JP2008189261A - Vehicle control system and qualification control program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a vehicle control system and a qualification control program capable of permitting the drive to a driver having a legal authority such as a driving qualification and the service permission. <P>SOLUTION: The vehicle control system comprises a control means for permitting the driving operation to a driver when the distance between the first and second positions is within a predetermined range, a smart key which is possessed by the driver and has a first position detection means for detecting the first position, a first notification means for notifying the first position to the control means, and an access means for making an access to the control means so as to obtain the permission of the driving operation, a living body data detection terminal device having a second position detection means for detecting the second position, a living body sensor for detecting the living body data value of the driver, and a second notification means which checks that a detected driver is the driver himself according to his living body data value, and notifies the second position to the control means, and a control means which adjusts the transmittance of a light control glass to be equal to or higher than the predetermined value when the driving operation is permitted by the control means, and adjusts the transmittance of the light control glass to be below the predetermined value when the driving operation is not permitted. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a management technique suitable for use in permitting a driving operation by determining whether or not the vehicle has appropriate qualifications or permission when driving a vehicle.

In recent years, an electronic key called a smart key has been used to unlock a door by bringing the electronic key close to the door or the like.
Such smart keys are being used for doors of automobiles and the like. Similarly, this type of smart key is also being used to start an automobile engine.

  In such a case, if the smart key is lost or left somewhere, it may be used by others. In other words, it leads to allowing unlicensed driving and car theft.

The technology of this type of smart key system is described in Patent Document 1 below.
JP-A-2005-240314

According to the technique disclosed in Patent Document 1, it is possible to unlock the door and lock the door.
However, since a third party other than a driver who has a valid driving qualification and use permission can use it freely, there is a problem that if the smart key is left unattended, the car is stolen.

  As described above, the damage caused by the carelessness or unauthorized use of the person is extremely large, and the technique disclosed in Patent Document 1 cannot be said to ensure security.

  In addition, if a commercial vehicle is stolen instead of a general private vehicle, it becomes possible to enter and exit various facilities with the commercial vehicle. There is a risk of this.

  In particular, there may be a serious problem when a person who does not have proper qualifications such as facilities that require secrecy and staff entrances at airports and harbors. In recent years, there is concern that important facilities such as power plants and dams may become targets of terrorists, and when such intrusions into important facilities occur, it is not just a problem for those facilities. There is a risk of major national problems.

In addition, there is a problem that a dangerous state is likely to be left unattended unless there is a crackdown on inspection or the like regarding driving and maneuvering by a person who does not have driving or maneuvering qualifications.
The present invention was devised in view of such a situation, and permits a driver having a proper authority such as a driving qualification and a use permission, and does not permit a driver who does not have a valid authority. The goal is to ensure sufficient security and minimize damage to the driver.

The present invention for solving the above problems is as follows.
(1) The invention described in claim 1 is a vehicle management system for controlling a vehicle having a light control glass capable of adjusting the transmittance of visible light as a window glass, and is provided between a first position and a second position. Management means for permitting the driver to perform a driving operation when the distance is within a predetermined range, first position detection means for detecting a first position possessed by the driver, and using the first position as the management means A first notification means for notification, a smart key having an access means for accessing the management means to receive permission for the driving operation; a second position detection means for detecting a second position; and detecting a biometric data value of the driver Biological data having a biometric sensor, and second notification means for confirming the driver's identity based on the biometric data value of the driver detected by the biometric sensor and notifying the management means of the second position When the operation is permitted by the detection terminal device and the management means, the transmittance of the light control glass is adjusted to a predetermined value or more, and when the operation is not permitted by the management means, the adjustment is performed. And a control means for adjusting the transmittance of the light glass to be less than a predetermined value. The biometric data detection terminal device is preferably worn on a part of the driver's body and carried by the driver.

  (2) In the invention according to claim 2, the light control glass sandwiches a liquid crystal layer that blocks visible light by changing the orientation of liquid crystal molecules by applying a predetermined voltage, between two transparent electrodes. The transmittance of the light control glass by changing the orientation of the liquid crystal molecules by applying the predetermined voltage to the two transparent electrodes. The vehicle management system according to claim 1, wherein the vehicle control system is adjusted to be less than the predetermined value.

(3) The invention according to claim 3 is characterized in that the light control glass further comprises an organic electroluminescence element layer formed by sandwiching a transparent light emitting layer that emits light by applying a predetermined voltage between two transparent electrodes. The light emitting layer is configured by arranging light emitters that emit red, green, and blue, which are the three primary colors of light, in a matrix, and the control means controls the light emission state of each light emitter. 3. The vehicle management system according to claim 2, further comprising a display control function for causing the organic electroluminescence element layer to execute any color development or any image display. .

  (4) The invention according to claim 4 is characterized in that the light control glass comprises an organic electroluminescence element layer formed by sandwiching a transparent light emitting layer that emits light by application of a predetermined voltage between two transparent electrodes, A photochromic glass layer colored in response to light of a specific wavelength emitted from the light emitting layer, and the control means causes the light emitting layer to emit light of the specific wavelength and color the photochromic glass layer The vehicle management system according to claim 1, wherein the transmittance of the light control glass is adjusted to be less than the predetermined value.

  (5) The invention according to claim 5 includes an organic electroluminescence element layer in which the light control glass comprises a transparent light emitting layer that emits light when a predetermined voltage is applied, sandwiched between two transparent electrodes. 2. The vehicle according to claim 1, wherein the vehicle is configured so that the transmittance of the light control glass is adjusted to be less than the predetermined value by causing the light emitting layer to emit light of a predetermined color. It is a management system.

  (6) In the invention described in claim 6, the light-emitting layer is configured by arranging light emitters that respectively emit red, green, and blue, which are the three primary colors of light, in a matrix, and the control means includes each light-emitting element. 5. The apparatus according to claim 4, further comprising a display control function for executing any color development or any image display in the organic electroluminescence element layer by controlling a light emission state of the body. Alternatively, the vehicle management system according to claim 5.

  (7) In the invention according to claim 7, the management means permits the driving operation when the distance between the first position and the second position is within a predetermined range, and the first position Canceling the permission of the driving operation when the distance between the first position and the second position exceeds a predetermined range, or when either the first position or the second position cannot be confirmed. It is a vehicle management system as described in any one of Claims 1-6 characterized by the above-mentioned.

  (8) In the invention according to claim 8, the smart key is provided with a driving qualification acquired by a driver or a proof function for permitting use of the vehicle, and the management means is a proof of qualification provided for the smart key. The vehicle management system according to any one of claims 1 to 7, wherein the driving operation is permitted with reference to a function.

  (9) The invention according to claim 9 is characterized in that the management means permits the driving operation with reference to a biometric data value of the driver from the biometric data detection terminal device. The vehicle management system according to claim 8.

  (10) The invention according to claim 10 is possessed by the driver, management means for permitting the driver to drive when the distance between the first position and the second position is within a predetermined range. A smart key having a first position detecting means for detecting the first position, a first notifying means for notifying the managing means of the first position, an access means for accessing the managing means to receive permission for the driving operation, Second position detecting means for detecting a second position, a biosensor for detecting the driver's biometric data value, and confirming the driver's identity based on the driver's biometric data value detected by the biosensor A biological data detection terminal device having second notification means for notifying the management means of the second position; and when the driving operation is permitted by the management means, the transmittance of the light control glass is a predetermined value. Less than And a control means for adjusting the transmittance of the light control glass below a predetermined value when the operation is not permitted by the management means, and a light control glass capable of adjusting the transmittance of visible light by the control means Is a qualification management program for causing a computer to function as a vehicle management system for controlling a vehicle having a window glass.

  (11) In the above (1) to (10), the one-time password generating means for generating a one-time password that can be used only once, and the one-time password generated by the one-time password generating means and the operation Authentication means for performing authentication determination by comparing the one-time password returned from the driver, management means for allowing the driver to perform a driving operation when authentication determination is made by the authentication means, and by the driver A smart key having a first position detecting means for detecting the first position, a first notification means for notifying the management means of the first position, and an access means for accessing the management means to receive permission for the driving operation. A biosensor for detecting the biometric data value of the driver, and the biometric data value of the driver detected by the biosensor. And a biometric data detection terminal device having one-time password processing means for confirming the identity of the driver and displaying the one-time password in synchronization with the one-time password generating means. When the smart key accesses the driving permission receiving device by the access means, the authentication means uses the one-time password returned from the driver referring to the display means of the biometric data detection terminal device. It is also desirable that when the authentication is performed, the driving operation by the driving permission receiving device is permitted.

  In addition, the biometric data detection terminal device further includes a transmission unit that transmits the one-time password generated by the one-time password generation unit to the biometric data detection terminal device. It is also desirable to receive the one-time password transmitted from the management means, confirm the identity of the driver based on the driver's biometric data value detected by the biometric sensor, and display the one-time password. .

  In the biometric data detection terminal device, the one-time password synchronized with the one-time password generating unit is generated by the one-time password processing unit, and the driver is detected based on the driver's biometric data value detected by the biometric sensor. It is also desirable to confirm the identity and display the one-time password.

  It is also desirable that the management means further includes warning means for notifying a system administrator or the driver of a warning when the reply of the one-time password from the driver has exceeded a predetermined time. .

  It is preferable that the management means further includes warning means for notifying a system administrator or the driver when the distance is outside the predetermined range for a predetermined time or longer.

It is also desirable that the smart key is for obtaining permission for driving operation and is built in the mobile phone device.
It is also desirable that the biometric data detection terminal device is mounted at any position on the driver's body.

In addition, the said biometric data detection terminal device can use the thing (portable portable apparatus for physical condition management) which manages the said driver | operator's physical condition with the said biometric data value.
Furthermore, when the portable position detection means is provided in the biological data detection terminal device, the biological data detection terminal device may be provided with various means and functions as described below.

  The biometric data detection terminal device holds, in advance, a weather sensor for detecting meteorological data in the driver's atmosphere and a biometric data threshold value for managing the physical condition of the driver for each weather condition. A threshold value table; threshold value reading means for searching the threshold value table for reading out a biometric data threshold value set for weather conditions corresponding to the weather data detected by the weather sensor; and biometric data read out by the threshold value reading means Comparing means for comparing a threshold value with a biometric data value detected by the biometric sensor, and a physical condition abnormality that issues a warning to the driver when the physical condition abnormality of the driver is detected as a result of comparison by the comparing means Provide warning means.

  If the driver's physical condition abnormality is detected as a result of comparison by the comparison means, the physical condition abnormality notifying means for notifying a predetermined contact to that effect, and the physical condition abnormality warning means Inquiry means for inquiring the driver as to whether or not to perform the notification operation by the physical condition abnormality notification means when the operation for stopping the warning operation by the driver is executed within a predetermined time, and the physical condition abnormality warning means When the driver does not perform an operation for stopping the warning operation for a predetermined time or more, or when the driver makes a reply that the notification operation by the physical condition abnormality notification unit is executed in response to the inquiry by the inquiry unit And a control means for controlling the physical condition abnormality notification means to cause the physical condition abnormality notification means to perform a notification operation.

  In the biometric data detection terminal device, when the driver refuses to execute the notification operation by the physical condition abnormality notification means for a predetermined number of times in response to the inquiry by the inquiry means, the control means notifies the physical condition abnormality notification means Force the action to execute.

In the above-described biological data detection terminal device, when the operation for stopping the warning operation by the physical condition abnormality warning unit is not executed for a predetermined time or more, and the operation for stopping the warning operation by the physical condition abnormality warning unit is executed within the predetermined time And when the driver refuses to execute the notification operation by the physical condition abnormality notification means for a predetermined number of times in response to the inquiry by the inquiry means, the physical condition abnormality notification means sends the driving to different contacts The person's physical condition is notified.

In the above-described biometric data detection terminal device, when the physical condition abnormality notification unit notifies the physical condition abnormality of the driver, the biological data value detected by the biological sensor is also notified.
In the biological data detection terminal device according to the above item, when the physical condition abnormality notification unit notifies the driver of physical condition abnormality, the second position detected by the position detection unit is also notified.

According to the present invention as described above, the following effects can be obtained.
(1) In the invention of the vehicle management system according to claim 1, the distance between the position (first position) of the portable device as the smart key and the position (second position) where the driver's biometric data is detected. Is within the predetermined range, the management means permits the driving operation.

  That is, when the distance between the current positions of the biometric data detection terminal device to be carried by the driver and the portable device to be used by the driver is within a predetermined range, in other words, two types of devices are properly operated. The driving operation is permitted only when it is determined that the person himself / herself is possessing and using it.

  Here, even if the portable device is lost or stolen, it cannot be used unless it has a biometric data detection terminal device. Similarly, even if the biometric data detection terminal device is lost or stolen, the biometric data detection terminal device confirms whether or not the driver is a legitimate driver based on the biometric data value of the legitimate driver. It will be unusable for anyone other than the driver. In other words, even if one or both of the biometric data detection terminal device and the portable device is lost or stolen, if there is no biometric data detection terminal device worn by the legitimate driver himself, Since no permission can be obtained by means, unauthorized use by a malicious third party can be prevented more reliably, sufficient security can be ensured, and damage to the driver can be minimized. . The system of the present invention functions more effectively by providing a function as a biometric data detection terminal device to a device that is always worn on the driver's body, such as a wrist watch or a portable mobile device for physical condition management. Will contribute to secure security. In addition, there is an advantage that a dedicated scanning operation for biometric authentication is not required because a biometric data value acquired continuously or continuously for a certain time is used for physical condition management. Furthermore, since the biometric data value acquired continuously or continuously for a certain time is used for the physical condition management, there is an advantage that the biometric data value is hardly stolen and is resistant to impersonation.

And in the invention of this vehicle management system, in a vehicle having a light control glass capable of adjusting the transmittance of visible light as a window glass, when the driver has a legitimate authority and driving is permitted, The transmittance of the light control glass is adjusted to a predetermined value or more (transmission state). According to this vehicle management system, when it is determined that the driver does not have a proper authority, the transmittance of the light control glass is adjusted to be less than a predetermined value. Therefore, if the driver of the vehicle does not have a proper authority, the transmittance of the window glass (light control glass) is less than a predetermined value, and the vehicle is not suitable for traveling. The vehicle position and speed are checked, and light control is performed when it is determined by the position determination means that the location of the vehicle belongs to a specific area, and when the speed determination means determines that the moving speed of the vehicle is zero. It is also desirable that the transmittance of the glass be adjusted below a predetermined value. Therefore, if the driver of the vehicle does not have a proper authority, the transmittance of the window glass (light control glass) is less than a predetermined value, and the vehicle is not suitable for traveling. On the other hand, since the start of the engine is not limited, it is possible to use air conditioning. That is, although it can be used for cooling and heating with the engine running, it is not suitable for traveling, so it becomes possible to effectively suppress driving without proper authority without giving discomfort to the occupants in the vehicle, Privacy and security are also secured.

  Therefore, driving operation is allowed to a driver with a legitimate authority and not to a driver without a legitimate authority to ensure sufficient security and minimize the damage to the driver. It becomes possible.

  (2) In the invention of the vehicle management system according to the second aspect, the light control glass has a liquid crystal layer that blocks visible light by changing the orientation of the liquid crystal molecules by applying a predetermined voltage between the two transparent electrodes. The control means is configured to include a sandwiched liquid crystal film, and the control means applies a predetermined voltage to the two transparent electrodes to change the orientation of the liquid crystal molecules, thereby changing the transmittance of the light control glass to a predetermined value. Adjust to less than.

  In other words, when a light control glass including a liquid crystal film is used, the transmittance of the light control glass can be switched to a value less than the predetermined value by simply applying a predetermined voltage between the two transparent electrodes. A window glass can be made into a high concentration state, and can be made into the state which is not suitable for driving | running | working.

  (3) In the invention of the vehicle management system according to the third aspect, the light control glass further comprises an organic electroluminescence device in which a transparent light emitting layer that emits light when a predetermined voltage is applied is sandwiched between two transparent electrodes. The light emitting layer is configured by arranging light emitting elements that emit light of three primary colors, red, green, and blue, in a matrix, and the control means determines the light emitting state of each light emitting element. By controlling, an arbitrary color development or an arbitrary image display is executed in the organic electroluminescence element layer.

In other words, when a light control glass containing an organic electroluminescence element layer is used, the transmittance of the light control glass can be very easily achieved simply by causing the light emitting layer of the organic electroluminescence element layer to emit light of a predetermined color. The window glass can be brought into a high concentration state by switching to less than a predetermined value. Also in this case, an organic electroluminescence element layer is included. (4) In the invention of the vehicle management system according to claim 4, the light control glass has a transparent light emitting layer that emits light by applying a predetermined voltage between two transparent electrodes. An organic electroluminescence element layer sandwiched between and a photochromic glass layer colored in response to light of a specific wavelength emitted from the light emitting layer, and the control means has a light of a specific wavelength in the light emitting layer. And the photochromic glass layer is colored to adjust the transmittance of the light control glass to less than a predetermined value.

  That is, when a light control glass including an organic electroluminescence element layer and a photochromic glass layer is used, the light control glass can be very easily obtained simply by causing the light emitting layer of the organic electroluminescence element layer to emit light of a specific wavelength. The window glass can be brought into a high concentration state by switching the transmittance of the glass to less than a predetermined value.

  At this time, since the photochromic glass layer is colored by the light emitted from the organic electroluminescence element layer, the transmittance is sufficiently changed and reduced, while light other than light having a wavelength for coloring the photochromic glass layer is emitted from the organic electroluminescence. When the element layer emits light, the light control glass including the organic electroluminescence element layer can function as a display device for the outside as described later.

  (5) In the invention of the vehicle management system according to claim 5, the light control glass is an organic electroluminescence element layer in which a transparent light emitting layer that emits light by applying a predetermined voltage is sandwiched between two transparent electrodes. The control means adjusts the transmittance of the light control glass to less than a predetermined value by causing the light emitting layer to emit light of a predetermined color.

  That is, when a light control glass containing only an organic electroluminescence element layer is used, the light transmittance of the light control glass can be very easily achieved by simply emitting light of a predetermined color to the light emitting layer of the organic electroluminescence element layer. The window glass can be brought into a high concentration state by switching to less than a predetermined value. Also in this case, the light control glass including the organic electroluminescence element layer can be functioned as a display device for the outside as described later.

  (6) In the invention of the vehicle management system according to claim 6, the light emitting layer is configured by arranging light emitters that emit red, green, and blue, which are the three primary colors of light, in a matrix, and the control means includes: By controlling the light emission state of each light emitter, any color development or any image display is executed in the organic electroluminescence element layer.

  That is, the light emitting layer in the organic electroluminescence element layer is configured by arranging light emitters that emit red, green, and blue, which are the three primary colors of light, in a matrix, and by controlling the light emission state of each light emitter. In the organic electroluminescence element layer, it becomes possible to perform arbitrary color development and arbitrary image display, and the window glass can be used as a display device for the outside. For example, by making the color of all window glasses the same color as the exterior of the vehicle while the vehicle is stopped, the appearance is stylish and extremely conspicuous, so a malicious third party can engage in illegal activities such as theft. It will be difficult to do, and will greatly contribute to the prevention of illegal activities against the vehicle. In addition, in the organic electroluminescence element layer of the light control glass used as the rear window glass during the movement of the vehicle, by executing the display linked to the brake operation of the vehicle and the display linked to the operation of the direction indicator of the vehicle, The large display using the rear window glass as well as the brake lamps and turn signals makes it possible to clearly communicate the driver's intention of braking and moving direction to the driver of the vehicle behind, and safety during traveling Can increase the sex.

  (7) In the invention of the vehicle management system according to claim 7, between the position (first position) of the portable device as the smart key and the position (second position) where the driver's biometric data is detected. When the distance is within the predetermined range, the management means permits the driving operation. Then, when the distance between the first position and the second position exceeds a predetermined range, or when either the first position or the second position cannot be confirmed, the management means, Revoke permission for driving.

  That is, when the distance between the current positions of the biometric data detection terminal device to be carried by the driver and the portable device to be used by the driver is within a predetermined range, in other words, two types of devices are properly operated. The driving operation is permitted only when it is determined that the person himself / herself is possessing and using it. When the distance between the current position of the biometric data detection terminal device to be carried by the driver and the portable device to be used by the driver is not within the predetermined range, in other words, two types of devices are valid. If the driver deviates from a situation where it can be determined that the driver himself possesses and uses it, the permission for driving operation is cancelled.

  Here, even if the portable device is lost or stolen, it cannot be used unless it has a biometric data detection terminal device. Similarly, even if the biometric data detection terminal device is lost or stolen, the biometric data detection terminal device confirms whether or not the driver is a legitimate driver based on the biometric data value of the legitimate driver. It will be unusable for anyone other than the driver.

In other words, even if one or both of the biometric data detection terminal device and the portable device is lost or stolen, if there is no biometric data detection terminal device worn by the legitimate driver himself, Since no permission can be obtained by means, unauthorized use by a malicious third party can be prevented more reliably, sufficient security can be ensured, and damage to the driver can be minimized. . The system of the present invention functions more effectively by providing a function as a biometric data detection terminal device to a device that is always worn on the driver's body, such as a wrist watch or a portable mobile device for physical condition management. Will contribute to secure security.

  In addition, there is an advantage that a dedicated scanning operation for biometric authentication is not required because a biometric data value acquired continuously or continuously for a certain time is used for physical condition management. Furthermore, since the biometric data value acquired continuously or continuously for a certain time is used for the physical condition management, there is an advantage that the biometric data value is hardly stolen and is resistant to impersonation.

  Therefore, driving operation is allowed to a driver with a legitimate authority and not to a driver without a legitimate authority to ensure sufficient security and minimize the damage to the driver. It becomes possible.

  (8) In the invention of the vehicle management system of the vehicle management system according to claim 8, the smart key has a driving qualification acquired by the driver or a proof function of vehicle use permission, and the management means is provided in the smart key. The driving operation is permitted with reference to the proof function of the given qualification. For this reason, driving of various vehicles can be permitted only to those who have a valid driving qualification and permission to use. That is, unauthorized driving by a malicious third party can be more reliably prevented, sufficient security can be ensured, and damage to the driver can be minimized.

  (9) In the invention of the vehicle management system according to claim 9, the management means permits the driving operation with reference to the driver's biometric data value from the biometric data detection terminal device. For this reason, driving of various vehicles can be permitted only to the driver himself / herself who has a valid driving qualification and usage permission. That is, unauthorized driving by a malicious third party can be more reliably prevented, sufficient security can be ensured, and damage to the driver can be minimized.

  (10) In the invention of the vehicle management program according to claim 10, the distance between the position (first position) of the portable device as the smart key and the position (second position) where the driver's biometric data is detected. Is within the predetermined range, the management means permits the driving operation.

  That is, when the distance between the current positions of the biometric data detection terminal device to be carried by the driver and the portable device to be used by the driver is within a predetermined range, in other words, two types of devices are properly operated. The driving operation is permitted only when it is determined that the person himself / herself is possessing and using it.

Here, even if the portable device is lost or stolen, it cannot be used unless it has a biometric data detection terminal device. Similarly, even if the biometric data detection terminal device is lost or stolen, the biometric data detection terminal device confirms whether or not the driver is a legitimate driver based on the biometric data value of the legitimate driver. It will be unusable for anyone other than the driver. In other words, even if one or both of the biometric data detection terminal device and the portable device is lost or stolen, if there is no biometric data detection terminal device worn by the legitimate driver himself, Since no permission can be obtained by means, unauthorized use by a malicious third party can be prevented more reliably, sufficient security can be ensured, and damage to the driver can be minimized. . The system of the present invention functions more effectively by providing a function as a biometric data detection terminal device to a device that is always worn on the driver's body, such as a wrist watch or a portable mobile device for physical condition management. Will contribute to secure security. In addition, there is an advantage that a dedicated scanning operation for biometric authentication is not required because a biometric data value acquired continuously or continuously for a certain time is used for physical condition management. Furthermore, since the biometric data value acquired continuously or continuously for a certain time is used for the physical condition management, there is an advantage that the biometric data value is hardly stolen and is resistant to impersonation.

  And in this vehicle management program invention, in a vehicle having a light control glass capable of adjusting the transmittance of visible light as a window glass, when the driver has a legitimate authority and driving is permitted, The transmittance of the light control glass is adjusted to a predetermined value or more (transmission state). According to this vehicle management system, when it is determined that the driver does not have a proper authority, the transmittance of the light control glass is adjusted to be less than a predetermined value. Therefore, if the driver of the vehicle does not have a proper authority, the transmittance of the window glass (light control glass) is less than a predetermined value, and the vehicle is not suitable for traveling. The vehicle position and speed are checked, and light control is performed when it is determined by the position determination means that the location of the vehicle belongs to a specific area, and when the speed determination means determines that the moving speed of the vehicle is zero. It is also desirable that the transmittance of the glass be adjusted below a predetermined value. Therefore, if the driver of the vehicle does not have a proper authority, the transmittance of the window glass (light control glass) is less than a predetermined value, and the vehicle is not suitable for traveling. On the other hand, since the start of the engine is not limited, it is possible to use air conditioning. That is, although it can be used for cooling and heating with the engine running, it is not suitable for traveling, so it becomes possible to effectively suppress driving without proper authority without giving discomfort to the occupants in the vehicle, Privacy and security are also secured.

  Therefore, driving operation is allowed to a driver with a legitimate authority and not to a driver without a legitimate authority to ensure sufficient security and minimize the damage to the driver. It becomes possible.

  When the driver's biometric data value detected by the biometric sensor confirms the driver himself / herself, the one-time password synchronized with the management means is displayed on the biometric data detection terminal device. The three parties cannot use the one-time password, and the driving operation can be permitted only to the proper driver.

  In the biometric data detection terminal device, the one-time password processing means receives the one-time password transmitted from the management means and confirms that the driver is the person himself / herself based on the driver's biometric data value detected by the biometric sensor. The confirmation and display of the one-time password eliminates the need for dedicated hardware and software for generating the one-time password.

  In addition, by generating a one-time password in synchronization with the one-time password generated by the one-time password generation means on the biometric data detection terminal device side, dedicated hardware for sending and receiving the one-time password is generated by the biometric data. A secure security can be ensured by using a one-time password without providing the detection terminal device.

  If it takes more than a certain amount of time for a one-time password to be returned, a warning notification is sent to the system administrator or driver to ensure that the mobile device has been misplaced or stolen, and that the mobile device has been misplaced or stolen. It is possible to take action immediately.

  If the distance between the first position and the second position is out of the predetermined range for a predetermined time or longer, a warning notification is given to the system administrator or the driver so that the portable device is left behind or stolen. It is possible to reliably prevent or take immediate measures against misplacement or theft of the portable device.

  In addition, since the biometric data detection terminal device is attached to any position of the driver's body, it can be easily held, and the driver himself / herself can be identified by biometric authentication before the permission / denial determination. Confirmation can be completed, and permission for driving operation can be quickly determined without performing a special operation for biometric authentication. Therefore, unauthorized use by a malicious third party can be more reliably prevented, sufficient security can be ensured, and damage to the driver can be minimized.

In addition, when the driver removes the biometric data detection terminal device from the body and the detection operation by the biometric sensor is interrupted and restarted, the pre-interruption statistical value and post-resumption statistical value of the biometric data value are calculated, If these statistical values are not statistical values of the same driver's biometric data value, the driving operation is not permitted, so that the biometric data value indicates whether or not the driver before and after interruption of the detection operation by the biometric sensor is the same person. Can be statistically judged on the basis of this, so if the person is clearly different, driving operation can not be permitted, unauthorized use can be prevented more reliably, and sufficient security can be ensured. Become.

  In this case, the detection operation is interrupted by not permitting the driver who holds the smart key 10 until the determination based on the statistical value after the detection operation is resumed after the detection operation of the biometric data value is interrupted. Unauthorized use with a gap from later until decision confirmation is reliably prevented, and sufficient security is ensured.

  In addition, when the driver removes the biometric data detection terminal device from the body and the detection operation by the biosensor is interrupted and resumed, the smart key 10 is pressed unless the biometric data value of the same driver is a statistical value. Based on the biometric data value, it is statistically determined whether or not the driver before and after the interruption of the detection operation by the biometric sensor is the same person by continuing the state in which the driver does not permit the driving operation. Since the determination can be made, if the person is clearly different, the driving operation can not be permitted, unauthorized use can be prevented more surely, and sufficient security can be ensured.

  Furthermore, a biometric data threshold value for managing the physical condition of the driver is set in advance in the biometric data detection terminal device for each weather condition in the threshold value table, and the weather condition corresponding to the meteorological data detected by the meteorological sensor is set. When the detected biometric data threshold value is retrieved from the threshold value table and compared with the read biometric data threshold value and the biometric data value detected by the biometric sensor, the driver's physical condition is detected. A warning is issued to the driver, or the driver's physical condition is notified to a predetermined contact.

  As a result, the physical condition of the driver can be managed and judged based on the biometric data threshold corresponding to the weather data in the driver's location atmosphere. It is possible to manage and judge, and according to the judgment result, the driver can be alerted appropriately and notified to the manager etc. according to the physical condition of the driver without depending on the driver's self-judgment. Appropriate measures can be taken immediately.

At this time, when a warning of abnormal physical condition is given to the driver, if the operation for stopping the warning operation is not executed for a predetermined time or more by the driver, the driver is in a considerably dangerous state such as losing consciousness. Since it is determined that there is a driver's physical condition notification immediately, a prompt response can be taken. In that case, it is possible to immediately arrange an emergency vehicle such as an ambulance by notifying the fire department etc., and at the same time notifying the biometric data value detected by the biometric sensor, according to the biometric data value Appropriate treatment can be performed more quickly. Furthermore, by notifying the driver's location (second position) at the same time, the driver's location can be confirmed immediately, and emergency vehicles can be directed immediately to the location where the driver is located. A quick initial response can be realized.

  At this time, when a warning of abnormal physical condition is given to the driver, if the operation for stopping the warning operation is not executed for a predetermined time or more by the driver, the driver is in a considerably dangerous state such as losing consciousness. Since it is determined that there is a driver's physical condition notification immediately, a prompt response can be taken. In that case, it is possible to immediately arrange an emergency vehicle such as an ambulance by notifying the fire department etc., and at the same time notifying the biometric data value detected by the biometric sensor, according to the biometric data value Appropriate treatment can be performed more quickly. Furthermore, by simultaneously notifying the driver's location (second position) detected by the second position detector of the biometric data detection terminal device, the driver's location can be immediately confirmed, An emergency vehicle or the like can be immediately directed to the location where it is located, and a quick initial response can be realized.

  In addition, when an operation to stop the warning operation is executed by the driver within a predetermined time, the driver is inquired about whether or not to execute the physical condition abnormality notification, and the physical condition abnormality notification is executed according to the driver's answer. Thus, after alerting the driver and notifying the driver himself / herself, the physical condition abnormality is notified, so that automatic notification can be prevented from being performed unnecessarily. And if the driver wants, a notification is made. At that time, by making a telephone call to the attending doctor as a notification, the driver can ask the attending doctor for an appropriate treatment, and it is detected by a biosensor. By simultaneously notifying the biometric data values that have been set, the attending physician can make an appropriate determination and an instruction for an appropriate treatment.

  In response to the above inquiry, if the driver refuses to execute the physical condition abnormality notification continuously, that is, if the abnormality is repeatedly detected even if the driver stops and cancels the warning by self-judgment, the driver shall It is judged that the person is in a considerably dangerous state, and a notice of a physical condition is forcibly performed so that a quick response can be taken. In that case, for example, in addition to notifying relatives such as friends, relatives, and spouses, the driver's location (second position) detected by the portable position detection device (second position detection means) By simultaneously notifying the driver, the driver's location can be confirmed immediately, and a friend or close relative can immediately go to the location where the driver is located.

  In response to the above inquiry, if the driver refuses to execute the physical condition abnormality notification continuously, that is, if the abnormality is repeatedly detected even if the driver stops and cancels the warning by self-judgment, the driver shall It is judged that the person is in a considerably dangerous state, and a notice of a physical condition is forcibly performed so that a quick response can be taken. In that case, for example, in addition to notifying relatives such as friends, relatives, and spouses, the location position (second position) of the driver detected by the second position detecting means of the biometric data detection terminal device is determined. By notifying at the same time, the location of the driver can be confirmed immediately, and a friend or close relative can immediately go to the location where the driver is located.

Embodiments of the present invention will be described below with reference to the drawings.
[1] Configuration of the vehicle management system of the present embodiment:
[1-1] Overall configuration of the vehicle management system:
FIG. 1 is a block diagram showing the configuration of a vehicle management system as an embodiment of the present invention. The vehicle management system 1 of the present embodiment shown in FIG. 1 is a smart that a driver possesses in order to receive permission for driving operation. It is a system including a portable device as a key and a biometric data detection terminal device that detects a biometric data value of a driver.

In the present specification, the term “smart key” means that when the driver approaches the door, the door is unlocked and the engine can be started without any key operation by the driver. In other words, it means a key that allows a driving operation when approached.

  In addition to basic functions as a key, identification card, employee ID card, student ID card, student ID card, passer ID card, boarding ticket, boarding ticket, driver's license, driver ID card, skill certificate, It may have a function such as an operation qualification certificate.

The specific operation is a driving operation of a vehicle such as an automobile. Here, the driving of the vehicle includes maneuvering of an aircraft, a ship, a submarine, and the like.
Hereinafter, in the present embodiment, the case where the smart key 10 as the portable device is built in the cellular phone device will be described as a specific example.

Moreover, the following embodiment demonstrates the case where the biometric data detection terminal device is the physical condition management portable terminal device 20 put into a state worn by the driver.
The terminal device management system 1 according to the present embodiment includes a smart key 10, a physical condition management portable terminal device 20, an administrator terminal 30, a contact terminal 40, an attending doctor terminal 50, a management server 60, a driving permission reception device 70, a physical condition. A management server 80, a network 90, and a vehicle 100 are provided.

  The smart key 10 is carried and carried by the driver, is configured to be able to communicate directly with the driving permission receiving device 70, and is configured to be able to communicate with at least the management server 60 via the network 90. . Further, as will be described later, a non-contact IC (IC chip) is built in and has a function of receiving permission for driving operation by being close to the driving permission receiving device 70.

  Here, the driving operation permitted using the smart key 10 is an automobile to which a general road traffic law is applied, a competition vehicle, an aircraft, a ship, etc. that require a dedicated license to travel on a circuit, It means that it is permitted only to those who have various legitimate qualifications and authority.

  Here, if you are driving a car, you have driving qualifications for that vehicle, and if you are operating various equipment, you are eligible to operate that equipment, and whether you are within working hours at this time , Etc.

In addition, when the above permission is granted, the permission is also granted depending on whether the suspension of the license has not been made or whether it is time for driving and maneuvering.
In addition, regarding driving, permission for charging and payment may be permitted in the case of a rental car or the like that is permitted when a predetermined fee is paid.

The permission of the driving operation is realized by bringing the smart key 10 close to a predetermined position of the driver's seat.
In this embodiment, the smart key 10 has a general mobile phone device function (call function, e-mail function, etc.) as long as it is a mobile phone device, and at least a control means 10a for controlling each unit, smart It has functions as an IC chip 10b as a key transponder, a GPS position detection unit 11, a transmission / reception unit 12, an access unit 13, an input unit 14, and a display unit 15.

Here, as will be described later, the control means 10a performs various controls according to the judgment of the control means 10a and instructions from the management server 60 and the operation permission receiving device 70.
Further, the IC chip 10 b transmits the built-in ID number and the like to the driving permission receiving device 70 in response to a request from the driving permission receiving device 70. The IC chip 10b stores information on the qualification of the driver to be permitted to perform a predetermined operation, and the qualification information is sent to the driving permission receiving device 70 based on a request from the driving permission receiving device 70. Sent.

  Here, the GPS position detection unit (first position detection unit) 11 performs smart key in response to a first position request from the management server 60 (management unit 62) or the operation permission receiving device 70 (management unit 72) as described later. Ten current positions (locations; latitude / longitude information) are detected as first positions by the global orientation measurement system (GPS). At that time, the altitude or depth may be detected as the current location of the smart key 10. In that case, an altimeter that measures altitude based on atmospheric pressure and a depth meter that measures depth based on water pressure are provided as the first position detecting means.

  The transmission / reception means (first notification means) 12 notifies the management server 60 (management means 62) and the operation permission accepting device 70 (management means 72) of the first position detected by the GPS position detection unit 11, When notifying the management server 60 (management means 62), transmission / reception is performed via the network 90, while when notifying the operation permission receiving apparatus 70 (management means 72), the transmission / reception means 12, the operation permission receiving apparatus 70, and the like. Send and receive directly between. The transmission / reception unit 12 also functions to receive various requests and notifications (first position request, error notification, warning, etc.) from the management server 60 (management unit 62) and the operation permission receiving device 70 (management unit 72).

  The access means 13 is for accessing a control means 61 to be described later. When accessing the management server 60, for example, a keyboard (not shown) in the smart key 10 is operated to input various information. In addition to performing the function of accessing the management server 60 via the network 90, the IC chip 10b also functions as the access means 13 when accessing the operation permission receiving device 70 (the control means 71 and the management means 72). It will be.

For example, infrared communication or Bluetooth (registered trademark) communication may be used as communication between the smart key 10 and the operation permission receiving device 70 by the transmission / reception means 12, or the IC chip 10b described above and an IC described later. Wireless communication executed with the card reader / writer 75 may be used.

  The input means 14 is used for various inputs by the driver, and in the present embodiment, a one-time password is input as necessary, particularly when authenticating permission for driving operation. Further, various messages are usually displayed on the display means 15.

  The physical condition management portable terminal device 20 is separate from the smart key 10 and is always held and attached to a part of the driver's body (for example, an arm) of the smart key 10 like a wristwatch. It is carried and is configured to be able to communicate directly with the driving permission accepting device 70, and also via the network 90, the administrator terminal 30, the contact terminal 40, the attending doctor terminal 50, the management server 60, and the physical condition management server 80. It is configured to be able to communicate with.

  The physical condition management portable terminal device 20 constitutes the “biological data detection terminal device” in the claims. The physical condition management portable terminal device 20 has at least functions as a GPS position detection unit 20GS, a transmission / reception unit 255, a biosensor 20BS, a one-time password processing unit 258, and a display unit 24. The detailed configuration of the physical condition management portable terminal device 20 including functions other than these functions will be described later with reference to FIG.

Here, the GPS position detection unit 20GS as the second position detection unit is similar to the GPS position detection unit 11 of the smart key 10 described above, as will be described later, the management server 60 (management unit 62) and the operation permission receiving device 70 (management). In response to the second position request from the means 72), the current position (location position; latitude / longitude information) of the physical condition management portable terminal device 20 is detected as the second position by the global orientation measurement system (GPS). . At that time, the altitude or depth may be detected as the current location of the physical condition management portable terminal device 20. In that case, an altimeter that measures altitude based on atmospheric pressure (which can be replaced by the atmospheric pressure measurement function of the meteorological sensor 20WS described later) or a depth meter that measures depth based on water pressure (which can be replaced by the water pressure measuring function of the meteorological sensor 20WS described later) Yes) as a second position detecting means. The GPS position detection unit 20GS in the physical condition management portable terminal device 20 not only performs position detection in response to the second position request, but also detects the current location of the physical condition management portable terminal apparatus 20 in a predetermined cycle. It is also configured to notify a CPU 25 described later.

The function as the second notification means by the transmission / reception means 255 is a function realized by the CPU 25 as will be described later when the permission of the driving operation is received. The second position detected by the GPS position detection unit 20GS When the identity is confirmed based on the data value, similar to the transmission / reception means 12 of the smart key 10 described above, the management server 60 (management means 62) and the operation permission receiving device 70 (management means 72) are notified. When notifying the management server 60 (management means 62), transmission / reception is performed via the network 90, while when notifying the operation permission receiving apparatus 70 (management means 72), the transmission / reception means 12, the operation permission receiving apparatus 70, and the like. Send and receive directly between. The communication between the physical condition management portable terminal device 20 and the driving permission receiving device 70 by the transmission / reception means 255 is, for example, infrared communication or Bluetooth (registered trademark).
Communication or the like may be used. The transmission / reception unit 255 receives various requests and notifications (second position request, operation state request, error notification, warning, etc.) from the management server 60 (management unit 62) and the operation permission receiving device 70 (management unit 72). Also fulfills the function to do.

  The biometric sensor 20BS is contacted and worn on a part of the driver's body (for example, an arm) and detects the driver's biometric data value in order to manage the physical condition of the driver. In addition to palm print, voice print, iris, blood vessels in the fundus or palm, etc., body temperature, blood pressure, heart rate, respiratory rate, pulse wave, electrocardiogram, blood oxygen saturation concentration, blood oxygen concentration, muscle tissue oxygen concentration At least one is detected at a predetermined cycle. In the specific examples in the following embodiments, description will be made with specific examples of detecting body temperature, blood pressure, heart rate, and respiratory rate.

  As will be described later, the biometric data value detected by the biosensor 20BS is accumulated in the memory 20M (see FIG. 2), and before and after the interruption according to a request from the management server 60 or the operation permission accepting device 70. The biometric data value is read from the memory 20M and notified / transmitted to the management server 60 via the network 90 by using the function as the transmission / reception means 255 described above, or directly notified / transmitted to the operation permission receiving device 70. It is comprised so that.

  Note that the biometric data value detected by the biometric sensor 20BS is also compared with a predetermined threshold value in the CPU 25 inside the physical condition management portable terminal device 20 to be used for confirmation (authentication) of identity.

In addition, if the biometric data value is in a normal value range, the predetermined cycle is obtained and compared at a normal predetermined cycle, for example, every 5 minutes, every 10 minutes, etc. If not, acquisition and comparison are performed at a period smaller than a normal predetermined period, for example, every minute. In this case, it is desirable to perform acquisition and comparison in detail depending on the degree of deviation from the normal value range. In parallel with this, a history of wearing / removing / remounting the physical condition management portable terminal device 20 is also stored. Then, based on the change in the biometric data value and the history of wearing / removing / remounting the portable terminal device 20 for physical condition management, as will be described later, the person who is in normal condition, the person who is in abnormal condition, and others Can be distinguished.

  In addition, by using the biosensor 20BS that can be continuously mounted on a finger, a palm, or the like, biometric information such as a fingerprint, a palm print, or a blood vessel can be continuously acquired. Further, by attaching a pharyngeal microphone to the throat as the biosensor 20BS, the biometric data value of the voiceprint is continuously acquired for a certain time.

  Furthermore, regarding the heart rate and the respiratory rate, it is possible to continuously acquire biometric information by using a chest sensor pad used by a track and field athlete as a biosensor 20BS and attaching it to the chest. In this case, the chest sensor pad can be mounted in various ways such as sticking with an adhesive member or mounting with an elastic belt.

  In the physical condition management mobile terminal device 20, the function as the control means 256 (see FIG. 2) realized by the CPU 25 described later also functions as the operation state detection means. This operation state detection means determines whether or not the biosensor 20BS is performing an operation of detecting a biometric data value from the driver, that is, the physical condition management portable terminal device 20 is actually attached to the driver's body. Whether or not a biometric data value is being detected from an operation state is detected as an operation state. As will be described later, an operation from the management server 60 (management unit 62) or the operation permission receiving device 70 (management unit 72). In response to the state request, the operation state is detected, and the detection result is notified / transmitted to the management server 60 via the network 90 by using the function as the transmission / reception means 255 described above, or the operation permission is accepted directly. It is configured to be notified / transmitted to the device 70.

  The one-time password processing means 258 receives the one-time password generated by the management server 60 and the operation permission receiving device 70, or the one-time password generated by the management server 60 and the operation permission receiving device 70. A one-time password is generated in synchronization. The one-time password received or generated in this way is displayed on the display means 24 as will be described later. Note that the one-time password processing means 258 displays this one-time password when the identity is confirmed based on the above-described biometric data value.

  The administrator terminal 30 is provided in a management center or the like, and is registered in advance in the physical condition management mobile terminal device 20 as one of contact points to which various notifications as described later are to be performed. A terminal for a manager [PC (personal computer) or the like] that manages the physical condition of the driver using the.

  The contact terminal 40 is pre-registered in the physical condition management portable terminal device 20 as one of contact points to be notified as described below. For example, the driver's friend, relative, spouse, etc. A terminal (such as a PC) used by a close relative.

  The attending doctor terminal 50 is registered in advance in the physical condition management portable terminal device 20 as one of the contact points to which various notifications as described later are to be performed, and is a terminal (such as a PC) used by the attending doctor of the driver.

  The management server 60 gives permission for various driving operations provided to the driver of the smart key 10, and includes a control means 61, a management means 62, an authentication means 63, a warning means 64, a statistical value calculation means 65, a statistical value. It comprises functions as a determination means 66, a one-time password generation means 67, and a one-time password transmission means 68.

The control means 61 controls each part of the management server and, as described above, determines the qualification of the driver who possesses the smart key 10 and performs various controls when giving permission for driving operation. .

  The control means 61 can also control the driving time by recording the time when the driver gets into the vehicle and the time during which the driver is driving, maneuvering, or operating the vehicle in a separate database. is there. Depending on whether or not driving was actually performed, it can also be managed in a separate database as an attendance book etc., and if attendance is not permitted, it can be handled on the database as absence .

  The management unit 62 manages the operating state of the smart key 10 as a portable device. The management unit 62 authenticates 63, warning unit 64, statistical value calculation unit 65, statistical value determination unit 66, one-time password generation unit 67, and Using the functions of the one-time password transmission means 68, the management functions shown in the following items (31) to (39) are fulfilled.

  (31) When the driver accesses the management server 60 by the access means 13 of the smart key 10, the smart key 10 and the physical condition management portable terminal device 20 are requested for the first position and the second position, respectively. A distance between the first position notified by the transmission / reception means 12 of the smart key 10 and the second position notified by the transmission / reception means 255 of the physical condition management portable terminal device 20 is calculated, and the calculated distance is within a predetermined range. (For example, within 1 m), the management means 62 does not allow the driver who holds the smart key 10 to perform the driving operation when it is out of the predetermined range. The management means 62 permits the driving operation to the driver who possesses the smart key 10.

  However, in this embodiment, in addition to the above distance being within a predetermined range, the authentication means 63 notifies the user authentication result that the driver is authenticated by the authentication means 63 described later, and When the operation state notified from the physical condition management mobile terminal device 20 in response to the operation state request is a detection operation (a state in which the physical condition management mobile terminal device 20 is worn on the driver's body), the management unit 62 The driver who has the smart key 10 is permitted to perform the driving operation.

  (32) When the driver does not input / transmit authentication information in response to an authentication information request from the management means 62 (authentication means 63 described later), the management means 62 sends the smart key 10 (driver) a request. On the other hand, an error notification for notifying the fact is given, and the driving operation by the driver having the smart key 10 is not permitted.

  (33) If it is determined in the above item (31) that the driver is not the person as a result of the authentication by the authentication means 63, the management means 62 will ask the smart key 10 (driver) and the system administrator to An error notification for notifying the fact is performed, and the driving operation by the driver having the smart key 10 is not permitted.

  (34) If there is no response to any of the requests for the first position, the second position, and the operation state in the item (31), the management means 62 determines that the smart key 10 and the physical condition management portable terminal device 20 It is determined that there is an abnormality in at least one of the above, and a warning operation by the warning means 64 described later is executed, and the fact is notified to the smart key 10 / physical condition management portable terminal device 20 and the system administrator. Error notification is performed, and the driving operation by the driver having the smart key 10 is not permitted.

(35) When the operation state notified from the physical condition management portable terminal device 20 in response to the operation state request in the item (31) is not in the detection operation, that is, the biosensor 20BS performs the detection operation by the operation state detection means. Is detected (or the physical condition management portable terminal device 20 is not worn on the driver's body), the management means 62
An error notification is sent to the physical condition management portable terminal device 20 and the system administrator, and the driving operation by the driver carrying the smart key 10 is not permitted. Moreover, the management means 62 respond | corresponds to the said driver | operator (identification information etc.) that the detection operation of the biometric data value in the portable terminal device 20 for physical condition management of the said driver is in the interruption state in the management server 60. Add and register.

  (36) When the distance calculated in the item (31) is outside the predetermined range, the management means 62 exists in a place where the smart key 10 and the physical condition management portable terminal device 20 are different, and the smart key 10 is in physical condition. It is determined that there is a high possibility that it is used by a person different from the person wearing the management portable terminal device 20, and a warning operation by the warning means 64 described later is executed, and the smart key 10 / physical condition management portable terminal device 20 and an error notification for notifying the system administrator to that effect, and the driving operation by the driver having the smart key 10 is not permitted.

  (37) A function of periodically checking whether or not the distance between the smart key 10 and the physical condition management portable terminal device 20 is within a predetermined range (function to be described later). At each predetermined period, the first position and the second physical position are requested to the smart key 10 and the physical condition management portable terminal device 20, respectively, and the first position and the physical condition management portable terminal notified by the transmission / reception means 12 of the smart key 10 The distance between the second position notified by the transmission / reception means 255 of the apparatus 20 is calculated, it is determined whether or not the calculated distance is within a predetermined range (for example, within 1 m), and a predetermined time or longer (for example, 30) If the smart key 10 is misplaced, stolen, or the like, the management means 62 determines that the smart key 10 and the physical condition management portable terminal device 20 exist in different locations. Then, a warning operation by the warning means 64 described later is executed, and the driving operation by the driver carrying the smart key 10 is not permitted.

  (38) A function of periodically performing a detection operation check as to whether or not the biological data detection operation by the biological sensor 20BS is performed in the physical condition management portable terminal device 20 (a function described later with reference to FIG. 8). At each predetermined period, the mobile terminal device for physical condition management (target device for detection operation check) 20 is requested to operate, and the operation state notified from the target device 20 is being detected (the target device 20 is the body of the driver). It is determined whether or not it is in a state of being attached to the).

    (38-1) When the detection operation is not in progress, the management means 62 performs an error notification for notifying the smart key 10 / target device 20 or the system administrator, as in the above item (35), The driving operation by the driver holding the smart key 10 is not permitted.

    (38-2) When the detection operation is being performed, the management unit 62 searches for registration of the suspended state for the target device 20, and the detection operation is resumed for the target device 20 that has entered the detection operation from the suspended state. Judgment is made, and as will be described later, biometric data values (for example, body temperature, blood pressure, heart rate, respiratory rate) over a predetermined period (for example, 1 hour) accumulated before and after the interruption are requested to the target device 20. Then, a statistical value calculation means 65 described later calculates a statistical value before interruption and a statistical value after restart (for example, an average value) for the biometric data values obtained from the target device 20 before and after interruption, and statistical value determination means 66 described later. By comparing the calculated statistical value before interruption with the statistical value after restart, whether these statistical values are within a predetermined range, these statistical values are statistical values of the same driver's biometric data values It is determined whether or not. If the biometric data value after restart (after interruption) is not detected for the predetermined period, the post-resumption statistical value is calculated when the biometric data value for the predetermined period is detected and accumulated. Will do.

(38-3) When it is determined that the driver is the same driver (when the difference is within the predetermined range), the management means 62 performs the same position check as the items (31) and (37) above and performs the smart key If the distance between the target device 20 and the target device 20 is within a predetermined range, the driving operation by the driver having the smart key 10 is permitted. On the other hand, when it is determined that they are not the same driver (when the difference is outside the predetermined range; that is, the driver wearing the target device 20 on the body is a different person before and after the biometric data value detection operation is interrupted). When it is determined that the possibility is high), the management unit 62 executes a warning operation by the warning unit 64 described later, and notifies the smart key 10 / physical condition management portable terminal device 20 and the system administrator to that effect. An error notification is sent to keep the driving operation not permitted.

  (39) The one-time password generated by the one-time password generation unit 67 in response to the authentication information request from the management unit 62 or the authentication unit 63, and the one-time password input from the smart key 10 or the operation permission receiving device 70 If the one-time passwords do not match, or if the one-time password is not replied within a certain time, the management means 62 notifies the smart key 10 (driver) of that fact. Error notification is performed, and the driving operation by the driver having the smart key 10 is not permitted.

  The authentication means 63 authenticates the driver based on the authentication information about the driver input by the driver when the driver of the smart key 10 performs a predetermined operation, and displays the authentication result of the driver. It notifies the management means 62. Here, examples of the authentication information include a password (passphrase) or biometric information such as a fingerprint, an iris, a palm vein pattern, and a face. When the management server 60 is accessed from the smart key 10, the management server 60 can recognize the telephone number of the smart key 10. For each driver, the telephone number and the registration authentication information of the driver are obtained. Correlate and save as database. And the authentication means 63 reads the registration authentication information matched with the telephone number from the said database, and compares the registration authentication information with the authentication information input by the driver at the time of access, and the driver's identity It is configured to perform authentication.

Further, when the driver of the smart key 10 receives permission for driving operation, the authentication unit 63 performs authentication using a one-time password in addition to the above-described authentication.
As described in the above items (34), (36) to (39), the warning unit 64 has no response to the request from the management unit 62 from the smart key 10 or the physical condition management portable terminal device 20, When the distance between the smart key 10 and the physical condition management portable terminal device 20 is out of the predetermined range, when the driver is different before and after the biometric data value detection operation is interrupted, or when the one-time password matches is obtained within the predetermined time. If not, a warning is sent to the system administrator or driver. In the management server 60, the warning notification is made by displaying on the display of the management server 60. In the smart key 10 or the physical condition management portable terminal device 20, a buzzer or the like is sounded or an LED lamp or the like is blinked. It is done by doing. In the case of the warning notification, the physical condition management portable terminal device 20 uses a warning means 254 described later. The warning notification may also serve as the error notification described above.

  The statistical value calculation means 65 calculates the average value of the biological data values (data accumulated in the memory 20M described later) detected by the biological sensor 20BS before interruption of the detection operation of the biological data values as the statistical value before interruption. The average value of the biometric data values (data accumulated in the memory 20M described later) detected by the biosensor 20BS after the biometric data value detection operation is resumed is calculated as the post-resumption statistical value.

  The statistical value judging means 66 compares the statistical value before interruption calculated by the statistical value calculating means 65 with the statistical value after restart, and determines whether these statistical values are within a predetermined range. Is a statistical value of biometric data values of the same driver.

The driving permission accepting device 70 is used by the driver using the smart key 10 instead of a card to permit driving operation. As described above, the driving permission receiving device 70 is in the vicinity of the door of the vehicle 100, the seat of the driver's seat of the vehicle 100 and the steering It is provided on a console of the vehicle 100 or the like.

  The operation permission accepting device 70 of this embodiment includes a control means 71, a management means 72, an authentication means 73, a warning means 74, an IC card reader / writer 75, a one-time password generation means 77, a one-time password transmission means 78, The input / display unit 79 is also provided with a function.

  The control means 71, the management means 72, the authentication means 73, the warning means 74, the one-time password generation means 77, and the one-time password transmission means 78 are respectively the control means 61, the management means 62, and the authentication means in the management server 60 described above. 63, the warning means 64, the one-time password generation means 67, and the one-time password transmission means 68.

The input / display unit 79 is used to input various information such as a one-time password when providing a service, and to display various messages when providing a service.
In the present embodiment, the smart key 10 incorporates a non-contact type IC (IC chip 10b) that can function as the access means 13 described above, and the smart card 10 and the smart card reader / writer 75 in the operation permission receiving device 70. Information required for service provision can be exchanged with 10 non-contact type ICs. Further, when the smart key 10 (non-contact type IC) comes close, the IC card reader / writer 75 enters a communication-on (ON) state, performs wireless communication with the non-contact type IC, and is stored in the non-contact type IC. Identification information (ID information) and other various types of information are read out and various types of information are written.

  The control means 71 is for controlling each part of the driving permission receiving device 70, and as described above, when determining the qualification of the driver possessing the smart key 10 and granting permission for driving operation (riding or driving). Various controls are performed. The control means 71 may be the same as the control means for the door or gate drive device and the control means for the vehicle or equipment.

  In addition, this control means 71 records a driver | operator's boarding time, alighting time, the time during which driving | operation, operation, and operation etc. are separately recorded in a database, management of working hours, driving time management, management time management, It is also possible to perform control such as operation time management. It is also possible to manage it as a boarding book in a separate database depending on whether boarding or driving was actually performed. If boarding is not permitted, it can be handled on the database as absenteeism. Is possible.

  The management means 72 manages the operation state of the smart key 10 as a portable device, and uses the functions of the authentication means 73 and the warning means 74 described later, and has the management functions shown in the following items (41) to (47). Fulfill.

(41) Similar to the item (31), when the driver accesses the control means 71 by the access means 13 (non-contact IC) of the smart key 10, the smart key 10 and the physical condition management portable terminal device 20 are used. Between the first position notified by the transmitting / receiving means 12 of the smart key 10 and the second position notified by the transmitting / receiving means 255 of the physical condition management portable terminal device 20. , And determines whether or not the calculated distance is within a predetermined range (for example, within 1 m). If the calculated distance is within the predetermined range, the management unit 72 permits the driving operation by the control unit 71. However, in the present embodiment, in addition to the above distance being within a predetermined range, the authentication means 73 notifies the authentication means 73 that the driver of the service has been authenticated by the authentication means 73, which will be described later, from the authentication means 73, In addition, when the operation state notified from the physical condition management mobile terminal device 20 in response to the operation state request is a detection operation (a state in which the physical condition management mobile terminal device 20 is mounted on the driver's body), the management unit 72 permits a driving operation by the control means 71.

  (42) Similar to the above item (32), when the driver does not input authentication information in response to an authentication information request from the management means 72 (or authentication means 73 described later), the management means 72 An error display for notifying the fact is performed on the input display means 79 of the driving permission receiving device 70 to notify the driver, and the driving operation by the control means 71 is not permitted.

  (43) Similar to the above item (33), when it is determined in the item (41) as a result of the identity authentication by the authentication means 73 that the driver is not the identity, the management means 72 informs the system administrator to that effect. Is displayed on the display (not shown) of the driving permission receiving device 70 to notify the driver of the error, and the driving operation by the control means 71 is not performed. Make permission.

  (44) Similar to the above item (34), when there is no response to any of the requests for the first position, the second position, and the operation state in the item (41), the management means 72 uses the smart key 10 And at least one of the physical condition management portable terminal device 20 is determined to be in a state of some kind of abnormality, a warning operation by a warning means 74 described later is executed, and a notification to that effect is given to the system administrator In addition to notifying the error, an error display for notifying that is performed on the display (not shown) of the driving permission receiving device 70 to notify the driver, and the driving operation by the control means 71 is not permitted.

  (45) Similar to the item (35), when the operation state notified from the physical condition management portable terminal device 20 in response to the operation state request in the item (41) is not in the detection operation, that is, by the operation state detection means. When it is detected that the biosensor 20BS is not performing the detection operation (or when the physical condition management portable terminal device 20 is not attached to the driver's body), the management means 72 notifies the system administrator to that effect. Is displayed on the display (not shown) of the driving permission receiving device 70 to notify the driver of the error, and the driving operation by the control means 71 is not performed. Make permission. Moreover, the management means 72 notifies the management server 60 (management means 62) that the detection operation of the biometric data value in the portable terminal device 20 for physical condition management of the driver is suspended, and the driver Register / save in association with (identification information, etc.).

  (46) Similar to the item (36), when the distance calculated in the item (41) is outside the predetermined range, the management means 72 is a place where the smart key 10 and the physical condition management portable terminal device 20 are different. The smart key 10 is used by a person other than the person wearing the physical condition management portable terminal device 20, and a warning operation by the warning means 74 described later is executed and system management is performed. An error notification for notifying the driver of the error is given to the driver, and an error display for notifying the driver is displayed on the display (not shown) of the driving permission receiving device 70 to notify the driver, and the control means 71 The driving operation by is not allowed.

  (47) Similar to the above item (39), the one-time password generated by the one-time password generation unit 77 in response to the authentication information request from the management unit 72 or the authentication unit 73, the smart key 10 or the operation permission receiving device. When the one-time password does not match, or when the one-time password is not replied within a certain time, the management means 72 compares the one-time password entered in 70 with the smart key 10 (operation Error notification for notifying that effect, and disabling the driving operation by the control means 71.

In addition, a warning operation by a warning means 74 described later is executed, an error notification for notifying the system administrator is given, and an error display for notifying that is displayed on the display of the driving permission receiving device 70. (Not shown) The above may be performed to notify the driver, and the driving operation by the control means 71 may be disallowed.

  The authentication means 73 authenticates the driver based on the authentication information about the driver inputted by the driver when the driver of the smart key 10 obtains permission for driving operation, and the authentication result of the driver Is notified to the management means 72. Here, examples of the authentication information include a password (passphrase) or biometric information such as a fingerprint, an iris, a palm vein pattern, and a face. On the driving permission receiving device 70 side, for each driver, the ID information registered in the non-contact type IC of the smart key 10 and the registration authentication information of the driver are stored as a database in association with each other. And the authentication means 73 reads the registration authentication information matched with ID information read from the non-contact type IC of the smart key 10 by the IC card reader / writer 75, and the registration authentication information and the driver at the time of access by the driver The driver is authenticated by comparing the input authentication information.

In addition to the above-described authentication, the authentication unit 73 performs authentication using a one-time password when the driver of the smart key 10 obtains permission for driving operation.
As described in the above items (44), (46), (47), the warning means 74 is not responding to the request from the management means 72 from the smart key 10 or the physical condition management portable terminal device 20, When the distance between the smart key 10 and the physical condition management portable terminal device 20 is out of the predetermined range, and when the one-time password match is not obtained within the predetermined time, a warning is sent to the system administrator or the driver It is. The warning notification is given by the display on the display (touch panel operated by the driver) of the driving permission receiving device 70 in the driving permission receiving device 70, and in the smart key 10 and the portable terminal device 20 for physical condition management. This is performed by sounding a buzzer or the like or blinking an LED lamp or the like. In the case of the warning notification, the physical condition management portable terminal device 20 uses a warning means 254 described later. The warning notification may also serve as the error notification described above.

  Note that the control of the control means 71 unlocks the door (not shown) according to the permission of the driving operation by the management means described above, and allows the engine to be started so that the vehicle can be operated and operated. Become.

  The physical condition management server 80 provides a contractor (a person who has made a contract / registration in advance to receive the service of the physical condition management server 80) with a service as described later with reference to FIGS. Therefore, the physical condition management server 80 accumulates the biological data, weather data, and position data periodically received from each physical condition management portable terminal device 20, and associates the biological data, weather data, and position data with the detection time. In addition to storing graphs and maps obtained by graph processing and map generation, it also has a function to provide stored data and graph / map browsing services (public services) to contractors. The contractor who wants to provide the service is authenticated, and the above browsing service is provided to the contractor who has been authenticated. It has been.

  The contractor may be the same person as the driver, or may be a person different from the driver (for example, an administrator or a friend / relative / main doctor of the driver). Each of the terminals 30, 40, and 50 has a telephone line communication / communication function and an e-mail transmission / reception function. Notification from the physical condition management portable terminal device 20 (notification by a transmission / reception means 255 described later) ).

The network 90 connects the smart key 10, the physical condition management portable terminal device 20, the terminals 30, 40, and 50, the management server 60, the operation permission receiving device 70, and the physical condition management server 80 so that they can communicate with each other. Here, it includes a network of various communication methods such as an intranet, the Internet, a public telephone line, and a wireless local area network (LAN), and includes at least a smart key 10, a physical condition management portable terminal device 20, and terminals 30, 40, 50. Between each other, it is possible to make a call / communication via a telephone line, and to send and receive e-mails.

  The vehicle 100 includes various vehicles such as automobiles, aircraft, ships, and submersibles. In this embodiment, a general automobile is taken as a specific example. And this vehicle 100 is provided with the vehicle control apparatus 101, the engine 140, and the glass 190 other than the driving permission reception apparatus 70 mentioned above. Note that the transmittance of the glass 190 is controllable, and the transmittance is controlled in accordance with the driving qualification of the driver and the driving operation permission.

[1-2] Configuration of portable terminal device for physical condition management:
Next, the configuration of the physical condition management portable terminal device 20 used in the above-described vehicle management system 1 will be described with reference to FIG. FIG. 2 is a block diagram showing the configuration of the physical condition management portable terminal device 20 in the vehicle management system 1 of the present embodiment. As shown in FIG. 2, the physical condition management portable terminal device 20 of the present embodiment is described above. As described above, it is always carried and carried by the driver together with the smart key 10, and in addition to the above-described biosensor 20BS and GPS position detection unit 20GS, the weather sensor 20WS, the threshold table 20T, the CPU 25, the stop operation unit 26, An answer input unit 27 and a memory 20M are provided.

  The weather sensor 20WS predetermines at least one of air temperature, water temperature, humidity, air pressure, water pressure, sunshine situation, and ultraviolet light amount as weather data in the driver's location atmosphere (where the driver is located). In this embodiment, the temperature (or water temperature), the humidity, and the atmospheric pressure (or water pressure) are detected.

  The biosensor 20BS, the weather sensor 20WS, and the GPS position detection unit 20GS are built in or externally attached to the main body of the portable terminal device 20, and are wired or wirelessly connected via a cable or the like. As described later with reference, the result detected at a predetermined cycle is transmitted to the main body of the portable terminal device 20.

  The threshold value table 20T holds biometric data threshold values for managing the physical condition of the driver in advance for each weather condition, and is created and set by a function as a threshold value setting means 251 of the CPU 25 described later. Thus, the portable terminal device 20 is stored and stored in a storage unit such as a RAM (Random Access Memory), a ROM (Read Only Memory), and a hard disk.

  At this time, the biometric data threshold value differs depending on the driver and also varies depending on the living environment, and is set for each driver according to the weather conditions corresponding to the environment. For example, when the driver is in a hot and humid environment based on the body temperature T0, blood pressure P0, and heart rate N0 of the driver in normal times, the weather conditions are 25 to 30 ° C. and the humidity is 80% or more. The body temperature T1, blood pressure P1, and heart rate N1 are set as biological data threshold values for the time (weather condition 1), and the biological data threshold values when the weather condition is 30 to 35 ° C. and the humidity is 60% or more (the weather condition 2). Body temperature T2, blood pressure P2, and heart rate N2 are set, and body temperature T3, blood pressure P3, and heart rate N3 are set as biometric data threshold values when the weather conditions are 35 ° C. or higher and humidity 50% or higher. And when it is the weather condition 1 (weather condition 3), when any one or all of the driver's actual body temperature T, blood pressure P, and heart rate N exceed the threshold values T1, P1, and N1, When the weather condition 2 is met, any one or all of the driver's actual body temperature T, blood pressure P, and heart rate N exceed the thresholds T2, P2, and N2. When any one or all of the actual body temperature T, blood pressure P, and heart rate N exceed the threshold values T3, P3, and N3, it is determined that the driver's physical condition is abnormal (heat stroke etc.).

  Further, when the driver is in a low temperature environment, body temperature T4 is set as a biometric data threshold when the weather condition is air temperature 0 to 10 ° C. (weather condition 4), and the weather condition is air temperature −10 to 0 ° C. The body temperature T5 is set as the biological data threshold value when the weather condition is (weather condition 5), and the body temperature T6 is set as the biological data threshold value when the weather condition is air temperature −10 ° C. or less (the weather condition 6). When the weather condition 4 is met, the driver's actual body temperature T falls below the threshold value T4. When the weather condition 5 is met, the driver's actual body temperature T falls below the threshold value T5. When the actual body temperature T of the driver falls below the threshold value T6 when it is 6, it is determined that the driver's physical condition is abnormal (such as hypothermia).

  Furthermore, when the driver is in a high altitude (low pressure) environment, heart rate N7 and respiratory rate K7 are set as biometric data thresholds when the weather conditions are atmospheric pressure A2 to A1 (weather condition 7), When the weather condition is atmospheric pressure A3 to A2 (meteorological condition 8), the heart rate N8 and the respiration rate K8 are set as biometric data thresholds, and the weather condition is a temperature of 35 ° C. or higher and a humidity of 50% or higher (weather condition 9 The heart rate N9 and the respiration rate N9 are set as biometric data threshold values. When the weather condition 7 is met, either or both of the driver's actual heart rate N and respiratory rate K exceed the thresholds N7 and K7. When the weather condition 8 is met, the driver's actual heart rate When either or both of the number N and the breathing rate K exceed the thresholds N8 and K8, and when the weather condition is 9, either or both of the driver's actual heart rate N and breathing rate K is the threshold When N9 and K9 are exceeded, it is determined that the driver's physical condition is abnormal (such as altitude sickness).

  In addition, when the driver is bathing in sea water, bathing, etc., body temperature T10, heart rate as biometric data thresholds when the weather conditions are water pressure W1-W2 and the water temperature is L2-L1 (meteorological condition 10) N10 is set, body temperature T11 and heart rate N11 are set as biological data thresholds when the weather conditions are water pressure W2 to W3 and the water temperature is L3 to L2 (weather condition 11), the weather condition is water pressure W3 or higher and the water temperature is Body temperature T12 and heart rate N12 are set as biometric data threshold values when L3 or less (weather condition 12). When the weather condition 10 is met, either or both of the driver's actual body temperature T and heart rate N falls below the thresholds T10 and N10. When the weather condition 11 is met, the driver's actual body temperature T When one or both of the heart rate N falls below the threshold values T11 and N11, and when the weather condition is 12, the driver's actual body temperature T and / or one of the heart rate N is set to the threshold values T12 and N12. If it falls below, it is determined that the driver's physical condition is abnormal.

Further, whether or not the driver is himself / herself, as shown in the following (a) to (i), based on whether or not the physical condition management portable terminal device 20 is attached or removed, and the above-described biometric data threshold value. Identification becomes possible.
(a) No change in biometric data value with device attached (within same threshold range):
(b) Slow changes in biometric data values with the device attached:
(c) With the device attached, the biometric data value changes slowly and returns to the original:
(d) Abrupt changes in biometric data values with the device attached:
(e) Rapid change of biometric data value with device attached: Principal (recovery after abnormal physical condition),
(f) Reattached after device removal, no change in biometric data value:
(g) Reattaching after removing the device, changing the biometric data value, then returning slowly:
(h) Re-install after removing the device, change the biometric data value, then return to a different value: third party,
(i) Re-install after removing the device and the biometric data value remains unchanged: Third party,
In the above case, if the biometric data value has changed and it is difficult to distinguish between the person and a third party, the biometric data value is acquired and compared in a suspended state that is not recognized as the person. If the biometric data value returns, the comparison may be made over time and the identification may be performed such that the other person does not return.

In addition, (a)-(i) shown here is an example of the basic identification process concerning identification of whether it is a driver | operator himself, and it is possible to add various deformation | transformation.
In addition, with respect to the number and conditions of the biometric data values used for comparison, if the biometric data values used in the AND condition (all the biometric data values match to identify the person) are increased, the person can be identified under severe conditions. It becomes possible. That is, although the rate of recognizing another person as a person decreases, in some cases, even a person may not be recognized as a person. On the other hand, if the biometric data value used for the AND condition is reduced, or if the OR condition is set with a plurality of biometric data values (if one of them matches, the person is identified), the identification is made under a loose condition, and the identification of the person is easy. On the other hand, there is a possibility that other people may be identified from the person.

Further, in the case of the physical condition of the person, it can be determined by setting whether the person is identified as the person or is not recognized as the person.
This makes it possible to distinguish the driver from a third party. In addition, even in the case of the driver himself, it is possible to distinguish changes in physical condition, changes when removed during exercise or bathing, return conditions, etc. from those worn by a third party.

  In addition, biometric authentication using fingerprints, palm prints, blood vessels, or irises is troublesome because it is troublesome to read biometric information for authentication, or the scanning device becomes large. Although existing, in this embodiment, since the biometric data value is continuously acquired for a certain period of time while the driver is wearing, the conventional problem is solved.

  However, by using a sensor that can be continuously attached to a finger, palm, etc., biometric information such as fingerprints, palm prints, blood vessels, etc. can be obtained continuously, and biometric data values are continuously acquired for a certain period of time, so there is a conventional problem. It will be resolved.

A CPU (Central Processing Unit) 25 executes a predetermined application program, whereby threshold setting means 251, threshold reading means 252, comparison means 253, warning means 254, transmission / reception means 255, control means 256, and inquiry means 257, which will be described later. It functions as.

  The stop operation unit 26 is for stopping a warning operation (sounding operation, blinking operation, etc.) executed by a warning unit 254 described later by a driver's conscious operation. 20, an operation switch, a touch panel on a display screen (display), and the like.

  The answer input unit 27 is for the driver to answer whether or not to execute notification by the transmission / reception means 255 (to be described later) in response to an inquiry by the inquiry means 257 (to be described later). 20 and the touch panel on the display screen (display).

  The memory 20M is a storage unit such as a non-volatile RAM, and accumulates and stores biometric data values detected by the biometric sensor 20BS at a predetermined cycle. The transmission / reception means 255 described later includes the item (38-2). In response to the request from the management means 62 of the management server 60 described above, the biometric data value over a predetermined period (for example, 1 hour) before and after the detection operation interruption of the biosensor 20BS is read from the memory 20M and The management unit 62 is configured to transmit and notify.

The threshold value setting means 251 creates and sets the above-described threshold value table 20T for each driver and for each weather condition according to the living environment. The driver's normal body temperature T0, blood pressure P0, heart rate N0. Is used for inputting and setting a pair of weather conditions and a predetermined biological data threshold value as described above, and may be configured to be manually input by a driver, a manager, a supervisor, or the like. In addition, the driver may be configured to automatically input the body temperature T0, the blood pressure P0, the heart rate N0, and the competition environment / working environment in the normal time.

  The threshold value reading means 252 searches and reads out the biometric data threshold value set for the weather condition corresponding to the weather data (temperature / water temperature, humidity, pressure / water pressure) detected by the weather sensor 20WS from the threshold value table 20T. .

  The comparison unit 253 compares the biometric data threshold value read by the threshold value reading unit 252 and the biometric data values (body temperature, blood pressure, heart rate, respiration rate) detected by the biometric sensor 20BS, and operates according to the above-described criteria. This is to judge and detect the physical condition of the person. Further, in addition to the physical condition of the driver, it is determined whether or not the driver himself / herself as described in (a) to (i) above.

  The operation of the warning means (physical condition warning means) 254 is controlled by a control means 256 to be described later, and when the driver's physical condition is detected as a result of comparison by the comparison means 253, or when the warning means 64, 74 described above gives a warning. When the notification is received by the transmission / reception means 255, a warning is issued to the driver. In this embodiment, for example, a buzzer or the like in the portable terminal device 20 is sounded or an LED lamp or the like is blinked. . Such a warning operation (ringing operation or blinking operation) is stopped via the control means 256 described later when the driver operates the stop operation unit 26 as described above. When a mobile phone device is used as the main body of the mobile terminal device 20 as will be described later, the alerting means 254 may cause the mobile phone device to execute a calling operation as a ringing operation.

  As described above, the transmission / reception unit 255 functions as a second notification unit (a function for notifying the management server 60 and the operation permission receiving device 70 of the second position) and the operation state to the management server 60 and the operation permission receiving device 70. In addition to the function of notifying and the function of notifying the management server 60 and the driving permission receiving device 70 of the biometric data value of the memory 20M, the operation is controlled by the control means 256 described later, and the result of the comparison by the comparison means 253 is that the driver This function serves as a physical condition notifying means for notifying a predetermined contact when the physical condition is detected, and is detected by the biosensor 20BS when notifying the driver's physical condition. Biological data values, meteorological data detected by the weather sensor 20WS, and the driver's location detected by the GPS position detector 20GS Also notified together. At that time, the transmission / reception means 255 may notify the driver of the physical condition abnormality by automatically calling a pre-registered telephone number, or automatically transmit an e-mail to a pre-registered mail address. By doing so, the driver's physical condition abnormality may be notified.

  The predetermined contact information is switched by the control means 256, and details will be described later. Further, the transmission / reception means 255 determines the physical condition described above based on the biological data value detected by the biological sensor 20BS, the weather data detected by the weather sensor 20WS, and the driver's location detected by the GPS position detection unit 20GS. A function of transmitting to the management server 80 at a predetermined cycle is assumed. The transmission / reception means 255 transmits / receives data to / from the outside (the network 90 or the operation permission accepting device 70), and not only a notification function (transmission function) as described later but also notification from the outside, etc. (For example, requests from the management server 60 and the operation permission receiving device 70, error notifications, warning notifications, etc.).

The control unit 256 functions as the above-described operation state detection unit, and controls the notification operation of the transmission / reception unit 255 and the warning operation of the warning unit 254 as in the following items (51) to (54). Here, the inquiry means 257 is also controlled by the control means 256, and when the operation of stopping the warning operation of the warning means 254 is executed within a predetermined time, the inquiry means 257 performs the notification operation of the physical condition abnormality by the transmission / reception means 255. In response to the driver, the answer is actually displayed on the display of the portable terminal device 20 and the driver inputs the answer by operating the touch panel or the operation switch (answer input unit 27). It is configured to receive by the control means 256.

(51) As a result of the comparison by the comparison means 253, when a driver's physical condition is detected, a warning operation for the driver is executed via the warning means 254.
(52) When the operation for stopping the warning operation of the warning means 254 (the operation of the stop operation unit 26) is not executed even after a predetermined time has elapsed since the start of the warning action, the physical condition abnormality notification by the transmission / reception means 255 is executed. Let In this case, for example, an emergency vehicle such as an ambulance is immediately arranged by notifying a fire department or the like.

  (53) In response to the inquiry from the inquiry means 257, when the driver makes a reply to the effect of notifying the physical condition abnormality by the transmission / reception means 255, the notification action of the physical condition abnormality by the transmission / reception means 255 is executed. In this case, for example, by making an automatic call to the telephone of the attending doctor registered in advance (for example, the attending doctor's terminal 50), the driver can ask the attending doctor for an appropriate treatment.

  (54) When the driver refuses to execute the physical condition abnormality notification operation by the transmission / reception means 255 in response to the inquiry by the inquiry means 257, the physical condition abnormality notification operation by the transmission / reception means 255 is forcibly executed. In this case, for example, notification is made to a friend or a close relative (for example, the contact terminal 40).

  The one-time password processing means 258 receives the one-time password generated by the management server 60 and the driving permission receiving device 70 or synchronizes with the one-time password generated by the management server 60 and the driving permission receiving device 70. One-time password is generated. The one-time password received or generated in this way is displayed on the display means 24 as described later when it is confirmed that the driver is himself / herself based on the biometric data value as described above.

[1-3] Vehicle configuration:
FIG. 3 is a block diagram showing a configuration of the vehicle 100 as an embodiment of the present invention. As shown in FIG. 3, a vehicle 100 according to the present embodiment includes a light control glass 190 that can adjust the transmittance of visible light as window glasses 191 to 196. The transmittance of 190 is controlled and the start of the engine 1400 is controlled. In this embodiment, the control means 71 and the vehicle control device 101 constitute the control means in the claims.

[1-3-1] Configuration of vehicle glass:
Here, the automobile 100 as a vehicle in this embodiment is a typical four-door type passenger car, and includes six window glasses 191 to 196 (front window glass 191, right front side window glass 192, left front side window). Glass 193, right rear side window glass 194, left rear side window glass 195 and rear window glass 196).

  As the light control glass 190 constituting these window glasses 191 to 196, the light control glass 190A as shown in FIG. 4A, the light control glass 190B as shown in FIG. 4B, or FIG. Any of the light control glasses 190C as shown in (c) can be used.

  Here, “light control glass” means that the visible light transmittance and coloring of the glass itself can be freely adjusted, so that the separated side of the glass can be visually recognized without using a curtain or a shutter. It is a glass that can be made impossible (high concentration state).

  The “glass” of the “light control glass” here is not limited to a material called glass mainly composed of silicon dioxide, but can be used for windows, etc. "Glass" in a broad sense that refers to a certain plate-like material, including materials such as plastics such as acrylic and polycarbonate.

  FIG. 4A is a cross-sectional view schematically showing the structure of a light control glass (first example) 190A. As shown in FIG. 4A, the light control glass 190A can be light controlled using a liquid crystal. The liquid crystal is normally transparent, but has a structure in which light is blocked by changing the orientation of liquid crystal molecules by applying a voltage.

  More specifically, the light control glass 190 </ b> A is configured by sandwiching an organic electroluminescence element layer 1400 between two glass plates (transparent plates) 1200 and 1300. Hereinafter, “electroluminescence” may be abbreviated as “EL”.

  The organic EL element layer 1400 is configured by sandwiching the organic EL layer 1430 between the anode transparent electrode 1410 and the cathode transparent electrode 1420. The organic EL layer 1430 emits light by applying a voltage between the anode transparent electrode 1410 and the cathode transparent electrode 1420.

  The organic EL layer 1430 is formed by laminating three layers of a hole transport layer 1440, a light emitting layer 1450, and an electron transport layer 1460 in this order from the anode side, and between the anode transparent electrode 1410 and the cathode transparent electrode 1420. When voltage is applied, emitted light is emitted from the light emitting layer 1460 toward the anode.

  In addition, the light emitting layer 1460 is configured by regularly arranging light emitters that emit red (R), green (G), and blue (B), which are the three primary colors of light, in a matrix. With the configuration, the light control glass 190A can function as a color display device.

  In the light control glass 190A, the display state by the organic EL element layer 1400 (the light emission state of the three primary color light emitters) is controlled by the display control function and the dozing operation suppression control function of the adjusting means 101b described later, and is entirely the same color. In addition to the above color display, it is possible to display an arbitrary image and notify various information to the outside.

  In the present embodiment, the organic EL layer 1430 includes three layers, ie, a hole transport layer 1440, a light emitting layer 1450, and an electron transport layer 1460. However, the present invention is not limited to this, and a single layer is used. Or an organic EL layer, such as a layer composed of two layers of a hole transport layer and a light emitting layer.

  And in the light control glass 190A, in order to adjust the transmittance | permeability of visible light, the liquid crystal film 1500 is stuck on the vehicle interior side. Even if the liquid crystal film 1500 is affixed to the interior of the vehicle interior of the light control glass 190A, that is, the glass plate 1300, light control (change / adjustment of visible light transmittance; described later) by the liquid crystal film 1500 is performed. A display (described later) with respect to the outside (outside the passenger compartment) by the layer 1400 is not blocked by the liquid crystal film 1500.

  The liquid crystal film 1500 is configured by sandwiching transparent electrodes 1530 and 1540 and a liquid crystal layer (liquid crystal molecule) 1550 between two transparent thin films 1510 and 1520. The liquid crystal layer 1550 is sandwiched between the transparent electrodes 1530 and 1540.

  Then, by applying a predetermined voltage between the transparent electrodes 1530 and 1540, the alignment of the liquid crystal molecules in the liquid crystal layer 1550 is changed to block visible light.

  That is, the liquid crystal film 1500, that is, the light control glass 190A is in a transparent state (a visible light transmittance is a predetermined value of 70% or more) without applying a voltage, but is high when a predetermined voltage is applied. It can be switched to a density state (a state where the visible light transmittance is less than a predetermined value of 70%). The voltage applied to the liquid crystal film 1500 is adjusted and controlled by adjusting means 101b described later.

  As described above, by providing the organic EL element layer 1400 and the liquid crystal film 1500 in one dimming glass 190A, the organic EL element layer 1400 functions as a color display device, and the general dimming by the liquid crystal film 1500 is performed. Both glass functions can be realized. If the light control glass 190A is not intended for color display, it is not necessary to provide all three color light emitters of RGB.

  FIG. 4B is a cross-sectional view schematically showing the structure of the light control glass (second example) 190B. As shown in FIG. 4B, the light control glass 190B is configured to be dimmable using a photochromic method, and is configured in substantially the same manner as the light control glass 190A shown in FIG. 4A. However, the light control glass 190B is provided with a photochromic glass layer 1600 in place of the liquid crystal film 1500 of the light control glass 190A. This photochromic glass layer 1600 uses a substance that is colored by irradiating light of a specific wavelength, and is affixed to the outside of the cabin of the light control glass 190B, that is, the glass plate 1200. In FIG. 4B, the same reference numerals as those already described indicate the same or substantially the same parts, and the description thereof is omitted.

More specifically, in the light control glass 190B, a photochromic glass layer 1600 having a function of coloring the outside of the anode side glass plate 1200 by irradiation with light of a specific wavelength in order to adjust the transmittance of visible light. Is provided. The photochromic glass layer 1600, that is, the light control glass 190B, is normally in a transparent state (a visible light transmittance of 70% or more, which is a predetermined value). However, the organic EL layer 1430 (the light emitting layer 1450) is When light having a specific wavelength is emitted, it is colored and switched to a high concentration state (a state where the visible light transmittance is less than 70%, which is a predetermined value). The instruction / control for causing the organic EL layer 1430 (light emitting layer 1450) to emit light having the specific wavelength for coloring the photochromic glass layer 1600 is performed by the adjusting unit 101b described later.

  At this time, in the light control glass 190B, the photochromic glass layer 1600 is colored by specific ultraviolet light, and the light emitting layer 1450 of the organic EL element layer 1400 is red (R), green (G), blue (B). It is assumed that the three primary colors of light and four types of light emitters emitting the specific ultraviolet light are regularly arranged in a matrix. In this case, the light emission state of the ultraviolet light emitter is controlled by the adjusting means 101b described later, while the display state by the organic EL element layer 1400 (the light emission state of the three primary color light emitters) is the same as that of the light control glass 190A. Similarly, it is controlled by a display control function or a drowsy driving suppression control function of the adjusting unit 101b described later, and not only can display the same color on the entire screen, but also displays an arbitrary image and provides various information to the outside. Can be notified.

  As described above, by providing the organic EL element layer 1400 and the photochromic glass layer 1600 in a single light control glass 190B, the organic EL element layer 1400 functions as a color display device, and the organic EL element layer 1400 (for ultraviolet light) It is possible to realize both of the function as the light control glass by the cooperative operation of the (illuminant) and the photochromic glass layer 1600. If the light control glass 190B is not intended for color display, it is not necessary to provide all of the three RGB light emitters, and the light for coloring the photochromic glass layer 1600 is not limited to ultraviolet light. Infrared light or light having a wavelength different from that of display light during monochromatic display may be used, and light having a wavelength used when used as a display device may be used.

  4C is a cross-sectional view schematically showing the structure of the light control glass (third example) 190C. As shown in FIG. 4C, the light control glass 190C is shown in FIG. 4A. The light control glass 190A has a structure equivalent to that obtained by removing the liquid crystal film 1500 or the light control glass 190B shown in FIG. 4B from which the photochromic glass layer 1600 has been removed. Since the photochromic glass layer 1600 is not provided, naturally, the ultraviolet light emitter in the organic EL element layer 1400 described above for the light control glass 190B is also unnecessary. In FIG. 4C, the same reference numerals as those already described indicate the same or substantially the same parts, and the description thereof is omitted.

  More specifically, in the light control glass 190C, the organic EL element layer 1400 functions not only to perform color display but also to adjust the transmittance of visible light. That is, the organic EL element layer 1400, that is, the light control glass 190C is normally in a transparent state (a visible light transmittance of 70% or more, which is a predetermined value), but the organic EL layer 1430 (light emitting layer 1450). When light is emitted and some color display is performed, the state can be switched to a high density state (a state in which the transmittance of visible light is less than a predetermined value of 70%).

  At this time, the light emission control of the organic EL layer 1430 for the purpose of increasing the concentration of the light control glass 190C is performed by the adjusting means 101b described later, while the purpose is to perform color display in the light control glass 190C. The light emission control of the organic EL layer 1430 is performed by a display control function and a dozing operation suppression control function of the adjusting unit 101b described later. Also in the light control glass 190C, the display state by the organic EL element layer 1400 (the light emission state of the three primary color light emitters) is similar to the light control glasses 190A and 190B, and the display control function of the adjusting means 101b described later and the suppression of dozing operation It is controlled by the control function and not only can display the same color on the entire surface, but also can display an arbitrary image and notify various information to the outside.

  As described above, by providing the organic EL element layer 1400 in the single light control glass 190C, it is possible to realize both the function as a color display device and the function as the light control glass. If the light control glass 190C is not intended for color display, it is not necessary to provide all of the three color light emitters of RGB.

[1-3-2] Electrical configuration of vehicle:
In the automobile 100 of the present embodiment shown in FIG. 3, the drive of the engine 1400 is transmitted to an alternator (not shown) and power is generated by the alternator, and the electric power is used for the normal battery and the vehicle management of the present embodiment. It is stored in a dedicated battery (both not shown). Here, the normal battery is a power source for operating the ignition plug and various accessories of the engine 1400, and the dedicated battery is a dedicated power source for operating the light control glass 190 according to the present embodiment. Thus, by separating the power source for operating other equipment and the power source for operating the light control glass 190, the light control glass 190 consumes power when the engine 1400 is not operating. However, the battery for starting the engine 1400 can be prevented from rising.

  And the vehicle 100 of this embodiment is connected to each of the light control glass 190 which comprises the six window glasses 191-196, and adjusts the transmittance | permeability of the visible light in each light control glass 190, as shown in FIG. While controlling, the color display by the organic EL element layer 1400 in each light control glass 190 is controlled, and also various control of the engine 1400 is performed.

  That is, the vehicle 100 includes a CPU 101A as a control unit, a GPS position detection unit 121 as a position detection unit, a speed sensor 122 as a speed detection unit, a brightness sensor 123 as a brightness detection unit, a storage unit 130 including a ROM and a RAM, Is configured.

  Here, the ROM (Read Only Memory) of the storage unit 130 is a program to be executed by the CPU 101A to realize the function as the vehicle control device 101, and initial data (default) required to execute these programs. Value, etc.), position determination means 111 and speed determination means 112, and position determination conditions and speed determination conditions and doze determination conditions required for determination by the dozing / drinking determination means 114, respectively, and areas necessary for the determination Information (longitude / latitude information of a specific area to be described later), speed information (information of speed zero to be described later), dozing judgment reference information, and display on the organic EL element layer 1400 in each of the light control glasses 190 forming the window glasses 191 to 196 Original image data (Brake display image data and method In addition to the direction instruction display image data, various display image data stored according to the user's preference are stored.

  In the present embodiment, the position determination condition is that the location of the automobile 100 is a specific area designated in advance (more specifically, an area other than the public road on which the automobile 100 can travel; for example, private land or convenience store The speed determination condition is that the moving speed (vehicle speed) of the automobile 100 is zero.

  A RAM (Random Access Memory) of the storage unit 130 temporarily stores data (flags, variable values, etc.) used when the CPU 101A executes a program stored in the ROM, and stores window glasses 191 to 196. When color display is performed by the organic EL element layer 1400 in each light control glass 190 to be formed, image data to be displayed on the organic EL element layer 1400 is temporarily stored.

The GPS position detection unit 121 detects the location (current position; latitude / longitude information) of the automobile 100 using, for example, a GPS (Global Positioning System) function of an existing car navigation. The speed sensor 122 detects the moving speed (vehicle speed) of the automobile 100, and the speed sensor 122 that is already installed in the automobile 100 is used. The brightness sensor 123 detects brightness outside the automobile 100 (degree of brightness outside the passenger compartment; unit: lux (lx)).

  Further, various operation input units are connected to the vehicle control apparatus 101, and an accelerator pedal 151, a brake pedal 152, a direction indicator operation unit 153, a changeover switch 154, a display instruction input unit 155, and detection of dozing and drinking are detected. A sensor 157 and the like are connected.

  Moreover, the display part 160 which performs the various display in response to the instruction | indication from the vehicle control apparatus 101 is provided. Note that the display unit 160 can also be used as a display unit such as a speedometer or a display unit of a car navigation device.

  The changeover switch 154 instructs the CPU 101A (adjusting means 101b described later) to instruct the dimming glass 190 to switch from a transparent state to a high concentration state or to switch the dimming glass 190 from a high concentration state to a transparent state. The front window glass 191, the right front side window glass 192, the left front side window glass 193, the right rear side window glass 194, the left rear side window glass 195, and the rear window glass 196 are switched at the same time, An instruction to selectively switch at least one of the window glasses 191 to 196 can be given. The change-over switch 154 can also set / cancel a lightness adjustment mode for adjusting the transmittance according to the detection result (lightness) by the lightness sensor 123 as described later.

  The display instruction input unit 155 gives an execution instruction and a release instruction for color display by the organic EL element layer 1400 in each light control glass 190 to the CPU 101A (a display control function of the adjusting unit 101b and a drowsy driving suppression control function described later). For example, an image to be displayed on each light control glass 190 is designated from the original image data stored in the ROM of the storage unit 130, and an instruction to display or cancel the image is given. A color to be emitted from the light control glass 190 is designated and a display instruction or a release instruction is given according to the color, or a brake display image as described later with reference to FIG. Instructed to set or cancel the brake display mode to be displayed on the rear window glass 196 (light control glass 190) according to the operation. Thus, the direction indication display mode for displaying the direction indication display image described later with reference to FIG. 5B according to the operation of the direction indicator operation unit 153 operated by the driver is set or canceled. Or give instructions.

  The sensor 157 detects the driver's drowsiness or drinking, and the detection result of the sensor 157 is determined by the dozing / drinking determination unit 114. Then, the determination result of the dozing / drinking determination unit 114 (no sleep / occurrence of dozing) is transmitted to the adjustment unit 101b. And the dozing driving suppression program is executed by the adjusting means 101b and the engine controller 101a described later, and the dozing driving suppression control function works.

  As shown in FIG. 17 (a) or FIG. 17 (c), the sensor 157 can, for example, shoot a driver's face as a video as a doze detection at any position near the driver's seat of the dashboard 159A. For example, an alcohol sensor is suitable for detecting a drunk camera. It should be noted that the location of the camera can be modified such as on the sun visor, dashboard, A pillar, and near the center of the steering.

  In this case, the dozing / drinking determination unit 114 makes a determination based on the degree of eye opening included in the driver's face image. In this case, the horizontal white eye and the black eye in the center, which are arranged side by side within a predetermined range of the face outline, are recognized by pattern recognition, and the degree of eye opening (aspect ratio) is obtained. Make a decision.

It is also possible to take a picture of the driver from the side or from an oblique direction, and detect / determine doze based on the position or movement of the head or upper body.
In addition, the snoozing can be detected by meandering the traveling locus of the vehicle. In this case, the GPS position detector 121, a steering operation angle sensor (not shown), and the like constitute the sensor 157. Further, not only meandering but also a sudden steering operation at the time of falling asleep, which is different from a normal steering operation, can be used for the detection of falling asleep.

Furthermore, as will be described later, it is possible to detect doze by examining the driver's brain waves or detecting the driver's reflexes.
The CPU 101A reads out and executes the dimming control program / display control program / slumber operation suppression program stored in the ROM of the storage unit 130, thereby executing position determination unit 111, speed determination unit 112, engine controller 101a, and The adjustment unit 101b functions as a dozing operation suppression control function or a dozing operation suppression control function.

  The position determination unit 111 determines whether or not the location of the automobile 100 (current position; latitude / longitude information) detected by the GPS position detection unit 121 satisfies the position determination condition stored in the ROM of the storage unit 130. That is, it is determined whether or not the vehicle belongs to a specific area (an area other than the public road on which the automobile 100 can travel; for example, private land or a convenience store parking lot). The position determination unit 111 determines whether the latitude / longitude information of the location detected by the GPS position detection unit 121 belongs to the longitude / latitude information of a specific area registered in advance in the ROM of the storage unit 130. This is done by determining whether or not.

  The speed determination unit 112 determines whether or not the moving speed (vehicle speed) of the automobile 100 detected by the speed sensor 122 satisfies the speed determination condition stored in the ROM of the storage unit 130, that is, whether or not it is zero. This is a judgment.

  Based on the driver's detection result detected by the sensor 157, the dozing / drinking determination unit 114 determines whether there is no dozing / occurs of dozing, and transmits the determination result to the adjustment unit 101b.

  Although it is not a doze, the state before the doze may be detected by the sensor 157, so that it may be determined that there is no doze / not a doze / a doze occurs.

  The engine controller 101a controls the number of revolutions of the engine 1400 based on the accelerator pedal 151, the brake pedal 152, and the like, and based on the determination result by the above-described dozing / drinking determination unit 114, the dozing operation suppression control together with the adjusting unit described later Perform the function.

  As will be described later, the adjusting means 101b is configured to position the window glasses 191 to 199 in front and on both sides of the driver in accordance with the safety standard (Article 29, paragraph 4) of the road transport vehicle. While the transmission rate is to be adjusted according to the determination result of 112 and the switching instruction performed by the selector switch 154, the window glasses 194 to 196 other than the window glasses 191 to 199 are performed by the selector switch 154, as will be described later. The target of the transmittance adjustment is only in accordance with the switching instruction.

  Moreover, the adjustment means 101b makes at least the window glasses 191 to 199, preferably the window glasses 191 to 196, the transmittance adjustment targets in accordance with the determination result of the dozing / drinking determination means 114 for the control of the drowsy driving suppression.

  In other words, when the adjustment means 101b receives an instruction from the changeover switch 154 to switch each of the light control glasses 190 forming the window glasses 191 to 199 from the transparent state to the high density state, the position determination means 111 determines the location of the automobile 100 in a specific region. Only when it is determined that the moving speed of the automobile 100 is zero by the speed determination means 112, the transmittance of each light control glass 190 forming the window glass 191 to 199 is less than a predetermined value ( For example, the light control glass 190 is switched from the transparent state to the high concentration state.

As described above, even after each light control glass 190 constituting the window glasses 191 to 199 is switched to the high concentration state, the detection by the GPS position detection unit 121 and the speed sensor 122 and the detection result are obtained at every predetermined control period. When the determination by the position determination unit 111 and the speed determination unit 112 is performed and the position determination unit 111 determines that the location of the automobile 100 does not belong to the specific area, or the speed determination unit 112 determines the location of the automobile 100. When it is determined that the moving speed is not zero, the adjusting unit 101b immediately adjusts the transmittance of each light control glass 190 forming the window glass 191 to 199 to a predetermined value or more (for example, 70% or more), The light control glass 190 is switched from the high concentration state to the transparent state.

  Moreover, the adjustment means 101b gives the instruction | indication which switches each light control glass 190 which comprises the window glass 194-196 which is outside the object of the security standards (Article 29 Clause 4) of the said road transport vehicle from a transparent state to a high concentration state. When received from the changeover switch 154, the transmittance of each light control glass 190 is adjusted to a value less than a predetermined value (for example, less than 70%) regardless of the determination results by the position determination means 111 and the speed determination means 112, and each light control glass 190 is adjusted. Is switched from the transparent state to the high density state.

  Further, when the adjusting unit 101b receives an instruction to switch each light control glass 190 forming the window glasses 191 to 196 from a transparent state to a high concentration state, the transmittance of each light control glass 190 is not less than a predetermined value (for example, 70% or more). The light control glass 190 is switched from the high density state to the transparent state.

  In addition, when the brightness adjustment mode is set by the changeover switch 154, the adjustment unit 101b of the present embodiment responds to the brightness outside the vehicle 100 (degree of brightness outside the passenger compartment) detected by the brightness sensor 123. In addition, it has a function of adjusting the transmittance of each light control glass 190. For example, when the brightness outside the automobile 100 is low (that is, when the outside of the vehicle is dark), adjustment is made to increase the transmittance of each light control glass 190, while when the brightness outside the automobile 100 is high (that is, when the outside of the vehicle is bright), It adjusts so that the transmittance | permeability of each light control glass 190 may be made low.

  Further, even when an ignition switch (not shown) is operated and an engine start instruction is generated, the engine controller 101a and the adjustment unit 101b of the present embodiment are configured so that the driver's face image or Control is performed so that the engine cannot be started until the posture state is photographed and the detection result of the sensor 157 is determined by the dozing / drinking determination unit 114 and transmitted to the adjustment unit 101b.

  When the adjustment means 101b of this embodiment determines that a drowsiness has occurred, the position determination means determines that the location of the vehicle belongs to a specific area, and the speed determination means determines that the moving speed of the vehicle is zero. It has a function of reducing the transmittance of each light control glass 190 until it is not suitable for operation after it is determined that there is.

  In other words, if a dozing is detected and the dozing / drinking determination unit 114 determines that the dozing is a nap, the adjusting unit 101b can adjust the transmittance of each light control glass 190 if the vehicle location and moving speed satisfy the conditions. Switch from transparent to high density. In this case, the adjusting means 101b sets at least the window glasses 191 to 199, preferably the window glasses 191 to 196, as targets for adjusting the high-concentration transmittance. As a result, the vehicle cannot be driven in a state of falling asleep.

In addition, when each light control glass 190 is the light control glass 190A shown to Fig.4 (a), the adjustment means 101b applies a predetermined voltage to the two transparent electrodes 1530 and 1540 in the liquid crystal film 1500, and a liquid crystal layer By changing the orientation of the liquid crystal molecules at 1550, the transmittance of the light control glass 190 is adjusted to be less than a predetermined value. Moreover, each light control glass 190 is shown in FIG.
), The adjusting means 101b applies a predetermined voltage to the transparent electrodes 1410 and 1420 of the organic EL element layer 1400, and applies light of a specific wavelength (ultraviolet light in this embodiment) to the light emitting layer 1450. ) To cause the photochromic glass layer 1600 to be colored, thereby adjusting the transmittance of the light control glass 190 to less than a predetermined value. Furthermore, when each light control glass 190 is the light control glass 190C shown in FIG.4 (c), the adjustment means 101b applies a predetermined voltage to the transparent electrodes 1410 and 1420 of the organic EL element layer 1400, and the light emitting layer 1450. The light transmittance of the light control glass 190 is adjusted to be less than a predetermined value by emitting light of a predetermined color.

  The display control function of the adjusting means 101b is to control the light emitting state of each light emitter of the light emitting layer 1450 of the organic EL element layer 1400 in each light control glass 190, so that any color development or any color in the organic EL element layer 1400 is achieved. The image is displayed.

  In particular, as will be described later, the display control function of the adjusting means 101b of the present embodiment is based on the safety standards (Article 29, paragraph 4) of the road transport vehicle, and the window glasses 191 to 199 in front and both sides of the driver. When the execution instruction for color display is received from the display instruction input unit 155, the position determination means 111 determines that the location of the automobile 100 belongs to a specific area and the speed determination means 112 determines the position of the automobile 100. Only when it is determined that the moving speed is zero, color display such as an image specified by the display instruction input unit 155 is performed on the organic EL element layer 1400 of each light control glass 190 forming the window glass 191 to 199. Let

  In addition, the display control function of the adjusting unit 101b does not perform the above-described determination when an execution instruction for color display on the window glasses 194 to 196 is received from the display instruction input unit 155, as will be described later. Immediately, the organic EL element layer 1400 of each light control glass 190 constituting the window glass 194 to 196 is caused to execute color display of an image or the like designated by the display instruction input unit 155.

  Further, as will be described later, the display control function of the adjusting unit 101b is that the rear window glass 196 is set during the travel of the automobile 100 when the above-described brake display mode is set by the display instruction input unit 155. In the organic EL element layer 1400 of the light control glass 190 used as 196, display linked to the operation of the brake pedal 152 by the driver of the automobile 100 is executed.

  When the brake display mode is set, for example, when the driver operates the brake pedal 152, the brake lamp is turned on, and at the same time, a brake display image ("brake!") As shown in FIG. Image). The brake display image is not limited to the example shown in FIG.

  Similarly, as will be described later, the display control function of the adjusting unit 101b is configured so that the rear window glass 196 is set to the rear window glass 196 when the above-described direction instruction display mode is set by the display instruction input unit 155. In the organic EL element layer 1400 of the light control glass 190 used as the window glass 196, display linked to the operation of the direction indicator operation unit 153 operated by the driver of the automobile 100 is executed. When the direction indication display mode is set, for example, when the driver operates the direction indicator operation unit 153, the blinker corresponding to the indication direction is turned on, and at the same time, the direction indication as shown in FIG. Display image (image including a large right arrow in response to a right direction instruction) is displayed. The direction indication display image is not limited to the example shown in FIG.

Similarly, the display control function of the adjusting unit 101b is the same as that for the rear window glass 196, in the organic EL element layer 1400 of the light control glass 190 used as the rear window glass 196 while the automobile 100 is running, during the drowsy driving suppression control. For example, a hazard lamp display image (an image including a large right arrow and a left arrow) indicating an emergency stop as shown in FIG. 5C is displayed. Note that the image is not limited to the example shown in FIG. As a result, it becomes unsuitable to drive the vehicle in a dozing state.

[2] Operation of the vehicle management system of this embodiment:
Next, the operation of the vehicle management system of this embodiment will be described with reference to each explanatory diagram and each flowchart.

Here, in the vehicle management system 1 of the present embodiment, a legitimate driver possesses the smart key 10 and wears the biometric data detection terminal device 20.
In other words, in a state where a legitimate driver wears the biometric data detection terminal device 20 and uses the smart key 10, the driving operation is permitted by the management unit 72, and the door is locked by the control of the control unit 71. The engine 140 is released and the engine 140 can be started.

  In addition, when the driving operation is permitted by the management means 72 in this way, the transmittance of the glass 190 is increased by the vehicle control device 101 to which the driving operation permission is transmitted from the management means 72, the glass becomes transparent, and the driving operation is performed. It will be in a state suitable for. On the other hand, if the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the permission from the management means 72, the glass becomes black, and the vehicle cannot be driven. Become.

  Although not shown in the drawings, as an external sensor of the biometric data detection terminal device 20, a pharyngeal microphone is attached near the driver's throat, or a chest sensor pad is attached to the driver's chest or attached by an elastic belt. However, it is possible to obtain biometric information continuously.

  In the case of driving or maneuvering a vehicle or operating a device, as shown in FIG. 17C, for example, the smart key 10 is placed at a predetermined position at any position near the driver's seat of the dashboard 159A. By fitting, stable communication is executed between the smart key 10 and the operation permission receiving device 70, which is desirable.

  In addition, the removable sensor portion 20 ′ of the biometric data detection terminal device 20 can be attached to the steering 158. Furthermore, a sensor 157 with a built-in steering 158 as shown in FIG. 17A can be used as the biological data detection terminal device 20. In this case, the steering 158 functions as the biological data detection terminal device 20.

[2-1] Driver qualification management operation by the driving permission receiving device:
The driver qualification management operation by the driving permission receiving device 70 in the vehicle management system 1 of the present embodiment will be described according to the flowchart shown in FIG. 6 (steps S10 to S35).

  When the driver uses the smart key 10 built in the IC chip 10b to obtain permission for the driving operation from the driving permission receiving device 70, the driver uses the smart key 10 in the IC card reader / writer in the driving permission receiving device 70. It is made to approach to 75 reading parts (operation permission acceptance device 70). As a result, when the IC chip 10b of the smart key 10 enters the magnetic field generated from the IC card reader / writer 75, the IC chip 10b and the IC card reader / writer 75 are in a communication-on (ON) state (step) S10 YES route).

When the communication is turned on, the ID information and qualification information stored in the IC chip 10b are changed to I
The information is read by the C card reader / writer 75 and notified to the authentication unit 73 (step S11), and the authentication unit 73 reads registration authentication information associated with the notified ID information from a database or the like (step S11). S12).

  On the display (operation screen, touch panel) of the driving permission receiving device 70, the driver is requested to input authentication information (step S13), and the authentication information is not input even after a predetermined time has elapsed (step S14). NO route), the function of the item (42) of the management means 72 is used to notify the driver of an error that authentication information has not been entered by displaying an error on the display (step S15). The operation is not permitted (step S16), and the process returns to step S10.

  In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

  When the authentication information is input by the driver (YES route of step S14), the authentication information 73 compares the registered authentication information read in step S12 with the authentication information input by the driver, and the driver Is authenticated (step S17). If these pieces of authentication information do not match, it is determined that the driver is not the person himself (NO route of step S18), and the function of the item (43) of the management means 72 gives an error of the person authentication NG to the system administrator. In addition to the notification, the driver is notified of the error of personal authentication NG by displaying the error on the display (step S19), and the driving operation is not permitted by the management means 72 (step S20). Return to the process.

  In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

  As the authentication here, in addition to the normal identity authentication using an ID or a password, authentication using a one-time password is performed. This one-time password authentication will be described with reference to FIG.

  First, when the management means 72 of the operation permission receiving device 70 generates an authentication request using the access of the smart key 10 as a trigger (step S461 in FIG. 7A), the one-time password generation means 77 obtains the one-time password. Occurs (step S462 in FIG. 7A). And the one-time password transmission means 78 transmits this one-time password with respect to the portable terminal device 20 (step S463 in Fig.7 (a)).

  Then, the mobile terminal device 20 performs identity verification based on the biometric data value (step S421 in FIG. 7A), and receives the one-time password from the operation permission receiving device 70 (in FIG. 7A). In step S422), the portable terminal device 20 displays the one-time password on the display means 24 if the identity is confirmed based on the biometric data value (step S423 in FIG. 7A).

As explained in (a) to (i), it is possible to distinguish the driver from a third party, and it is possible to issue a one-time password only to the driver. .
Further, since the one-time password is displayed when the identity is confirmed by biometric authentication, even if the one-time password generating device is lost, the one-time password is not used by a third party.

  On the other hand, the smart key 10 that has received the notification of the authentication request from the driving permission receiving device 70 displays a request for authentication information on the display means 15 (step S411 in FIG. 7A). Alternatively, a request for authentication information is displayed on the input / display unit 79 (step S411 in FIG. 7A). The driver who sees this display inputs the one-time password displayed on the display means 24 of the portable terminal device 20 to the input means 14 of the smart key 10 or the input display means 79 of the driving permission receiving device 70 (FIG. Step S412 in 7 (a). The one-time password input to the smart key 10 in this way is transmitted to the driving permission receiving device 70 via the transmission / reception means 12 (step S413 in FIG. 7A).

  On the operation permission accepting device 70 side, the one-time password input from the smart key 10 to the reply or input display means 79 (step S464 in FIG. 7A) and the one-time password generated by the one-time password generation means 77 are displayed. Authentication is performed by comparing the password with the authentication means 73 (step S465 in FIG. 7A).

  Here, if the one-time password is not returned from the smart key 10 or input to the input display means 79 even after a predetermined time has elapsed, or if the generated one-time password does not match the returned one-time password, an error will occur. Then, an error notification is sent to the smart key 10, and the driving operation is not permitted by the management means 72 (steps S466 and S414 in FIG. 7A).

  In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

  That is, if the one-time password does not match, or if the one-time password is not authenticated at a predetermined time, an authentication NG error notification is performed using the one-time password (step S19 in FIG. 7A). Then, the driving operation is not permitted by the management means 72 (step S20 in FIG. 7A), and the process returns to step S10.

  In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

Further, for the authentication using the one-time password, it is possible to use a technique as shown in FIG.
First, when the management means 72 of the driving permission receiving device 70 generates an authentication request (step S461 in FIG. 7B), the one-time password generating means 77 generates a one-time password (in FIG. 7B). Step S462).

In the smart key 10 that has received the authentication request notification from the driving permission receiving device 70, the smart key 10 notifies the mobile terminal device 20 to generate a one-time password.
Here, the one-time password processing means 258 generates a one-time password that is synchronized (matched) with the one-time password generated by the one-time password generation means 77 with reference to the timing and predetermined information given to the device. (Step S422 ′ in FIG. 7B).

Then, the mobile terminal device 20 performs identity verification based on the biometric data value (step S421 in FIG. 7B), thus generating a one-time password (step S422 ′ in FIG. 7B). The mobile terminal device 20 displays the one-time password on the display means 24 if the identity is confirmed by the biometric data value (step S4 in FIG. 7B).
23).

  Note that this one-time password display may continue to be displayed while the identity is confirmed, may be triggered by a signal when attempting to receive the service, The display may be performed in response to an operation of a switch or the like not shown.

  In addition, as explained in (a) to (i), it is possible to distinguish between the driver and a third party, and it is possible to issue a one-time password only to the driver. . Further, since the one-time password is displayed when the identity is confirmed by biometric authentication, even if the one-time password generating device is lost, the one-time password is not used by a third party.

  Further, the smart key 10 that has received the notification of the authentication request from the driving permission receiving device 70 displays the request for authentication information on the display means 15 (step S411 in FIG. 7B). Alternatively, a request for authentication information is displayed on the input / display unit 79 (step S411 in FIG. 7B). The driver who sees this display inputs the one-time password displayed on the display means 24 of the portable terminal device 20 to the input means 14 of the smart key 10 or the input display means 79 of the driving permission receiving device 70 (FIG. Step S412 in 7 (b). The one-time password input to the smart key 10 in this way is transmitted to the driving permission receiving device 70 via the transmission / reception means 12 (step S413 in FIG. 7B).

  On the operation permission receiving device 70 side, the one-time password input from the smart key 10 to the reply or input display means 79 (step S464 in FIG. 7B) and the one-time password generated by the one-time password generation means 77 are displayed. Authentication is performed by comparing the password with the authentication means 73 (step S465 in FIG. 7B).

  Here, if the one-time password is not returned from the smart key 10 or input to the input display means 79 even after a predetermined time has elapsed, or if the generated one-time password does not match the returned one-time password, an error will occur. Then, an error notification is given to the smart key 10, and the driving operation is not permitted by the management means 72 (steps S466 and S414 in FIG. 7B).

  In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

  That is, if the one-time password does not match, or if the one-time password is not authenticated at a predetermined time, an authentication NG error notification is performed using the one-time password (step S19 in FIG. 7B). Then, the driving operation is not permitted by the management means 72 (step S20 in FIG. 7B), and the processing returns to step S10.

  In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

When the authentication of the above-mentioned identity authentication and the authentication by the one-time password match, it is authenticated that the driver is the identity (YES route of step S18), and the function of the item (41) of the management means 72 A first position and a second position are required for two devices that should be possessed and carried by the same driver, that is, the smart key 10 and the portable terminal device 20 for physical condition management. The mobile terminal device 20 is requested to operate the biosensor 20BS (step S21).

  At this time, information on the combination of the smart key 10 and the physical condition management portable terminal device 20 that should be carried and carried by the same driver is associated with the ID information (stored in the IC chip 10b). The management unit 72 searches the database and the like using the ID information read in step S11 as a key, so that the two corresponding to the ID information are stored in the database and the like. Information (request destination information) related to the devices (smart key 10 and physical condition management portable terminal device 20) can be acquired.

  Note that, as in the example shown in FIG. 6, when the driver uses the smart key 10 to receive a driving operation permission from the driving permission receiving device 70, at least the smart key 10 built in the IC chip 10 b is located at the position of the driving permission receiving device 70. Therefore, the position of the driving permission accepting device 70 is used as the first position, the first position for the smart key 10 is not requested, and the second position for the physical condition management portable terminal device 20 and Only the operation state request may be made.

  In addition, after confirming that the driver's biometric data value detected by the biometric sensor 210BS is the driver's identity, the portable terminal device 20 for physical condition management is the second position detecting unit. The driving permission receiving device 70 is notified of the second position detected by the (GPS position detecting unit 20GS).

  If there is no response to any of the requests for the first position, the second position, and the operation state (NO route of step S22), the smart key 10 and the physical condition management are performed by the function of the item (44) of the management means 72. It is determined that at least one of the mobile terminal devices 20 is in a state of some kind of abnormality, and the warning means 74 sends a warning notification to the system administrator and the driver (the smart key 10 and the physical condition management mobile terminal device 20). Further, an error notification without a response is given to the system administrator, and an error notification without a response is given to the driver by displaying the error on the display (step S24). The driving operation is not permitted by the means 72 (step S25), and the process returns to step S10.

  In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

  When there is an answer / notification of the first position, the second position, and the motion state in response to the request in step S21 (YES route in step S22), first, the motion state notified from the physical condition management portable terminal device 20 is detected. Determine whether it is in operation.

  If the operating state is not in operation, that is, if it is detected that the biosensor 20BS is not performing the detection operation (or if the physical condition management portable terminal device 20 is not worn on the driver's body; NO in step S26) Route), by the function of the item (45) of the management means 72, an error notification that the biosensor 20BS is not operating is given to the system administrator, and the error is displayed on the display to the driver. On the other hand, a notification that the biosensor 20BS is not operating is made (step S27), the driving operation is not permitted by the management means 72 (step S28), and the physical condition management portable terminal device 20 for the driver is further given. The management server 60 (management means 62) is notified that the biometric data value detection operation is interrupted. After being registered and stored in association with the driver (identification information or the like) (step S29), the process returns to step S10.

  In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

  When the operation state notified from the physical condition management mobile terminal device 20 is in the detection operation (YES route of step S26), the function of the item (41) of the management unit 72 notifies the transmission / reception unit 12 of the smart key 10. The distance between the calculated first position and the second position notified by the transmission / reception means 255 of the physical condition management portable terminal device 20 is calculated (step S30), and whether or not the calculated distance is within a predetermined range. Is determined (step S31).

  If the distance is out of the predetermined range (NO route of step S31), the smart key 10 and the physical condition management portable terminal device 20 exist in different locations by the function of the item (46) of the management means 72. 10 is judged to be used by a person different from the person wearing the physical condition management portable terminal device 20, and the warning means 74 causes the system administrator or driver (the smart key 10 and the physical condition management portable A warning notification is sent to the terminal device 20) (step S32). Further, an error notification is sent to the system administrator, and an error notification is given to the driver by displaying the error on the display (step S33). Then, the driving operation is not permitted by the management means 72 (step S34), and the process returns to step S10.

  In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

  When the distance calculated in step S30 is within the predetermined range (YES route in step S31), the operation of the item (41) of the management means 72 is permitted by the management means 72 (step S35). After the driving operation desired by the person (unlocking the doors and gates, starting the engine for driving and maneuvering, starting the device by the operation, and registering in the attendance book), the process returns to step S10.

  When the driving operation is permitted by the management means 72 as described above, the vehicle control device 101 notified of the driving operation permission from the management means 72 increases the transmittance of the glass 190, and the glass becomes transparent, which is suitable for driving. It becomes a state.

  In the vehicle management system 1 of the present embodiment, the smart key 10 is connected to the IC card reader / writer 75 of the driving permission receiving device 70 when authentication is required in a relatively short time or when the importance is low. Only the position check at the time of approaching is performed.

  In other words, in such a case, the processes of steps S12 to S20 and steps S26 to S29 in FIG. 6 are omitted, and the first position and the second position are requested in step S21 in FIG. The driving operation is permitted only when the distance between the first position and the second position is within a predetermined range.

  Note that the notification of the second position is premised on the authentication of the driver himself / herself based on the biometric information, but since this authentication is continuously executed in advance, a specific operation apparently occurs. It does not matter, and the process is executed quickly.

In the above-described processing of FIG. 6, depending on the driver's sudden physical condition change, the biometric data detection terminal device 20 may not be able to confirm with the person himself and may not be permitted to drive. A similar case may occur due to a failure of the biometric data detection terminal device 20. In that case, if it is a driver of a bus or a taxi, it is possible to report to that effect to the boss, and the boss can issue a permission for driving operation temporarily via the management server 60. Further, in the case of an individual driver, by inputting a release code other than normal to the smart key 10 or the biometric data detection terminal device 20, permission for driving operation is temporarily granted under personal responsibility. It can also be issued.

[2-2] Driver qualification management operation by the management server:
In the above description, the driving permission receiving device 70 in the vehicle 100 is performing the driver qualification management operation. However, the driving permission receiving device 70 performs the input from step S10 to step S13, and the subsequent authentication or the like. It can also be executed by the management server 60. In this case, step S14 and subsequent steps in the above flowchart may be read as the operation of the management server 60. The error notification is performed on the driving permission receiving device 70 side.

[2-3] Location check function by the management server or the operation permission receiving device:
The position check function [function of the above item (37) of the management means 62] of the management server 60 or the driving permission receiving device 70 in the vehicle management system 1 of the present embodiment will be described with reference to the flowchart (steps S71 to S80) shown in FIG. To do. As described above, the position check function described with reference to FIG. 8 is not the management server 60 or the operation permission receiving device 70, but a management server (not shown) or position check provided separately from the management server 60. It may be realized by a dedicated server.

In the following description, the case where the management server 60 performs a location check is taken as a specific example.
When the position check timing of a predetermined cycle is reached (YES route of step S71), the two devices that should be possessed and carried by the same driver, that is, the smart key 10 and the physical condition management portable terminal device 20, respectively. A first position and a second position are requested (step S72). At this time, the information on the combination of the smart key 10 and the physical condition management portable terminal device 20 that should be carried and carried by the same driver is associated with the telephone number of the smart key 10 as described above, for example. Are stored in advance in a database or the like, and the management means 62 searches the database or the like using the telephone number of the smart key 10 as a key, thereby two devices (smart key 10 and smart key 10 and Information on the physical condition management portable terminal device 20) (request destination information) is acquired.

  The physical condition management portable terminal device 20 confirms the driver's identity based on the driver's biometric data value detected by the biosensor 210BS, and then the second position detector (GPS position detector). 20GS) is notified to the management server 60.

  When there is no response to any of the requests for the first position and the second position (NO route in step S73), a state where some abnormality has occurred in at least one of the smart key 10 and the physical condition management portable terminal device 20 The warning means 64 notifies the system administrator and the driver (smart key 10 and physical condition management portable terminal device 20) of the warning (step S74), and the management means 62 and the driving of the management server 60 are operated. Driving operation is not permitted by the management means 72 of the permission receiving apparatus 70 (step S75), and the process returns to step S71.

  In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

  When there is an answer / notification of the first position and the second position in response to the request in step S72 (YES route in step S73), the first position and physical condition management portable terminal notified by the transmission / reception means 12 of the smart key 10 The distance to the second position notified by the transmission / reception means 255 of the device 20 is calculated (step S76), and it is determined whether or not the calculated distance is within a predetermined range (step S77). If the distance is within the predetermined range (YES route of step S77), it is determined that the smart key 10 and the physical condition management portable terminal device 20 are possessed and carried by the same driver, and the process of step S71 Return to.

  When the distance calculated in step S76 is outside the predetermined range (NO route of step S77), when the state outside the predetermined range does not exceed a predetermined time (for example, 30 minutes) (NO route of step S78) Then, it is determined that the smart key 10 and the physical condition management portable terminal device 20 are temporarily separated from each other, and the process returns to step S71. On the other hand, when it is out of the predetermined range for a predetermined time or longer (for example, 30 minutes or longer) (YES route in step S78), the smart key 10 and the physical condition management portable terminal device 20 due to misplacement, theft, etc. And the warning means 64 sends a warning notification to the system administrator and the driver (smart key 10 and the physical condition management portable terminal device 20) (step S79). The driving operation is not permitted by the managing unit 62 of 60 and the managing unit 72 of the driving permission receiving device 70 (step S80), and the process returns to step S71.

  In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

[2-4] Biosensor detection operation check function of the management server or the operation permission receiving device:
The flow chart shown in FIG. 9 (steps S81 to S109) for the biosensor detection operation check function [function of the item (38) of the management means 62] of the management server 60 and the driving permission receiving device 70 in the vehicle management system 1 of the present embodiment. ). The biosensor detection operation check function described with reference to FIG. 9 is provided separately from the management server 60 and the driving permission receiving device 70, not the management server 60 and the driving permission receiving device 70, as described above. It may be realized by a management server (not shown) or a server dedicated to biometric sensor detection operation check.

In the following description, the case where the management server 60 executes a biosensor detection operation check is taken as a specific example.
When the biometric sensor detection operation check timing of a predetermined cycle is reached (YES route of step S81), the operation state is requested to the physical condition management portable terminal device 20 (step S82), and there is no response of the operation state (NO of step S83) Route), it is determined that there is some abnormality in the physical condition management portable terminal device 20, and the warning means 64 warns the system administrator and the driver (smart key 10 and the physical condition management portable terminal device 20). Notification is performed (step S84), and further, error notification without response is performed to the system administrator, and error notification without response is performed to the smart key 10 / physical condition management portable terminal device 20 (step S85). ), The management means 62 of the management server 60 and the management means 7 of the operation permission receiving device 70 Driving operation by is not permitted (step S86), the process returns to step S81.

  In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

  When there is a response / notification of the operation state in response to the request in step S82 (YES route in step S83), it is determined whether or not the operation state notified from the physical condition management mobile terminal device 20 is in the detection operation.

  When the operation state is not in operation, that is, when it is detected that the biosensor 20BS is not performing the detection operation (or when the physical condition management portable terminal device 20 is not worn on the driver's body; NO in step S87) Route), an error notification that the biosensor 20BS is not operating is sent to the system administrator, and the biosensor 20BS is not operating to the smart key 10 / physical condition management portable terminal device 20. Notification is made (step S88), the driving operation is not permitted by the management means 62 of the management server 60 and the management means 72 of the driving permission receiving device 70 (step S89), and the driver's physical condition management portable terminal That the detection operation of the biometric data value in the device 20 is suspended indicates that the driver (phone number, Association with the registered and stored in a separate information, etc.) (step S90), the process returns to step S81. However, when interruption registration has already been performed for the physical condition management portable terminal device 20, the processes of steps S88 to S90 are omitted.

  When the operation state notified from the physical condition management mobile terminal device 20 is in the detection operation (YES route in step S87), it is determined whether or not the physical condition management mobile terminal device 20 has been registered for interruption. However, when the registration is not interrupted, the physical condition management portable terminal device 20 does not resume the operation of the biosensor 20BS from the interrupted state, but the biosensor 20BS is continuously operating (NO in step S91). Route), the process returns to step S81.

  If the physical condition management mobile terminal device 20 has been registered to be suspended, it is determined that the operation of the biosensor 20BS has been resumed from the suspended state (YES route of step S91), and the physical condition management mobile terminal device 20 On the other hand, biometric data values (for example, body temperature, blood pressure, heart rate, respiration rate) over a predetermined period (for example, 1 hour) accumulated before and after interruption of the detection operation by the biosensor 20BS are requested (step S92).

  When the biometric data value is notified from the physical condition management portable terminal device 20 in response to this request, the statistical value calculation means 65 causes the pre-interruption statistical value and post-resumption statistical value (for example, average value) for the biometric data values before and after the interruption. Is calculated (step S93), and the calculated statistical value before interruption is compared with the calculated statistical value after restart (step S94), and whether or not the difference between these statistical values is within a predetermined range. Thus, it is determined whether or not these statistical values are statistical values of the biometric data values of the same driver (step S95).

  When the difference between these statistical values is outside the predetermined range and these statistical values are determined not to be the statistical values of the biometric data values of the same driver (NO route in step S95), the physical condition management portable terminal device 20 is removed from the body. It is determined that there is a high possibility that the driver attached to the vehicle is a different person before and after the biometric data value detection operation is interrupted, and the warning means 64 causes the system administrator and the driver (smart key 10 and portable terminal device for physical condition management) 20) (step S96), an error notification to the system administrator, and an error notification to the smart key 10 / physical condition management portable terminal device 20 (step S97). The non-permitted state of the driving operation is maintained by the management unit 62 of the management server 60 and the management unit 72 of the driving permission receiving device 70 (step S98), the process returns to step S81.

In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

  If it is determined that the difference between the statistical values calculated in step S93 is within a predetermined range and these statistical values are the statistical values of the biometric data values of the same driver (YES route in step S95), the operation state is checked. The physical position management mobile terminal device 20 and the smart key 10 that the driver using the physical condition management mobile terminal device 20 should carry and carry are respectively in the first position and the second position. A position is requested (step S99). At this time, the information regarding the combination of the smart key 10 and the physical condition management mobile terminal device 20 that should be possessed and carried by the same driver is associated with the identification information of the physical condition management mobile terminal device 20, for example. The management unit 62 searches the database and the like by using the identification information of the physical condition management portable terminal device 20 as a key, so that the physical condition that is currently subject to the operation state check is stored in the database and the like. Information (request destination information) regarding the smart key 10 paired with the management portable terminal device 20 is acquired.

  The physical condition management portable terminal device 20 confirms the driver's identity based on the driver's biometric data value detected by the biosensor 210BS, and then the second position detector (GPS position detector). 20GS) is notified to the management server 60.

  When there is no response to any of the requests for the first position and the second position (NO route of step S100), a state in which some abnormality has occurred in at least one of the smart key 10 and the physical condition management portable terminal device 20 The warning means 64 notifies the system administrator and the driver (smart key 10 and the physical condition management portable terminal device 20) of the warning (step S101), and there is no response to the system administrator. Error notification and an error notification without response to the smart key 10 / physical condition management portable terminal device 20 are performed (step S102), and the management means 62 of the management server 60 and the management means of the operation permission receiving device 70 are sent. 72, the non-permitted state of the driving operation is maintained (step S103), and step S8 Back to the processing.

  In this way, when the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the disapproval from the management means 72, and the glass becomes black and cannot be driven. become.

  When there is an answer / notification of the first position and the second position in response to the request in step S99 (YES route in step S100), the first position and the physical condition management portable terminal notified by the transmission / reception means 12 of the smart key 10 The distance to the second position notified by the transmission / reception means 255 of the apparatus 20 is calculated (step S104), and it is determined whether or not the calculated distance is within a predetermined range (step S105).

  If the distance is outside the predetermined range (NO route of step S105), the smart key 10 and the physical condition management portable terminal device 20 are located in different places and the smart key 10 is wearing the physical condition management portable terminal device 20 It is determined that there is a high possibility that it is used by a different person, and the warning means 64 notifies the system administrator and the driver (the smart key 10 and the physical condition management portable terminal device 20) of a warning (step S106). In addition, an error notification is sent to the system administrator, and an error notification is sent to the smart key 10 / physical condition management portable terminal device 20 (step S107), and the management means 62 and the operation permission acceptance of the management server 60 are received. The non-permitted state of the driving operation is maintained by the management means 72 of the device 70 (step S108). The process returns to step S81.

When the distance calculated in step S104 is within a predetermined range (YE in step S105)
S route), the smart key 10 and the physical condition management portable terminal device 20 are judged to be possessed and carried by the same driver, and the management means 62 of the management server 60 and the management means 72 of the driving permission receiving device 70 are determined. The driving operation non-permission state is canceled, and the driving operation is permitted (step S109).

  When the driving operation is permitted by the management means 72 as described above, the vehicle control device 101 notified of the driving operation permission from the management means 72 increases the transmittance of the glass 190, and the glass becomes transparent, which is suitable for driving. It becomes a state.

[2-5] Operation of smart key (mobile phone device):
Operation | movement of the smart key 10 in the vehicle management system 1 of this embodiment is demonstrated according to the flowchart (step S111-S117) shown in FIG. Here, a case where the smart key 10 is configured as a mobile phone device is shown, and a normal call function and an e-mail function are used by the driver. When using the management server 60 and the driving permission receiving device 70 to receive permission for driving operation, the smart key 10 is used in response to a position request, error notification, and warning notification from the management server 60 and the driving permission receiving device 70. Functions as shown in FIG.

  When the transmission / reception means 12 of the smart key 10 receives a request for the first position from the management server 60 or the operation permission accepting device 70 (YES route in step S111), the GPS position detection unit 11 receives the current position (location of the smart key 10). (Position) detection request is made (step S112), and the current position detected by the GPS position detector 11 is notified to the management server 60 or the operation permission accepting device 70 as the first position by the transmission / reception means 12 (step S113). The process returns to step S111.

  Further, when an error notification is received from the management server 60 or the operation permission receiving device 70 by the transmission / reception means 12 of the smart key 10 (NO route of step S111 to YES route of step S114), information corresponding to the content of the error notification is displayed. Then, the information is displayed as image information on the display (not shown) of the smart key 10 to notify the driver, or the driver is notified as voice information (step S115), and then the process returns to step S111.

  Furthermore, when a warning notification is received from the management server 60 or the operation permission receiving device 70 by the transmission / reception means 12 of the smart key 10 (from the NO route in step S114 to the YES route in step S116), information corresponding to the content of the warning notification is displayed. Then, it is displayed as image information on the display (not shown) of the smart key 10 to notify the driver, or is notified to the driver as voice information and a warning operation is performed (step S117), and then the processing of step S111 is performed. Return. It is assumed that the warning operation performed in step S117 is performed as an operation more emphasized than the error display performed in step S115. For example, as the warning operation, not only the warning content is notified by the display, but also the driver is notified more strongly by using the vibration function and the calling function of the smart key 10.

[2-6] Operation of physical condition management portable terminal device:
11, 12 and 13 are flowcharts for explaining the operations of the biological sensor 20BS, the weather sensor 20WS, and the GPS position detection unit 20GS in the physical condition management portable terminal device 20 of this embodiment, respectively. As shown in FIG. 5, the biosensor 20BS detects the driver's biometric data values (body temperature, blood pressure, heart rate, respiration rate) in a predetermined cycle (step S121), and transmits the detected biometric data values to the CPU 25 ( Step S122).

Similarly, as shown in FIG. 12, the meteorological sensor 20WS detects meteorological data (temperature / water temperature, humidity, pressure / water pressure) in the atmosphere where the driver is located at a predetermined cycle (step S131).
) The detected weather data is transmitted to the CPU 25 (step S132).

  Further, as shown in FIG. 13, the GPS position detection unit 20GS detects the current location (longitude / latitude information) of the driver at a predetermined cycle by the global orientation measurement system (step S141), and the detected location The position is transmitted to the CPU 25 (step S142).

  Here, it is assumed that transmission operations to the CPU 25 by the biological sensor 20BS, the weather sensor 20WS, and the GPS position detection unit 20GS are controlled to be simultaneously executed in synchronization with the predetermined period.

  FIG. 14 is a flowchart (steps S201 to S229) for explaining the operation of the CPU 25 in the physical condition management portable terminal device 20 of this embodiment. As shown in FIG. 14, the biosensor 20BS, the weather sensor 20WS, and the GPS When the biometric data value, the meteorological data, and the location are received from the position detection unit 20GS (YES route in step S201), the received biometric data value, the meteorological data, and the location are received by the transmission / reception means 255 via the network 90. The biometric data value transmitted to the management server 80 is stored in the memory 20M (step S202), and the weather conditions corresponding to the weather data (temperature / water temperature, humidity, pressure / water pressure) detected by the weather sensor 20WS are described above. The biometric data threshold set as The threshold reading means 252, is read is retrieved from the threshold table 20T (step S203).

  Then, the comparison means 253 compares the biometric data threshold value read by the threshold value reading means 252 with the biometric data values (body temperature, blood pressure, heart rate, respiration rate) detected by the biometric sensor 20BS (step S204). The driver's physical condition abnormality is determined and detected in accordance with such a standard (step S205). If the biometric data value does not exceed or falls below the biometric data threshold, it is determined that there is no abnormality (NO route in step S205), and the process returns to step S201.

  On the other hand, if the biometric data value exceeds or falls below the biometric data threshold, it is determined that there is an abnormality (YES route in step S205), and the warning unit 254 performs a warning operation for the driver. (Step S206). Specifically, a buzzer or the like in the mobile terminal device 20 is sounded, or an LED lamp or the like is blinked.

  After the warning operation is started, the control means 256 detects whether or not the stop operation unit 26 is operated by the driver (step S207), and the warning operation of the warning means 254 is performed even after a predetermined time has elapsed after the warning operation is started. When the operation to stop the operation (operation of the stop operation unit 26) is not executed (NO route in step S207 to YES route in step S208), the transmission / reception unit 255 performs notification to the first contact via the network 90. (Step S209).

  At this time, as described above, the situation in which the operation of the stop operation unit 26 is not executed even after the elapse of a predetermined time is considered to be a considerably dangerous state such as the driver becoming unconscious, In addition to the fire fighting etc., the driver's physical condition abnormality is notified to the manager terminal 30, the contact terminal 40, and the attending doctor terminal 50 together with the biometric data value, the weather data, and the location of the abnormality. In addition, in the state as described above, it is considered that the driver is not in a state that can be handled by telephone or e-mail. Therefore, biometric data is registered in the voice information and e-mail text for notifying the physical condition abnormality registered in advance. By attaching a value, weather data, and a location, and automatically making a voice call or automatically sending an e-mail, a physical condition abnormality is notified.

When the operation of the stop operation unit 26 is executed by the driver within a predetermined time and the warning operation of the warning unit 254 is stopped (YES route in Step S207), whether the notification by the transmission / reception unit 255 is executed by the inquiry unit 257 The driver is inquired of whether or not (step S210). In response to this inquiry, when the driver makes a response to execute notification by the transmission / reception means 255 (YES route in step S211), the transmission / reception means 255 performs notification to the second contact via the network 90. (Step S212).

  At this time, a call to the attending doctor's telephone (for example, attending doctor terminal 50) as the second contact is automatically made, and if there is a response from the attending doctor (YES route in step S213), the driver (portable terminal device 20). And the attending doctor (the attending doctor terminal 50) are in a call state (step S214), so that the driver can ask the attending doctor for an appropriate treatment. At that time, the biometric data value, the weather data, and the location at the time of occurrence of the abnormality are also notified to the attending doctor terminal 50 simultaneously by e-mail, for example (step S212).

  If there is no response from the attending physician (NO route in step S213), it is determined whether or not a contact other than the attending physician is registered (step S215). If there is no contact other than the attending physician (NO route in step S215), Returning to step S212, a call to the second contact (primary physician) is executed again. On the other hand, when a contact other than the attending physician (for example, an administrator, an organizer / operator, etc.) is registered (YES route in step S215), an automatic call or email is automatically sent to the contact ( Step S216).

  If the driver makes a reply to the inquiry by the inquiry means 257 that the notification by the transmission / reception means 255 is not executed (NO route in step S211), whether or not the driver has continuously rejected the notification a predetermined number of times. Is determined (step S217). If the notification refusal is not continuously performed a predetermined number of times (NO route of step S217), the process returns to the process of step S201, while the execution of the notification by the transmission / reception unit 255 is continuously rejected a predetermined number of times (step S201). The YES route of S217), the notification to the third contact is forcibly executed via the network 90 by the transmission / reception means 255 (step S218). In other words, if an abnormality is repeatedly detected even if the driver stops and cancels the warning by self-judgment, the driver is judged to be in a very dangerous state, and a friend or close relative as the third contact person Notification of physical condition abnormality is forcibly performed to (contact terminal 40). At this time, the manager terminal 30 and the attending doctor terminal 50 are also notified of the physical condition abnormality.

  On the other hand, when a request for the second position is received from the management server 60 or the operation permission accepting device 70 by the transmission / reception means 255 (from the NO route in step S201 to the YES route in step S219), the current position (portable terminal) to the GPS position detection unit 20GS. The position of the device 20 is detected (step S220), and the current position detected by the GPS position detector 20GS is notified to the management server 60 or the operation permission receiving device 70 as the second position by the transmission / reception means 255. (Step S221), the process returns to Step S201.

  When a request for the detection operation state of the biosensor 20BS is received from the management server 60 or the operation permission receiving device 70 from the transmission / reception unit 255 (NO route of step S219 to YES route of step S222), the control unit 256 serves as an operation state detection unit. Whether or not the biometric sensor 20BS is currently performing an operation of detecting a biometric data value from the driver depending on the function (that is, the portable terminal device 20 for physical condition management is actually attached to the driver's body and the biometric data is received from the driver) Whether or not a value is being detected) is detected as an operating state (step S223), and the detection result is notified to the management server 60 or the operation permission receiving device 70 by the transmission / reception means 255 (step S224). ), The process returns to step S201.

Further, when a request for biometric data values before and after the interruption of the detection operation of the biosensor 20BS is received from the management server 60 or the operation permission receiving device 70 from the transmission / reception means 255 (step S
The biometric data value for a predetermined period (for example, 1 hour) accumulated in the memory 20M before and after the interruption of the detection operation by the biosensor 20BS is read (step S226). The sent biometric data value is notified to the management server 60 or the operation permission accepting device 70 via the network 90 by the transmission / reception means 255 (step S227), and the process returns to step S201.

  Further, when a warning operation request including an error notification or warning notification is received from the transmission / reception means 255 (from the NO route in step S225 to the YES route in step S228), the warning means 254 is controlled by the control means 256 according to the content of the notification. Then, a warning operation for the driver is executed by the warning means 254 (step S229), and the process returns to step S201. Specifically, a buzzer or the like in the mobile terminal device 20 is sounded, or an LED lamp or the like is blinked. If the mobile terminal device 20 has a display function such as a display, the contents of the error notification and warning notification are displayed on the display as in the case of the smart key 10. If it is determined in step S228 that a warning operation request has not been received (NO route), the process returns to step S201.

[2-7] Physical management server operation:
15 and 16 are flowcharts (steps S151 to S153, S161 to S165) for explaining the operation (browsing service) of the physical condition management server 80 of this embodiment. First, as shown in FIG. When the physical condition management server 80 periodically receives the biological data value, weather data, and location from the mobile terminal device 20 (YES route in step S151), the biological data, weather data, and position data are accumulated. At the same time (step S152), the biometric data, the weather data, and the position data are processed into a graph while being associated with the detection time, reflected on the map, and stored together with the original data (step S153).

  Then, as shown in FIG. 16, in the physical condition management server 80, when there is a data browsing request from the terminal of the contractor (a person who has contracted and registered in advance to receive the service of the physical condition management server 80) ( YES route of step S161), requesting the authentication information (ID number and password) set / issued at the time of contract / registration to the contractor's terminal, and receiving the authentication information, the authentication information and the physical condition management server The user is authenticated by comparing and collating with the contract / registration authentication information stored in advance on the 80 side (step S162). If the user is authenticated (YES route in step S163), the service is desired. A service for browsing stored data, processed graphs and maps (public service) is provided to the contractor (step S164). On the other hand, when the personal authentication is not performed (NO route of step S163), an error notification is made to the contractor's terminal (step S165).

  By providing such a physical condition management server 80 and using the service provided by the physical condition management server 80, when notifying the physical condition abnormality of the driver, the biometric data value, the weather data, and the location at the time of occurrence of the abnormal condition are obtained. Even if not notified at the same time, if the administrator, the attending physician, and the contact who have received the notification of the physical condition abnormality have previously contracted with the physical condition management server 80, the biometric data value and the weather data about the driver who has developed the physical condition abnormality And the location can be grasped by accessing the physical condition management server 80.

The physical condition management server 80 receives the biological data value, the weather data, and the location from the physical condition management portable terminal device 20 in a predetermined cycle (see step S202 in FIG. 14). By using this function, the physical condition management server 80 can realize the function as the operation state detection means (the function provided in the control means 256 of the physical condition management portable terminal device 20 in the above-described embodiment). Therefore, in the physical condition management server 80, based on the biometric data value from the physical condition management mobile terminal device 20, is the biosensor 20BS of the physical condition management mobile terminal device 20 performing an operation of detecting the biometric data value from the driver? No, that is, whether or not the physical condition management portable terminal device 20 is actually attached to the body of the driver and is in a state of detecting a biometric data value from the driver, is detected as an operating state, and the detection You may comprise so that the physical condition management server 80 may fulfill the said biosensor detection operation check function according to the flowchart shown in FIG. 9 using a result.

[3] Effects of the vehicle management system of this embodiment:
Thus, in the vehicle management system 1 as one embodiment of the present invention, the driver's biometric data is detected by the position (first position) of the mobile device as the smart key 10 and the physical condition management mobile terminal device 20. The management means permits the driving operation when the distance to the position (second position) is within a predetermined range.

  That is, when the distance between the current positions of the portable terminal device 20 for physical condition management to be carried by the driver and the smart key 10 to be used by the driver is within a predetermined range, in other words, two types of devices are used. The driving operation is permitted only in a situation where it can be determined that the right driver owns and uses it. Here, even if the portable device is lost or stolen, it cannot be used unless it has a biometric data detection terminal device. Similarly, even if the biometric data detection terminal device is lost or stolen, the biometric data detection terminal device confirms whether or not the driver is a legitimate driver based on the biometric data value of the legitimate driver. It will be unusable for anyone other than the driver.

  When the driving operation is permitted by the management unit 72, the vehicle control device 101 notified of the driving operation permission from the management unit 72 increases the transmittance of the glass 190, and the glass becomes transparent, which is suitable for driving. It becomes a state.

  On the other hand, if the driving operation is not permitted by the management means 72, the transmittance of the glass 190 is lowered by the vehicle control device 101 notified of the permission from the management means 72, the glass becomes black, and the vehicle cannot be driven. Become.

  That is, in the system 1 of the present embodiment, when the distance between the current positions of the two types of devices 10 and 20 to be always carried and carried by the driver is within a predetermined range, in other words, the two types of devices 10 and 20. In the situation where it can be determined that the same person is possessed / carried, and when the driver is authenticated by the authentication information as being registered in advance, and The driving operation is not permitted unless the driver is wearing the physical condition management portable terminal device 20 on the body. And in the case of non-permission, since the glass transmittance is lowered, the operation is substantially impossible.

  In other words, even if one or both of the biometric data detection terminal device and the portable device is lost or stolen, if there is no biometric data detection terminal device worn by the legitimate driver himself, Since no permission can be obtained by means, unauthorized use by a malicious third party can be prevented more reliably, sufficient security can be ensured, and damage to the driver can be minimized. .

  Therefore, even if the smart key 10 is lost or stolen, it is impossible to receive permission for driving operation by the management means 62 and 72 unless the user has the physical condition management portable terminal device 20, which is malicious. Thus, unauthorized use by a certain third party can be more reliably prevented, sufficient security is ensured, and damage to the driver can be minimized. By providing a function as a portable position detection device to a device that is always worn on the driver's body, such as the portable terminal device 20 for physical condition management, the system 1 of this embodiment functions more effectively and has sufficient security. It will contribute to securing.

  That is, driving operation is not permitted unless both the smart key 10 that is an original key that can be carried and the portable terminal device 20 for physical condition management that the driver wears are prepared. According to the present embodiment, it is possible to effectively prevent spoofing caused by a counterfeit fingerprint that has occurred in some cases.

  In the present embodiment, since the portable terminal device 20 for physical condition management is provided with a function as a portable position detection device, the biological sensor 20BS in the portable terminal device 20 for physical condition management performs the detection operation of the biological data value. If it is, the driving operation is permitted. If the detection operation is not performed, the driving operation is prohibited. If the driver is not wearing the physical condition management portable terminal device 20, the driving operation is prohibited. The permission cannot be obtained, and unauthorized use of the driving operation can be prevented more reliably, and sufficient security can be ensured.

  In addition, there is an advantage that a dedicated scanning operation for biometric authentication is not required because a biometric data value acquired continuously or continuously for a certain time is used for physical condition management. Furthermore, since the biometric data value acquired continuously or continuously for a certain time is used for the physical condition management, there is an advantage that the biometric data value is hardly stolen and is resistant to impersonation.

  Therefore, driving operation is allowed to a driver with a legitimate authority and not to a driver without a legitimate authority to ensure sufficient security and minimize the damage to the driver. It becomes possible.

  At that time, if the driver removes the physical condition management portable terminal device 20 from the body and the detection operation by the biosensor 20BS is interrupted and resumed, the statistical value calculation means 65 causes the statistics before biometric data values to be interrupted. Values and post-resumption statistical values are calculated, and if these statistical values are statistical values of the same driver's biometric data values, the driving operation is permitted. Is prohibited, because it is possible to statistically determine whether or not the driver before and after the interruption of the detection operation by the biosensor 20BS is the same person based on the biometric data value. In this case, the driving operation can be prohibited, and unauthorized use of the driving operation can be prevented more reliably, and sufficient security can be ensured. In this case, by prohibiting the driving operation until the judgment based on the statistical value is confirmed after the detection operation of the biometric data value is interrupted after restarting, the illegal use of the gap between the detection operation interruption and the determination confirmation is prevented. It is reliably prevented and sufficient security is ensured.

  Further, in the system 1 of the present embodiment, when authentication information is not input / transmitted in response to an authentication information request from the management server 60 or the operation permission accepting device 70, or authentication of the authentication means 63 or 73 fails. In the case where there is no response to the request for the first position, the second position and the operation state from the management server 60 or the driving permission receiving device 70, the case where the biosensor 20BS is not performing the detection operation, When it is determined that the driver before and after the interruption of 20BS is not the same person, or when the distance between the smart key 10 and the physical condition management portable terminal device 20 is out of a predetermined range, the driver (smart key 10 / Since an error notification is given to the physical condition management portable terminal 20) and the system administrator, the smart key 10 and the physical condition management portable terminal device 2 are provided to the driver and the system administrator. You can notify the situation where the possibility of some abnormal or illegal use occurs in.

Furthermore, when there is no response to the request for the first position, the second position, and the operation state from the management server 60 and the driving permission receiving device 70, or the driver before and after the interruption of the biosensor 20BS is determined not to be the same person. If the distance between the smart key 10 and the physical condition management portable terminal device 20 is out of the predetermined range, a warning is issued to the driver or system administrator by the warning means 64 and 74. It is possible to reliably cope with a situation in which any abnormality or possibility of unauthorized use occurs in the key 10 or the physical condition management portable terminal device 20, and unauthorized use is reliably prevented, and sufficient security is ensured.

  In the present embodiment, since the physical condition management portable terminal device 20 having the biosensor 20BS is used, the management means 62 and 72 use the biometric data value detected by the biosensor 20BS as the permission / It can also be used as an element for determining non-permission. For example, when the smart key 10 accesses the management means 62 and 72, the management means 62 and 72 tells the mobile terminal device 20 for physical condition management of the driver detected by the biosensor 20BS at that time. Requests notification / transmission of biometric data values (blood pressure, heart rate, respiration rate) and sets the transmitted biometric data values as general reference values or reference values specific to the driver set in advance for the driver If the reference value is exceeded, it is determined that the driver may be accessing in a tense state due to intimidation or the like, and the driving operation by the management means 62 and 72 is not permitted. To do. As a result, when the driver is accessing in extreme tension (blood pressure, heart rate, respiratory rate is high) due to threats or wire fraud, the management means 62, 72 Driving operation can be disallowed, and financial damage caused by intimidation or wire fraud can be prevented.

  On the other hand, in the mobile terminal device 20, a biometric data threshold value for managing the physical condition of the driver is set in advance for each weather condition in the threshold value table 20T, and meteorological data detected by the weather sensor 20WS (for example, temperature, water temperature). , Humidity, atmospheric pressure, water pressure), the biometric data threshold set for the weather condition is retrieved from the threshold table 20T and read out, and the read biometric data threshold and the biometric data value detected by the biosensor 20BS (for example, body temperature) , Blood pressure, heart rate, breathing rate), and when a driver's physical condition is detected, the driver is alerted of the patient's physical condition (for example, a ringing operation such as a buzzer, a blinking operation of an LED lamp, etc.) , A warning due to a call operation of the mobile phone device) is issued, or a driver's physical condition is notified to a predetermined contact (for example, telephone or electronic Or it is automatically notified) by Lumpur.

  As a result, the physical condition of the driver can be managed and judged based on the biometric data threshold corresponding to the weather data in the driver's location atmosphere. Management / judgment is possible.In addition, depending on the judgment result, the driver can be alerted appropriately and the manager can be notified of any physical condition abnormalities without relying on the driver's self-judgment. Appropriate measures and responses according to the physical condition can be immediately executed.

  At this time, when a warning of abnormal physical condition is given to the driver, if the operation for stopping the warning operation is not executed for a predetermined time or more by the driver, the driver is in a considerably dangerous state such as losing consciousness. Since it is determined that there is a driver's physical condition notification immediately, a prompt response can be taken. At that time, by notifying the fire department as the first contact point, an emergency vehicle such as an ambulance can be arranged immediately, and the biometric data value detected by the biosensor 20BS is notified at the same time. Thus, an appropriate treatment according to the biometric data value can be performed more quickly. Furthermore, by simultaneously notifying the driver's location by the GPS position detector 20GS, the driver's location can be immediately confirmed, and an emergency vehicle or the like can be immediately directed to the location where the driver is located. It is possible to realize a quick initial response.

In addition, when an operation to stop the warning operation is executed by the driver within a predetermined time, the driver is inquired about whether or not to execute the physical condition abnormality notification, and the physical condition abnormality notification is executed according to the driver's answer. Thus, after alerting the driver and notifying the driver himself / herself, the physical condition abnormality is notified, so that automatic notification can be prevented from being performed unnecessarily. Then, a notification is made if the driver desires. At that time, by making a telephone call to the attending doctor as the notice, the driver can ask the attending doctor for an appropriate treatment, and the biosensor 20BS By notifying the detected biometric data value at the same time, the attending physician can make an appropriate determination and an instruction for an appropriate treatment.

  In response to the above inquiry, if the driver refuses to execute the physical condition abnormality notification continuously, that is, if the abnormality is repeatedly detected even if the driver stops and cancels the warning by self-judgment, the driver shall It is judged that the person is in a considerably dangerous state, and a notice of a physical condition is forcibly performed so that a quick response can be taken. In that case, for example, in addition to notifying relatives such as friends, relatives, and spouses, the driver's location is immediately confirmed by simultaneously reporting the driver's location by the GPS position detector 20GS. Friends and close relatives can immediately go to the place where the driver is located.

  Furthermore, by using the smart key 10 of this embodiment and the portable terminal device 20 for physical condition management, it is possible to confirm whether or not the vehicle has got off when the specified usage time has elapsed. It can also be used for management.

  In addition, by using the smart key 10 and the physical condition management portable terminal device 20 of this embodiment, it is possible to prevent a ride for a long time that exceeds a prepaid fee or a purchased ticket right in a rental car or the like. Become.

  In addition, by using the smart key 10 and the physical condition management portable terminal device 20 of this embodiment, it becomes possible to prevent overtime and long working hours that are not permitted in workplaces such as taxis.

  A message prompting to get off is transmitted from the control means 61, the management means 62, the control means 71, and the management means 72 in order to prevent the boarding more than the right of the above ticket or to prevent overtime that is not permitted. It is also desirable to display in the section.

  In addition, by using the smart key 10 and the physical condition management portable terminal device 20 of this embodiment, it is not only easy to check whether or not a person has been reserved in advance in a rental car or the like, but also a person who has made a reservation. On the other hand, it is possible to provide an appropriate service according to the reservation level. For example, it is possible to automatically distinguish between different gates at the entrance, changing the level of articles provided to the driver, and dividing roads that can be traveled.

  In addition, when the smart key 10 and the physical condition management portable terminal device 20 of this embodiment are applied to a ticket such as an annual passport that can be used repeatedly, the service for repeaters that are used repeatedly is improved regardless of whether or not there is a reservation. It is also possible to make it.

[4] Other embodiments:
The present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.

  For example, when the smart key 10 and the vehicle 100 are lent to a family member, an acquaintance, or a driving agent after the original driver approves, the smart key 10 side or the management server 60 side is set by an operation mode setting by a predetermined operation. Alternatively, it is possible to prevent the above-described glass light control from being executed on the vehicle 100 side.

For example, in the above-described embodiment, the case where the portable device is the smart key 10 and the portable position detecting device is provided in the physical condition management portable terminal device 20 has been described, but the present invention is not limited thereto. Instead, the smart key 10 may be, for example, a PDA or an IC card. In this case, for example, the smart key 10 may also serve as an employee card, a pilot certificate, a device operation skill certificate, or the like.

  In the above embodiment, the physical condition management of the driver is performed by the physical condition management server 80, but the same processing and control are also performed by the control means 61 or the control means 71, and the above driving operation is performed. If the driver's physical condition is abnormal after the permitting, and it is expected that the driving operation efficiency is lowered or the safety of driving or maneuvering is lowered, the management means 62 or the management means 72 gives permission for the driving operation. It is also possible to cancel.

  Regarding the cancellation of this permission, after warning to the driver, the degree of abnormality of the driver's physical condition and the permitted operation, such as a recommendation to cancel the permission, cancellation after a certain period of time, cancellation of the extension of permission, immediate cancellation, etc. You may make it change a level judging from the content etc. of.

  For example, if the driver's body temperature has risen, if the operation of a vehicle such as a passenger car, the permission is discontinued recommendation, if the operation of complex equipment (large transport vehicle), the permission is canceled after a certain time, etc. Also good. When the physical condition is resolved, it is possible to re-permit, cancel cancellation after a certain period of time, cancel permission cancellation recommendation, and the like.

  In this case, if the vehicle is not located at a parking / parking location, the vehicle control apparatus 101 executes a search to the nearest parking / parking location and displays a guidance to the parking / parking location. To 160. Alternatively, the vehicle control device 101 instructs a car navigation device (not shown) to search for the nearest parking / stoppable location and guides the vehicle to the parking / stoppable location. Then, after confirming that the vehicle is located at a place where parking and parking is possible, the transmittance of the glass 190 is lowered. That is, the permission cancellation of the driving operation and the glass transmittance control may be executed with a time difference until the vehicle is parked at a safe place.

  Further, in the case of driving, maneuvering, operation of equipment, etc., the control means 61 or the control means 71 recommends that the driver receive a doctor's diagnosis according to changes in the physical condition of the driver during driving. Thus, the management means 62 or the management means 72 can cancel the permission, and the permission can be given when the doctor's approval that there is no problem in the operation or operation is obtained. In this case, if the doctor's approval is obtained online from the attending physician terminal 50, the management means 62 or the management means 72 gives the driver permission to operate or operate the equipment. If the doctor's approval cannot be obtained online from the attending doctor terminal 50, the administrator separately transmits the data obtained by the doctor from the administrator terminal 30 to the management server 60, etc. 62 or the management means 72 issues a permit for operation or operation of the device to the driver.

  In addition, in accordance with changes in the physical condition of the driver, the control means 61 or the control means 71 is responsible for a place (superior, teacher, instructor, etc.) in a place where a predetermined operation is performed before or after the permission is revoked. On the other hand, a change in the physical condition of the driver may be reported.

  Further, according to the change in the physical condition of the driver, the management means 62 or the management means 72 does not cancel the permission but changes the permission level, that is, changes to simple operations such as prohibition of driving on the highway, You may be allowed to perform operations such as permitting the passage of gates that are normally not used, but shortcuts, changing from pilot to co-pilot, and changing the qualifications of piloting.

In addition, when the smart key 10 is provided with a function of a public certificate such as a driver's license or a driver's license, the license is granted to a management server owned by an organization in the country or a third party such as an independent administrative agency. The management server 60 and the operation permission receiving device 70 use the ID number of the smart key 10 or the like to inquire of the management server of the third party organization whether or not there is a qualification.

  In addition, when providing an international qualification certificate function such as a certificate of qualification for aircraft or ship operation, license and qualification information is stored in a management server of an organization in each country or a third-party organization worldwide. The management server 60 and the operation permission receiving device 70 use the ID number of the smart key 10 or the like to inquire of the management server of the third party organization whether or not there is a qualification.

  The portable position detection device having the functions of the GPS position detection unit 20GS as the second position detection means and the transmission / reception means (second notification means) 255 is always worn on a part of the driver's body and is carried and carried. It may be provided in a device that can be operated, such as a wristwatch. In either case, the same effect as that of the above-described embodiment can be obtained.

  Moreover, although it has been described that the physical condition management portable terminal device 20 notifies the driver of the second position when it can be confirmed with the driver based on the biometric data value, the driver himself cannot be confirmed. Information and the second position may be notified, and a display such as “cannot be confirmed as a valid driver” may be performed on the display screen of the driving permission receiving device 70.

  In addition, there may be a case where the biometric data value in the normal state is different from the stored value in practice, such as when the driver himself / herself is used again after being left for a long period of time. In such a case, it is possible to change a stored biometric data value by performing a re-registration procedure after a predetermined procedure. Similarly, when the physical condition management portable terminal device 20 is transferred to another person, it is possible to change a stored biometric data value by performing a re-registration procedure after a predetermined procedure. However, in order to avoid changes to unauthorized third parties, it is desirable that re-registration be performed after confirming that the driver is a legitimate driver by some method.

  By the way, functions as threshold setting means 251, threshold reading means 252, comparison means 253, warning means 254, transmission / reception means 255, control means 256, and inquiry means 257 in the above-described physical condition management portable terminal device 20 (all or Some functions are realized by a computer (including a CPU, an information processing apparatus, and various terminals) executing a predetermined application program. Further, the functions as the control means 61, the management means 62, the authentication means 63, the warning means 64, the statistical value calculation means 65, and the statistical value judgment means 66 in the management server 60 or the operation permission receiving device 70 described above (all or all of the means). Some functions are also realized by a computer (including a CPU, an information processing apparatus, and various terminals) executing a predetermined application program.

  These application programs include, for example, flexible disks, CDs (CD-ROM, CD-R, CD-RW, etc.), DVDs (DVD-ROM, DVD-RAM, DVD-R, DVD-RW, DVD + R, DVD + RW, etc.), etc. Provided in the form recorded on a computer-readable recording medium. In this case, the computer reads the application program from the recording medium, transfers it to an internal storage device or an external storage device, and uses it. The program may be recorded in a storage device (recording medium) such as a magnetic disk, an optical disk, or a magneto-optical disk, and provided from the storage device to a computer via a communication line.

Here, the computer is a concept including hardware and an OS (operating system), and means hardware operating under the control of the OS. Further, when the OS is unnecessary and the hardware is operated by the application program alone, the hardware itself corresponds to the computer. The hardware includes at least a microprocessor such as a CPU and means for reading a computer program recorded on a recording medium. The application program includes program code for causing the above-described computer to realize the functions as the various means. Also, some of the functions may be realized by the OS instead of the application program.

In addition to the flexible disk, CD, DVD, magnetic disk, optical disk, and magneto-optical disk described above, the recording medium in the present embodiment includes an IC card, ROM cartridge, magnetic tape, punch card, and computer internal storage device (RAM). In addition, various computer-readable media such as an external storage device or a printed matter on which a code such as a barcode is printed can be used.
(Appendix 1)
A vehicle management system for controlling a vehicle having a light control glass capable of adjusting the transmittance of visible light as a window glass,
Management means for permitting the driving operation to the driver when the distance between the first position and the second position is within a predetermined range;
A first position detecting means possessed by the driver for detecting a first position; a first notifying means for notifying the managing means of the first position; and an access means for accessing the managing means to receive permission for the driving operation. Having a smart key;
Second position detecting means for detecting a second position, a biosensor for detecting the driver's biometric data value, and confirming the driver's identity based on the driver's biometric data value detected by the biosensor A biometric data detection terminal device having second notification means for notifying the management means of the second position;
When the operation operation is permitted by the management means, the transmittance of the light control glass is adjusted to a predetermined value or more, and when the operation operation is not permitted by the management means, the transmission of the light control glass. Control means for adjusting the rate below a predetermined value;
A detection means for detecting a driver's sleep or drinking;
Determination means for determining the presence or absence of a driver's drinking or dozing from the detection result of the detection means,
Control means for adjusting the transmittance of the light control glass to less than a predetermined value when it is determined by the determination means that drinking or dozing occurs;
A vehicle management system comprising:
(Appendix 2)
The dozing detection means detects at least one of a vehicle travel locus, a driver's body movement, and a driver's eye opening condition,
The vehicle management system according to appendix 1, wherein
(Appendix 3)
Position detecting means for detecting the location of the vehicle;
Speed detecting means for detecting the moving speed of the vehicle;
Position determining means for determining whether the location of the vehicle detected by the position detecting means belongs to a specific area designated in advance;
Speed determining means for determining whether or not the moving speed of the vehicle detected by the speed detecting means is zero;
A navigation unit for performing guidance based on map data and the location of the vehicle;
The control means causes the navigation unit to guide to a position where parking can be parked when the dozing detection is detected by the dozing detection means, and the position determination means determines that the location of the vehicle belongs to the guidance position. The transmittance of the light control glass is adjusted to be less than a predetermined value when it is determined that the moving speed of the vehicle is zero by the speed determination means.
The vehicle management system according to supplementary note 2, wherein
(Appendix 4)
The light control glass is configured to include a liquid crystal film formed by sandwiching a liquid crystal layer that blocks visible light by changing the orientation of liquid crystal molecules by applying a predetermined voltage between two transparent electrodes,
The control means adjusts the transmittance of the light control glass to less than the predetermined value by applying the predetermined voltage to the two transparent electrodes to change the orientation of the liquid crystal molecules. The vehicle management system according to any one of Supplementary Note 1 to Supplementary Note 3, which is characterized.
(Appendix 5)
The light control glass further comprises an organic electroluminescence element layer formed by sandwiching a transparent light emitting layer that emits light by applying a predetermined voltage between two transparent electrodes,
The light emitting layer is configured by arranging light emitters that emit red, green, and blue, which are the three primary colors of light, in a matrix,
The control means is configured to further include a display control function for executing any color development or any image display in the organic electroluminescence element layer by controlling the light emission state of each light emitter.
The vehicle management system according to appendix 4, wherein
(Appendix 6)
An organic electroluminescence element layer in which the light control glass is formed by sandwiching a transparent light emitting layer that emits light by applying a predetermined voltage between two transparent electrodes;
Comprising a photochromic glass layer colored in response to light of a specific wavelength emitted from the light emitting layer,
The control means adjusts the transmittance of the light control glass to less than the predetermined value by causing the light emitting layer to emit light of the specific wavelength and coloring the photochromic glass layer. The vehicle management system according to any one of 1 to 3.
(Appendix 7)
The light control glass includes an organic electroluminescence element layer formed by sandwiching a transparent light emitting layer that emits light by applying a predetermined voltage between two transparent electrodes,
The control means adjusts the transmittance of the light control glass to be less than the predetermined value by causing the light emitting layer to emit light of a predetermined color, wherein any one of the supplementary notes 1 to 3 is characterized. The vehicle management system according to item.
(Appendix 8)
The light emitting layer is configured by arranging light emitters that emit red, green, and blue, which are the three primary colors of light, in a matrix,
The control means is configured to further include a display control function for executing any color development or any image display in the organic electroluminescence element layer by controlling the light emission state of each light emitter.
The vehicle management system according to appendix 6 or appendix 7, characterized in that.
(Appendix 9)
When the dozing is detected by the dozing detection means, the control means causes a hazard lamp to be displayed on the organic electroluminescence element layer of the light control glass used as a rear window glass of the vehicle.
The vehicle management system for a vehicle window glass according to Supplementary Note 5 or Supplementary Note 8, wherein

It is a block diagram which shows the structure of the vehicle management system as one Embodiment of this invention. It is explanatory drawing which shows the structure of the vehicle management system of this embodiment. It is explanatory drawing which shows the structure of the vehicle management system of this embodiment. It is explanatory drawing which shows the structure of the vehicle management system of this embodiment. It is explanatory drawing which shows the structure of the vehicle management system of this embodiment. It is a flowchart for demonstrating operation | movement of this embodiment. It is a flowchart for demonstrating operation | movement of this embodiment. It is a flowchart for demonstrating operation | movement of this embodiment. It is a flowchart for demonstrating operation | movement of this embodiment. It is a flowchart for demonstrating operation | movement of this embodiment. It is a flowchart for demonstrating operation | movement of this embodiment. It is a flowchart for demonstrating operation | movement of this embodiment. It is a flowchart for demonstrating operation | movement of this embodiment. It is a flowchart for demonstrating operation | movement of this embodiment. It is a flowchart for demonstrating operation | movement of this embodiment. It is a flowchart for demonstrating operation | movement of this embodiment. It is explanatory drawing which shows the structure of the vehicle management system of this embodiment.

Explanation of symbols

10 Smart key (portable device)
11 GPS position detector (first position detector)
12 Transmission / reception means (first notification means)
DESCRIPTION OF SYMBOLS 13 Access means 14 Input means 15 Display means 20 Portable terminal device for physical condition management 20BS Biosensor 20WS Weather sensor 20GS GPS position detection part (2nd position detection means)
20T threshold value table 20M memory 24 display means 25 CPU
251 Threshold value setting means 252 Threshold value reading means 253 Comparison means 254 Warning means (physical condition abnormality warning means)
255 Transmission / reception means (second notification means, physical condition notification means)
256 Control means (operation state detection means)
257 inquiry means 258 one-time password processing means 26 stop operation part 27 reply input part 30 administrator terminal 40 contact terminal 50 primary doctor terminal 60 management server 61 control device 62 management means 63 authentication means 64 warning means 65 statistical value calculation means 66 statistics Value judgment means 67 One-time password generation means 68 One-time password transmission means 70 Operation permission accepting device 71 Management means 72 Management means 73 Authentication means 74 Warning means 75 IC card reader / writer 77 One-time password generation means 78 One-time password transmission means 79 Input / Display Means 80 Physical Condition Management Server 90 Network 100 Vehicle 101 Vehicle Control Device

Claims (10)

A vehicle management system for controlling a vehicle having a light control glass capable of adjusting the transmittance of visible light as a window glass,
Management means for permitting the driving operation to the driver when the distance between the first position and the second position is within a predetermined range;
A first position detecting means possessed by the driver for detecting a first position; a first notifying means for notifying the managing means of the first position; and an access means for accessing the managing means to receive permission for the driving operation. Having a smart key;
Second position detecting means for detecting a second position, a biosensor for detecting the driver's biometric data value, and confirming the driver's identity based on the driver's biometric data value detected by the biosensor A biometric data detection terminal device having second notification means for notifying the management means of the second position;
When the operation operation is permitted by the management means, the transmittance of the light control glass is adjusted to a predetermined value or more, and when the operation operation is not permitted by the management means, the transmission of the light control glass. Control means for adjusting the rate below a predetermined value;
A vehicle management system comprising: The light control glass is configured to include a liquid crystal film formed by sandwiching a liquid crystal layer that blocks visible light by changing the orientation of liquid crystal molecules by applying a predetermined voltage between two transparent electrodes,
The control means adjusts the transmittance of the light control glass to be less than the predetermined value by applying the predetermined voltage to the two transparent electrodes to change the orientation of the liquid crystal molecules. The vehicle management system according to claim 1. The light control glass further comprises an organic electroluminescence element layer formed by sandwiching a transparent light emitting layer that emits light by applying a predetermined voltage between two transparent electrodes,
The light emitting layer is configured by arranging light emitters that emit red, green, and blue, which are the three primary colors of light, in a matrix,
The control means is configured to further include a display control function for executing any color development or any image display in the organic electroluminescence element layer by controlling the light emission state of each light emitter.
The vehicle management system according to claim 2. An organic electroluminescence element layer in which the light control glass is formed by sandwiching a transparent light emitting layer that emits light by applying a predetermined voltage between two transparent electrodes;
Comprising a photochromic glass layer colored in response to light of a specific wavelength emitted from the light emitting layer,
The control means adjusts the transmittance of the light control glass to less than the predetermined value by causing the light emitting layer to emit light of the specific wavelength and coloring the photochromic glass layer.
The vehicle management system according to claim 1. The light control glass includes an organic electroluminescence element layer formed by sandwiching a transparent light emitting layer that emits light by applying a predetermined voltage between two transparent electrodes,
The control means adjusts the transmittance of the light control glass to less than the predetermined value by causing the light emitting layer to emit light of a predetermined color.
The vehicle management system according to claim 1. The light emitting layer is configured by arranging light emitters that emit red, green, and blue, which are the three primary colors of light, in a matrix,
The control means is configured to further include a display control function for executing any color development or any image display in the organic electroluminescence element layer by controlling the light emission state of each light emitter.
The vehicle management system according to claim 4 or 5, characterized by the above. The management means permits the driving operation when the distance between the first position and the second position is within a predetermined range, and the distance between the first position and the second position is When the predetermined range is exceeded, or when either the first position or the second position cannot be confirmed, the permission for the driving operation is canceled.
The vehicle management system according to any one of claims 1 to 6, wherein The smart key has a driving qualification acquired by the driver or a vehicle use permission proof function,
The management means permits the driving operation with reference to a credential proof function provided in the smart key.
The vehicle management system according to any one of claims 1 to 7, wherein The management means permits the driving operation with reference to the driver's biometric data value from the biometric data detection terminal device;
The vehicle management system according to any one of claims 1 to 8, wherein Management means for permitting the driving operation to the driver when the distance between the first position and the second position is within a predetermined range;
A first position detecting means possessed by the driver for detecting a first position; a first notifying means for notifying the managing means of the first position; and an access means for accessing the managing means to receive permission for the driving operation. Having a smart key;
Second position detecting means for detecting a second position, a biosensor for detecting the driver's biometric data value, and confirming the driver's identity based on the driver's biometric data value detected by the biosensor A biometric data detection terminal device having second notification means for notifying the management means of the second position;
When the operation operation is permitted by the management means, the transmittance of the light control glass is adjusted to a predetermined value or more, and when the operation operation is not permitted by the management means, the transmission of the light control glass. Control means for adjusting the rate below a predetermined value,
A qualification management program for causing a computer to function as a vehicle management system for controlling a vehicle having a light control glass capable of adjusting the transmittance of visible light as a window glass.

Images