Information processing apparatus

Abstract

An information processing apparatus (10) according to an embodiment comprises a communication unit (11), a storage unit (13), an application unit (14c), and a processing unit (14d). The communication unit (11) executes communication with a center device (100) via secure communication. The storage unit (13) stores, as an executable application, a secure application that includes at least secure processing. The application unit (14c) executes a secure application. When executing the secure application, the processing unit (14d) advances the processing of the secure application through at least one of a first agent that operates locally and a second agent that operates in the center device (100). At least one of the first agent and the second agent learns user data in the processing of the secure application, and optimizes the processing of the secure application for each user on the basis of the learned result.

Description

Information processing device

[0001] The disclosed embodiment relates to an information processing device.

[0002] Conventionally, portable information processing devices such as smartphones can use various applications via the Internet. However, from a security perspective, there is a risk of hacking or virus infection by directly connecting to an external network. In addition, as the number of applications increases, there is also a problem that the user's operations become complicated.

[0003] Japanese Patent Application Laid-Open No. 2024-180090

[0004] Therefore, the conventional technology has problems such as insufficient security of the information processing device and complicated operations.

[0005] One aspect of the embodiment has been made in view of the above, and an object thereof is to provide an information processing device excellent in security and usability.

[0006] An information processing device according to one aspect of the embodiment includes a communication unit, a storage unit, an application unit, and a processing unit. The communication unit executes communication with a center device via secure communication. The storage unit stores an application that can execute a secure application including at least secure processing. The application unit executes the secure application. When executing the secure application, the processing unit advances the processing of the secure application via at least one of a first agent operating locally and a second agent operating in the center device. At least one of the first agent and the second agent learns user data in the processing of the secure application and optimizes the processing of the secure application for each user based on the learning result.

[0007] According to one aspect of the embodiment, an information processing device excellent in security and usability can be provided.

[0008] Figure 1 is a schematic diagram showing an example of a smartphone system according to the embodiment of this disclosure. Figure 2 is a schematic diagram showing an example of connection between a smartphone and a central device. Figure 3 is a block diagram showing an example of the configuration of a smartphone according to the embodiment of this disclosure. Figure 4 is a diagram showing an example of a secure application that is standardly installed on a smartphone according to the embodiment of this disclosure. Figure 5 is a block diagram showing an example of the configuration of a central device according to the embodiment of this disclosure. Figure 6 is a diagram showing a processing sequence in a smartphone system according to the embodiment of this disclosure. Figure 7 is a diagram showing a proposed example based on predictive information from a central agent. Figure 8 is a diagram (1) showing an example of simplifying user operation via a local agent. Figure 9 is a diagram (2) showing an example of simplifying user operation via a local agent. Figure 10 is a schematic diagram showing an example of the hardware configuration of a smartphone and a computer functioning as a central device according to the embodiment of this disclosure.

[0009] The present invention will be described below through embodiments, but these embodiments are not intended to limit the invention as claimed. Furthermore, not all combinations of features described in the embodiments are necessarily essential to the solution of the invention.

[0010] Furthermore, in the following explanation, if it is necessary to distinguish between multiple identical elements, the element may be numbered in the form of "-n" (where n is a natural number) after its sign. This numbering will not be applied if there is no particular need for distinction.

[0011] Furthermore, in the following, the information processing device according to the embodiment of this disclosure (hereinafter referred to as "this embodiment") is assumed to be a smartphone 10 (see Figure 1). Also, the information processing system according to this embodiment is assumed to be a smartphone system 1 (see Figure 1) including one or more smartphones 10.

[0012] Furthermore, in the following text, so-called "application software" or "application programs" that run on smartphones will be referred to as "applications" or "apps" as appropriate.

[0013] Figure 1 is a schematic diagram showing an example of a smartphone system 1 according to this embodiment. Figure 2 is a schematic diagram showing an example of connection between a smartphone 10 and a central device 100. As shown in Figure 1, the smartphone system 1 includes one or more smartphones 10-1, 1-2, ..., 10-n and a central device 100.

[0014] The smartphone 10 is a portable computer, or mobile device, used by the user. While the smartphone 10 is used as an example in this embodiment, the mobile device is not limited to a smartphone 10; it could be a tablet, a wearable device, or the like.

[0015] The user launches a desired application using the smartphone 10 and receives the desired service from that application. At this time, the smartphone 10 according to this embodiment provides user support through a locally operating AI (Artificial Intelligence) agent. This locally operating AI agent will be referred to as the "local agent" below. The local agent is an example of the "first agent".

[0016] The central device 100 is a computer that constitutes a data center. The functions of the central device 100 may be implemented by one or more computers. In addition, at least some of the functions of the central device 100 may be implemented by virtual machines. Furthermore, at least some of the functions of the central device 100 may be implemented in a private cloud.

[0017] In this embodiment, the central device 100 provides user support through an AI agent operating on the central device 100 when a user receives services via a smartphone 10. This AI agent operating on the central device 100 will be referred to as the "central agent" below. The central agent is an example of a "second agent".

[0018] Each smartphone 10 and the central device 100 are connected to each other via a network N1, such as the internet or a mobile phone network, enabling them to communicate with one another. However, in the smartphone system 1 according to this embodiment, as shown in Figure 2, the smartphones 10 and the central device 100 are connected by a "secure connection." That is, each smartphone 10 and the central device 100 communicate through secure communication.

[0019] As a form of secure communication, the smartphone system 1 uses, for example, a VPN (Virtual Private Network) to communicate, providing operation in a secure environment without directly connecting to an external network. The VPN establishes a virtual dedicated line on network N1 for data transmission and reception, thus preventing eavesdropping and tampering by third parties. Furthermore, the smartphone system 1 achieves secure communication by encrypting communication data using the SSL (Secure Sockets Layer) / TLS (Transport Layer Security) protocol. The SSL / TLS protocol ensures data confidentiality and integrity because encrypted communication occurs between the data source and recipient.

[0020] In this configuration example, the smartphone system 1 according to this embodiment realizes a user experience with superior security and usability. The smartphone system 1 solves the problems of conventional smartphone systems, which are not optimized for AI, have insufficient security, and are cumbersome to operate due to the large number of apps. The smartphone system 1 realizes always-protected communication via secure communication and provides operation in a secure environment without directly connecting to an external network. This reduces the risk of hacking and computer viruses. Furthermore, by adopting Arm's "Arm Kigen" and the like, it achieves low power consumption and high security performance. The smartphone system 1 utilizes a local agent and a central agent in the data center, and all business processes are pre-checked and executed by agents. This simplifies user operation while improving security. In addition, there is no need to install or use apps such as browsers, and instead of searching in a browser, for example, the local agent answers the user's search requests. Each agent can also anticipate and respond to the user's needs. The local agent learns user data and can provide the optimal actions, suggestions, and answers for the user. It is also possible to utilize agents customized for each industry and company. Smartphone system 1 comes standard with applications that include secure processing (hereinafter referred to as "secure apps" as appropriate), and includes dedicated secure apps optimized for each use, such as calendar and email functions. User data is managed in a secure data center, not a public cloud, and only minimal data is stored on smartphone 10. For example, when a user searches for information via network N1, smartphone system 1's local agent understands the user's intent and provides the most suitable information. Furthermore, when managing a user's schedule, smartphone system 1 allows for schedule management in a secure environment using a calendar app, which is one of the secure apps.Furthermore, when managing a user's emails, the smartphone system 1 can manage emails in a secure environment using an email application, which is one of the secure applications. This allows the smartphone system 1 to safely manage user data and provide users with the most suitable services. In other words, the smartphone system 1 enables a user experience with superior security and usability.

[0021] The following describes in more detail an example of the configuration of the smartphone 10 and the central device 100 in the smartphone system 1 according to the above embodiment.

[0022] Figure 3 is a block diagram showing an example configuration of a smartphone 10 according to this embodiment. As shown in Figure 3, the smartphone 10 includes a communication unit 11, an HMI (Human Machine Interface) unit 12, a storage unit 13, and a control unit 14.

[0023] The communication unit 11 is implemented by a network adapter or the like. The communication unit 11 is wirelessly connected to the network N1 and transmits and receives information to and from the central device 100 via the network N1. As described above, the communication unit 11 communicates with the central device 100 via secure communication using VPN or SSL / TLS protocols.

[0024] Furthermore, the communication unit 11 can also prevent unauthorized access using a firewall. The firewall monitors network traffic and restricts access from specific IP addresses and ports, thereby preventing external attacks. In addition, the communication unit 11 can also incorporate an Intrusion Detection System (IDS) to detect abnormal communication patterns. The IDS monitors network traffic in real time and issues alerts if it detects abnormal patterns or unauthorized access.

[0025] The HMI unit 12 is a component that provides interface components for input and output to the user operating the smartphone 10. The HMI unit 12 includes an input interface that accepts input operations from the user. The input interface is implemented, for example, by a touch panel. Alternatively, the input interface may be implemented by a microphone or the like. Furthermore, the input interface may be implemented by software components.

[0026] Furthermore, the HMI unit 12 includes an output interface for presenting visual and auditory information to the user. The output interface is implemented by, for example, a display, speaker, or earphones. Multiple displays and speakers may be provided. The HMI unit 12 may also provide the input interface and output interface as an integrated unit, for example, by using a touch panel display.

[0027] The memory unit 13 is implemented by a memory device such as ROM (Read Only Memory), RAM (Random Access Memory), or flash memory. In the example shown in Figure 3, the memory unit 13 stores local agent information 13a, secure communication information 13b, secure application information 13c, and user information 13d.

[0028] Local agent information 13a is information including the AI ​​agent model of the local agent described above. After the AI ​​agent model of the local agent is loaded into the control unit 14, which will be described later, it functions as a local agent that simplifies user operations, for example. For example, the local agent analyzes user operations input via the HMI unit 12 in real time and predicts the next operation the user should perform based on the past operation history included in the analysis results.

[0029] The secure communication information 13b is information including communication parameters for the secure communication between the smartphone 10 and the central device 100 as described above. The communication unit 11 performs secure communication with the central device 100 based on this secure communication information 13b.

[0030] The secure application information 13c stores secure applications, including at least secure processing, as executable applications on the smartphone 10. The secure application information 13c includes the programs, etc., of each standard-installed secure application.

[0031] Here, Figure 4 shows an example of a secure application that is standardly installed on the smartphone 10 according to this embodiment. As shown in Figure 4, the smartphone 10 comes standard with executable applications such as "Secure Calendar," "Secure Email," and "Secure Browser" as secure apps.

[0032] "Secure Calendar" is a time management application that manages the user's schedule, etc. In this embodiment, it will be referred to as the "calendar application" as appropriate. "Secure Email" is an email application. In this embodiment, it will be referred to as the "email application" as appropriate. "Secure Browser" is a web browser. In this embodiment, it will be referred to as the "browser" as appropriate.

[0033] Returning to the explanation of Figure 3, user information 13d is information about the user using the smartphone 10. User information 13d includes various data related to the user's attributes, etc. In the smartphone system 1, user data (hereinafter referred to as "user data" as appropriate) is basically stored via the central device 100. Therefore, only the minimum amount of data per user is stored in user information 13d. This minimum data is, for example, cache data.

[0034] The control unit 14 controls each part of the smartphone 10. The control unit 14 corresponds to a so-called processor. The control unit 14 can be implemented by, for example, a CPU (Central Processing Unit), an MPU (Micro Processing Unit), a GPU (Graphical Processing Unit), an APU (Accelerated Processing Unit), etc. The control unit 14 implements the functions of each part described below by executing a program according to this embodiment (not shown) stored in the memory unit 13, using RAM as a working area. The control unit 14 can also be implemented by an integrated circuit such as an ASIC (Application Specific Integrated Circuit) or an FPGA (Field Programmable Gate Array).

[0035] The control unit 14 includes an agent execution unit 14a, a secure communication control unit 14b, an application unit 14c, a processing unit 14d, and a data management unit 14e.

[0036] The agent execution unit 14a reads the local agent's AI agent model from the local agent information 13a and operates the local agent. The secure communication control unit 14b controls secure communication with the central device 100 via the communication unit 11 based on the secure communication information 13b.

[0037] The application unit 14c executes a secure application based on user operations via the HMI unit 12, secure application information 13c, user information 13d, etc. When the application unit 14c executes the secure application, the processing unit 14d processes the secure application via at least one of the local agent and the central agent.

[0038] The processing unit 14d simplifies user operations, for example, via a local agent. Furthermore, the processing unit 14d streamlines processes executed by secure applications, for example, via a central agent. Specific examples of these will be explained later using Figures 7 to 9.

[0039] The data management unit 14e manages user data via the central device 100. For example, the data management unit 14e encrypts the user data and stores it in the central device 100, and stores only the minimum necessary data for the user data in the user information 13d of the storage unit 13.

[0040] Next, an example of the configuration of the center device 100 according to this embodiment will be described. Figure 5 is a block diagram showing an example of the configuration of the center device 100 according to this embodiment. As shown in Figure 5, the center device 100 has a communication unit 101, a storage unit 102, and a control unit 103. Although not shown in the figures, the center device 100 may be connected to components similar to those of the HMI unit 12 described above, which provide interface components for input and output to operators and the like who operate the center device 100.

[0041] The communication unit 101 is implemented by a network adapter or the like. The communication unit 101 is connected to the network N1 by wire or wireless connection and transmits and receives information with each smartphone 10 via the network N1. As described above, the communication unit 101 communicates with each smartphone 10 via secure communication using VPN or SSL / TLS protocols.

[0042] Furthermore, the communication unit 101 can also prevent unauthorized access using a firewall. The firewall monitors network traffic and restricts access from specific IP addresses and ports, thereby preventing external attacks. In addition, the communication unit 101 can also incorporate an Intrusion Detection System (IDS) to detect abnormal communication patterns. The IDS monitors network traffic in real time and issues alerts if it detects abnormal patterns or unauthorized access.

[0043] The storage unit 102 is implemented by a storage device such as a ROM (Read Only Memory), a RAM (Random Access Memory), a flash memory, or a HDD (Hard Disk Drive). In the example of FIG. 5, the storage unit 102 stores center agent information 102a, secure communication information 102b, and user information DB (Database) 102c.

[0044] The center agent information 102a is information including the AI agent model of the center agent described above. After the AI agent model of the center agent is read into the control unit 103 described later, it functions as a center agent that predicts, for example, processing according to the needs of the user.

[0045] The secure communication information 102b is information including communication parameters and the like in the secure communication between the smartphone 10 and the center device 100 described above. The communication unit 101 executes secure communication with each smartphone 10 based on such secure communication information 102b.

[0046] The user information DB 102c is a database of user data of each user who uses the smartphone 10. The user information DB 102c stores and manages user data from each smartphone 10 collected by the control unit 103.

[0047] The control unit 103 controls each part of the center device 100. The control unit 103 corresponds to a so-called processor. The control unit 103 is implemented by, for example, a CPU, an MPU, a GPU, an APU, or the like, similar to the control unit 14 described above. The control unit 103 realizes the functions of each part described below by executing a program according to the present embodiment (not shown) stored in the storage unit 102 using the RAM as a work area. Further, the control unit 103 can also be implemented by an integrated circuit such as an ASIC or an FPGA.

[0048] The control unit 103 includes an agent execution unit 103a, a secure communication control unit 103b, a collection unit 103c, an analysis unit 103d, and a prediction unit 103e.

[0049] The agent execution unit 103a reads the AI ​​agent model of the center agent from the center agent information 102a and operates the center agent. The secure communication control unit 103b controls secure communication with each smartphone 10 via the communication unit 101 based on the secure communication information 102b.

[0050] The collection unit 103c collects user data from each smartphone 10 via the communication unit 101 and stores it in the user information DB 102c. The analysis unit 103d performs analysis and learning of each user's data by a central agent. The prediction unit 103e makes predictions according to each user's needs based on the results of the analysis and learning of each user's data by the analysis unit 103d.

[0051] Next, the processing sequence of information processing performed by the smartphone system 1 according to this embodiment will be described. Figure 6 is a diagram showing the processing sequence in the smartphone system 1 according to this embodiment.

[0052] As shown in Figure 6, a secure connection is first established between the smartphone 10 and the central device 100 (step S101). Then, at any time, the smartphone 10 receives user input and executes processing corresponding to that input (step S102).

[0053] At this time, user data associated with the processing is transmitted to the central device 100 as needed (step S103). In addition, the smartphone 10 performs analysis and learning by the local agent as needed based on the processing results of each process executed in step S102 (step S104), and the processing from step S102 is repeated.

[0054] Meanwhile, the central device 100 stores the user data collected from each smartphone 10 (step S105). In addition, the central device 100 continuously performs analysis and learning by a central agent based on the collected user data (step S106), and the processing from step S102 is repeated.

[0055] Then, at any given time, the central device 100 has a central agent predict the processing required according to the user's needs (step S107). The central device 100 then transmits the predicted information to the smartphone 10 (step S108).

[0056] The smartphone 10 then proposes to the user the execution of the predicted process (step S109). A specific example of such a proposal will be explained using Figure 7. Figure 7 is a diagram showing an example of a proposal based on the prediction information of the center agent.

[0057] In this specific example, we take the smartphone 10 of a user who usually attends a regular meeting on Wednesdays. In this case, the smartphone 10 makes a suggestion, for example, as shown in Figure 7, based on the predictive information from the central agent.

[0058] Figure 7 shows an example where a central agent predicts that, triggered by, for example, Wednesday, the user will check their schedule using a calendar app and then check their email app for any pre-release materials.

[0059] Such predictions are made based on various characteristics of the user, such as the operation history of their smartphone 10 every Wednesday, their activity history, and location information. In response to such a suggestion, the user will, for example, operate the calendar app icon to launch the calendar app, which is one of the secure apps, as shown in Figure 7.

[0060] Returning to the explanation of Figure 6, when the smartphone 10 launches the secure app selected by the user in response to the suggestion in step S109 (step S110), it executes the app's processing while simplifying the user's operation via the local agent (step S111).

[0061] Specific examples of this simplification will be explained using Figures 8 and 9. Figure 8 is a diagram (part 1) showing an example of simplification of user operations via a local agent. Figure 9 is a diagram (part 2) showing an example of simplification of user operations via a local agent. Figures 8 and 9 assume a use case where the user has just launched the calendar application, as shown in Figure 7.

[0062] When a user launches the calendar app, the schedule for the day is displayed on the calendar app screen, as shown in Figure 8. At this time, the local agent takes over the forecast information from the central agent and automatically checks for emails using the email app. If, for example, preliminary materials for a regular meeting have arrived, it notifies the user of this fact on the calendar app screen, as shown in Figure 8. Along with this notification, the local agent also provides guidance, such as asking whether the user wants to automatically download the preliminary materials and view them in a browser.

[0063] Then, if the user clicks the "Yes" button as shown in Figure 8, the local agent automatically downloads the preliminary materials and displays them on the screen for viewing, as shown in Figure 9.

[0064] As a result, users like those shown in Figures 7 to 9 can automatically check their schedule, check emails, and view preliminary documents simply by launching the calendar app, without having to manually launch the calendar app, email app, and then browser in sequence.

[0065] In other words, in the smartphone system 1 according to this embodiment, at least one of the local agent and the central agent learns user data in the processing of secure applications and optimizes the processing of secure applications for each user based on the learning results. Therefore, according to the smartphone system 1 according to this embodiment, for example, a user's work can be carried out securely and efficiently for each user through at least one of the local agent and the central agent. Note that the local agent and the central agent may be customized not only for each user, but also for each industry or company, to optimize operations for each industry or company.

[0066] Next, Figure 10 is a schematic diagram showing an example of the hardware configuration of a computer 1200 that functions as a smartphone 10 or a central device 100 according to this embodiment. A program installed on the computer 1200 can cause the computer 1200 to function as one or more "parts" of the device according to this embodiment, or to cause the computer 1200 to execute operations associated with the device according to this embodiment or such one or more "parts", and / or to cause the computer 1200 to execute a process or a stage of such process according to this embodiment. Such a program may be executed by the CPU 1212 to cause the computer 1200 to execute specific operations associated with some or all of the blocks of the flowcharts and block diagrams described herein.

[0067] The computer 1200 according to this embodiment includes a CPU 1212, RAM 1214, and a graphics controller 1216, which are interconnected by a host controller 1210. The computer 1200 also includes input / output units such as a communication interface 1222, a storage device 1224, a DVD drive, and an IC card drive, which are connected to the host controller 1210 via an input / output controller 1220. The DVD drive may be a DVD-ROM drive and a DVD-RAM drive, etc. The storage device 1224 may be a hard disk drive and a solid-state drive, etc. The computer 1200 also includes input / output units such as a ROM 1230 and a keyboard, which are connected to the input / output controller 1220 via an input / output chip 1240.

[0068] The CPU 1212 operates according to the programs stored in the ROM 1230 and RAM 1214, thereby controlling each unit. The graphics controller 1216 acquires the image data generated by the CPU 1212 and stores it in the frame buffer provided in the RAM 1214 or within itself, so that the image data is displayed on the display device 1218.

[0069] The communication interface 1222 communicates with other electronic devices via a network. The storage device 1224 stores programs and data used by the CPU 1212 in the computer 1200. The DVD drive reads programs or data from a DVD-ROM or the like and provides them to the storage device 1224. The IC card drive reads programs and data from an IC card and / or writes programs and data to an IC card.

[0070] The ROM 1230 stores boot programs and / or hardware-dependent programs of the computer 1200, which are executed by the computer 1200 when activated. The input / output chip 1240 may also connect various input / output units to the input / output controller 1220 via USB ports, parallel ports, serial ports, keyboard ports, mouse ports, etc.

[0071] The program is provided on a computer-readable storage medium such as a DVD-ROM or IC card. The program is read from the computer-readable storage medium and installed on a storage device 1224, RAM 1214, or ROM 1230, which are examples of computer-readable storage media, and executed by the CPU 1212. The information processing described within these programs is read by the computer 1200, resulting in coordination between the program and the various types of hardware resources described above. The apparatus or method may be configured to realize the operation or processing of information in accordance with the use of the computer 1200.

[0072] For example, when communication is performed between a computer 1200 and an external device, the CPU 1212 may execute a communication program loaded into the RAM 1214 and, based on the processing described in the communication program, instruct the communication interface 1222 to perform communication processing. Under the control of the CPU 1212, the communication interface 1222 reads transmission data stored in a transmission buffer area provided in a recording medium such as the RAM 1214, storage device 1224, DVD-ROM, or IC card, transmits the read transmission data to the network, or writes received data received from the network to a reception buffer area or the like provided on the recording medium.

[0073] Furthermore, the CPU 1212 may read all or necessary parts of a file or database stored on an external recording medium such as a storage device 1224, a DVD drive (DVD-ROM), or an IC card into the RAM 1214, and perform various types of processing on the data in the RAM 1214. The CPU 1212 may then write the processed data back to the external recording medium.

[0074] Various types of information, such as various types of programs, data, tables, and databases, may be stored on the recording medium and subjected to information processing. The CPU 1212 may perform various types of processing on the data read from the RAM 1214, including various types of operations, information processing, conditional judgments, conditional branching, unconditional branching, information retrieval / replacement, etc., as described throughout this disclosure and specified by the program instruction sequence, and write the results back to the RAM 1214. The CPU 1212 may also retrieve information in files, databases, etc., within the recording medium. For example, if a plurality of entries are stored in the recording medium, each having an attribute value of a first attribute associated with an attribute value of a second attribute, the CPU 1212 may search among the plurality of entries for an entry that matches the specified condition for the attribute value of the first attribute, read the attribute value of the second attribute stored in that entry, and thereby obtain the attribute value of the second attribute associated with the first attribute that satisfies a predetermined condition.

[0075] The program or software module described above may be stored on or near the computer 1200 in a computer-readable storage medium. Alternatively, a recording medium such as a hard disk or RAM provided within a server system connected to a dedicated communication network or the Internet can be used as a computer-readable storage medium, thereby providing the program to the computer 1200 via the network.

[0076] In this embodiment, blocks in the flowchart and block diagram may represent a stage in a process in which an operation is performed or a "part" of a device that has the role of performing an operation. A particular stage and "part" may be implemented by a dedicated circuit, a programmable circuit supplied with computer-readable instructions stored on a computer-readable storage medium, and / or a processor supplied with computer-readable instructions stored on a computer-readable storage medium. The dedicated circuit may include digital and / or analog hardware circuits, and may include integrated circuits (ICs) and / or discrete circuits. The programmable circuit may include reconfigurable hardware circuits, such as field-programmable gate arrays (FPGAs) and programmable logic arrays (PLAs), which include logical AND, logical OR, exclusive OR, negated AND, negated OR, and other logical operations, flip-flops, registers, and memory elements.

[0077] A computer-readable storage medium may include any tangible device capable of storing instructions to be executed by a suitable device, and as a result, a computer-readable storage medium having instructions stored therein will comprise a product that includes instructions that can be executed to create means for performing operations specified in a flowchart or block diagram. Examples of computer-readable storage media may include electronic storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, etc. More specific examples of computer-readable storage media may include floppy disks (registered trademark), diskettes, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), electrically erasable programmable read-only memory (EEPROM), static random access memory (SRAM), compact disk read-only memory (CD-ROM), digital versatile disk (DVD), Blu-ray (registered trademark) disk, memory stick, integrated circuit card, etc.

[0078] Computer-readable instructions may include assembler instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or source code or object code written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Smalltalk®, Java®, C++, and conventional procedural programming languages ​​such as the C programming language or similar programming languages.

[0079] Computer-readable instructions may be provided to a general-purpose computer, a special-purpose computer, or a programmable circuit, either locally or via a wide area network (WAN) such as a local area network (LAN) or the internet, so that the computer-readable instructions may be executed by the processor or programmable circuit of a general-purpose computer, a special-purpose computer, or other programmable data processing device, in order to generate means for performing operations specified in a flowchart or block diagram. Examples of processors include computer processors, processing units, microprocessors, digital signal processors, controllers, microcontrollers, and the like.

[0080] (Other Embodiments) The following describes other examples of the smartphone system according to the embodiment. The smartphone system according to the embodiment comprises a communication unit, a processing unit, an application unit, and a data management unit. The communication unit enables communication via a secure communication path. The communication unit provides operation in a secure environment without directly connecting to an external network by, for example, using a VPN for internet communication. The communication unit can also protect communication data using encryption technology. For example, the communication unit encrypts data using the SSL / TLS protocol to achieve secure communication. Furthermore, the communication unit can prevent unauthorized access using a firewall. For example, the communication unit restricts access from specific IP addresses to enhance security. The processing unit executes processing by utilizing a local agent or a data center agent. The processing unit simplifies user operations using, for example, a local agent. The processing unit can also streamline business processing using a data center agent. For example, the processing unit has a data center agent pre-check and execute business processing. Furthermore, the processing unit can use AI technology to anticipate user needs and make optimal suggestions. For example, the processing unit learns the user's past operation history and predicts the next necessary operation. The application unit comes standard with secure applications. For example, the application unit manages users' schedules using Secure Calendar. The application unit can also manage users' emails using Secure Email. For example, the application unit uses Secure Email to send and receive emails, ensuring security. Furthermore, the application unit can provide secure web browsing using Secure Browser. For example, the application unit uses Secure Browser to block phishing sites and protect users. The data management unit manages user data in a secure data center. For example, the data management unit encrypts users' personal information and stores it in the data center.Furthermore, the data management unit can store only the minimum necessary data on the device. For example, the data management unit can store user data in the cloud and only cache data on the device. In addition, the data management unit can ensure data security by regularly backing up data. For example, the data management unit can regularly back up data stored in the data center to prevent data loss. As a result, the smartphone system according to this embodiment can achieve advanced security and a smart user experience.

[0081] The communications department ensures secure communication through secure communication paths. Specifically, it uses a VPN (Virtual Private Network) for internet communication, providing a secure environment without directly connecting to external networks. A VPN creates a virtual dedicated line over the internet for data transmission and reception, preventing eavesdropping and tampering by third parties. The communications department also encrypts communication data using the SSL / TLS protocol to ensure secure communication. The SSL / TLS protocol ensures data confidentiality and integrity by encrypting communication between the data source and destination. Furthermore, the communications department can prevent unauthorized access using a firewall. A firewall monitors network traffic and restricts access from specific IP addresses and ports, preventing external attacks. This allows the communications department to enhance security and protect user data. In addition, the communications department can implement an intrusion detection system (IDS) to detect abnormal communication patterns. An IDS monitors network traffic in real time and issues alerts if abnormal patterns or unauthorized access are detected. This allows the communications department to detect potential security threats early and respond quickly. By combining these technologies, the communications department can provide users with a safe and reliable communication environment and improve the overall security of the smartphone system.

[0082] The processing unit executes processes using either local agents or data center agents. Specifically, it simplifies user operations using local agents. Local agents operate within the smartphone, analyzing user actions in real time and suggesting optimal procedures. For example, when a user opens an application, the local agent predicts the next action to be taken based on past operation history and displays it on the screen, improving operational efficiency. The processing unit can also streamline business processes using data center agents. Data center agents operate in the cloud and can process large amounts of data at high speed. For example, data center agents can pre-check business processes, select and execute the optimal procedures, reducing processing time and improving operational efficiency. Furthermore, the processing unit can use AI technology to anticipate user needs and provide optimal suggestions. AI learns the user's past operation history using machine learning algorithms and predicts the next necessary action. This allows the processing unit to support user operations and provide a more comfortable user experience. In addition, the processing unit can use AI to analyze user behavior patterns and provide services optimized for individual users. This allows the processing unit to respond flexibly to user needs and improve the overall usability of the smartphone system.

[0083] The application unit comes standard with secure applications. Specifically, it manages user schedules using Secure Calendar. Secure Calendar encrypts and stores user appointments, preventing unauthorized access by third parties. Secure Calendar also improves convenience by synchronizing user appointments with the cloud and making them accessible from multiple devices. Furthermore, the application unit can also manage user emails using Secure Email. Secure Email encrypts the sending and receiving of emails, protecting their content. For example, Secure Email uses encryption technologies such as PGP (Pretty Good Privacy) and S / MIME (Secure / Multipurpose Internet Mail Extensions) to ensure email confidentiality. In addition, the application unit can provide secure web browsing using Secure Browser. Secure Browser automatically blocks phishing and malware sites, protecting users. For example, Secure Browser enhances security by restricting access to blacklisted sites and issuing warnings to users. In this way, the application unit can provide users with a safe and reliable application environment and improve the overall security of the smartphone system. Furthermore, the application unit can continuously improve the application's functionality based on user feedback, enabling flexible responses to meet user needs.

[0084] The Data Management Department manages user data in a secure data center. Specifically, it encrypts user personal information and stores it in the data center. Strong encryption algorithms such as AES (Advanced Encryption Standard) and RSA (Rivest-Shamir-Adleman) are used to ensure data confidentiality. The Data Management Department can also store only minimal data on devices. For example, it can store user data in the cloud and only cache data on devices. This saves device storage space and reduces the risk of data loss. Furthermore, the Data Management Department can ensure data security by regularly backing up data. For example, it regularly backs up data stored in the data center to prevent data loss. Methods such as incremental and differential backups are used to efficiently protect data. Additionally, the Data Management Department establishes a data recovery process to enable rapid response in the event of data loss. This allows the Data Management Department to securely manage user data and improve the overall reliability of the smartphone system.

[0085] The communications unit can communicate via VPN, providing a secure environment without directly connecting to external networks. For example, the communications unit can perform internet communication using the VPN protocol. Furthermore, the communications unit can provide a secure environment without directly connecting to external networks by communicating via a VPN server. For example, the communications unit can connect to the internet via a VPN server to ensure security. Additionally, the communications unit may have a function to automatically establish VPN connections. For example, the communications unit can establish a VPN connection as soon as a device connects to the internet, enhancing security. This reduces the risk of hacking and viruses.

[0086] The processing unit utilizes both local and data center agents, allowing agents within the device to pre-check and execute business processes. For example, the processing unit can simplify user operations using local agents. It can also streamline business processes using data center agents; for instance, the processing unit has data center agents pre-check and execute business processes. Furthermore, the processing unit can use AI technology to anticipate user needs and provide optimal suggestions. For example, it can learn from the user's past operation history and predict the next necessary operation. This simplifies user operations while improving security.

[0087] The application unit can come standard with dedicated secure applications such as Secure Calendar and Secure Email. For example, the application unit can manage users' schedules using Secure Calendar. It can also manage users' emails using Secure Email. For example, it can send and receive emails using Secure Email, ensuring security. Furthermore, the application unit can provide secure web browsing using Secure Browser. For example, it can block phishing sites using Secure Browser, protecting users. This allows for the provision of dedicated applications optimized for various uses.

[0088] The data management department can manage user data in a secure data center and store only minimal data on devices. For example, the data management department can encrypt user personal information and store it in the data center. Furthermore, the data management department can store only minimal data on devices. For example, the data management department can store user data in the cloud and store only cached data on devices. In addition, the data management department can ensure data security by regularly backing up data. For example, the data management department can regularly back up data stored in the data center to prevent data loss. This ensures the secure management of user data.

[0089] The processing unit can be equipped with agents that anticipate and respond to user needs. For example, the processing unit can use AI technology to anticipate user needs and provide optimal suggestions. Furthermore, the processing unit can learn from the user's past operation history and predict the next necessary operation. For example, it can suggest the next necessary operation based on the user's operation history. In addition, the processing unit can provide optimal services according to user needs. For example, it can suggest the most suitable application according to user needs. This can improve user convenience.

[0090] The processing unit can be equipped with a local agent that learns user data and provides the most appropriate actions, suggestions, and responses to the user. For example, the processing unit can learn user data and suggest the most appropriate actions to the user. It can also provide optimal suggestions based on the user's past operation history. For example, it can learn the user's operation history and suggest the next necessary action. Furthermore, the processing unit can provide the most appropriate answers according to the user's needs. For example, it can provide the best answer to the user's question. This allows for the provision of the most optimal service to the user.

[0091] An information processing method is an information processing method executed by a computer and may include a communication process that enables communication via a secure communication path, a processing process that executes processing using a local agent or a data center agent, an application process that includes a secure application as standard, and a data management process that manages user data in a secure data center. For example, in the communication process, the information processing method may use a VPN to perform internet communication. In addition, in the processing process, the information processing method may simplify user operations using a local agent. For example, the information processing method may use a local agent to simplify user operations. Furthermore, in the application process, the information processing method may manage user schedules using Secure Calendar. For example, the information processing method may use Secure Calendar to manage schedules. As a result, the information processing method can achieve a high level of security and a smart user experience.

[0092] The program can cause a computer to execute communication procedures that enable communication over a secure communication path, processing procedures that utilize local agents or data center agents to perform processing, application procedures that include secure applications as standard, and data management procedures that manage user data in a secure data center. For example, in the communication procedures, the program can use a VPN to perform internet communication. In addition, in the processing procedures, the program can simplify user operations using a local agent. For example, the program can use a local agent to simplify user operations. Furthermore, in the application procedures, the program can manage user schedules using Secure Calendar. For example, the program can manage schedules using Secure Calendar. This enables the program to achieve high security and a smart user experience.

[0093] The system according to the embodiment is not limited to the example described above, and various modifications are possible, for example, as follows.

[0094] The smartphone system can also include a health management unit that monitors the user's health status. This unit uses sensors to acquire data such as the user's heart rate, steps taken, and sleep patterns, and monitors their health in real time. For example, if the heart rate is abnormally high, it can send a notification to the user prompting them to rest. Furthermore, the health management unit can analyze the user's health status based on the acquired data and provide advice for maintaining good health. In addition, the health management unit can securely manage the user's health data and protect their privacy. This allows users to constantly understand their health status and receive support for leading a healthy lifestyle. The health management unit can be customized to suit the user's lifestyle, enabling health management tailored to individual needs.

[0095] Smartphone systems can also be equipped with an emotion analysis unit that estimates the user's emotions and optimizes operations based on those emotions. The emotion analysis unit analyzes the user's voice, facial expressions, input patterns, etc., to estimate the user's emotional state. For example, if it is estimated that the user is feeling stressed, it can suggest relaxing music. The emotion analysis unit can also adjust the interface's color tone and volume according to the user's emotions to provide a comfortable operating environment. Furthermore, the emotion analysis unit can securely manage the user's emotional data and protect privacy. This allows users to enjoy an optimal device experience tailored to their own emotions. The emotion analysis unit can learn from the user's emotional changes and perform more accurate emotion estimation.

[0096] Smartphone systems can also include a behavior prediction unit that predicts user behavior and provides services based on those predictions. The behavior prediction unit predicts the user's most likely next actions based on their past behavioral history, location information, and time of day. For example, if a user has a habit of stopping by a specific cafe every morning, the unit can notify them in advance of the cafe's congestion level. The behavior prediction unit can also suggest optimal routes and modes of transportation based on the user's behavioral patterns. Furthermore, the behavior prediction unit can securely manage user behavioral data and protect privacy. This allows users to travel and manage their schedules efficiently, improving the convenience of their daily lives. The behavior prediction unit can learn from changes in user behavior and make more accurate predictions.

[0097] Smartphone systems can also include a content recommendation system that suggests content based on the user's hobbies and preferences. This system analyzes the user's browsing history, purchase history, and social media activity to understand their interests and preferences. For example, if a user enjoys a particular genre of movies, it can notify them of new movie releases. The system can also suggest news articles, music, videos, and other content based on the user's preferences. Furthermore, the system can securely manage user data and protect privacy. This allows users to efficiently discover and enjoy content that matches their interests. The system can also learn from changes in user preferences, enabling it to provide more accurate recommendations.

[0098] The smartphone system can also include an environmental adaptation unit that automatically adjusts device settings according to the user's environment. The environmental adaptation unit acquires environmental information such as ambient brightness, volume, and temperature using sensors and optimizes device settings. For example, it can automatically adjust screen brightness in dark environments. It can also change settings to allow the user to comfortably use the device, such as increasing the volume in noisy environments. Furthermore, the environmental adaptation unit can securely manage the user's environmental data and protect privacy. This allows users to comfortably use the device in any environment. The environmental adaptation unit can learn from changes in the user's environment and adapt with greater accuracy.

[0099] The smartphone system can also include a health management unit that monitors the user's health status. This unit can collect and analyze health data such as the user's heart rate, steps taken, and sleep patterns. For example, it can use sensors built into the smartphone to measure the user's heart rate in real time and issue an alert if an abnormality is detected. It can also count the user's steps and record their daily exercise. This allows the user to understand their own health status and improve their lifestyle as needed. Furthermore, the health management unit can analyze the user's sleep patterns and provide advice to improve sleep quality. For example, it can record the user's sleep duration and deep sleep time and evaluate sleep quality. This allows the user to review their sleep habits and take measures to get better sleep. Through these functions, the health management unit can support the user's health maintenance and enhance the overall added value of the smartphone system.

[0100] Smartphone systems can also be equipped with an emotion analysis unit that estimates user emotions and provides optimal content. This unit can estimate emotions from the user's voice, facial expressions, and text input, and customize content based on the results. For example, it can analyze the user's voice tone and speaking style, and if it determines the user is stressed, it can suggest relaxing music or videos. The emotion analysis unit can also capture the user's facial expressions with a camera and identify emotions such as smiles and anger. This allows for the provision of content tailored to the user's mood, creating a more personalized experience. Furthermore, the emotion analysis unit can analyze text entered by the user and estimate emotions. For example, it can read emotions from content posted on social media and provide positive feedback to improve user satisfaction. Through these functions, the emotion analysis unit can provide services that are attentive to the user's emotions, improving the overall user experience of the smartphone system.

[0101] Smartphone systems can also be equipped with a location-based services unit that utilizes the user's location information to provide optimal services. This unit can identify the user's current location using GPS, Wi-Fi (registered trademark), Bluetooth (registered trademark), etc., and customize services based on that information. For example, if the user is in a specific area, the location-based services unit can provide real-time weather and traffic information for that area. It can also suggest nearby restaurants and tourist attractions based on the user's current location. This allows users to conveniently obtain information and plan their activities while on the go. Furthermore, the location-based services unit can record the user's travel history and provide personalized services based on past visits. For example, it can provide coupons and event information related to places the user frequently visits, thus attracting the user's interest. Through these functions, the location-based services unit can provide high-value-added services utilizing the user's location information, improving the overall convenience of the smartphone system.

[0102] Smartphone systems can also be equipped with a voice recognition unit that analyzes user voice commands and simplifies operation. The voice recognition unit can analyze the user's voice in real time and operate the smartphone based on the voice commands. For example, if the user says "Make a call," the voice recognition unit can automatically make a call to a specified contact. It can also send a message to a specified recipient if the user says "Send a message." This allows users to operate the smartphone hands-free, improving convenience. Furthermore, the voice recognition unit can learn the user's voice commands and provide voice operation optimized for each individual user. For example, the voice recognition unit can learn the user's speaking style and accent to recognize voice commands more accurately. Through these functions, the voice recognition unit can support user voice operation and improve the overall user experience of the smartphone system.

[0103] Smartphone systems can also include an ad delivery unit that analyzes user data and provides personalized advertisements. This unit can select ads based on user interests and display them at the appropriate time. For example, it can analyze a user's past search history and app usage history to display highly relevant ads. It can also utilize user location information to provide ads related to nearby stores and services. This allows users to receive ads tailored to their interests, improving ad effectiveness. Furthermore, the ad delivery unit can improve ad content based on user feedback, leading to more effective ad delivery. For instance, it can analyze user reactions to ads and incorporate this feedback into future ad deliveries. Through these functions, the ad delivery unit can provide valuable ads to users and improve the overall profitability of the smartphone system.

[0104] Although the present invention has been described above using embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments. It will be apparent to those skilled in the art that various modifications or improvements can be made to the above embodiments. It will be clear from the claims that such modified or improved forms may also be included in the technical scope of the present invention.

[0105] It should be noted that the execution order of operations, procedures, steps, and stages in the devices, systems, programs, and methods shown in the claims, specifications, and drawings is not explicitly stated as "before" or "prior to," and that these can be performed in any order unless the output of a previous operation is used in a later operation. Even if the operation flow in the claims, specifications, and drawings is described using phrases such as "first," and "next," for convenience, this does not mean that it is mandatory to perform the operations in that order.

[0106] 1 Smartphone System 10 Smartphone 11 Communication Unit 12 HMI Unit 13 Storage Unit 13a Local Agent Information 13b Secure Communication Information 13c Secure Application Information 13d User Information 14 Control Unit 14a Agent Execution Unit 14b Secure Communication Control Unit 14c Application Unit 14d Processing Unit 14e Data Management Unit 100 Center Device 101 Communication Unit 102 Storage Unit 102a Center Agent Information 102b Secure Communication Information 102c User Information DB 103 Control Unit 103a Agent Execution Unit 103b Secure Communication Control Unit 103c Collection Unit 103d Analysis Unit 103e Prediction Unit

Claims

1. Information processing device comprising: a communication unit that performs communication with a central device via secure communication; a storage unit that stores a secure application, including at least secure processing, as an executable application; an application unit that executes the secure application; and a processing unit that, when executing the secure application, advances the processing of the secure application via at least one of a first agent operating locally and a second agent operating on the central device, wherein at least one of the first agent and the second agent learns user data in the processing of the secure application and optimizes the processing of the secure application for each user based on the learning results.

2. The information processing apparatus according to claim 1, wherein the communication unit performs communication with the central device via VPN.

3. The information processing apparatus according to claim 1 or 2, wherein the processing unit simplifies user operations via the first agent.

4. The information processing apparatus according to claim 3, wherein the first agent analyzes the user's operations in real time, predicts the next operation the user should perform based on the past operation history included in the analysis results, and the processing unit presents the operation predicted by the first agent to the user.

5. The information processing apparatus according to claim 1 or 2, wherein the processing unit improves the efficiency of the processing performed by the secure application via the second agent.

6. The information processing apparatus according to claim 5, wherein the second agent analyzes user data collected by the central device to predict processing according to the needs of individual users, and the processing unit proposes to the user the execution of the processing predicted by the second agent.

7. The information processing apparatus according to claim 1, wherein the secure application includes a time management application, an email application, or a browser.

8. The information processing apparatus according to claim 7, wherein the first agent also serves as the browser among the secure applications.

9. The information processing apparatus according to claim 1, further comprising a data management unit that manages user data via the central device, wherein the data management unit encrypts the user data and stores it in the central device, and stores only the minimum amount of user data in the storage unit.

10. The information processing apparatus according to claim 9, wherein the minimum data is cache data.

Images