JP2022174524A - Map output device and map output system - Google Patents

Abstract

To provide a map output device and a map output system that can save time and effort for changing specifications related to calculation of an update period of map data.SOLUTION: A map output device 3 comprises an on-vehicle control unit 35 that stores, in a first recording medium 2, use start information for specifying the time when the first recording medium 2 is connected to a connection part 34 for the first time or the time when a movable body 30 is used beyond a predetermined usage. The on-vehicle control unit 35 updates map data stored in the first recording medium 2 within a predetermined period from the time specified by the use start information.SELECTED DRAWING: Figure 1

Description

The present invention relates to a map output device and a map output system for outputting map data.

Patent Literature 1 discloses a navigation system. A navigation unit that constitutes a navigation system reads map data from the SD card and displays a map image on the display screen of the monitor when the SD card is installed.

The navigation unit is configured to give a map update deadline to the SD card when the SD card is attached for the first time. The map data stored in the SD card is updated based on the map update deadline.

JP 2011-169825 A

However, in the navigation system disclosed in Patent Document 1, the map update deadline is calculated by the navigation unit. Therefore, if the specifications regarding the calculation of the map update deadline are to be changed, each navigation unit installed in two or more automobiles must be changed. It needs to be processed and takes time.

SUMMARY OF THE INVENTION It is an object of the present invention to provide a map output device and a map output system that can reduce the time and effort required to change specifications related to calculation of an update deadline for map data.

A map output device according to a first aspect of the present disclosure is mounted on a mobile body. The map output device outputs map data. The map output device includes a connection section and an in-vehicle control section. A recording medium is connected to the connecting portion. The recording medium stores map data. The in-vehicle control unit controls the connection unit. The in-vehicle control unit stores the usage start information in the recording medium. The usage start information specifies when the recording medium is first connected to the connection unit. Alternatively, the usage start information specifies when the mobile unit is used beyond a predetermined usage amount. The in-vehicle control unit updates the map data within a predetermined period from when it is specified by the usage start information. The map data is map data stored in a recording medium.

The map output device of the first aspect can store, in a recording medium, usage start information necessary when setting an update deadline for map data on a server, for example. For example, if the server is configured to calculate the update deadline for map data, when changing the specifications related to calculation of the update deadline, each map output device does not need to process the change, but the server can process the change. . Therefore, the map output device can update the map data stored in the recording medium, and can save time and effort when changing the specifications for calculating the update deadline of the map data.

A map output system according to a second aspect of the present disclosure includes a map output device and a server. A map output device is mounted on a moving object. The map output device outputs map data. The server communicates with the map output device. The map output device includes a connection section and an in-vehicle control section. A recording medium is connected to the connecting portion. The recording medium stores map data. The in-vehicle control unit controls the connection unit. The in-vehicle control unit stores the usage start information in the recording medium. The usage start information specifies when the recording medium is first connected to the connection unit. Alternatively, the usage start information specifies when the mobile unit is used beyond a predetermined usage amount. The server sets an update deadline based on the usage start information. The update deadline is the deadline for updating the map data stored in the recording medium.

The map output system of the second aspect can store the usage start information required when setting the update deadline of the map data in the server in the recording medium. Therefore, when changing the specifications related to the calculation of the update deadline, the map output system does not process the change to each map output device, but to the server to process the change. It is possible to reduce the time and effort required to change the specifications.

In the map output system according to the third aspect of the present disclosure, the recording medium pre-stores initial usage information. The initial usage information indicates a predetermined character string. When the recording medium is connected to the connection unit for the first time, the in-vehicle control unit changes the usage initial information stored in the recording medium to the usage start information. Alternatively, the in-vehicle control unit changes the initial usage information stored in the recording medium to the start-of-use information when the mobile body is used beyond a predetermined usage amount.

The map output system of the third aspect can store the use start information in the recording medium in which the use initial information is stored. Therefore, the map output system can update the map data in the genuine recording medium storing the initial usage information.

In the map output system according to the fourth aspect of the present disclosure, the server sets an update deadline based on the date when the map output device accesses the server for the recording medium in which usage start information is not stored.

The map output system of the fourth aspect can set an update deadline even for a recording medium in which usage start information is not stored.

According to the present invention, it is possible to save time and effort when changing the specifications for calculating the update deadline of map data.

1 is a configuration diagram of a map output system that is an embodiment of the present invention; FIG. 4 is a table showing information stored in the first recording medium; 4 is a flowchart showing activation processing of the map output device; 4 is a flowchart showing update processing of map data via a map output device; 4 is a flowchart showing update processing of map data via a personal PC; The configuration diagram of the production system. FIG. 4 is a flow diagram of the process performed by the fabrication system. The figure which shows the image of the process performed by an update process. FIG. 4 is a process diagram of processing executed in an update process; FIG. 2 is a block diagram showing an example of the hardware configuration of the map output device according to the embodiment; FIG.

A map output system 1 as an embodiment of the present invention includes a first recording medium 2 , a map output device 3 , a first server 4 , a second server 5 and a personal computer 6 . In this embodiment, the map output system 1 includes two or more first recording media 2 and two or more map output devices 3, respectively.

The first recording medium 2 includes a first medium management section 21 , a first storage section 22 and a first control section 23 . In this embodiment, the first recording medium 2 is an SD (secure digital) card.

The map output device 3 includes an output unit 31 , an in-vehicle storage unit 32 , an input/output unit 33 , a connection unit 34 , an in-vehicle control unit 35 and an in-vehicle communication unit 36 . The in-vehicle control unit 35 includes a travel distance acquisition unit 37 , a determination unit 38 and a data processing unit 39 . In this embodiment, the map output device 3 is a navigation device. The map output device 3 is mounted on the mobile body 30 . In this embodiment, the mobile object 30 is a vehicle. Vehicles are, for example, automobiles, motorcycles, bicycles or trains.

The first server 4 includes a first server storage section 41 , a first server communication section 42 and a first server control section 43 . The second server 5 includes a second server storage section 51 , a second server communication section 52 and a second server control section 53 . In this embodiment, the first server 4 and the second server 5 are managed by different organizations. In this embodiment, the first server 4 is managed by an organization involved in the manufacture of the map output device 3, and the second server 5 is managed by a map data 11 sales company.

The personal computer 6 includes a display section 61 , a PC storage section 62 , a PC communication section 63 , a PC interface 64 and a PC control section 65 . A personal computer 6 is a general computer that is personally owned by a user. Hereinafter, the personal computer 6 is also described as a "personal PC 6".

The map output device 3 is mounted on the mobile body 30 . When the first recording medium 2 is inserted into the connection unit 34, the map output device 3 reads the map data 11 shown in FIG. The map is displayed on the output unit 31 .

The first recording medium 2 is a genuine product. The first recording medium 2 is, for example, a recording medium recognized as legitimate by the manufacturer or distributor of the map output device 3 . The first recording medium 2 is sold together with the map output device 3 . Alternatively, the first recording medium 2 is sold separately. Hereinafter, recording media without reference numerals indicate non-genuine recording media.

For the user of the map output device 3, the newer the version of the map data 11, the better. Older version map data 11 is more likely to cause inconvenience to the user of the map output device 3 than newer version map data 11 . For example, the old map data 11 does not include road information corresponding to newly installed roads and facility information corresponding to newly constructed facilities. In this case, the map output device 3 cannot search for a route passing through a new road or set a new facility as the destination. The 1st recording medium 2 is a structure with which the information memorize|stored in the 1st memory|storage part 22 is read by personal PC6 like a commercially available recording medium. Therefore, the latest map data 11 may be illegally copied to another first recording medium 2 or a commercially available recording medium.

As a security measure for the map data 11, in this embodiment, the map output device 3 is configured not to read the map data 11 from a commercially available recording medium, but to read the map data 11 from the first recording medium 2. The map output device 3 is configured to read the map data 11 from the first recording medium 2 in which the information has not been illegally rewritten. Therefore, the illegally copied map data 11 is not used by the map output device 3 .

Also, the map output device 3 is configured so as not to read the map data 11 from the first recording medium 2 used by another map output device 3 . When the first recording medium 2 is connected to the connection unit 34 , the data processing unit 39 writes the vehicle identification information of the moving body 30 on which the map output device 3 is mounted to the first storage unit 22 . The vehicle identification information is information different for each of the two or more moving bodies 30 . The first recording medium 2 is linked to a specific moving body 30 by vehicle specific information. Hereinafter, the process of causing the data processing unit 39 to write the vehicle identification information into the first storage unit 22 is called "locking process". The map output system 1 can prevent the first recording medium 2 from being reused by two or more map output devices 3 by the locking process.

<<Structure of first recording medium 2>>
The first medium management unit 21 stores medium identification information. The medium identification information is information that can identify each of two or more first recording media 2 . Medium identification information indicates an arbitrary character string. A character string includes, for example, at least one of numbers, letters, symbols, and the like. The medium identification information stored in the first medium management unit 21 is set to different character strings for two or more first recording media 2 .

The first medium management unit 21 is a memory configured so that the personal PC 6 cannot read or write. The first medium management unit 21 is configured to allow writing and reading only when a predetermined condition is satisfied. In this embodiment, the predetermined conditions are determined by the manufacturer of the first recording medium 2 . The predetermined condition is, for example, use of a predetermined management program corresponding to the first medium management section 21 . The medium identification information stored in the first medium management unit 21 is neither read nor rewritten by the user of the map output device 3 .

In this embodiment, part of the medium identification information is common to two or more first recording media 2 . The common information is set in association with the map output device 3, for example. The common information indicates, for example, the name of the organization that manufactures the map output device 3, the product name of the map output device 3, or the product name of the moving body 30 on which the map output device 3 is mounted. The first server 4 uses common information in updating the map data 11 .

The first storage unit 22 stores various information. In this embodiment, the first storage unit 22 stores map data 11 , map difference data 15 , vehicle identification file 12 , usage date file 13 , and license file 14 .

The map data 11 includes road information, facility information, version information, and the like. Version information indicates the version of the map data 11 . Road information is represented by a combination of nodes and links. Nodes are set at intersections, ends of roads, and the like. A link is set at a position connecting adjacent nodes. The facility information indicates, for example, the location and type of a building, the location and type of a POI (point of interest), and the like.

The map data 11 is composed of, for example, data respectively corresponding to a plurality of parcels. Parcels are set by dividing the earth's surface into rectangles of a predetermined size based on latitude and longitude. The map data 11 stored in the first storage unit 22 is updated to a new version of the map data 11 via the map output device 3 or the personal PC 6 .

The map difference data 15 is map data of a portion different from the map data 11 stored in the first storage unit 22 . The map difference data 15 is handled in parcel units. A new version of the map difference data 15 is created at a higher frequency than the map data 11 by a distributor of the map data 11 or the like.

In this embodiment, the first server 4 stores the map difference data 15 of the latest version. The second server 5 stores the latest version of the map difference data 15 and the latest version of the map data 11 . The map data 11 stored in the first storage unit 22 is updated when the latest version of the map difference data 15 transmitted from the first server 4 is stored in the first storage unit 22 . Alternatively, the map data 11 stored in the first storage unit 22 is updated by being replaced with the latest version of the map data 11 transmitted from the second server 5 . Alternatively, the map data 11 stored in the first storage unit 22 is replaced with the latest version of the map data 11 transmitted from the second server 5, and the latest version of the map difference data 15 transmitted from the second server 5 is used. is stored in the first storage unit 22 to be updated. The output unit 31 can output a map based on the map data 11 and map difference data 15 stored in the first storage unit 22 . Hereinafter, the update of the map data 11 stored in the first storage unit 22 is also referred to as "map update". Note that the map output system 1 may be configured such that the second server 5 does not store the map difference data 15 .

By using the map difference data 15, the map output system 1 can shorten the time required to update the map compared to when the entire map data 11 is downloaded.

The vehicle identification file 12 is a file indicating that the first recording medium 2 is a genuine product. As shown in FIG. 2, the vehicle identification file 12 before lock processing includes initial vehicle information, medium identification information, and version information. The vehicle initial information indicates a predetermined character string. The vehicle initial information is the same for each of the two or more first recording media 2 . Therefore, the vehicle initial information is sometimes called an initial value. In this embodiment, the vehicle initial information is set by an organization involved in manufacturing the map output device 3 . If the information has not been illegally rewritten, the medium identification information included in the vehicle identification file 12 and the medium identification information stored in the first medium management section 21 are the same. Hereinafter, the version of the map data 11 is also described as "map version".

In this embodiment, the vehicle identification file 12 after locking includes vehicle identification information, medium identification information, and version information. The vehicle identification information can identify the moving body 30 on which the map output device 3 is mounted. Vehicle identification information indicates a predetermined character string. The vehicle identification information differs between two or more mobile bodies 30 . The vehicle identification information is created based on the device identification information. The device identification information is inherent and unique information that each mobile object 30 has. In this embodiment, the device identification information is set by the organization that manufactures the moving body 30 .

The locking process described above is a process of storing the vehicle identification information in the first storage unit 22 . In the present embodiment, the vehicle identification file 12 is changed from vehicle initial information to vehicle identification information by the locking process.

The usage date file 13 and license file 14 are used for map updating. As shown in FIG. 2, the usage date file 13 before locking includes initial usage information, medium identification information, and version information. The initial usage information indicates a character string different from the initial vehicle information. The initial usage information is the same for each of the two or more first recording media 2 . In this embodiment, the initial usage information is set by an organization involved in manufacturing the map output device 3 .

As for the first recording medium 2, the usage start information is stored in the first storage unit 22 by performing the lock process or the map update. The usage start information indicates when the first recording medium 2 is locked. Alternatively, the usage start information indicates when the first recording medium 2 is updated with the map for the first time. These times are specified by at least one of year, month, day, and time. In this embodiment, the usage start information indicates a date. Although omitted in FIG. 2, if the map update is executed before the lock process, the usage start information is stored in the first storage unit 22 even before the lock process. In this embodiment, the date-of-use file 13 after lock processing or map update includes usage start information, medium identification information, and version information.

The license file 14 before locking includes vehicle identification information, medium identification information, and version information. The license file 14 after locking includes vehicle identification information, medium identification information, version information, and flag information. The flag information is information indicating that the first recording medium 2 has been locked. Whether flag information is included in the license file 14 is determined by obtaining a bit from the numerical data area representing the set of flags.

The first server control unit 43 uses the usage date file 13 and the license file 14 in updating the map. The first server control unit 43 manages the update deadline and map version of the map data 11 for each first recording medium 2 based on the usage date file 13 and the license file 14 . The update deadline is the deadline for the map output system 1 to update the map data 11 stored in the first storage unit 22 .

The first recording medium 2 stores the vehicle identification file 12 and the usage date file 13 before being connected to the connection unit 34 for the first time. The license file 14 is created by the data processing section 39 and stored in the first storage section 22 when the first recording medium 2 is connected to the connection section 34 . The vehicle identification file 12, usage date file 13, and license file 14 are each encrypted and stored in the first storage unit 22 in order to prevent unauthorized rewriting.

The first control section 23 controls the first medium management section 21 and the first storage section 22 respectively.

<<Configuration of map output device 3>>
The output section 31 displays a map based on the map data 11 stored in the first storage section 22 . Alternatively, the output unit 31 displays a map based on the map data 11 and map difference data 15 stored in the first storage unit 22 . The output unit 31 is configured by, for example, a liquid crystal display.

The in-vehicle storage unit 32 stores various information related to navigation functions, map updates, and the like. In this embodiment, the in-vehicle storage unit 32 stores in advance vehicle initial information, an encryption key, and a navigation program. The predetermined encryption key is an encryption key for encrypting and decrypting the vehicle identification file 12, usage date file 13 and license file 14, respectively. The programs are various programs executed by the map output device 3 . These programs include a program for activating the map output device 3, a program for updating the map, and a management program for reading medium identification information from the first medium management section 21, and the like.

The in-vehicle storage unit 32 is realized by a storage device. Examples of storage devices include semiconductor memory devices such as RAM (Random Access Memory) and flash memory, hard disks, and optical disks.

The input/output unit 33 inputs and outputs data between the mobile body 30 and the map output device 3 mounted on the mobile body 30 . The input/output unit 33 is configured by, for example, an I/O (Input/Output) interface.

The map output device 3 is connected via an input/output unit 33 to various car navigation sensors and input/output devices provided in the moving body 30 . Car navigation sensors include GPS (Global Positioning System) receivers, direction sensors, distance sensors, and the like. A GPS receiver receives GPS signals from GPS satellites. The azimuth sensor detects the traveling azimuth of the moving body 30 or changes in the traveling azimuth. The distance sensor detects the speed and travel distance of the moving body 30 .

The connection unit 34 is a device for exchanging data between the map output device 3 and the first recording medium 2 . The connecting portion 34 is configured so that the first recording medium 2 can be inserted therein. In this embodiment, the connection unit 34 is configured by an SD host module.

The in-vehicle control unit 35 controls each device provided in the map output device 3 . The travel distance acquisition unit 37 controls the input/output unit 33 to acquire travel distance information from the distance sensor. The travel distance information is information indicating the travel distance of the moving body 30 . Note that the traveled distance is the cumulative total of traveled distances since the moving body 30 was not used.

The judging section 38 makes judgments to prevent unauthorized map data 11 from being used in the map output device 3 . In the present embodiment, the determination unit 38 determines whether or not the vehicle identification file 12 is stored in the first storage unit 22 when the first recording medium 2 is connected to the connection unit 34 . A recording medium in which the vehicle identification file 12 is not stored is not a genuine product. When the vehicle identification file 12 is stored in the first storage unit 22, the determination unit 38 determines whether the vehicle identification file 12 is appropriate. The determination unit 38 is configured to activate the map output device 3 when the vehicle identification file 12 is correct. When reading each piece of information included in the vehicle identification file 12 , the determination unit 38 decrypts the vehicle identification file 12 with the encryption key stored in the vehicle storage unit 32 .

In order to determine whether or not the vehicle identification file 12 is appropriate, the determination unit 38 determines whether or not the medium identification information included in the vehicle identification file 12 matches the medium identification information stored in the first medium management unit 21. or judge. In order to determine whether the vehicle identification file 12 is proper, the determination unit 38 determines whether the version information included in the vehicle identification file 12 matches the version information included in the map data 11 .

When the first recording medium 2 that has not been locked is connected to the connection unit 34 , the determination unit 38 determines whether the vehicle initial information included in the vehicle identification file 12 and the vehicle initial information stored in the vehicle storage unit 32 are stored. It is determined whether or not the information matches. When the first recording medium 2 on which lock processing has already been executed is connected to the connection unit 34, the determination unit 38 determines whether or not the data processing unit 39 determines the data based on the vehicle identification information included in the vehicle identification file 12 and the device identification information. It is determined whether or not it matches the created vehicle identification information. The determination unit 38 is configured not to activate the map output device 3 when the vehicle initial information does not match or when the vehicle specific information does not match. For example, for the first recording medium 2 locked by another map output device 3, the vehicle identification information included in the vehicle identification file 12 and the vehicle identification information created by the data processing unit 39 do not match. Not authenticated by 38.

The vehicle identification file 12 that has been illegally copied or rewritten includes at least one of vehicle initial information, vehicle identification information, medium identification information, and version information stored in the vehicle storage unit 32. 39, medium specific information stored in the first medium management unit 21, and version information included in the map data 11. Therefore, the map output device 3 can prevent the illegal first recording medium 2 from being used. In this embodiment, the determination unit 38 makes the above determination each time the first recording medium 2 is inserted into the connection unit 34 .

The determination unit 38 determines whether or not the first storage unit 22 stores the license file 14 when the first recording medium 2 is connected to the connection unit 34 . If the first storage unit 22 stores the license file 14, the determination unit 38 determines whether the license file 14 is valid. Specifically, the determination unit 38 determines whether or not the vehicle identification information included in the license file 14 matches the vehicle identification information created by the data processing unit 39 . The determination unit 38 determines whether or not the medium identification information included in the license file 14 matches the medium identification information stored in the first medium management unit 21 . The determination unit 38 determines whether or not the version information included in the license file 14 matches the version information of the map data 11 stored in the first storage unit 22 . If all these pieces of information match, it means that the information contained in the license file 14 matches the current state. When reading the information contained in the license file 14 , the determination unit 38 decrypts the license file 14 with the encryption key stored in the vehicle-mounted storage unit 32 .

The determination unit 38 determines whether or not the mileage information acquired by the mileage acquisition unit 37 exceeds a predetermined value for lock processing. Based on the initial vehicle information or the vehicle identification information included in the vehicle identification file 12, the determination unit 38 determines whether or not the first recording medium 2 inserted in the connection unit 34 has already been locked.

The data processing section 39 creates the license file 14 based on the judgment of the judgment section 38 . The data processing unit 39 creates the license file 14 when the license file 14 is not stored in the first storage unit 22 or when the license file 14 stored in the first storage unit 22 is not proper. The data processing unit 39, for example, based on the device identification information, the medium identification information stored in the first medium management unit 21, the map data 11 and the vehicle identification file 12 stored in the first storage unit, license file Create 14. The data processing unit 39 encrypts the newly created license file 14 with the encryption key stored in the vehicle storage unit 32 . The data processing unit 39 stores the encrypted license file 14 in the first storage unit 22 . If the license file 14 is already stored in the first storage unit 22 , the data processing unit 39 overwrites the license file 14 stored in the first storage unit 22 with the newly created license file 14 . The data processing unit 39 can update the license file 14 stored in the first storage unit 22 to contents corresponding to the current situation.

The data processing unit 39 executes lock processing when the moving body 30 has traveled over a predetermined travel distance. Specifically, the data processing unit 39 creates the vehicle identification file 12 when the determination unit 38 determines that the travel distance information exceeds a predetermined value. The vehicle identification file 12 created by the data processing unit 39 includes vehicle identification information, medium identification information, and version information. The data processing unit 39 creates vehicle identification information based on the device identification information. The data processing unit 39 creates vehicle identification information from the device identification information by hashing, for example. The data processing unit 39 encrypts the vehicle identification file 12 with the encryption key stored in the vehicle storage unit 32 . The data processing unit 39 overwrites the vehicle identification file 12 stored in the first storage unit 22 with the newly created vehicle identification file 12 . Thereby, the data processing unit 39 can change the initial vehicle information included in the vehicle identification file 12 to the vehicle identification information.

The predetermined value is not particularly limited. The predetermined value is set, for example, to a value between 10 km and 100 km. The predetermined value is preferably set to a value between 10 km and 50 km. More preferably, the predetermined value is set to a value between 10 km and 30 km. More preferably, the predetermined value is set to a value between 10 km and 20 km, for example.

The data processing unit 39 may be configured to perform lock processing based on the output period during which the map data 11 is output to the output unit 31 instead of the travel distance. In this configuration, the data processing section 39 executes lock processing when the map data 11 stored in the first storage section 22 is used for a certain period of time. The certain period is, for example, one hour or more and one year or less. The fixed period is preferably 1 hour or more and 24 hours or less. The fixed period is more preferably 1 hour or more and 10 hours or less. In the case of this configuration, the in-vehicle control unit 35 preferably has, for example, a timer function for keeping time.

It should be noted that the case where the vehicle has traveled over a predetermined mileage corresponds to the case where the vehicle has been used beyond a predetermined usage amount. Usage is a parameter that represents the extent to which the vehicle has been used. That is, the data processing unit 39 may be configured to perform lock processing based on a parameter indicating that the moving body 30 has been used in earnest rather than temporarily. The travel distance and the output period of the map data 11 are parameters that indicate that the moving body 30 has been used in earnest. The travel distance and the output period of the map data 11 each correspond to the usage amount. The data processing unit 39 may be configured to perform lock processing when the mobile unit 30 is used over a predetermined usage amount.

After the moving object 30 has traveled over a predetermined travel distance, the data processing unit 39 performs lock processing each time another first recording medium 2 that has not undergone lock processing is inserted into the connection unit 34. conduct.

The data processing unit 39 is not limited to a configuration that performs lock processing based on the amount of use of the mobile unit 30, and may be configured to perform lock processing when the first recording medium 2 is inserted into the connection unit 34 for the first time, for example. may When the first recording medium 2 is inserted into the connection section 34 for the first time, when the map output device 3 detects that the first recording medium 2 has been connected to the connection section 34 and when the first recording medium 2 is This includes the time when the read map data 11 is output to the output unit 31 for the first time.

The data processing unit 39 creates the usage date file 13 when executing the locking process for the first recording medium 2 in which usage start information is not stored. The usage date file 13 created by the data processing unit 39 includes usage start information, medium specification information, and version information. The data processing unit 39 creates usage start information based on the GPS signal received by the GPS receiver. The data processing unit 39 encrypts the created usage date file 13 with the encryption key stored in the vehicle-mounted storage unit 32 . The data processing unit 39 controls the connecting unit 34 so that the encrypted usage date file 13 is overwritten in the first storage unit 22 . In this manner, the data processing unit 39 stores the usage start information in the first storage unit when the traveling distance of the moving body 30 reaches a predetermined value and the reception date and time is confirmed by the GPS receiver.

In this embodiment, the map output device 3 performs map update using the map difference data 15 . The in-vehicle control unit 35 automatically performs map update processing at predetermined time intervals, such as once a month. When updating the map, the in-vehicle control unit 35 requests the first server 4 for the latest version. The latest version request is a request for transmitting the map difference data 15 of the latest version from the first server 4 to the map output device 3 . In this embodiment, when requesting the latest version, the data processing section 39 transmits the version information and the medium specifying information of the map data 11 stored in the first storage section 22 to the first server 4 . Specifically, the data processing unit 39 transmits the usage date file 13 and the license file 14 to the first server 4 .

When the data processing unit 39 receives the map difference data 15 from the first server 4 , the data processing unit 39 controls the connection unit 34 so that the map difference data 15 is written to the first storage unit 22 .

When updating the map, the data processing unit 39 creates the vehicle identification file 12 whose version information indicates the latest map version based on the map difference data 15 received from the first server 4 . The data processing unit 39 encrypts the created vehicle identification file 12 with the encryption key stored in the in-vehicle storage unit 32 . The data processing unit 39 controls the connection unit 34 so that the encrypted vehicle identification file 12 is overwritten in the first storage unit 22 .

The connection unit 34 exchanges data between the map output device 3 and the first recording medium 2 . The connecting portion 34 is configured so that the first recording medium 2 can be inserted. In this embodiment, connection 34 is an SD host module. The connection unit 34 is not limited to the SD host module as long as it can read data from the first recording medium 2 .

The in-vehicle control unit 35 is implemented by, for example, executing a program stored in the in-vehicle storage unit 32 by a CPU (Central Processing Unit), an MPU (Micro Processing Unit), or the like.

The vehicle-mounted communication unit 36 communicates with the first server 4 and the second server 5 via the Internet 10 . In this embodiment, the in-vehicle communication unit 36 is configured by a TCU (telecommunication control unit).

<<Configuration of the first server 4>>
When the map is updated via the map output device 3, the map output system 1 determines whether the map can be updated by the first server 4, and if the map can be updated, the map difference data 15 received from the first server 4. to update the map. The map output system 1 determines whether or not the map can be updated by the first server 4 when the map is updated via the personal PC 6, and if the map can be updated, the map data 11 received from the second server 5 and the map difference The map is updated with data 15.

The first server storage unit 41 stores various information. The first server storage unit 41 preliminarily stores a predetermined encryption key, common information, a map database, map difference data 15, and a program. The predetermined cryptographic key is the same as the cryptographic key stored in the in-vehicle storage unit 32 . The programs are various programs executed by the first server 4 . The common information is the aforementioned information that is commonly included in two or more first recording media 2 as part of the medium identification information. The first server storage unit 41 stores two or more pieces of map difference data 15 of different versions. The map difference data 15 stored in the first server storage unit 41 is updated to a new version of the map difference data 15 by an organization that manages the first server 4, for example, several times a year.

The map database is used to manage the update deadline of map data 11 . The map database stores medium identification information, update deadline information, and version information in association with each other. The version information stored in the map database indicates the version of the map data 11 stored in the first storage unit 22. FIG.

The first server storage unit 41 is configured by a storage device. Examples of storage devices include semiconductor memory elements such as RAMs and flash memories, hard disks, and optical disks.

The first server communication unit 42 communicates with the map output device 3 and the personal PC 6 via the Internet 10 .

The first server control unit 43 controls the first server storage unit 41 and the first server communication unit 42 respectively. The first server control unit 43 performs determination and processing for updating the map. When updating the map, the map output device 3 or the personal PC 6 acquires the usage date file 13 and the license file 14 from the first storage unit 22 and transmits them to the first server 4 . The usage date file 13 and the license file 14 are data files necessary for the map output system 1 to update the map. The first server control unit 43 verifies the license file 14 transmitted from the map output device 3 or personal PC 6 . If the first server control unit 43 determines that the license file 14 can be decrypted with the encryption key stored in the first server storage unit 41 and that the license file 14 contains the above-described common information, the license file Authenticate 14.

After the license file 14 is authenticated, the first server control unit 43 determines whether the update right is granted to the first recording medium 2 to be updated based on the license file 14 and the map database. The update right is the right to update the map data 11 stored in the first storage unit 22 . An update right is granted for each first recording medium 2 . The first server control unit 43 determines whether the map update is performed when the same medium identification information as the medium identification information included in the license file 14 is registered in the map database in association with the update deadline information and the version information. It is determined that the target first recording medium 2 is granted the update right. Note that if the license file 14 is not authenticated, the first server control unit 43 stops the map updating process.

When the update right is granted, the first server control unit 43 determines whether or not the map update can be performed on the first recording medium 2 to be updated. Specifically, the first server control unit 43 determines whether or not the update deadline has passed. In addition, in the case of map update via the map output device 3, the first server control unit 43 updates the map data 11 stored in the first storage unit 22 based on the map database and the license file 14. It is determined whether or not the data 15 is stored in the first server storage unit 41 . Alternatively, when the map is updated via the personal PC 6, the first server control unit 43 updates the map data 11 of a newer version than the map data 11 stored in the first storage unit 22 based on the map database and the license file 14. and whether the map difference data 15 is stored in the second server storage unit 51 or not. If the update deadline has already passed, the first server control unit 43 stops the map update process. If the first storage unit 22 already stores the latest version of the map data 11 and the map difference data 15, the first server control unit 43 stops the map updating process.

If the update right has not been granted, the first server control unit 43 grants the update right to the first recording medium 2 to be updated. The first server control unit 43 grants the update right based on the usage start information to the first recording medium 2 in which the usage start information is already stored. The first server control unit 43 sets the update deadline so that the map is updated within a predetermined period from the time specified by the usage start information. In the present embodiment, the first server control unit 43 sets the update expiration date to a date when a predetermined number of years have passed since the date indicated by the usage start information. In this embodiment, the date indicated by the usage start information is regarded as the usage start date, which is the date when the first recording medium 2 started being used in the map output device 3 . Since the map output system 1 calculates the update deadline using the date indicated by the usage start information as the first day, even if the two or more first recording media 2 have different usage start dates, the time from the usage start date to the update deadline is calculated. The length of the period is the same for each first recording medium 2 . The first server control unit 43 allows the map output device 3 or the personal PC 6 to access the first server 4 for the first recording medium 2 in which the usage start information is not stored and the usage initial information is stored. Calculate the renewal deadline based on the time That is, the first server control unit 43 regards the date when the map output device 3 or the personal PC 6 accesses the first server 4 as the usage start date, and sets the date when a predetermined number of years have passed from this date as the update deadline. The first server control unit 43 reflects the determined update deadline in the map database together with the medium identification information and version information of the first recording medium 2 to be updated. As a result, the first server control unit 43 grants the update right to the first recording medium 2 to be updated.

The first server control unit 43 creates authentication information when the license file 14 is authenticated. The authentication information is information that proves that the map output device 3 or the personal PC 6 has accessed the first server 4 normally. Authentication information is represented by character strings that have no particular meaning. The first server control unit 43 sets the validity period of the authentication information so that the map output system 1 can use the authentication information until one map update is completed. Note that the valid time is, for example, 12 hours or 24 hours. The authentication information is transmitted between the first server 4 and the map output device 3 or personal PC 6 together with various information. By using the authentication information, the map output system 1 does not need to perform processing such as transmission and decryption of the license file 14 each time it is accessed, thereby reducing the processing load of the map output system 1 while taking security measures. can.

The first server control unit 43 creates the vehicle identification file 12 and the date of use file 13 when the personal PC 6 issues a request to issue the vehicle identification file 12 and the date of use file 13 in updating the map via the personal PC 6. . The first server control unit 43 encrypts the created vehicle identification file 12 and usage date file 13 based on the encryption key stored in the first server storage unit 41 . In the case of map update via personal PC 6 , personal PC 6 acquires map data 11 from second server 5 .

The vehicle identification file 12 created by the first server control unit 43 indicates the latest map version in the version information. Therefore, when the map-updated first recording medium 2 is connected to the connection unit 34, the vehicle identification file 12 is determined to be appropriate by the determination unit 38. FIG. If the version information contained in the vehicle identification file 12 is not updated after the map is updated, when the first recording medium 2 is next connected to the connection unit 34, the version information contained in the vehicle identification file 12 and the first storage unit 22 The vehicle identification file 12 is not authenticated by the determination unit 38 because the version information of the map data 11 stored in . When creating the vehicle identification file 12 , the first server control unit 43 acquires the version information of the map data 11 downloaded from the second server 5 from the personal PC 6 .

The version information of the usage date file 13 created by the first server control unit 43 is not updated. Therefore, the map output system 1 can leave the version information of the map data 11 initially stored in the first recording medium 2 in the usage date file 13 even after updating the map. As described above, the map output device 3 updates the map data 11, the vehicle identification file 12 and the usage date file 13, which respectively store the map data 11, and the vehicle identification file 12 and the usage date file 13, respectively. is updated to vehicle specific information indicating the latest map version. The version information of the map data 11 initially stored in the first recording medium 2 is used, for example, for analysis when a bug occurs.

When the map is updated, the first server control unit 43 updates the version information stored in the map database according to the version of the map data 11 or the map difference data 15 newly stored in the first storage unit 22. to update.

The first server control unit 43 is implemented, for example, by executing a program stored in the first server storage unit 41 by the CPU, MPU, or the like.

≪Configuration of Personal PC 6≫
In this embodiment, the personal PC 6 does not use the map difference data 15 but uses the map data 11 to update the map. Personal PC 6 corresponds to an update unit. The update unit is not limited to the personal PC 6, and may be a smart phone, a tablet terminal, or the like.

The display unit 61 is configured by, for example, a liquid crystal display.

The PC storage unit 62 stores various programs and the like. These programs include an update tool program, a program necessary for processing performed by the PC 6, a program for reading out medium identification information from the first medium management unit 21, and the like. The update tool is dedicated software for updating maps. The update tool downloads map data 11 for update from the second server 5 to the personal PC 6, and overwrites the map data 11 stored in the first storage unit 22 with the downloaded map data 11 for update. programmed. Map updating via personal PC 6 is performed by the user using an update tool installed on personal PC 6 .

The PC communication section 63 communicates with the first server 4 and the second server 5 via the Internet 10 . The PC interface 64 is a device for exchanging data between the personal PC 6 and the first recording medium 2 . The PC interface 64 is configured so that the first recording medium 2 can be inserted.

The PC control section 65 controls the PC storage section 62, the PC communication section 63 and the PC interface 64, respectively.

When updating the map, the PC control unit 65 transmits the usage date file 13 and the license file 14 to the first server 4 .

When the first server control unit 43 determines that the map can be updated in the first recording medium 2, the PC control unit 65 determines the version of the map data 11 for updating. The PC control unit 65 can obtain the latest version of the map data 11 that can be downloaded from the second server 5 among the update map data 11 stored in the second server storage unit 51 . The PC control unit 65 notifies the second server 5 of the determined version. The PC control section 65 controls the PC interface 64 so that the map data 11 transmitted from the second server 5 is stored in the first storage section 22 . Note that the PC control unit 65 may be configured to be able to acquire information necessary for obtaining the latest map version from at least one of the first server 4 and the second server 5 .

When the PC control unit 65 receives the update map data 11 and the map difference data 15 from the second server 5 , it requests the first server 4 to issue the vehicle identification file 12 and the usage date file 13 . The PC control unit 65 notifies the first server 4 of the version of the updated map data 11 transmitted from the second server 5 when issuing a request for issuing the vehicle identification file and the usage date file 13 . Hereinafter, the issuance request for the vehicle identification file 12 and the usage date file 13 is also referred to as "file issuance request".

The PC control unit 65 stores the update map data 11 and map difference data 15 received from the second server 5 and the vehicle identification file 12 and usage date file 13 received from the first server 4 in the first storage unit 22 . Control the PC interface 64 so that each is stored.

The PC control unit 65 is implemented by, for example, executing a program stored in the PC storage unit 62 by the CPU, MPU, or the like.

<<Configuration of the second server 5>>
The second server 5 has substantially the same configuration as the first server 4, and the description of the configuration that is the same as that of the first server 4 is omitted. The second server 5 stores update map data 11 in the second server storage unit 51 as a configuration different from that of the first server 4 . The second server 5 differs from the first server 4 in that it does not store a predetermined encryption key and map database. The map data 11 and the map difference data 15 stored in the second server storage unit 51 are updated to a new version of the map data 11 by an organization that manages the second server 5, for example, several times a year.

When the map version determined by the personal PC 6 is transmitted in the map update via the personal PC 6, the second server control unit 53 sends the update map data 11 and the map difference data 15 corresponding to the version to the second server. Acquired from the server storage unit 51 . The second server control section 53 transmits the map data 11 and the map difference data 15 acquired from the second server storage section 51 to the personal PC 6 .

<<Transition of information stored in the first recording medium 2>>
The first recording medium 2 before being connected to the connection unit 34 for the first time stores map data 11, a vehicle identification file 12, and a usage date file 13. FIG. The vehicle identification file 12 contains vehicle initial information. The first recording medium 2 further stores the license file 14 when connected to the connection unit 34 .

The locked first recording medium 2 stores vehicle identification information and usage start information. In the present embodiment, the vehicle identification file 12 is changed from vehicle initial information to vehicle identification information by the locking process. In the usage date file 13, the initial usage information is changed to the usage start information by the locking process.

The first recording medium 2 that has been updated with the map via the map output device 3 further stores map difference data 15 . The version information of the vehicle identification file 12 and the license file 14 stored in the first storage unit 22 has been updated to the latest map version. The first recording medium 2 whose map has been updated via the personal PC 6 stores a vehicle identification file 12 and a license file 14 whose version information has been updated to the latest map version.

<<Activation process of the map output device 3>>
When the first recording medium 2 is inserted into the connection section 34 and power is supplied to the map output device 3, the map output device 3 starts the start-up process shown in FIG.

In step S<b>11 , the determination unit 38 determines whether or not the vehicle identification file 12 is stored in the first storage unit 22 . If the vehicle identification file 12 is stored in the first storage unit 22, the determination unit 38 advances the activation process of the map output device 3 to step S12. If the vehicle identification file 12 is not stored in the first storage unit 22, the determination unit 38 advances the activation process of the map output device 3 to step S13.

In step S12, the determination unit 38 determines whether the vehicle identification file 12 is proper. If the vehicle identification file 12 is correct, the determination unit 38 advances the activation process of the map output device 3 to step S14. If the vehicle identification file 12 is not proper, the determination unit 38 advances the activation process of the map output device 3 to step S13.

In step S<b>13 , the determination unit 38 does not authenticate the first recording medium 2 inserted into the connection unit 34 . The determination unit 38 causes the output unit 31 to output an error screen, and terminates the activation process of the map output device 3 . When an error screen is output, the map output device 3 cannot read the map data 11 from the first recording medium 2 and cannot execute navigation.

In step S<b>14 , the determination unit 38 activates the map output device 3 .

In step S<b>15 , the determination unit 38 determines whether or not the license file 14 is stored in the first storage unit 22 . If the license file 14 is stored in the first recording medium 2, the determination unit 38 advances the activation process of the map output device 3 to step S16. If the license file 14 is not stored in the first recording medium 2, the determination unit 38 advances the activation process of the map output device 3 to step S17.

In step S16, the determination unit 38 determines whether the license file 14 is proper. If the license file 14 is correct, the determination unit 38 advances the activation process of the map output device 3 to step S19. If the license file 14 is not proper, the determination unit 38 advances the activation process of the map output device 3 to step S17.

In step S<b>17 , the data processing section 39 creates the license file 14 .

In step S18, the data processing section 39 writes the license file 14 created in step S17 to the first storage section 22. FIG. When the license file 14 is stored in the first storage unit 22, the data processing unit 39 overwrites the license file 14 stored in the first storage unit 22 with the license file 14 created in step S17.

In step S19, the determination unit 38 determines whether or not the traveling distance of the moving body 30 exceeds a predetermined value. If the moving object 30 has traveled more than the predetermined value, the determination unit 38 advances the activation process of the map output device 3 to step S20. If the moving object 30 has not traveled beyond the predetermined value, the determination unit 38 terminates the activation process of the map output device 3 . In this case, the map output device 3 is ready for navigation.

In step S20, the determination unit 38 determines whether or not the first recording medium 2 inserted in the connection unit 34 is already locked. If the first recording medium 2 that has already been locked is inserted into the connection section 34, the determination section 38 terminates the activation process of the map output device 3. FIG. As a result, the navigation function of the map output device 3 is enabled. If the first recording medium 2 has not yet been locked, the determination unit 38 advances the activation process of the map output device 3 to step S21.

In step S21, the data processing unit 39 executes lock processing. After the locking process, the map output device 3 becomes ready for navigation.

<<Updating process of map data 11 via map output device 3>>
When updating the map on the first recording medium 2 in which the license file 14 is stored in the first storage unit 22, the in-vehicle control unit 35, in step S21 shown in FIG. The in-vehicle communication unit 36 is controlled to transmit to the server 4 . In this embodiment, the data files required for updating the map are the usage date file 13 and the license file 14 .

After receiving the data file necessary for updating the map in step S22, the first server control unit 43 verifies the license file 14 in step S23.

In step S24, the first server control unit 43 determines whether or not the update right is granted to the first recording medium 2 to be updated. When the right to update is granted, the first server control unit 43 advances the update process of the map data 11 to step S26. If the update right is not granted, the first server control unit 43 advances the update process of the map data 11 to step S25.

In step S25, the first server control unit 43 determines the update deadline of the map data 11 based on the usage date file 13 received in step S23.

In step S26, the first server control unit 43 creates authentication information.

In step S<b>27 , the first server control section 43 controls the first server communication section 42 to transmit the authentication information created in step S<b>26 to the map output device 3 .

After receiving the authentication information in step S28, the in-vehicle control unit 35 requests the latest version in step S29. When requesting the latest version, the in-vehicle control unit 35 transmits the version information and medium identification information of the map data 11 stored in the first storage unit 22 and the authentication information received in step S28 to the first server 4. The in-vehicle communication unit 36 is controlled so as to do so.

In step S<b>30 , the first server control section 43 determines the latest map version based on the map difference data 15 stored in the first server storage section 41 .

In step S31, the first server control unit 43 causes the first server communication unit 43 to transmit the map difference data 15 of the map version determined in step S30 and the authentication information created in step S27 to the map output device 3. 42.

In step S<b>32 , the data processing unit 39 controls the connection unit 34 so that the map difference data 15 transmitted from the first server 4 are written in the first storage unit 22 .

In step S<b>33 , the data processing section 39 updates the vehicle identification file 12 stored in the first storage section 22 . The vehicle identification file 12 is updated by overwriting the vehicle identification file 12 stored in the first storage unit 22 with the vehicle identification file 12 created by the data processing unit 39 .
<<Updating process of map data 11 via personal PC 6>>
When updating the map on the first recording medium 2 in which the license file 14 is stored in the first storage unit 22, the PC control unit 65 stores the data file necessary for updating the map in step S41 shown in FIG. It controls the PC communication section 63 to transmit to the server 4 . In this embodiment, the data files required for updating the map are the usage date file 13 and the license file 14 .

The processing of steps S42 to S46 is the same as the processing of steps S22 to S26 shown in FIG.

In step S47, the first server control unit 43 controls the first server communication unit 42 to transmit the authentication information created in step S46 to the personal PC6.

After receiving the authentication information in step S48, the PC control unit 65 determines the latest map version in step S49.

In step S50, the PC control section 65 controls the PC communication section 63 so as to transmit to the second server 5 version information indicating the map version determined in step S49.

After receiving the version information in step S51, the second server control unit 53 controls the second server communication unit 52 to transmit the update map data 11 and the map difference data 15 to the personal PC 6 in step S52. do. The map data 11 and map difference data 15 transmitted to the personal PC 6 correspond to the version information received by the second server 5 in step 51 .

In step S<b>53 , the PC control unit 65 writes the update map data 11 and the map difference data 15 transmitted by the second server 5 in step S<b>52 to the first storage unit 22 . As a result, the map data 11 stored in the first storage unit 22 is overwritten with the latest version of the map data 11 . The first storage unit 22 also stores the map difference data 15 of the latest version.

At step S54, the PC control unit 65 requests the vehicle identification file 12 and the usage date file 13 to be issued. When issuing a file issue request, the PC control unit 65 causes the PC communication unit 63 to transmit the version information of the map data 11 received in step S53 and the authentication information received in step S48 to the first server 4. to control.

In step S55, the first server control unit 43 creates the vehicle identification file 12 indicating the latest map version and the usage date file 13 whose version information has not been updated.

In step S56, the first server control unit 43 causes the first server communication unit 42 to transmit the vehicle identification file 12 and the usage date file 13 created in step S55 and the authentication information created in step S47 to the personal PC 6. to control.

In step S57, the PC control section 65 controls the PC interface 64 so that the vehicle identification file 12 and the usage date file 13 transmitted by the first server 4 in step S56 are written into the first storage section 22. FIG.

As described above, the map output device 3 of this embodiment is mounted on the mobile object 30 . The map output device 3 outputs map data 11 . The map output device 3 includes a connection section 34 and an in-vehicle control section 35 . The connecting portion 34 is connected with the first recording medium 2 . The first recording medium 2 stores map data 11 . The in-vehicle control unit 35 controls the connection unit 34 . The in-vehicle control unit 35 stores the usage start information in the first recording medium 2 . The usage start information specifies when the first recording medium 2 is connected to the connection unit 34 for the first time. Alternatively, the usage start information specifies when the mobile unit 30 has been used beyond a predetermined usage amount. The in-vehicle control unit 35 updates the map data 11 within the update time limit set based on the usage start information. The map data 11 is the map data 11 stored in the first recording medium 2 .

The map output device 3 can cause the first recording medium 2 to store usage start information necessary when the first server 4 sets an update deadline for map data, for example. For example, if the first server 4 is configured to calculate the update deadline of the map data 11, when changing the specification related to the calculation of the update deadline, each map output device 3 does not perform the change process, and the first server 4 It is sufficient to perform the change processing on the . Therefore, the map output device 3 can update the map data 11 stored in the first recording medium 2, and can save time and effort when changing the specifications for calculating the update deadline of the map data 11.例文帳に追加

In the map output system 1 of this embodiment, when the map output device 3 cannot access the first server 4 for a long period of time, the map output device 3 records the usage start date on the first recording medium 2 according to a specific rule. can. A specific rule, in this embodiment, is the timing of lock processing. Therefore, in the map output system 1, even if the map output device 3 accesses the first server 4 afterward, the first server 4 cannot know the true usage start date of the first recording medium 2, or The first server 4 can know the correct usage start date without causing a large error in the usage start date of the first recording medium 2.例文帳に追加

<<Regarding the method of manufacturing the first recording medium>>
The first recording medium 2 storing the map data 11, the vehicle identification file 12, and the usage date file 13 is produced by the production system 100 shown in FIG. The production system 100 comprises a first recording medium 2 , a second recording medium 120 , a third recording medium 130 and a computer 140 . The second recording medium 120 includes a second storage section 121 and a second control section 122 . The third recording medium 130 includes a third medium management section 131 , a third storage section 132 and a third control section 133 . Computer 140 includes first interface 141 , second interface 142 , third interface 143 , storage device 144 and control device 145 . Storage device 144 includes volatile memory 146 and nonvolatile memory 147 . In this embodiment, the computer 140 is owned by the manufacturer of the first recording medium 2 . The computer 140 is hereinafter also referred to as the “manufacturer PC 140”.

The manufacturing system 100 is a system for manufacturing two or more first recording media 2 . The production system 100 produces the first recording medium 2 by executing the copy step S101 and the update step S102 shown in FIG. In this embodiment, the production system 100 is implemented by the manufacturer of the first recording medium 2 upon receiving a request from an organization involved in the production of the map output device 3 . In this embodiment, the medium identification information is written in the first medium management unit 21 by the manufacturer of the first recording medium 2 before the copy step S101 shown in FIG. 7 is executed.

In this embodiment, the map data 11, the vehicle identification file 12, and the usage date file 13 are copied as they are from the third recording medium 130 to two or more first recording mediums 2 in the copying step S101. Map data 11 , vehicle identification file 12 , and usage date file 13 are stored in advance in third storage unit 132 . As shown in FIG. 2, the vehicle identification file 12 stored in the third storage unit 132 includes initial vehicle information, initial medium information, and version information. The usage date file 13 stored in the third storage unit 132 includes initial usage information, initial medium information, and version information. The vehicle identification file 12 and the usage date file 13 are encrypted and stored in the third storage unit 132 .

Note that the production system 100 may have a configuration in which the third recording medium 130 is not used in the copying step S101. For example, the map data 11, the vehicle identification file 12, and the usage date file 13 may be pre-stored in the non-volatile memory 147 and copied from the non-volatile memory 147 to the first recording medium 2 in the copying step S101.

In this embodiment, the third recording medium 130 is provided to the manufacturer of the first recording medium 2 by an organization involved in manufacturing the map output device 3 . In this embodiment, the map data 11 stored in the third storage unit 132 is the latest version of the map data 11 when the third recording medium 130 is provided to the manufacturer of the first recording medium 2 .

The vehicle identification file 12 copied from the third storage unit 132 to the first storage unit 22 in the copying step S101 includes vehicle initial information, medium initial information, and version information, as shown in FIG. The vehicle identification file 12 after the update step S102 includes vehicle initial information, medium identification information, and version information. The usage date file 13 copied from the third storage unit 132 to the first storage unit 22 in the copying step S101 includes initial usage information, initial medium information, and version information. The usage date file 13 after the update step S102 includes initial usage information, medium identification information, and version information.

In this embodiment, the third recording medium 130 is an SD card. The third recording medium 130 is electrically connected to the manufacturer's PC 140 via the third interface 143 . Note that the third recording medium 130 is not limited to an SD card as long as the data can be read by the manufacturer's PC 140 . Although the first recording medium 2 and the third recording medium 130 are of the same type in this embodiment, they may be of different types.

The production system 100 uses the second recording medium 120 in the update step S102 for security measures of the encryption key. An update program 123 and license information 124 are stored in advance in the second storage unit 121 . In this embodiment, the second recording medium 120 is provided to the manufacturer of the first recording medium 2 by an organization involved in manufacturing the map output device 3 . The second storage unit 121 is composed of, for example, a semiconductor memory device such as a flash memory. Note that the second recording medium 120 may store at least the update program 123 in advance, and may not store the license information 124 .

The update program 123 is a program for updating the vehicle identification file 12 . The update program 123 includes encrypted program data 123a, as shown in FIG. In this embodiment, the encryption program data 123a is program data for decrypting or encrypting the vehicle identification file 12 and the usage date file 13, respectively. The encrypted program data 123a includes an encryption key. The encryption key included in the encryption program data 123a is the same as the encryption key pre-stored in the in-vehicle storage unit 32 . In this embodiment, the encryption key is a common key.

In this embodiment, the update program 123 cannot control the manufacturer's PC 140 by itself. When the execution file 148 is executed, the update program 123 is read from the second storage unit 121 and stored in the volatile memory 146, and causes the control device 145 to perform processing such as decryption and encryption of the vehicle identification file 12. . When the execution file 148 is executed, the update program 123 causes the control device 145 to execute processing such as decryption and encryption of the usage date file 13 .

The encryption key applied to the vehicle identification file 12, the encryption key applied to the usage date file 13, and the encryption key applied to the license file 14 may be different. In this case, the in-vehicle storage unit 32 needs to store in advance the encryption key applied to the vehicle identification file 12, the encryption key applied to the usage date file 13, and the encryption key applied to the license file . The encrypted program data 123a may be program data for performing at least one of encryption and decryption on the vehicle identification file 12 and the usage date file 13. FIG. The update program 123 is configured like a library that is called by another program to provide some function.

The encryption program data 123a is designed so that the same files as the vehicle identification file 12 and the usage date file 13 stored in the third storage unit 132 are updated in the update step S102. As described above, the vehicle identification file 12 and the usage date file 13 are copied as they are from the third recording medium 130 to the first recording medium 2 in the copying step S101. Therefore, if the vehicle identification file 12 or the usage date file 13 copied to the first storage unit 22 in the copying step S101 is rewritten for some reason before the update step S102, the control device 145 changes the vehicle identification file 12 and the usage date file 13 cannot be recognized, and processing based on the encrypted program data 123a may not be performed.

The second control section 122 controls the second storage section 121 . The second control unit 122 writes information to the second storage unit 121 and reads information from the second storage unit 121 . The second control unit 122 is configured by, for example, a controller.

In this embodiment, the second recording medium 120 is a USB memory. The second recording medium 120 is electrically connected to the manufacturer's PC 140 via the second interface 142 . Note that the second recording medium 120 is not limited to a USB memory as long as the data can be read by a computer. The second recording medium 120 may be an SD card, microSD card, nanoSD card, CD-R, or the like. In this embodiment, the second recording medium 120 is of a different type from the first recording medium 2 and the third recording medium 130 , but may be of the same type as the first recording medium 2 or the third recording medium 130 .

The manufacturer's PC 140 is configured such that the first recording medium 2, the second recording medium 120, and the third recording medium 130 can be attached and detached. In this embodiment, the first interface 141 and the third interface 143 are SD card interfaces, respectively. The first interface 141 may be an interface other than the SD card interface as long as it can read data from the first recording medium 2 . Alternatively, the manufacturer PC 140 may be configured to read and write data from the first recording medium 2, the second recording medium 120, or the third recording medium 130 via another device. In this embodiment, the first interface 141 is configured to connect two or more first recording media 2 at the same time. The third interface 143 may be an interface other than the SD card interface as long as it can read data from the third recording medium 130 . In this embodiment, the second interface 142 is a USB memory interface. The second interface 142 may be an interface other than the USB memory interface as long as it can read data from the second recording medium 120 .

The volatile memory 146 temporarily stores the program code being executed by the controller 145 and the data necessary for this process. Volatile memory 146 is the main memory. Volatile memory 146 requires power to retain data. Therefore, the data stored in the volatile memory 146 are all erased when the manufacturer's PC 140 is powered off. The volatile memory 146 is configured by RAM, for example.

The nonvolatile memory 147 stores data necessary for the control device 145 to execute various processes. Nonvolatile memory 147 is an auxiliary storage device. Non-volatile memory 147 does not require power to retain data. Nonvolatile memory 147 retains data even when manufacturer PC 140 is powered off. The nonvolatile memory 147 is composed of, for example, a semiconductor memory device such as a flash memory or a hard disk.

An executable file 148 is stored in advance in the nonvolatile memory 147 . The execution file 148 is a program for causing the manufacturer's PC 140 to execute processes that do not require an encryption key among the processes executed in the update step S102. The processing that does not require an encryption key in the updating step S102 includes, for example, processing of reading medium identification information from the first medium management unit 21, processing of reading the vehicle identification file 12 and usage date file 13 from the first storage unit 22, processing of reading the second These include a process of reading the update program 123 from the storage unit 121, a process of writing back the updated vehicle identification file 12 and the usage date file 13 to the first storage unit 22, and the like.

The execution file 148 corresponds to predetermined conditions for reading the medium identification information from the first medium management section 21 . The execution file 148 incorporates, for example, a predetermined management program corresponding to the first medium management section 21 so that the medium identification information can be read from the first medium management section 21 . The execution file 148 is designed in association with the first recording medium 2 , the vehicle identification file 12 and the usage date file 13 so that the control device 145 can read the vehicle identification file 12 and the usage date file 13 from the first storage unit 22 . be. In this embodiment, the executable file 148 is created by the manufacturer of the first recording medium 2 .

The control device 145 controls the first interface 141, the second interface 142, the third interface 143, and the storage device 144, respectively. The control device 145 is, for example, a CPU or MPU.

The control device 145 controls the third interface 143 to read the map data 11, the vehicle identification file 12, and the usage date file 13 from the third storage unit 132 in the copying step S101. The control device 145 controls the first interface 141 so that the read map data 11, the vehicle identification file 12, and the usage date file 13 are stored in two or more first recording media 2, respectively. As a result, the map data 11, the encrypted vehicle identification file 12, and the usage date file 13 are stored in the two or more first recording media 2, respectively.

In the update step S102, the control device 145 executes update processing based on the execution file 148 and the update program 123 shown in FIGS. Specifically, in step S105 of FIGS. 8 and 9, the control device 145 controls the first interface 141 to read the vehicle identification file 12 and the usage date file 13 from the first storage unit 22 based on the execution file 148. do. The control device 145 also controls the first interface 141 so as to read the medium identification information from the first medium management section 21 . 8 and 9, the vehicle identification file 12 and the usage date file 13 are simply described as "files 12 and 13".

The control device 145 controls the second interface 142 to read the license information 124 from the second storage unit 121 based on the execution file 148 in step S106. When the license information 124 is approved, the control device 145 reads the update program 123 from the second storage unit 121 based on the execution file 148, and stores the read update program 123 in the volatile memory 146. It controls interface 142 and volatile memory 146 . Note that if the license information 124 is not stored in the second recording medium 120, the control device 145 reads the update program 123 from the second storage unit 121 without performing approval based on the license information 124 in step S106. I do.

At step S107 in FIG. 9, the control device 145 decrypts the vehicle identification file 12 and the usage date file 13 read at step S105 based on the encrypted program data 123a.

In step S108, the control device 145 replaces the initial medium information contained in the vehicle identification file 12 and the usage date file 13 with the medium identification information based on the medium identification information read in step S105 and the update program 123 read in step S106. , to control the volatile memory 146 to change to

In step S9, the control device 145 encrypts the vehicle identification file 12 and the usage date file 13 based on the encrypted program data 123a. If the encryption key used for encrypting the vehicle identification file 12 and the usage date file 13 in step S9 is the same as the encryption key stored in the vehicle storage unit 32, then in step S107 the vehicle identification file 12 and the vehicle identification file 12 are encrypted. It may be different from the encryption key used for decrypting the usage date file 13 . If different encryption keys are used for encryption and decryption, the encryption program data 123a must contain two different encryption keys. In this case, in the third recording medium 130, the vehicle identification file 12 and the usage date file 13 are encrypted with the same encryption key as the encryption key used for decrypting the vehicle identification file 12 and the usage date file 13 in step S107. need to be Note that the encryption key is not limited to a common key, and may be, for example, a public key or a private key.

8 and 9, the control device 145 controls the first interface 141 to write the vehicle identification file 12 and the usage date file 13 encrypted in step S109 to the first recording medium 2 based on the execution file 148. to control.

In this manner, the control device 145 updates the vehicle identification file 12 and the usage date file 13 stored in the first storage unit 22 in the updating step S102. Thus, the production system 100 can produce the first recording medium 2 in which the same medium identification information is included in the first medium management section 21, the vehicle identification file 12, and the usage date file 13. FIG.

As described above, the manufacturing system 100 of this embodiment includes the first recording medium 2, the second recording medium 120, and the manufacturer's PC 140. FIG. The first recording medium 2 stores a vehicle identification file 12 and a usage date file 13 . The second recording medium 120 stores encrypted program data 123a. The encrypted program data 123a includes an encryption key. The encryption program data 123 a encrypts and decrypts the vehicle specific file 12 . The manufacturer's PC 140 reads data from the first recording medium 2 and the second recording medium 120 respectively. The manufacturer's PC 140 causes the volatile memory 146 to store the encryption program data 123 a read from the second recording medium 120 . The volatile memory 146 can hold data when power is supplied. The manufacturer PC 140 causes the first recording medium 2 to store the vehicle identification file 12 encrypted with the encryption program data 123 a stored in the volatile memory 146 .

Since the encryption program data 123a is stored in the volatile memory 146 instead of the nonvolatile memory 147, it is automatically deleted from the storage device 144 when the manufacturer's PC 140 is powered off. Therefore, the production system 100 can prevent the encrypted program data 123a from being taken out from the manufacturer's PC 140 whose power is turned off, for example, by a malicious third party. In addition, since the second recording medium 120 is configured with a relatively small size such as a USB memory, it can be easily stored in a highly secure location while the update step S102 is not performed. Therefore, the production system 100 can prevent the encryption key used in the manufacturer's PC 140 for encrypting and decrypting the vehicle identification file 12 from leaking to the outside.

In the fabrication system 100 of this embodiment, the nonvolatile memory 147 stores an execution file 148 . The executable file 148 corresponds to the encrypted program data 123a. When the executable file 148 is executed, the manufacturer's PC 140 reads the encrypted program data 123 a from the second recording medium 120 and stores it in the volatile memory 146 .

In the production system 100 of this embodiment, the manufacturer's PC 140 acquires the medium identification information from the first recording medium 2 based on the execution file 148 . The medium identification information is information for identifying each of the two or more first recording media 2 . The manufacturer PC 140 encrypts the vehicle identification file 12 and the usage date file 13 in which the medium identification information is written, with the encryption program data 123a.

The execution file 148 corresponds to predetermined conditions for reading the medium identification information from the first medium management unit 21 and does not contain an encryption key. Therefore, no encryption key is required to create the executable file 148 . Also, the encrypted program data 123 a contains an encryption key and does not correspond to a predetermined condition for reading the medium identification information from the first medium management section 21 . Therefore, a predetermined condition for reading the medium identification information from the first medium management unit 21 is unnecessary for creating the encrypted program data 123a. In this embodiment, the executable file 148 is created by the manufacturer of the first recording medium 2, and the encrypted program data 123a is created by an organization involved in manufacturing the map output device 3 and provided to the manufacturer of the first recording medium 2. , predetermined conditions and cryptographic keys need not be shared between different organizations. For this reason as well, the production system 100 of the present embodiment can prevent the encryption key from leaking to the outside.

In this embodiment, the production system 100 executes the copy step S101 and the update step S102 in one manufacturer's PC 140, but the copy step S101 and the update step S102 are executed in two different manufacturer's PCs 140. may

≪Example of realization by hardware≫
As shown in FIG. 10, the map output device 3 of this embodiment includes an MPU 35a, a ROM (Read Only Memory) 32a, a RAM 32b, an I/O interface 33a, a display 31a, a TCU 36a, and a storage device 32c. , and an SD host module 34a. The MPU 35a functions as an arithmetic processing unit and a control unit. The MPU 35a controls the overall operation of the map output device 3 according to various programs. The MPU 35a executes various programs stored in the ROM 32a using the RAM 32b as a work area.

The ROM 32a stores programs and calculation parameters used by the MPU 35a. The RAM 32b temporarily stores programs used when the MPU 35a executes control. The RAM 32b also temporarily stores parameters and the like that change as appropriate when the MPU 35a executes control.

The I/O interface 33a reads data such as travel distance information and vehicle specific information from various car navigation sensors and input/output devices provided in the vehicle, and provides the data to the MPU 35a via the RAM 32b.

The TCU 36 a communicates with the first server 4 .

The storage device 32c is realized by, for example, a magnetic memory device, a semiconductor memory device, an optical memory device, or a magneto-optical memory device. The magnetic storage device is, for example, an HDD (Hard Disk Drive). The storage device 32c stores programs executed by the MPU 35a, various data, and various data acquired from outside.

The SD host module 34a reads and writes information from the inserted first recording medium 2 . The SD host module 34a outputs information read from the first recording medium 2 to the RAM 32b.

The MPU 35a, the ROM 32a, the RAM 32b, the I/O interface 33a, the display 31a, the TCU 36a, the storage device 32c, and the SD host module 34a are interconnected by a bus 73. FIG.

For example, the MPU 35a acquires travel distance information via the I/O interface 33a and outputs the acquired travel distance information to the RAM 32b. When the traveling distance of the moving body 30 exceeds a predetermined value, the MPU 35a creates the vehicle identification file 12 based on the vehicle identification information. The MPU 35a creates the usage date file 13 in the lock process or map update. The MPU 35a generates usage start information based on the GPS signal acquired via the I/O interface 33a when the usage date file 13 is created by the lock process. The MPU 35a stores the vehicle identification file 12 and the usage date file 13 in the first storage unit 22 via the SD host module 34a.

The hardware configurations of the first server 4, the second server 5, and the personal PC 6 are substantially the same as the hardware configuration of the map output device 3, except for the I/O interface 33a and the like.

<<Modification>>
In this embodiment, the mobile object 30 is not limited to a vehicle, and may be a ship, an aircraft, or the like. For example, if the mobile object 30 is a ship, the map output device 3 executes lock processing when the ship travels beyond a predetermined length. That is, the map output device 3 executes lock processing when the moving body moves beyond a predetermined length. This movement means that the mobile body 30 is moved by the power provided by the mobile body 30 . This movement is not the movement of the mobile body 30 by the power provided by the other mobile body 30 .

In this embodiment, the first recording medium 2 and the third recording medium 130 are not limited to SD cards, and may be microSD cards, nanoSD cards, or the like. The first recording medium 2 and the third recording medium 130 may be a USB (Universal Serial Bus) memory, a CD-R (Compact Disc Recordable), or the like.

In this embodiment, the map output system 1 is not limited to the configuration in which the personal PC 6 downloads the update map data 11 from the second server 5, but may be configured to download the update map data 11 from the first server 4. There may be. That is, the map output system 1 may be configured without the second server 5 .

In this embodiment, at least a part of the map data 11 stored in the first recording medium 2 may be encrypted.

In this embodiment, the map output system 1 may be configured such that the first server 4 and the second server 5 are managed by the same organization.

In this embodiment, the map output device 3 may be configured to be able to use the first recording medium 2 in which the usage date file 13 is not stored. That is, the map output system 1 uses the first recording medium 2 storing the usage date file 13 for some of the map output devices 3 among the two or more map output devices 3, and the remaining map output devices 3 may use the first recording medium 2 in which the usage date file 13 is not stored. When the map update target is the first recording medium 2 that does not store the usage date file 13, the first server 4 downloads only the license file 14 from the map output device 3 or the personal PC 6 as the data file necessary for updating the map. receive. When granting the update right to the first recording medium 2 that does not store the usage date file 13 , the first server control unit 43 determines the update deadline based on the version of the map data 11 stored in the first storage unit 22 . set. The newer the map version, the earlier the update deadline is set. When the first server control unit 43 grants the update right to the first recording medium 2 that does not store the usage date file 13, the first server control unit 43 updates the map output device 3 or the personal PC 6 to the predetermined month of the year when the first server 4 is accessed. A date on which a predetermined number of years have passed from the date may be set as the update deadline. The predetermined date is, for example, the last day of December. The first server control unit 43 sets the update deadline for the first recording medium 2 in which the usage date file 13 is not stored, regardless of the date when the first recording medium 2 actually started to be used in the map output device 3. can be set. In this modification, the production system 100 produces the first recording medium 2 in which the usage date file 13 is not stored, for example, by using the third recording medium 130 in which the usage date file 13 is not stored.

Thus, the map output system 1 of this modified example can set the update deadline by the following three methods.

(1) If there is a usage date file 13 and usage start information is stored in the usage date file 13, the first server control unit 43 sets an update deadline based on the usage start information.
(2) If there is a usage date file 13 and initial usage information is stored in the usage date file 13, the first server control unit 43 sets the renewal deadline.
(3) If the usage date file 13 does not exist, the first server control unit 43 sets the update deadline based on the map version stored in the first recording medium 2 .

The present invention is not limited to the above-described embodiments, and can be modified in various ways within the scope of the claims. Embodiments obtained by appropriately combining technical means disclosed in modifications is also included in the technical scope of the present invention.

1 Map output system
2 first recording medium 3 map output device 4 first server 11 map data 30 moving object 34 connection unit 35 in-vehicle control unit

Claims (4)

A map output device mounted on a mobile body for outputting map data, comprising: a connection unit to which a recording medium storing the map data is connected; an in-vehicle control unit for storing in the recording medium usage start information specifying when the medium is connected for the first time or when the mobile body is used in excess of a predetermined amount of use, wherein the in-vehicle control A map output device, wherein the unit updates the map data stored in the recording medium within a predetermined period from the time specified by the use start information. A map output system comprising: a map output device that is mounted on a mobile object and that outputs map data; and a server that communicates with the map output device, wherein the map output device is a recording medium storing the map data. a connecting portion to which the is connected; and controlling the connecting portion to detect when the recording medium is connected to the connecting portion for the first time or when the mobile body is used beyond a predetermined amount of use. an in-vehicle control unit for storing specified use start information in the recording medium, wherein the server sets an update deadline for updating the map data stored in the recording medium based on the use start information. A map output system characterized by The recording medium preliminarily stores usage initial information indicating a predetermined character string, and the in-vehicle control unit controls the amount of usage of the moving object when the recording medium is first connected to the connection unit, or 3. The map output system according to claim 2, wherein the initial usage information stored in the recording medium is changed to the start-of-use information when the map is used for more than . 4. The server according to claim 3, wherein the server sets the update deadline for the recording medium in which the usage start information is not stored based on the date when the map output device accesses the server. A map output system.

Images