Information processing device

Abstract

To provide an information processing device that further appropriately protects personal information.SOLUTION: An information processing device includes a control unit configured to set a policy for provision of information about a plurality of users riding in the same vehicle in accordance with information transmitted from each terminal of the plurality of users. The control unit checks whether each of the plurality of users agrees to the provision of information.SELECTED DRAWING: Figure 4

Description

[Technical Field]

[0001] The present disclosure relates to an information processing apparatus. [Background Art]

[0002] A technique for providing information that considers relationships between a plurality of persons is known (e.g., Patent Document 1). [Prior Art Documents] [Patent Documents]

[0003] [Patent Document 1] Japanese Unexamined Patent Publication No. 2019-164475 [Summary of the Invention] [Problem to be Solved by the Invention]

[0004] An object of the present disclosure is to more appropriately protect personal information. [Means for Solving the Problem]

[0005] One aspect of the present disclosure is an information processing apparatus including a control unit configured to set a policy for providing information related to a plurality of users riding in the same vehicle in accordance with information respectively transmitted from terminals of the plurality of users.

[0006] Another aspect of the present disclosure is an information processing method in the above information processing apparatus, a program for causing a computer to execute the information processing method, or a storage medium non-temporarily storing the program. [Effects of the Invention]

[0007] According to the present disclosure, personal information can be more appropriately protected. [Brief Description of the Drawings]

[0008] [Figure 1]This diagram shows a schematic representation of the information flow in the system according to the first embodiment. [Figure 2] This block diagram schematically shows an example of the configuration of the vehicle, server, and user terminal that constitute the system according to the first embodiment. [Figure 3] This diagram shows an example of vehicle information and user information stored in the server's memory. [Figure 4] This is a sequence diagram of the processing of the system according to the first embodiment. [Figure 5] This is a sequence diagram of the system processing according to the second embodiment. [Figure 6] This is a flowchart of the process in the vehicle according to the fourth embodiment. [Modes for carrying out the invention]

[0009] Information transmitted from vehicles is analyzed to provide services to vehicle users. This information includes data acquired by vehicle sensors, route or destination information set in the vehicle's navigation system, and information about the vehicle user. However, when information is transmitted from a vehicle, some vehicle users may not wish to provide their personal information. Even if the driver consents to the transmission of information, this does not necessarily mean that passengers consent. However, in many cases, the decision of whether or not to provide personal information is left to the driver. Therefore, even if a passenger does not wish to provide their personal information, there is a risk that their personal information may be provided.

[0010] Therefore, one aspect of the present disclosure, the information processing device, includes a control unit configured to set a policy for providing information about multiple users riding in the same vehicle, in accordance with the information transmitted from each of the multiple users' terminals.

[0011] User information may include, for example, user ID, name, age, gender, address, telephone number, email address, and social media accounts. In addition to user information, information provided externally from the vehicle may also include vehicle information. Vehicle information may include detection values ​​from sensors installed in the vehicle, and the vehicle's route and destination entered into the navigation system.

[0012] Information transmitted from multiple users' terminals includes information regarding whether or not they consent to providing user information (hereinafter also referred to as "user information"), or information regarding whether or not they have requested (or been requested to request) other users to respond whether or not they consent to providing user information. For example, multiple users may each decide whether or not they consent to providing user information and transmit this decision to the information processing device via their respective terminals. Alternatively, a representative may be chosen from among the multiple users, and the representative may transmit whether or not they consent to providing user information from their terminal to the information processing device. The representative may collect responses from each user's terminal regarding whether or not they consent to providing user information and transmit the results, or the representative may decide whether or not to consent to providing user information based on their own judgment and transmit the results.

[0013] In this way, policies for providing information can be set according to the individual preferences of multiple users riding in the same vehicle.

[0014] Furthermore, the control unit may set a policy to transmit information about the vehicle linked to information about the multiple users if it receives information from at least one terminal indicating that all of the multiple users consent to the provision of information about the multiple users, or to transmit information about the vehicle without linking it to information about the multiple users if it receives information from at least one terminal indicating that at least some of the multiple users do not consent to the provision of information about the multiple users.

[0015] That is, a policy is set such that information about a vehicle associated with information about users is transmitted only when all users have consented to the provision of information. On the other hand, if at least some of the users do not consent to the provision of information, the information about the users is not transmitted when transmitting the information about the vehicle. Note that, as will be described later, when a representative consents to the provision of information, information indicating consent to the provision of information is transmitted from at least one terminal which is the representative's terminal. In this case, the information received from the representative's terminal may include information with which it can be determined whether all users have consented to the provision of information.

[0016] Further, information respectively transmitted from the terminals of the plurality of users may be received by a terminal of a representative of the plurality of users, and the control unit may set the policy in accordance with information transmitted from the representative's terminal. Since the information transmitted from the representative's terminal is considered to be information reflecting the intentions of all users, the policy can be set in accordance with the information.

[0017] Further, the control unit may generate incentives corresponding to the plurality of users in accordance with the set policy. Providing users with an incentive for providing user information can serve as an opportunity for users to provide information.

[0018] Further, the policy may be reset in response to a change in the plurality of users riding in the same vehicle. Depending on the combination of users, there may be users who refuse to provide information. Therefore, when there is a user who has alighted from the vehicle or a user who has boarded the vehicle, the policy is reset. In that case also, the policy is set in accordance with information respectively transmitted from the terminals of the plurality of users.

[0019] Hereinafter, embodiments of the present disclosure will be described with reference to the drawings. The configurations of the following embodiments are illustrative, and the present disclosure is not limited to the configurations of the embodiments. Further, the following embodiments can be combined as much as possible.

[0020] <First Embodiment> Figure 1 is a diagram schematically showing the flow of information in the system 1 according to the first embodiment. In the example of Figure 1, the system 1 includes a vehicle 10, a server 20, and a user terminal 40. In the vehicle 10, information is acquired by a sensor that detects the state of the vehicle 10, a sensor that detects position information, and the like. The vehicle 10 also stores information related to a user. These pieces of information are transmitted from the vehicle 10 to the server 20. The server 20 is a server that collects information from the vehicle 10, analyzes the information, and provides services to the vehicle 10 or the user terminal 40.

[0021] For example, the server 20 generates an advertisement matching the destination of the vehicle 10, and transmits the advertisement to the vehicle 10 or the user terminal 40. The user terminals 40 include a first user terminal 40A, a second user terminal 40B, and a third user terminal 40C. The first user terminal 40A is a terminal owned by a first user, the second user terminal 40B is a terminal owned by a second user, and the third user terminal 40C is a terminal owned by a third user. The first user, the second user, and the third user are users riding in the vehicle 10. For example, the first user is a driver, and the second user and the third user are fellow passengers. In the following description, when the first user terminal 40A, the second user terminal 40B, and the third user terminal 40C are not distinguished, they are simply referred to as the user terminal 40. Further, the number of user terminals 40 is not limited to the three shown in Figure 1. A plurality of users riding in the vehicle 10 can each own a user terminal 40.

[0022] The vehicle 10, the server 20, and the user terminal 40 are mutually connected via a network N1. The network N1 is, for example, a global-scale public communication network such as the Internet, and a WAN (Wide Area Network) or other communication networks may be employed. Further, the network N1 may include a telephone communication network such as a mobile phone network, and a wireless communication network such as Wi-Fi (registered trademark). Further, the vehicle 10 and the user terminal 40 may be connected via short-range wireless communication. Further, the user terminals 40 may be connected to each other via short-range wireless communication.

[0023] Figure 2 is a schematic block diagram showing an example of the configuration of the vehicle 10, server 20, and user terminal 40 that constitute System 1 according to the first embodiment. The server 20 can be configured as a computer. That is, the server 20 can be configured as a computer having a processor such as a CPU or GPU, main memory such as RAM or ROM, and auxiliary storage such as EPROM, hard disk drive, and removable media. The auxiliary storage contains an operating system (OS), various programs, various tables, etc., and the programs stored therein are loaded into the working area of ​​the main memory and executed, and each component is controlled through the execution of the programs, thereby realizing each function that matches the predetermined purpose. However, some or all of the functions may be realized by hardware circuits such as ASICs or FPGAs.

[0024] The server 20 comprises a control unit 21, a storage unit 22, and a communication module 23. The control unit 21 is an arithmetic unit that manages the control performed by the server 20. The control unit 21 can be implemented by an arithmetic processing unit such as a CPU. The control unit 21 may also include RAM, ROM, cache memory, etc.

[0025] The storage unit 22 comprises a main memory and an auxiliary storage device. The main memory is the memory where programs executed by the control unit 21 and data used by said control programs are stored. The auxiliary storage device is the device where programs executed by the control unit 21 and data used by said control programs are stored.

[0026] Furthermore, the storage unit 22 stores vehicle information 221 and user information 222. Figure 3 shows an example of vehicle information 221 and user information 222 stored in the storage unit 22 of the server 20. Vehicle information 221 is information about vehicle 10. Vehicle information 221 includes information about the vehicle ID, the location of vehicle 10, and the destination. User information 222 is information about the user. User information 222 includes personal information. User information 222 includes information about the user ID, name, address, and email address. User information 222 is linked to the vehicle information 221 of the vehicle 10 that the user is riding in. The vehicle ID is an identification code for vehicle 10. The location of vehicle 10 is the location detected in vehicle 10. The destination of vehicle 10 is, for example, the destination entered into the navigation system. Also, the user ID is an identification code for each user riding in vehicle 10. If multiple users are riding in the same vehicle 10, a record corresponding to each user is generated. The name is the name of each user. The address is the address of each user. The email address is an email address to which each user can be contacted. Vehicle information 221 and user information 222 are transmitted from vehicle 10 at predetermined intervals.

[0027] Furthermore, the communication module 23 is a communication interface for connecting the server 20 to the network N1. The communication module 23 is comprised of, for example, a network interface board and a wireless communication interface for wireless communication.

[0028] Next, the vehicle 10 is configured to include a control unit 11, a storage unit 12, a communication module 13, a location information sensor 14, and a touch panel 15. The control unit 11 is a device that provides information to the user (for example, a car navigation system, an infotainment system, or a head unit). The control unit 11 is a computing device that controls the system. The control unit 11 is controlled by a computing device such as a CPU. It can be achieved.

[0029] The storage unit 12, like the storage unit 22 of the server 20, is configured to include a main memory and an auxiliary memory. The storage unit 12 stores vehicle information 121 and user information 122. The configuration of this vehicle information 121 and user information 122 is the same as the vehicle information 221 and user information 222 stored in the storage unit 22 of the server 20. The control unit 11 transmits the vehicle information 121 and user information 122 to the server 20 at predetermined intervals according to the information provision policy described later.

[0030] Furthermore, the communication module 13 is a communication interface for connecting the vehicle 10 to the network N1. The communication module 13 is composed of, for example, a network interface board and a wireless communication interface for wireless communication. The position information sensor 14 acquires the position information (e.g., latitude and longitude) of the vehicle 10 at predetermined intervals. The position information sensor 14 is composed of, for example, a GPS (Global Positioning System) receiver and a wireless LAN communication unit. The position of the vehicle 10, acquired by the position information sensor 14, is stored in the storage unit 12 as part of the vehicle information 121. In this embodiment, the position of the vehicle 10 detected by the position information sensor 14 is included in the vehicle information 121, but it is also possible to include detection values ​​from various sensors attached to the vehicle 10 (e.g., a speed sensor) in the vehicle information, not limited to the position of the vehicle 10. The touch panel 15 is an input / output device that accepts input operations performed by the user and presents information to the user.

[0031] The user terminal 40 is a computer used by an individual, such as a personal computer, smartphone, mobile phone, tablet computer, or personal information terminal. The user terminal 40 is composed of a control unit 41, a storage unit 42, a communication module 43, a location information sensor 44, and a touch panel 45. The control unit 41 is an arithmetic unit that controls the user terminal 40. The control unit 41 can be implemented by an arithmetic processing unit such as a CPU.

[0032] The storage unit 42, like the storage unit 22 of the server 20, is configured to include a main memory and an auxiliary memory. User information 421 is stored in the storage unit 42. User information 421 includes information about the user ID, name, address, and email address of the owner of the user terminal 40. In addition, application programs (hereinafter simply referred to as "apps") related to user information are stored in the storage unit 42.

[0033] Next, the overall processing of System 1 according to the first embodiment will be described. Figure 4 is a sequence diagram of the processing of System 1 according to the first embodiment. It will be explained assuming that communication between the user terminal 40 and the vehicle 10, and communication between the vehicle 10 and the server 20, have been established.

[0034] When a user carrying a user terminal 40 enters the vehicle 10, and the user terminal 40 enters the range of the vehicle 10's short-range wireless communication, communication between the vehicle 10 and the user terminal 40 is established, and the control unit 11 of the vehicle 10 requests user information from the user terminal 40 (S01). This request is made each time a user enters the vehicle 10. The control unit 41 of the user terminal 40 transmits the user information 421 stored in the storage unit 42 to the vehicle 10 (S02). The control unit 11 of the vehicle 10 stores the received user information 421 as user information 122 in the storage unit 22 (S03).

[0035] Next, the control unit 11 of the vehicle 10 sends an inquiry to the user terminal 40 asking whether or not the user consents to the provision of user information (S04). This inquiry may include, for example, a command to launch the application on the user terminal 40 and display an image on the touch panel 45 prompting the user to input whether or not they consent to the provision of user information. Furthermore, the command may also include a command to display a text on the touch panel 45 explaining what information will be sent to the server 20 if the user consents.

[0036] Upon receiving this inquiry, the user terminal 40 displays an image on the touch panel 45 for the user to input whether or not they consent to the provision of user information (S05). At this time, for example, a phrase such as "Do you consent to the provision of personal information?" is displayed, along with selection buttons corresponding to "Agree" and "Disagree". In addition, if the user consents, a text explaining what information will be sent to the server 20 may be displayed on the touch panel 45. For example, the information sent to the server 20 may differ depending on the combination of the user and the vehicle 10. In such cases, the control unit 11 of the vehicle 10 determines the information to send to the server 20 based on the combination of the user and the vehicle 10. The relationship between the combination of the user and the vehicle 10 and the information to send to the server 20 is stored in the storage unit 12. When the user taps either the "Agree" or "Disagree" button, the control unit 41 of the user terminal 40 obtains the user's response (S06). The control unit 41 of the user terminal 40 sends a response to the vehicle 10 in response to the tapped button (S07). Alternatively, an application related to user information installed on the user terminal 40 may automatically provide the response. For example, the user may be able to configure whether or not to provide an automatic response.

[0037] The control unit 11 of the vehicle 10, having received responses from each user terminal 40, sets an information provision policy according to the response. This information provision policy specifies the information to be sent to the server 20. This is a needle that indicates what information to send or not to send. For example, if all users consent to the provision of user information, the information provision policy is set so that when sending vehicle information 121 to the server 20, user information 122 is associated with it and sent. On the other hand, if some or all users do not consent to the provision of user information, the information provision policy is set so that no user information 122 is provided. In this case, only vehicle information 121 is sent to the server 20. As another example, if some users do not consent to the provision of user information, the information provision policy may be set so that the user information 122 of the users who did not consent is not provided, and only the user information 122 corresponding to the users who consented is provided, associated with vehicle information 121.

[0038] Then, the control unit 11 of the vehicle 10 transmits vehicle information 121 and user information 122 to the server 20 in accordance with the information provision policy (S09). If the information provision policy is set so as not to provide user information 122, only vehicle information 121 is transmitted to the server 20. The control unit 21 of the server 20 stores the received vehicle information 121 and user information 122 in the storage unit 22 as vehicle information 221 and user information 222 (S10). This vehicle information 221 and user information 222 are analyzed by the server 20, for example, and a service based on the analysis results is provided to the user riding in the vehicle 10. As another example, the service may be provided by a server other than the server 20. In this case, the control unit 21 may provide the analysis results of vehicle information 221 and user information 222 to the other server. In this case, user information may be transmitted to the server 20 in S02. Then, in S04, the server 20 may send a query to the user terminal 40. The server 20 may also receive the response in S07, and the control unit 21 of the server 20 may also set the information provision policy in S08. Then, it may provide information to other servers in accordance with the information provision policy.

[0039] As described above, according to this embodiment, each user riding in the same vehicle 10 can decide whether or not to provide user information. This allows for more appropriate protection of personal information.

[0040] <Second Embodiment> In the second embodiment, a representative is selected from among the users riding in the vehicle, and it is decided whether or not that representative consents to the provision of user information.

[0041] Figure 5 is a sequence diagram of the processing of System 1 according to the second embodiment. Processes that are the same as those shown in the sequence diagram in Figure 4 are denoted by the same reference numerals and their explanations are omitted. In the example shown in Figure 5, the first user is determined to be the representative. The representative then sends a response to the vehicle 10 on behalf of the others. The operation of the third user terminal 40C is the same as that of the second user terminal 40B, so its explanation is omitted. Figure 5 describes the processing after the processes S01, S02, and S03 shown in Figure 4 have been executed for each user terminal 40.

[0042] After the control unit 11 of the vehicle 10 stores the received user information 421 as user information 122 in the storage unit 22, the control unit 11 of the vehicle 10 sends a request to the user terminal 40 to determine a representative (S21). This request includes, for example, a command to launch the application on the user terminal 40 and display an image on the touch panel 45 for selecting a representative. For example, the control unit 11 of the vehicle 10 identifies the name of each user in the vehicle 10 based on the user information 122 and displays a button on the touch panel 45 of each user terminal 40 for selecting this name. Furthermore, it may include a command to display a text on the touch panel 45 explaining what information will be sent to the server 20 depending on the representative. Then, the control unit 41 of the user terminal 40 displays each user's name as selectable on the screen for selecting a representative, and also displays text such as "Please select a representative." Seru (S22).

[0043] As another example of the process in S21, for instance, user terminals 40 located inside the vehicle 10 may communicate with each other, and the control units 41 of each user terminal 40 may transmit information about the user's name to each other. In this way, information about each user's name may be obtained from all user terminals 40.

[0044] Next, when the second user taps the name of the first user displayed on the touch panel 45, the control unit 41 of the second user terminal 40B accepts the selection to designate the first user as the representative (S23). Subsequently, the control unit 41 of the second user terminal 40B sends a request to the first user terminal 40A, which corresponds to the selected first user, to become the representative (S24). The second user's user ID is associated with this request. A similar request is also sent from the third user terminal 40C to the first user terminal 40A.

[0045] When the control unit 41 of the first user terminal 40A receives requests to become a representative from all user terminals 40 that can communicate within the vehicle 10, it displays an image on the touch panel 45 that reads, for example, "Do you agree to become a representative?" (S25). Furthermore, the control unit 41 of the first user terminal 40A displays buttons on the touch panel 45 that allow the user to select either "Yes" or "No". When the first user taps the "Yes" button, the control unit 41 of the first user terminal 40A acknowledges that the first user has accepted (S26). The control unit 41 of the first user terminal 40A then notifies the vehicle 10 that the first user is the representative (S27). If requests to become a representative are not received from some user terminals 40, the "Yes" button on the first user terminal 40A may be disabled. In addition, the notification in S27 may be sent so that the user IDs of all users who requested the first user to become a representative can be identified.

[0046] The control unit 11 of the vehicle 10 sends an inquiry to the first user terminal 40A, which corresponds to the first user who is the representative, asking whether or not they consent to providing user information (S04). The first user responds as the representative. The subsequent processing is the same as in Figure 4.

[0047] In the S24 process described above, the second user terminal 40B sends a request to the first user terminal 40A to become the representative. However, as another example, the second user terminal 40B may notify the vehicle 10 of the representative. If the representatives notified by all user terminals 40 match, the S04 process may be executed on the user terminal 40 of that representative.

[0048] Furthermore, a representative may be stored in the memory unit 42 of each user terminal 40. For example, consider the case where the first user is stored as the representative in the memory unit of the second user terminal 40B. If the first user terminal 40A corresponding to the first user is located inside the vehicle 10, the control unit 41 of the second user terminal 40B will send a request to the first user terminal 40A to become the representative without the second user having to operate the second user terminal 40B.

[0049] As explained above, according to this embodiment, by designating a representative, it is possible to respond whether or not the representative consents to the provision of user information.

[0050] <Third Embodiment> In the third embodiment, the server 20 that receives user information provides an incentive to each user terminal 40. At this time, the incentive may be provided from the server 20 to the user terminal 40 via the vehicle 10, or directly from the server 20 to the user terminal 40, or the incentive may be provided from the vehicle 10 to the user terminal 40 without the server 20. You may add the IV.

[0051] This incentive is an incentive for providing user information. Furthermore, the granting of the incentive may be conditional on determining a representative as described in the second embodiment. The incentive may also be varied according to the established information provision policy. For example, the more information sent to the server 20, the greater the incentive may be. The incentive may be cash, discount coupons, gift certificates, or points. The incentive may also be something the user can use at the vehicle 10's destination. In this way, the user can be encouraged to consent to providing user information.

[0052] <Fourth Embodiment> When a user gets on or off the vehicle 10, an information provision policy may be set each time. For example, even if a user has previously agreed to provide their user information, they may no longer agree to provide their information if there is a change in the users inside the vehicle 10 afterward. It is also possible that a user who boarded later may be designated as the representative. The control unit 11 of the vehicle 10 communicates with the user terminal 40 of the user who is on board to monitor whether or not a user has boarded or alighted.

[0053] Figure 6 is a flowchart of the process in vehicle 10 according to the fourth embodiment. The process shown in Figure 6 is executed in vehicle 10 at predetermined intervals. In step S101, the control unit 11 of vehicle 10 obtains a user ID from a user terminal 40 located inside vehicle 10. User information may also be obtained at this time. In step S102, the control unit 11 of vehicle 10 determines whether or not there has been a change in the user ID since the previous time. If the determination in step S102 is positive, the process proceeds to step S103, where the control unit 11 of vehicle 10 resets the information provision policy. In this case, for example, the process shown in Figure 4 or Figure 5 may be performed. On the other hand, if the determination in step S103 is negative, the control unit 11 terminates this routine. In this way, the information provision policy can be changed according to the user getting on and off the vehicle. [Explanation of Symbols]

[0054] 1 System 10 vehicles 11 Control Unit 12 Storage section 20 servers 40 User terminals

Claims

1. An information processing device comprising a control unit configured to set a policy for providing information about multiple users riding in the same vehicle, From each of the aforementioned users' terminals, a request to become the representative of the aforementioned users is sent to the representative's terminal. The aforementioned representative's terminal Upon receiving the request transmitted from each of the aforementioned terminals, Upon receiving the aforementioned request, information regarding whether or not consent to the provision of information about the multiple users is transmitted to the information processing device. The control unit, The representative receives information from the terminal of the aforementioned representative regarding whether or not they consent to the provision of information about the multiple users, The policy is set according to whether or not the recipient consents to the provision of information about the multiple users that have been received. Information processing device.

2. The control unit, If information is received from the representative's terminal indicating that all of the aforementioned users consent to the provision of information about the aforementioned users, a policy will be established to transmit information about the vehicle linked to the information about the aforementioned users. If the representative receives information from the representative's terminal indicating that at least some of the aforementioned users do not consent to the provision of information about the aforementioned users, the representative will set up a policy to transmit information about the vehicle without linking it to information about the aforementioned users. The information processing apparatus according to claim 1.

3. The control unit transmits a request to each terminal of the plurality of users to determine the representative from among the plurality of users, Each of the aforementioned terminals, A request to determine the aforementioned representative has been received. Upon receipt of the request to determine the representative, a request to become the representative is sent to the representative's terminal. The information processing apparatus according to claim 1.

4. The control unit generates incentives corresponding to the multiple users according to the set policy. The information processing apparatus according to claim 1.

5. In response to changes in the status of multiple users riding in the same vehicle, the policy will be reset. The information processing apparatus according to claim 1.

Images