire the second trigger information, they prohibit the writing of the newly obfuscated state data to the first memory. [Claim 3] The personal information protection device according to claim 1, characterized in that when one or more processors acquire the second trigger information, they perform control to reduce the amount of new data to be written to the first memory. [Claim 4] The personal information protection device according to claim 1, further comprising a transmitting / receiving unit that transmits the encrypted state data stored in the third memory to an external device, wherein one or more processors, after acquiring the second trigger information, cause the transmitting / receiving unit to transmit the encrypted state data stored in the third memory to a specific external device. [Claim 5] The personal information protection device according to claim 4, characterized in that when the transmitting / receiving unit receives a data transmission request from another external device, one or more processors, after acquiring the second trigger information, transmit the encrypted state data stored in the third memory to the other external device via the transmitting / receiving unit.

Images