Information Processing System for Privacy-Preserving Movement Tracking

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing technologies for tracking individual behavior lack efficiency in reducing system construction costs and ensuring privacy protection for individuals.

Innovation Solution

An information processing system comprising a specification apparatus for identifying specific persons and recognition apparatuses for recognizing unspecific persons, with separate memory apparatuses for storing data, allowing the system to associate movement histories without revealing personal identities, thus protecting privacy.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If recognition apparatuses are used to track individual behavior, then tracking capability is improved, but system construction cost increases and privacy protection deteriorates

Engineering Contradiction:
Improvetracking capabilityVSAvoidsystem construction cost
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system divides tracking apparatuses into two segments: specification apparatuses (few in number, high cost, provide identification information) and recognition apparatuses (many in number, low cost, provide movement data). This segmentation allows the system to achieve comprehensive tracking capability while controlling construction costs by using mostly inexpensive recognition apparatuses rather than expensive specification apparatuses throughout the entire system.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The information processing apparatus acts as an intermediary that receives identification information from specification apparatuses and movement history data from recognition apparatuses. It combines these data sources to associate movement histories with specific persons without requiring each recognition apparatus to have full specification capabilities, thereby reducing overall system cost while maintaining tracking effectiveness.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If recognition apparatuses track individual behavior, then tracking capability is improved, but privacy protection deteriorates

Engineering Contradiction:
Improvetracking capabilityVSAvoidprivacy protection
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The system segments the tracking function into two parts: identification (performed by few specification apparatuses at specific locations) and movement monitoring (performed by many recognition apparatuses). This segmentation allows movement tracking to occur without continuous identification, reducing privacy intrusion while maintaining tracking capability. Individuals are identified only when passing specification apparatuses, not continuously by all recognition apparatuses.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The information processing apparatus serves as an intermediary that selectively associates identification information with movement history data. It determines whether to link a specific person's identity to their movement pattern based on available identification data, providing a mechanism to protect privacy by not automatically associating identities with all movement data when identification information is unavailable or when such association is not warranted.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Measurement precision

If specification apparatuses are deployed extensively, then identification accuracy is improved, but system construction cost increases

Engineering Contradiction:
Improveidentification accuracyVSAvoidsystem construction cost
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The system segments the identification function from the general tracking function. Specification apparatuses with high identification accuracy are deployed only at strategic locations where identification is most valuable (entrances, exits, key checkpoints), while recognition apparatuses handle general movement monitoring. This segmentation maintains identification accuracy where needed while dramatically reducing system construction costs by avoiding extensive deployment of expensive specification apparatuses.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The recognition apparatuses are designed to serve multiple functions: they provide movement history data for tracking, and when combined with identification information from specification apparatuses, they contribute to identifying specific persons. This multi-functionality allows the system to achieve comprehensive tracking and identification capabilities using a mix of apparatus types rather than requiring extensive deployment of expensive specification apparatuses throughout the entire area.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12439371B2Information processing system, information processing method, and non-transitory computer readable medium
Publication Date: 2025.10.07 TOYOTA JIDOSHA KK
  • US12439371B2 patent drawing
  • US12439371B2 patent drawing
  • US12439371B2 patent drawing

AI summary

An information processing system includes: a specification apparatus specifying a specific person; a recognition apparatus recognizing an unspecific person present in a geographic range; a first memory storing first data including a time/position at which the specific person is specified; a second memory storing second data including a recognition result by the recognition apparatus; and an information processing apparatus that acquires the first data and the second data; acquires a movement history indicating a temporal change in a position of a first unspecific person by analyzing the second data; determines whether the specific person and the first unspecific person are identical, based on the first data and the movement history of the first unspecific person; and outputs the movement history of the first unspecific person, as a movement history of the specific person, when the specific person and the first unspecific person are determined to be identical.