Control device, control method, and program

Abstract

To appropriately limit a remote operation right of a vehicle.SOLUTION: A control device: acquires positional information of a vehicle; sets an allowable remote operation range of the vehicle according to vehicle movement information during a first predetermined period based on the positional information; and determines whether or not to limit remote operation input from a corresponding user terminal, which is a user terminal associated with the vehicle, into the vehicle according to a stop position of the vehicle based on the positional information and the allowable remote operation range. The vehicle movement information includes the positional information of the vehicle during the first predetermined period and a state of visiting a position.SELECTED DRAWING: Figure 6

Description

【Technical Field】 【0001】 The present invention relates to a control device, a control method, and a program. 【Background Art】 【0002】 Conventionally, there are known devices and systems that cause a vehicle to execute a requested operation in response to a remote operation request from a vehicle user. In Patent Document 1, a technique for determining allowable / non-allowable of a remote operation based on a parking position is disclosed so that an inappropriate remote operation is not executed in light of the current situation of the vehicle. 【Prior Art Documents】 【Patent Documents】 【0003】 【Patent Document 1】 Japanese Patent No. 4403985 【Summary of the Invention】<O000020> 【Problems to be Solved by the Invention】 【0004】 However, in the technique described in Patent Document 1, there is a problem that, for example, when the ownership of a vehicle is transferred to another person by a malicious user such as reselling of the vehicle, the authority of the remote operation remains with the original user. 【0005】 Therefore, an object of the present invention is to appropriately restrict the authority of remote operation of a vehicle. Further, the present invention particularly considers the needs of people in vulnerable positions, women, children, disabled persons, and the elderly, and provides access to a sustainable transportation system that is safe, inexpensive, and easily accessible to all people through improvement of traffic safety such as expansion of public transportation. 【Means for Solving the Problems】 【0006】 <000O033>According to the present invention, control device [[ID=U9]] a first acquisition means for acquiring position information of a vehicle, A first setting means for setting the remote control permission range of the vehicle based on the vehicle's movement information during a first predetermined period based on the location information, Based on the vehicle's stopping position according to the location information and the remote control permission range, remote control input to the vehicle is provided from a corresponding user terminal, which is a user terminal associated with the vehicle. The control device A means of making a decision on whether or not to impose a restriction, Equipped with, The movement information includes the position information of the vehicle during the first predetermined period and the Stop A control device is provided, characterized in that it includes the status of visits to a location. [Effects of the Invention] 【0007】 According to the present invention, it is possible to appropriately restrict the authority to remotely control a vehicle. [Brief explanation of the drawing] 【0008】 [Figure 1] This figure shows an example of a system configuration for providing the remote control service of the present invention. [Figure 2] A diagram showing an example of the control device configuration. [Figure 3] A diagram showing an example of data stored in a database. [Figure 4] A diagram showing an example of the hardware configuration of an in-vehicle device. [Figure 5] A diagram showing an example of the hardware configuration of a user terminal. [Figure 6] A diagram showing an example of a GUI for initial setup in a vehicle and user terminal. [Figure 7] This figure shows an example of a GUI on a user terminal when a remote control service is being executed. [Figure 8] A flowchart illustrating an example of the remote control permission range setting process according to one embodiment. [Figure 9] A flowchart illustrating an example of a remote control input restriction process according to one embodiment. [Figure 10]A diagram illustrating the vehicle's position when restricting remote control input. [Modes for carrying out the invention] 【0009】 The embodiments will be described in detail below with reference to the attached drawings. Note that the following embodiments do not limit the invention as defined in the claims, and not all combinations of features described in the embodiments are essential to the invention. Two or more of the features described in the embodiments may be combined in any way. Furthermore, identical or similar configurations will be given the same reference numeral, and redundant descriptions will be omitted. 【0010】 A control device according to one embodiment of the present invention acquires vehicle location information and sets a remote control permission range for the vehicle based on the vehicle's movement information during a first predetermined period based on the location information. The control device then determines whether or not to restrict remote control input to the vehicle from a corresponding user terminal, which is a user terminal associated with the vehicle, based on the vehicle's stopping position based on the location information and the remote control permission range. Here, the movement information includes the vehicle's location information during the first predetermined period and the status of visits to that location. This control device is particularly used for the remote control of a vehicle. In this embodiment, the control device is described as a server that communicates with the vehicle and the user terminal, but this is just an example, and the configuration is not limited as long as similar control is possible, for example, if some of the functions are performed by in-vehicle equipment. 【0011】 [system] Figure 1 is a system diagram showing an example of the configuration of a remote control service for remotely controlling a vehicle 110, including a control device 100 according to this embodiment. As described above, the control device 100 according to this embodiment is a server and is connected to the vehicle 110 and user terminal 120 via a network 130 so as to be able to communicate with them. In the example of Figure 1, one vehicle 110 and one user terminal 120 are shown, but their number is not particularly limited. In the following, the vehicle's onboard equipment will also be referred to as "vehicle". 【0012】 In the remote operation service according to this embodiment, based on the remote operation input on the user terminal 120, the control device 100 controls the vehicle 110. In this embodiment, there is a corresponding user terminal associated with each vehicle 110, and the vehicle 110 is controlled by the remote operation input to the corresponding user terminal. 【0013】 As the remote operation input, for example, unlocking of the vehicle 110 or starting of the vehicle (power supply) is performed, but it is not particularly limited thereto. For example, the user terminal 120 may receive, as a remote operation input, an operation for controlling in-vehicle devices such as starting of an air conditioner or control for making the vehicle easier to find (for example, turning on the lights) by means of a GUI as shown in FIG. 7 described later, and may receive a remote operation input regarding other functions in the vehicle 110. In this embodiment, it is assumed that the user terminal 120 receives a remote operation input by the user via a dedicated application for controlling the remote operation service, and the control device 100 controls the vehicle 110 via the network 130. Hereinafter, when simply expressed as "application", it refers to the application for controlling the above-described remote operation service. 【0014】 An operation example in the application according to this embodiment will be described. The control device 100 according to this embodiment associates the vehicle 110 with the user terminal 120. Here, when the vehicle 110 is started, identification information is displayed on the display unit inside the vehicle 110, and when the user terminal 120 receives the input of the identification information, the vehicle 110 and the user terminal 120 are associated with each other. As the identification information, for example, a PIN (Personal Identification Number) code represented by four digits is used. The vehicle 110 performs various operations such as unlocking the door or starting the power supply in response to the remote operation input entered via the application on the user terminal 120. 【0015】 In the present embodiment, it is assumed that the control device 100 controls the vehicle 110 based on a remote operation input on the user terminal 120. However, the user terminal 120 may communicate directly with the vehicle 110 and perform part or all of the control. The user terminal 120 can be connected to the vehicle 110, for example, by short-range wireless communication, and can control the vehicle 110. For example, when associating the user terminal 120 with the vehicle 110 by inputting identification information into the user terminal for the first time, the control device 100 controls the vehicle 110. Next, for remote operations such as unlocking the vehicle 110 within a predetermined period (for example, two months) after associating the user terminal 120 with the vehicle 110, communication of the remote operation may be performed from the user terminal 120 to the vehicle 110 without passing through the control device 100. In this case, when the control device 100 restricts the remote operation input from the user terminal 120 by the process described later, the communication of the remote operation by short-range wireless communication from the user terminal 120 to the vehicle 110 is restricted by the control device 100. 【0016】 In the present embodiment, the vehicle 110 will be described as a four-wheel automobile. However, vehicles of different forms, such as two-wheel saddle-type vehicles, may be used as the vehicle 110. The user terminal 120 is a portable terminal such as a smartphone, and accepts input by the user including remote operation input. The user terminal 120 according to the present embodiment can function as a digital key for unlocking the vehicle 110 by input via an application. 【0017】 FIG. 2 is a block diagram showing an example of the hardware configuration of the control device 100 according to the present embodiment. The control device 100 includes a processing unit 201, a storage unit 202, and a communication unit 203. The processing unit 201 is a processor represented by a CPU and executes a program stored in the storage unit 202. The storage unit 202 is a storage device such as a RAM, a ROM, or a hard disk. The communication unit 203 includes a wired or wireless communication interface capable of communicating with the vehicle 110 or the user terminal 120 via a communication network. 【0018】 The storage unit 202 stores various data in addition to the program executed by the processing unit 201. The program may be installed on the control device 100 from a storage medium such as a CD-ROM. In the example in Figure 2, databases (DBs) 211 to 212 are shown as examples of data stored in the storage unit 202. Here, DB211 is a database that stores information associating vehicles with corresponding user terminals. DB212 is a database that stores information indicating user terminals and user terminals associated with that user terminal (for example, registered as family members). Note that DB211 and DB212 may be separate databases or may be combined into a single database. In this embodiment, for convenience, the databases are described separately, but this does not mean that they must exist as separate databases. Figure 3 is a diagram that simply illustrates these DBs. 【0019】 DB211 stores a record for each user terminal 120, registering information about the user terminal, the vehicle associated with that user terminal, and how long the association will be maintained (expiration date). In this embodiment, DB211 also stores information indicating the remote control permission range set for each user terminal, and information (restriction information) indicating whether remote control input is restricted by the control device 100. The record stored in DB211 includes, as illustrated in Figure 3(a), a user ID 301 corresponding to the user terminal, a vehicle ID 302 corresponding to the vehicle, a remote control permission range 303, a restriction status 304, and an expiration date 305. Here, the remote control permission range 303 is indicated by the coordinates of the center for setting the remote control permission range. The expiration date 305 is stored as the date on which the association between vehicle 110 and user terminal 120 is resolved, but it may be represented in another way, for example, by storing information indicating the remaining period. Furthermore, in this embodiment, the remote control permission range is registered in association with each user terminal 120 (as the remote control permission range for the vehicle associated with the user terminal), but it is also possible for the remote control permission range to be registered in association with the vehicle 110. 【0020】 DB212 stores a record for each of the 120 user terminals, registering both the user terminal and the user terminals associated with that terminal. As illustrated in Figure 3(b), the records stored in DB212 include a user ID 305 corresponding to the user terminal and a related user ID 306 corresponding to the associated user terminal. Here, multiple user terminals may be registered for a single user terminal, and there is no limit to the number. In addition, while the example in Figure 3(b) shows that associated user terminals are registered and managed for each user terminal, similar association information may be stored in DB212 by registering a group of associated user terminals. 【0021】 The user ID will be assigned to the user terminal 120 by the control device 100 based on information obtained from the user terminal 120 via communication. However, an ID generated using information entered by the user via an application or the like may also be assigned as the user ID. 【0022】 Figure 4 is a block diagram showing an example of the hardware configuration of the in-vehicle device of the vehicle 110 according to this embodiment. The vehicle 110 includes a processing unit 401, a storage unit 402, a communication unit 403, an input unit 404, a notification unit 405, and a GPS (Global Positioning System) sensor 406. The processing unit 401 is a processor, such as a CPU, and executes programs stored in the storage unit 402. The storage unit 402 is a storage device such as RAM or ROM. The programs stored in the storage unit 402 also include application programs for using the services of this embodiment. 【0023】 The communication unit 403 is a communication device for communicating with external devices. The communication unit 403 includes, for example, a wireless communication device that can communicate with the control device 100 via a communication network. The communication unit 403 also includes, for example, a wireless communication device that can communicate with the user terminal 120 via short-range wireless communication. The input unit 404 is a device that receives user input. The notification unit 405 is a notification device inside the vehicle 110 that notifies the user of information, for example, by displaying it on a screen. In this embodiment, the input unit 404 and the notification unit 405 may constitute a touch panel display to enable operation by touch input, or they may be operated by mechanical switches or dials, for example. The GPS sensor 406 is a sensor that acquires vehicle position information indicating the current position of the vehicle 110, and the vehicle position information is transmitted to the control device 100 via the communication unit 403. As described above, the notification unit 405 in this embodiment can notify identification information such as a PIN code when the vehicle 110 is started. This notification may be a display on a screen, an audio notification, or any other method as long as it can notify the user. In the following explanation, the notification unit 405 will be described assuming that it provides notifications by displaying them on the display. 【0024】 Here, the notification unit 405 notifies the user of identification information when the vehicle 110 is unlocked. The user may also be notified of the identification information when the vehicle 110 is started. When the vehicle 110 is unlocked for the first time (before the user terminal 120 is registered with the vehicle 110) without going through the user terminal 120 (for example, by a physical key), the notification device inside the vehicle 110 notifies the user of the identification information, thereby notifying the appropriate (unlockable) user of the identification information and enabling proper initial setup by associating the vehicle 110 with the user terminal 120. In this embodiment, when the control device 100 confirms that the user terminal has entered the identification information displayed in the notification unit 405, it registers the user terminal as a corresponding user terminal for the vehicle 110 (for example, in the form shown in Figure 3(a)). An example of the display for entering the identification information on the user terminal 120 will be described later with reference to Figure 6(a). 【0025】 Furthermore, the communication unit 403 can detect user terminals inside the vehicle 110 via short-range wireless communication. Here, the communication unit 403 may generate information (indicated by a user ID) indicating the user terminals 120 that were inside the vehicle 110 when the vehicle 110 was stopped, and transmit it to the control device 100. In that case, the control device 100 can refer to the associated remote control permission range for each user terminal 120 that was inside the vehicle 110 when the vehicle 110 was stopped, and based on the referenced remote control permission range and the stopping position of the stopped vehicle 110, it can determine whether or not to restrict remote control input to the vehicle 110 (the determination of whether or not to restrict remote control input will be described later). Through this process, it is possible to determine whether or not to restrict remote control input using the remote control permission range associated with the user terminal of the last user in the vehicle 110. Furthermore, if there are multiple user terminals 120 inside the vehicle 110 when the vehicle 110 is stopped, the vehicle's stopping position will be determined to be outside the remote control permission range if it is outside the remote control permission range associated with any of those user terminals 120. 【0026】 Figure 5 is a block diagram showing an example of the hardware configuration of the user terminal 120 according to this embodiment. Since the user terminal 120 has functional units that can perform basically the same functions as the vehicle 110, redundant explanations will be omitted. 【0027】 In this embodiment, the location information of the vehicle 110 (vehicle location information) and the location information of the user terminal 120 (terminal location information) are described as information indicating the location relative to map information acquired by a GPS sensor, and are acquired and updated at predetermined intervals. However, the control device 100 may acquire each location information by a different procedure, for example, by transmitting the location information of the vehicle 110 or the user terminal 120 to the control device 100 from a device at an external facility. 【0028】 [Remote Control Service] The following describes the details of the processing performed by the control device 100 in the remote operation service according to this embodiment. The processing described below is performed by the processing unit 201 of the control device 100. 【0029】 The control device 100 acquires location information of the vehicle 110 and sets the remote control permission range for the vehicle 110 based on the movement information of the vehicle 110 during a first predetermined period based on the location information. The remote control permission range according to this embodiment is set to restrict remote control input from the user terminal 120 when, for example, the vehicle's stopping position is outside the remote control permission range for a third predetermined period, but details will be described later. The first predetermined period according to this embodiment can be set arbitrarily, but for example, it is set to a predetermined number of days (such as the most recent 30 days). Here, the predetermined number of days (including the second predetermined period and the third predetermined period described below) refers to the passage of time beyond a predetermined time in a day (for example, 0:00), that is, it is calculated by the number of times the day crosses, but it may also be calculated as 1 day for every 24 hours that have passed, or the number of days may be calculated by other calculation methods if it is used as a guideline for the passage of days. 【0030】 The movement information of vehicle 100 includes the visit status of the vehicle to a certain location during a first predetermined period. Here, the visit status includes the number of visits to a certain location by vehicle 100, or the stop period. In this embodiment, the control device 100 may set as the remote operation permission range a range that is set based on the location where the stop period of vehicle 110 spans a second predetermined period as described below. Alternatively, for example, the control device 100 may set as the remote operation permission range a range that is set based on the location where the number of visits (number of stops) of vehicle 110 is equal to or greater than a predetermined number. An example of the process of setting the remote operation permission range by the control device 100 will be described below. 【0031】 For example, the control device 100 may set the remote control permission range as a range set based on the position where the vehicle 110 has been continuously stopped for a second predetermined period within a first predetermined period. In this case, the remote control permission range can be a predetermined range (for example, a radius of 100 meters) centered on the position where the vehicle has been continuously stopped for the second predetermined period (taking into account deviations in position information and deviations in the stopping position). The second predetermined period can be arbitrarily set as a predetermined number of days, for example, 3 days. Here, it may be defined as the vehicle being stopped at the same position if it continues to be located at the same coordinates (with a margin that can be set) as determined by the GPS sensor, or it may be defined as the vehicle being stopped at the same position if it continues to be located at the same facility on the map (for example, a parking lot). 【0032】 For example, the control device 100 may set the remote control permission range as a range set based on the position where the number of times the vehicle has stopped during a first predetermined period is greater than or equal to a predetermined number. In this case, the remote control permission range can be a predetermined range (for example, a radius of 100 meters) centered on the position where the number of times the vehicle's startup has been stopped during the first predetermined period is greater than or equal to a predetermined number. Here, the predetermined number can be arbitrarily set according to the requirements of the user of the control device 100, for example, four times. 【0033】 Furthermore, for example, the control device 100 may determine an area that has been passed over by a vehicle more than a predetermined number of times during a first predetermined period, and set a predetermined range based on that area as the remote control permission range. In this case, for example, the control device 100 may directly detect the area that has been passed over more than a predetermined number of times, or it may detect multiple points that have been passed over more than a predetermined number of times and determine the area that has been passed over more than a predetermined number of times based on them. Here, the remote control permission range may be, for example, an area centered on the area that has been passed over more than a predetermined number of times plus a predetermined width (for example, 20 meters), or it may be a group of areas within a predetermined range (for example, a radius of 100 meters) from each point that has been passed over a predetermined number of times. The predetermined number here can also be arbitrarily set according to the requirements of the user of the control device 100, for example, 4 times. 【0034】 Furthermore, for example, the control device 100 may set a range as the remote control permission range, which is set based on the location where a specific operation for remote control input to the vehicle has been performed at the user terminal 120 at a predetermined number of times during a first predetermined period. In this case, the remote control permission range can be, for example, a predetermined range (for example, a radius of 100 meters) centered on the location where the specific operation has been performed at a predetermined number of times during the first predetermined period. The predetermined number here can also be arbitrarily set according to the requirements of the user of the control device 100, for example, four times. Here, the specific operation for remote control input to the vehicle is defined as an operation to activate user input, including, for example, an operation to start an application on the user terminal 120, an operation to log in on the application, or an operation to perform remote control input on the application. 【0035】 By setting the remote control permission range through these processes, it becomes possible to designate areas frequently used by vehicles as the remote control permission range, and restrict remote control input if the vehicle is parked outside of this range for an extended period, as this may pose a risk of misuse. 【0036】 These remote control permission range update processes shall be performed when predetermined conditions are met. For example, if the control device 100 detects a position in which the vehicle 110 has been stopped for a period longer than the period in which it was stopped at the position used to set the remote control permission range in the previous update, during the first predetermined period, it may update the range to be set using the newly detected position as the new remote control permission range. For example, if the control device 100 has set the range to be set based on a position in which the vehicle has been stopped for a second predetermined period within the first predetermined period as the remote control permission range, then if a position in which the vehicle 110 has been stopped for a second predetermined period or longer is newly detected, it may update and set a predetermined range centered on that position as the next remote control permission range. Also, for example, if the control device 100 has set the range to be set based on a position in which the vehicle has been stopped a predetermined number of times or more during the first predetermined period as the remote control permission range, then if a position in which the vehicle 110 has been stopped a predetermined number of times or more during the first predetermined period is newly detected, it may update and set a predetermined range centered on that position as the next remote control permission range. 【0037】 Furthermore, the process of updating the remote control permission range may be performed, for example, daily, or it may be set to update the remote control permission range at predetermined intervals (for example, one month). With such a process, it becomes possible to set the remote control permission range to restrict remote control input when the vehicle 110 continues to stop at a location away from the location where stopping is most frequent. 【0038】 Furthermore, the control device 100 may restrict remote control input until a specific operation is performed on the user terminal 120 associated with the vehicle when the remote control permission range is updated. In this case, when the remote control permission range is updated, the application login state on the user terminal 120 may be canceled, and remote control input may be disabled in a logged-out state until a login input is performed as a specific operation. 【0039】 This remote control permission range update process may also be a process that sets only the newly configured remote control permission range as the next remote control permission range. Alternatively, the remote control permission range update process may be a process that sets all remote control permission ranges that have been newly configured from the present time to the most recent first predetermined period as the remote control permission range. 【0040】 Furthermore, when the update process is performed, the login status of all user terminals 120 associated with the vehicle 110 is canceled. If a login is performed using the same user terminal 120 that was logged in during the previous update process, both the previous remote control permission range and the new remote control permission range may be set as the updated remote control permission range. Additionally, if a login is performed using a user terminal different from the one that was logged in during the previous update process after the login status has been canceled, only the new remote control permission range may be set as the updated remote control permission range. 【0041】 The control device 100 determines whether or not to restrict remote control input from the user terminal 120 to the vehicle 110 based on the vehicle position information, the stopping position of the vehicle 110, and the remote control permission range. For example, the control device 100 can determine to restrict remote control input if the stopping position of the vehicle 110 is outside the remote control permission range for a third predetermined period. The third predetermined period in this embodiment can be set arbitrarily, but for example, it is set to a predetermined number of days (such as 2 days). 【0042】 For example, the control device 100 may restrict remote control input by disabling remote control input from the user terminal 120. That is, the control device 100 may not transmit the content of the remote control to the vehicle 110 when a remote control is input via an application on the user terminal 120. Also, if a remote control input from the user terminal 120 is transmitted to the vehicle 110 via short-range wireless communication, the control device 100 may prohibit the transmission of the input to the vehicle 110 in the application on the user terminal 120, or prevent the vehicle 110 from executing the instruction even if it receives it. 【0043】 Alternatively, for example, the control device 100 may restrict remote input by stopping remote input on the user terminal 120. That is, the control device 100 may stop processes that allow remote input, such as logging in to or starting an application on the user terminal. 【0044】 In this embodiment, the stopping position of the vehicle 110 is determined to be the position at the time the vehicle 110 (power supply) is stopped. That is, the control device 100 first determines whether the position of the vehicle 110 at the time the power supply is stopped is outside the remote control permission range. Next, if the control device 100 determines that it is outside the remote control permission range, it monitors whether a third predetermined period has elapsed before the vehicle 110 is started again, and if the third predetermined period has elapsed, it decides to restrict the remote control input. By determining whether or not to restrict the remote control input by referring to the position at the time of stopping, it is possible to avoid unnecessarily restricting the remote control input, for example, when the vehicle is transported due to a malfunction after stopping within the remote control permission range. Furthermore, by using the position at the time of stopping as the stopping position and not monitoring the position of the stopped vehicle 110, it is possible to reduce the power consumption of the vehicle. However, for example, the position of the vehicle 110 may continue to be acquired even after the vehicle 110 has stopped starting, and the same processing may be performed using the acquired position as the stopping position. 【0045】 Figures 6 and 7 show examples of GUIs displayed in the vehicle 110 and user terminal 120 according to this embodiment. Figure 6 shows an example of a GUI displayed for inputting identification information notified by the notification unit 405 of the vehicle 110 into the user terminal 120 as an initial setting. Figure 6(a) shows an example of a screen 610 that displays a PIN code on the display which is the notification unit 405 of the vehicle 110, and Figure 6(b) shows an example of a screen 600 for inputting a PIN code on the user terminal 120. 【0046】 Screen 600 is displayed when the vehicle 110 is unlocked, and it displays the PIN code 601 and message 602. Once the user terminal 120 confirms that the PIN code has been entered, the notification of identification information ends and the display returns to normal. Here, since the notification unit 405 is the display of the in-vehicle equipment, when screen 600 is closed, it switches to a general display screen such as the car navigation screen or the music playback management screen. 【0047】 Screen 610 is the PIN code input screen that appears when the application is launched (especially on the first launch), and displays a PIN code input field 611 and a PIN code submission button 612. After entering the PIN code, the vehicle 110 and the user terminal 120 are associated, and information as shown in Figure 3(a) is recorded in the database. 【0048】 Figure 7 shows an example of a GUI on the user terminal 120 for remote operation input after the correspondence between the vehicle 110 and the user terminal 120 has been completed. In Figure 7, buttons corresponding to each remote operation are displayed on the screen 700, and remote operation instructions are sent to the vehicle 110 (via the control increment value 100) based on user input. The screen 700 displays an unlock button 701 for unlocking the vehicle 110, a start button 702 for starting the vehicle, an air conditioning button 703 for starting the air conditioning, and a search button 704 to make it easier to find the vehicle. 【0049】 The vehicle 110 is unlocked when the user presses the unlock button 701. If the vehicle 110 is unlocked, the unlock button 701 may be changed to a lock button (not shown) that locks the vehicle 110. The vehicle's power is turned on (for example, the ignition is turned on) when the user presses the start button 702. Turning on the vehicle's power allows the user to drive the vehicle 110. 【0050】 When the user presses the air conditioning button 703, the air conditioning system of the vehicle 110 is activated. The user terminal 120 may switch screen 700 to a guide screen (not shown) that controls the air conditioning, such as setting the temperature or adjusting the airflow, in response to the press of the air conditioning button 703. Furthermore, when the user presses the search button 704, control is performed to change the state of the vehicle 110 so that it can be easily found by the user. Here, the lights of the vehicle 110 are assumed to blink for a predetermined period (for example, 15 seconds) in response to the press of the search button 704, but the state of the vehicle 110 may be changed in a different manner, such as outputting sound from the speaker provided in the vehicle 110. 【0051】 Furthermore, from the perspective of improving security, when a designated button such as the start button 702 is pressed, an authentication code may be displayed on the vehicle's notification unit 405, and when the user enters the authentication code into their terminal, an instruction corresponding to the pressed button may be sent to the vehicle 110. 【0052】 Furthermore, screen 700 may display other information besides the buttons used for remote control. For example, the user terminal 120 may display information indicating the remaining fuel and driving range of the vehicle 110, information indicating whether the vehicle 110 is unlocked or not, or the temperature inside the vehicle 110 (or the outside temperature). The user terminal 120 does not need to display all of the remote control buttons shown on screen 700; it may only be possible to remotely control the functions desired by the application designer. Also, it is not necessary to display all the buttons on a single screen like screen 700; objects containing each button may be distributed across multiple screens. 【0053】 Figure 10 is a diagram illustrating the control processing according to the remote control service according to this embodiment, based on the remote control permission range and the location of the vehicle. In Figures 10(a) and 10(b), the control device 100 sets the remote control permission range 1001 on the map 1000 based on the vehicle's movement information. 【0054】 In Figure 10(a), a stopping position 1002 is detected based on the vehicle's location information, and the stopping position 1002 is within the remote control permission range 1001. Here, even if the vehicle remains at the stopping position 1002 for a predetermined period of time, no restrictions are placed on remote control input because the stopping position is within the remote control permission range 1001. 【0055】 On the other hand, in Figure 10(b), a stopping position 1003 based on the vehicle's location information is detected, and the stopping position 1003 is outside the range of the remote control permission range 1001. If the vehicle remains at the stopping position 1003 for a predetermined period of time, the control device 100 according to this embodiment restricts remote control input, assuming that the vehicle may be being used for misuse such as resale. 【0056】 Hereinafter, with reference to Figures 8 and 9, an example of the process by which the control device 100 restricts remote operation input to the user terminal to be processed in the remote operation service according to this embodiment will be described. Figure 8 is a flowchart of an example of the process of setting the remote operation permission range by the control device 100. In S801, the control device 100 sets the vehicle 110 to be processed for which the remote operation permission range is set. Here, for example, the control device 100 may set the vehicle 110 to be processed if it satisfies predetermined conditions for updating the remote operation permission range, or it may randomly set one of the vehicles registered in DB211 to be processed, and the method of setting the processing target is not particularly limited. 【0057】 In S802, the control device 100 acquires movement information of the vehicle 110 to be processed during a first predetermined period. Here, the movement information may include the history of the vehicle 110's movement during the first predetermined period stored in DB211, or it may include information such as the location where the vehicle 110 was continuously parked for a second predetermined period. In S803, the control device 100 sets (updates in this case) the remote control permission range based on the information acquired in S801 and terminates the process. The update process is as described above and is omitted here. 【0058】 Figure 9 is a flowchart showing an example of the remote control permission range setting process according to this embodiment, which is executed by the processing unit 401 of the control device 100. In S901, the control device 100 sets the user terminal 120 to be processed, for which it determines whether or not to restrict remote control input. Here, the control device 100 sets the user terminal that was inside the vehicle 110 when the vehicle 110 stopped as described above as the target of processing, but the method of setting the user terminal to be processed in S901 is not particularly limited. For example, the control device 100 may set the user terminal that performed a specific operation to provide remote control input to the vehicle, such as launching an application, as the target of processing, or it may randomly select one of the user terminals registered in DB211 as the target of processing. 【0059】 In S902, the control device 100 refers to DB211 and obtains information indicating the vehicle 110 associated with the user terminal 120 to be processed. In S903, the control device 100 obtains the remote control permission range for the vehicle 110 for which information was obtained in S902. Here, since the remote control permission range is set by the process shown in Figure 8 and stored in DB211, the control device 100 obtains the remote control permission range by referring to DB211. 【0060】 In S904, the control device 100 determines whether the vehicle is stopped or not. Here, the control device 100 can determine whether the vehicle is stopped or not by obtaining information from the vehicle 110 regarding whether the vehicle's power is on or not. If the vehicle is stopped, the process proceeds to S905; otherwise, the process ends. 【0061】 In S905, the control device 100 acquires the current stopping position of the vehicle 110 and the duration of its stop (stopping period). Here, the control device 100 takes the position of the vehicle 110 at the time the power was last turned off as the current stopping position, and acquires the time from the time the power was turned off to the present as the stopping period. The time the power was last turned off and the stopping position are transmitted from the vehicle 110 to the control device 100 and recorded in association with the vehicle, for example, in DB211. 【0062】 In S906, the control device 100 determines whether or not to restrict remote control input from the user terminal 120 based on the remote control permission range set in S903 and the current stopping position and stopping period of the vehicle 110 acquired in S905. Here, the control device 100 first determines whether the vehicle's current stopping position is outside the remote control permission range. If it is outside the permission range and the stopping period exceeds the third predetermined period, it decides to restrict the remote control input; otherwise, it decides not to restrict the remote control input. If the remote control input is not restricted, the process ends; if the remote control input is restricted, the process proceeds to S907. 【0063】 In S907, the control device 100 restricts remote control input for the user terminal 120 that is the target of processing. Here, the control device 100 restricts remote control input by disabling remote control input from the user terminal 120 or by stopping remote control input on the user terminal. In this embodiment, remote control input may be restricted only for the user terminal 120 that is the target of processing, or remote control input may be restricted for all user terminals associated with the vehicle 110 that corresponds to the user terminal 120 that is the target of processing. Processing ends when S907 is completed. 【0064】 With this configuration, the remote control permission range can be set based on the location information of the vehicle 110, and a decision can be made on whether or not to restrict remote control input from the user terminal 120 based on the vehicle 110's stopping position and the remote control permission range. In particular, if the stopping position is outside the remote control permission range for a predetermined period of time, remote control input from the user terminal 120 to the vehicle 110 can be restricted. Therefore, even if a malicious user resells the vehicle 110, for example, it is possible to prevent the right to remote control from remaining with the original user. 【0065】 Furthermore, as shown in database 212, if user terminals are associated with each other, restricting remote control input on one of them may be more efficient than restricting remote control input on all user terminals in that associated group. Therefore, if the control device 100 decides to restrict remote control input on a particular user terminal, it may further restrict remote control input from user terminals associated with that terminal. By doing this, if remote control input is restricted because a user is suspected of reselling a device, for example, the restrictions on remote control input can be collectively applied to user terminals registered as belonging to close users, such as family members of that user. Thus, it becomes possible to manage remote control restrictions more efficiently. 【0066】 In this embodiment, the remote control permission range was set based on the movement information of the vehicle 110. However, it is also conceivable that the vehicle 110 might be stopped in a location where it would normally be parked for multiple days, such as an airport. From this perspective, the control device 100 may set the remote control permission range to exclude a predetermined range based on map information. This predetermined range based on map information is, for example, an area of ​​a facility on the map where it is expected that a user will park a vehicle for an extended period, such as an airport or a port, and can be arbitrarily set by the application designer. 【0067】 Furthermore, even if a vehicle is parked outside the permitted remote control range, it is possible that the vehicle is only temporarily stopped and not resold. From this perspective, the control device 100 may acquire the position of the user terminal that was inside the vehicle 110 after the user exits the vehicle, and if that position remains within a predetermined range from the vehicle 110, it may not restrict remote control input from the user terminal. 【0068】 Furthermore, if a user possesses a key that allows them to unlock the vehicle 110 without going through the user terminal 120, the user possessing the user terminal 120 is considered to be the legitimate user of the vehicle 110. Therefore, the control device 100 may determine whether the user terminal 120 and the aforementioned key can communicate (for example, by short-range wireless communication), and if communication is possible, it may decide not to restrict remote operation input. 【0069】 Furthermore, in this embodiment, the decision of whether or not to restrict remote control input is made based on the vehicle's last stopped position as the stopping position. However, there may be cases where the vehicle's position information at that time cannot be obtained due to communication problems or other reasons. In such cases, the control device 100 may use the position information of the user terminal that was inside the vehicle when the vehicle 110 stopped, instead of the vehicle 110's stopping position. 【0070】 [Summary of Embodiments] The above embodiments disclose at least the following control device, control method, and program. 【0071】 1. The control device (e.g., 100) of the above embodiment is A first acquisition means (e.g., 203) for acquiring vehicle location information, A first setting means (e.g., 201) sets the remote control permission range of the vehicle based on the vehicle's movement information during a first predetermined period based on the location information, A determination means (e.g., 201) that determines whether or not to restrict remote operation input to the vehicle from a corresponding user terminal which is a user terminal associated with the vehicle, based on the vehicle's stopping position based on the location information and the permitted remote operation range, It is equipped with. According to this embodiment, it becomes possible to appropriately restrict the authority to remotely control the vehicle. 【0072】 2. In the control device of the above embodiment, The first setting means sets the remote control permission range to a predetermined range centered on the position where the vehicle is continuously stopped for a second predetermined period within the first predetermined period. According to this embodiment, it is possible to restrict remote control input when the vehicle's stopping position continues to deviate from the normally expected range. 【0073】 3. In the control device of the above embodiment, The second predetermined period is a predetermined number of days, and the predetermined number of days is calculated by the number of times it spans across days. According to this embodiment, it becomes possible to evaluate the vehicle's stopping period according to the number of times it spans across days. 【0074】 4. In the control device of the above embodiment, The first setting means sets the remote operation permission range to a predetermined range centered on a location where the number of times the system has stopped during the first predetermined period is greater than or equal to a predetermined number. According to this embodiment, it becomes possible to evaluate the vehicle's stopping period according to the number of times the vehicle stops. 【0075】 5. The control device of the above embodiment is The first setting means sets the remote operation permission range to a predetermined range based on an area that has been passed through a predetermined number of times or more during the first predetermined period. According to this embodiment, it becomes possible to set areas that are frequently used by the user as the permitted range for remote operation. 【0076】 6. The control device of the above embodiment is The first setting means sets the remote operation permission range to a predetermined range based on a region in which, during a first predetermined period, the number of times a specific operation for remote operation input from the user terminal to the vehicle is performed by the user terminal is greater than or equal to a predetermined number. According to this embodiment, it becomes possible to set the area where operations that activate remote control input by the user are performed frequently as the remote control permission range. 【0077】 7. The control device of the above embodiment is The first setting means sets the remote operation permission range to exclude a predetermined range based on map information. According to this embodiment, it is possible to avoid unnecessarily restricting remote control input when a vehicle stops in a predetermined area where long-term parking is expected even under normal use, such as at an airport. 【0078】 8. In the control device of the above embodiment, The determination means determines to restrict the remote control input if the vehicle's stopping position is outside the remote control permission range during a third predetermined period. According to this embodiment, it is possible to restrict remote operation if the vehicle is outside the permitted range for remote operation for a predetermined period of time. 【0079】 9. In the control device of the above embodiment, The aforementioned stopping position is the position where the vehicle last stopped moving. According to this embodiment, it is possible to avoid unnecessarily restricting remote control input when a vehicle has stopped and is being transported for repairs or other reasons. 【0080】 10. In the control device of the above embodiment, If the determination means determines that the remote control input should be restricted, the system further includes a restriction means to restrict the remote control input by disabling the remote control input from the corresponding user terminal or stopping the remote control input on the corresponding user terminal. According to this embodiment, it is possible to restrict remote control input by rejecting the content of the remote control input on the user terminal, or by rejecting the remote control input to the user terminal itself. 【0081】 11. In the control device of the above embodiment, The system further includes an update means for updating the remote operation permission range set by the first setting means when predetermined conditions are met, The restricting means further restricts the remote operation input until a specific operation is performed by the corresponding user terminal, in the event that the remote operation permission range is updated by the updating means. According to this embodiment, when the scope of remote control permissions is updated, it becomes possible to appropriately respond to changes in users, etc. 【0082】 12. In the control device of the above embodiment, The update means updates the remote control permission range if, during the first predetermined period, a new location is detected where the vehicle is stopped for a period longer than the stopping period at the vehicle's stopping position used to set the remote control permission range in the previous update. According to this embodiment, it is possible to update the remote control permission range using a range with a higher frequency of use than the previous update. 【0083】 13. In the control device of the above embodiment, When the vehicle is unlocked, a notification means is provided to notify an internal notification unit of the vehicle of identification information. A registration means that registers the user terminal as the corresponding user terminal when it confirms that the user terminal has entered the identification information, To further prepare. According to this embodiment, it becomes possible to register a user terminal corresponding to the vehicle for users who can unlock the vehicle without using remote control, such as when performing initial setup. 【0084】 14. In the control device of the above embodiment, The vehicle further comprises a second acquisition means for acquiring information indicating a corresponding user terminal that was present inside the vehicle when the vehicle stopped, The first setting means sets the remote control permission range for each corresponding vehicle for each corresponding user terminal, The determination means makes a decision on whether or not to restrict remote operation input from the corresponding user terminal based on the stopping position and the remote operation permission range set on the corresponding user terminal acquired by the second acquisition means. According to this embodiment, it becomes possible to determine whether or not to restrict remote control input using the remote control permission range set for the last user who used the vehicle before it stopped. 【0085】 15. In the control device of the above embodiment, The vehicle further comprises a third acquisition means for acquiring information indicating the location of a corresponding user terminal that was located inside the vehicle after the user disembarked, The determination means determines that if the location of the corresponding user terminal that was inside the vehicle after the user disembarks remains within a predetermined range from the vehicle, then the remote operation input from the corresponding user terminal that was inside the vehicle will not be restricted. According to this embodiment, it is possible to avoid unnecessary restrictions on remote control input when the user temporarily gets out of the vehicle to perform work near the vehicle. 【0086】 16. In the control device of the above embodiment, The system further includes a second setting means for setting a second user terminal associated with the aforementioned corresponding user terminal, If the determination means determines that it is necessary to restrict remote control input from the corresponding user terminal, it further restricts the remote control input to the vehicle from the second user terminal. According to this embodiment, it becomes possible to centrally manage restrictions on remote input for users included in a group. 【0087】 17. In the control device of the above embodiment, The system further includes a determination means for determining whether the corresponding user terminal and the key capable of unlocking the vehicle can communicate with each other. The determination means determines that if the determination means determines that the corresponding user terminal and the key capable of unlocking the vehicle can communicate, then it decides not to restrict the remote operation input. According to this embodiment, if it is determined that the user terminal belongs to the legitimate user of the vehicle, it becomes possible to decide not to restrict remote control input. 【0088】 18. In the control device of the above embodiment, If the location information of the vehicle cannot be obtained from the vehicle, the location information of the corresponding user terminal that was inside the vehicle when the vehicle was stopped will be obtained as the location information of the vehicle. According to this embodiment, if the vehicle's position cannot be obtained when it is stopped, the position information of the user who has disembarked from the vehicle can be used as a substitute. 【0089】 19. The control method of the above embodiment is: The process of acquiring vehicle location information, A step of setting the remote control permission range for the vehicle based on the vehicle's movement information during a first predetermined period based on the location information, A step of determining whether or not to restrict remote operation input to the vehicle from a corresponding user terminal which is a user terminal associated with the vehicle, based on the stopping position of the vehicle based on the location information and the remote operation permission range, It is equipped with. According to this embodiment, it becomes possible to appropriately restrict the authority to remotely control the vehicle. 【0090】 20. The program of the above embodiment is The computer is made to function as one of the means of the control device described in any one of claims 1 to 18. According to this embodiment, it becomes possible to appropriately restrict the authority to remotely control the vehicle. 【0091】 Although embodiments of the invention have been described above, the invention is not limited to the above embodiments, and various modifications and changes are possible within the scope of the gist of the invention. [Explanation of Symbols] 【0092】 201: Processing Unit, 202: Memory Unit, 203: Communication Unit

Claims

[Claim 1] A control device, A first acquisition means for acquiring vehicle location information, A first setting means for setting the remote control permission range of the vehicle based on the vehicle's movement information during a first predetermined period based on the location information, A determination means for determining whether the control device restricts remote operation input to the vehicle from a corresponding user terminal, which is a user terminal associated with the vehicle, based on the vehicle's stopping position based on the location information and the permitted remote operation range. Equipped with, The movement information includes the location information of the vehicle and the status of visits to the stopping position during the first predetermined period. The control device is characterized in that the determination means determines to restrict the remote control input if the vehicle's stopping position is outside the remote control permission range during a third predetermined period, and determines not to restrict the remote control input otherwise. [Claim 2] The control device according to claim 1, characterized in that the first setting means sets the remote control permission range to a predetermined range centered on the position where the vehicle has been continuously stopped for a second predetermined period within the first predetermined period. [Claim 3] The control device according to claim 2, characterized in that the second predetermined period is a predetermined number of days, and the predetermined number of days is calculated by the number of times the period spans across days. [Claim 4] The control device according to claim 1, characterized in that the first setting means sets the remote operation permission range to a predetermined range centered on a position where the number of times the device has stopped during the first predetermined period is greater than or equal to a predetermined number. [Claim 5] The control device according to claim 1, characterized in that the first setting means sets the remote operation permission range to a predetermined range based on an area that has been passed through a predetermined number of times or more during the first predetermined period. [Claim 6] The control device according to claim 1, characterized in that the first setting means sets the remote operation permission range based on a region in which the number of times a specific operation for remote operation input from the user terminal to the vehicle is performed by the user terminal during a first predetermined period is greater than or equal to a predetermined number. [Claim 7] The control device according to claim 1, characterized in that the first setting means sets the remote operation permission range to exclude a predetermined range based on map information. [Claim 8] The control device according to claim 7, characterized in that the stopping position is the position where the vehicle last stopped starting. [Claim 9] The control device according to claim 1, further comprising a restricting means for restricting the remote control input by disabling the remote control input from the corresponding user terminal or stopping the remote control input on the corresponding user terminal when the determination means determines that the remote control input should be restricted. [Claim 10] The system further includes an update means for updating the remote operation permission range set by the first setting means when predetermined conditions are met, The control device according to claim 9, characterized in that the restricting means further restricts the remote operation input until a specific operation is performed by the corresponding user terminal when the remote operation permission range is updated by the update means. [Claim 11] The control device according to claim 10, wherein the update means updates the remote control permission range when a new location is detected in the first predetermined period in which the vehicle has been stopped for a period longer than the stopping period at the vehicle's stopping position used to set the remote control permission range in the most recent update. [Claim 12] When the vehicle is unlocked, a notification means is provided to notify an internal notification unit of the vehicle of identification information. A registration means that registers the user terminal as the corresponding user terminal when it confirms that the user terminal has entered the identification information, The control device according to claim 1, further comprising: [Claim 13] The vehicle further comprises a second acquisition means for acquiring information indicating a corresponding user terminal that was present inside the vehicle when the vehicle stopped, The first setting means sets the remote control permission range for each corresponding vehicle for each corresponding user terminal. The control device according to claim 1, characterized in that the determination means determines whether or not to restrict remote operation input from the corresponding user terminal based on the stop position and the remote operation permission range set on the corresponding user terminal acquired by the second acquisition means. [Claim 14] The vehicle further comprises a third acquisition means for acquiring information indicating the location of a corresponding user terminal that was located inside the vehicle after the user disembarked, The control device according to claim 1, characterized in that the determination means determines that the remote operation input from the corresponding user terminal that was inside the vehicle will not be restricted if the position of the corresponding user terminal that was inside the vehicle after disembarking remains within a predetermined range from the vehicle. [Claim 15] The system further includes a second setting means for setting a second user terminal associated with the aforementioned corresponding user terminal, The control device according to claim 1, characterized in that when the determination means determines that it is necessary to restrict remote operation input from the corresponding user terminal, it further restricts the remote operation input from the second user terminal to the vehicle. [Claim 16] The system further includes a determination means for determining whether the corresponding user terminal and the key capable of unlocking the vehicle can communicate with each other. The control device according to claim 1, characterized in that the determination means determines that the remote operation input will not be restricted if the determination means determines that the corresponding user terminal and the key capable of unlocking the vehicle are able to communicate. [Claim 17] The control device according to claim 1, characterized in that, when the location information of the vehicle cannot be obtained from the vehicle, the first acquisition means acquires the location information of a corresponding user terminal that was inside the vehicle when the vehicle was stopped as the location information of the vehicle. [Claim 18] A control method performed by a control device. The process of acquiring vehicle location information, A step of setting the remote control permission range for the vehicle based on the vehicle's movement information during a first predetermined period based on the location information, A step of determining whether the control device restricts remote operation input to the vehicle from a corresponding user terminal, which is a user terminal associated with the vehicle, based on the vehicle's stopping position based on the location information and the permitted remote operation range. Equipped with, The movement information includes the location information of the vehicle and the status of visits to the stopping position during the first predetermined period. A control method characterized in that, in the step of making the above determination, if the stopping position of the vehicle is outside the remote control permission range during a third predetermined period, it is determined to restrict the remote control input, and if not, it is determined not to restrict the remote control input. [Claim 19] A computer program for causing a computer to function as one of the means of a control device according to any one of claims 1 to 17.

Images