JP2008046959A - Car navigation device, and database management method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To ensure the freedom in utilization of a database while protecting the database from a malicious application. <P>SOLUTION: An additive application management part 509 stores, in installing an additive application, additive application identification information and authentication presence/absence information thereof to an additive application management DB 510. A database management part 507 stores, when a database is established, identification information of the database, identification information of an owner application, and DB configuration definition information to a data configuration definition DB 511. When a certain database is accessed, the management part determines, in reference to the additive application management DB 510 and the data configuration definition DB 511, whether the access application is a built-in application or an additive application, whether it is authenticated or not, whether the accessed database is a built-in DB 51 or an additive application DB 513, and whether the owner is an own application or the other application, and determines the propriety of access operation to the database based on the determination results. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a car navigation device having a database management function, and a database management method and program in the car navigation device.

  2. Description of the Related Art Recent car navigation devices (hereinafter referred to as “car navigation devices” for short) connect to various WEB sites on the Internet via wireless communication means such as cellular phones, and various application programs (hereinafter referred to as “hereinafter referred to as“ car navigation devices ”). It is now possible to download "data" and data. Then, by installing and executing the application and data, the function of the car navigation device is expanded, and the convenience for the user is improved.

  By the way, many car navigation apparatuses are provided with various databases such as a POI (Point of Interest) and a telephone directory accumulated by the user every day as well as a map database for route guidance. On the other hand, there is a possibility that a malicious application may exist among the various downloaded apps, and the database is destroyed or altered by the malicious application, personal information in the database, etc. May be referred to without permission. Therefore, it is necessary to protect the database in the car navigation apparatus from malicious applications, but in the conventional car navigation apparatus, the database is not sufficiently protected at present.

  In general, database access control (data reference or modification control) is performed by checking the user access authority set for each database, but the car navigation system is assumed to be used by a single user. Therefore, the access control by checking the access authority of the user cannot find much effect. In addition, even if it is possible to set a plurality of users in the car navigation device, if a user having a predetermined access right downloads and executes a malicious application, the access right that the user has within the access right Malicious database operations are allowed.

Patent Document 1 and Patent Document 2 do not target a car navigation device, but disclose an example in which database access control is performed using authentication information assigned to a downloaded application by a server or the like. . According to these documents, even when the same user accesses the same database, the authority level of the access level can be changed depending on the presence / absence of authentication information attached to the application to be executed. For example, in the case of access from an application to which authentication information is not given, the access can be blocked.
JP 2003-330557 A JP 2002-182983 A

  In the case of a car navigation device, there may be an added database used by an application downloaded from a WEB site or the like as well as a database originally provided in the car navigation device. Moreover, the added database is similar to the original database of the car navigation device, and there are some which have the effect of extending the original database. Therefore, in such a case, if it is attempted to control access to the database only by the authentication information attached to the application, the degree of freedom of database utilization in the car navigation device, in other words, the degree of freedom of service for the user may be impaired. There is.

  In view of the above-mentioned problems of the prior art, an object of the present invention is to provide a car navigation device that can protect a database from a malicious application and can secure a degree of freedom in utilizing the database. To provide a database management method and program in a car navigation apparatus.

The present invention includes at least an input device, a display device, and a storage device that stores a predetermined embedded database related to route guidance. The database is searched based on input information input from the input device, and the search is performed. A car navigation device configured to include a computer for displaying information on the display device, and a database management method and program, the computer comprising:
(1) When installing an additional application downloaded from another computer via a predetermined communication network, information including identification information of the additional application and information on whether or not the additional application is authenticated is stored as additional application management information. And
(2) When the built-in database is constructed or when an additional database is constructed by the additional application, the identification information of the database related to the built-in database or the additional database to be constructed and the identification information of the application that constructs the database And information including the configuration definition information of the database as database management information,
(3) When accessing the embedded database or the additional database, refer to the additional application management information and the database management information;
(4) Determining whether the application that accesses the database is an embedded application or the additional application that is pre-installed in the car navigation device, and whether the application is an authentication application or a non-authentication application And then
(5) Determine whether the accessed database is the built-in database or the additional database, and whether the accessing application is a database constructed by another application or a database constructed by another application And
(6) Based on the result obtained by the determination, whether or not the database access operation is possible is determined, and the access operation is performed.

  In the car navigation device of the present invention, the database can be protected from malicious applications, and the degree of freedom of database utilization can be ensured.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a diagram showing an example of an overall schematic configuration of a car navigation system to which an embodiment of the present invention is applied. As shown in FIG. 1, a car navigation system 1 includes a car navigation device 10 mounted on a vehicle 5 traveling on a road, a mobile phone 106 as a component of the car navigation device 10, a mobile phone base station 20, a communication network. And the service center 40 connected via the network 30 or the like.

  The car navigation device 10 further includes a main body device unit 101, a display device 102, a GPS (Global Positioning System) receiver 103, a remote controller 105, a mobile phone 106, and the like. The user operates the car navigation device 10 using the remote controller 105, a touch panel (not shown), buttons, switches, and the like. The GPS receiver 103 receives a signal from the GPS satellite 50 and measures the position of the vehicle 5. In addition, the car navigation device 10 includes the mobile phone 106 so that it can communicate with the service center 40 via the base station 20 and the communication network 30.

  On the other hand, the service center 40 includes a communication unit 401, a request processing unit 402, a content management unit 403, a content DB (Database) 404, an application management unit 405, an application DB 406, and the like. Here, the service center 40 stores traffic information related to car navigation such as news, location information, and traffic jam information in the content DB 404, and is added to the car navigation device 10 for installation (hereinafter referred to as “additional application” for short). Is stored in the application DB 406. And according to the request | requirement from the car navigation apparatus 10, traffic information or an application is read from content DB404 or application DB406 suitably, and it distributes to the car navigation apparatus 10. FIG.

  At this time, the communication unit 401 receives a request from the car navigation device 10 transmitted via the communication network 30, and appropriately distributes the traffic information or the additional application to the car navigation device 10. In addition, the request processing unit 402 determines what is the target of the request from the car navigation device 10, and when the request is “distribution of traffic information”, the content management unit 403 makes a request from the content DB 404. Information is taken out and distributed to the car navigation apparatus 10. If the request is “application distribution”, the application management unit 405 retrieves desired information content from the application DB 406 and distributes it to the car navigation device 10.

  In the configuration of the car navigation system 1 described above, it is natural that a plurality of car navigation devices 10 exist, but a plurality of service centers 40 may exist. The service center 40 may distribute information not related to car navigation or additional applications.

  FIG. 2 is a diagram illustrating an example of a functional block configuration of the main body device unit in the car navigation device according to the embodiment of the present invention. As shown in FIG. 2, the main body unit 101 of the car navigation apparatus 10 includes a display processing unit 501, an input processing unit 502, a communication unit 503, a control unit 504, a sensor driver 505, a navigation processing unit 506, a database management unit 507, and an addition. It includes functional blocks such as an application processing unit 508, an additional application management unit 509, and a call processing unit 514, and further includes a database such as an additional application management DB 510, a data configuration definition DB 511, an embedded DB 512, and an additional application DB 513. .

  In FIG. 2, the input processing unit 502 receives input operation information from the remote controller 105 and notifies the control unit 504 of the input operation information. The control unit 504 further notifies the notified input operation information to the navigation processing unit 506, the additional application processing unit 508, and the like. In addition, the control unit 504 displays information on the results processed by the respective processing units on the display device 102 via the display processing unit 501.

  In addition, the control unit 504 downloads content such as an application from the service center 40 connected via the communication unit 503, the mobile phone 106, or the like based on a request from the additional application processing unit 508, the additional application management unit 509, or the like.

  The navigation processing unit 506 is connected to the sensor driver 505, and via the sensor driver 505, acquires position information from the GPS receiver 103, vehicle speed information from a vehicle speed sensor (not shown), angular velocity information from a gyro (not shown), and the like. The current position of the vehicle 5 is measured. Then, a map including the measured current position is displayed on the display device 102, and the current position is displayed with a predetermined mark or the like. Further, the navigation processing unit 506 accesses the embedded DB 512 such as the navigation POIDB 5121 via the database management unit 507, searches the navigation POIDB 5121 for the point information desired by the user, and the points obtained by the search. Is used as a destination to search for a guide route to the destination, and the searched guide route is displayed on a map to provide route guide information to the user.

  The additional application management unit 509 receives an application distribution package 60 including an application such as a Java (registered trademark) program and application information about the application from the service center 40 connected via the communication unit 503 (see FIG. 3 described later). Download). Then, the downloaded application is installed, and the application information is registered in the additional application management DB 510. Further, when the application distribution package 60 includes DB configuration definition information 603 (see FIG. 3 to be described later), the additional application management unit 509 installs the additional application DB 513 used by the additional application. Build together to make it available for use in additional apps.

In the car navigation device 10 of the present embodiment, the database is
(1) a built-in DB 512 incorporated in advance when the car navigation device 10 is shipped from the factory,
(2) Used separately from the additional application DB 513 constructed by information downloaded from the service center 40 by the user. Examples of the embedded DB 512 include a navigation POIDB 5121 and a call address book 5122. The additional application DB 513 includes a POI extension DB 5131 created by the user using an additional application.

  The database management unit 507 manages such a database (embedded DB 512 and additional application DB 513) and controls the construction and deletion of the database, and the database from the navigation processing unit 506, the additional application processing unit 508, and the like. Control access to as appropriate. The database management unit 507 manages the database configuration and its access control information by the data configuration definition DB 511.

  The call processing unit 514 searches the built-in DB 512 for a desired phone book from the call address book 5122 and connects to the mobile phone 106 via the communication unit 503 to support the hands-free phone function.

  2 includes, as hardware, a CPU (Central Processing Unit) (not shown) and a storage device (RAM (Random Access Memory), flash memory, hard disk device, etc.) not shown. And is realized by a computer configured to include at least. That is, the function of each functional block of the main device unit 101 is realized by the CPU executing a predetermined program stored in the storage device. The database data is stored in a predetermined area of the storage device.

  According to the above description, the main body of the operation for realizing the function of the function block in the main body apparatus unit 101 is the CPU. Therefore, the expression “AAA block does XXX” is not originally correct. However, since such expressions are widely used by those skilled in the art, the same expression will be used in the following description. The expression “AAA block does XXX” means “the CPU does XXX (by executing a program corresponding to the AAA block)”.

  FIG. 3 is a diagram illustrating an example of a configuration of an application distribution package when the car navigation apparatus according to the present embodiment downloads an additional application from the service center. As shown in FIG. 3, the application distribution package 60 includes an electronic signature 601, application information 602, DB configuration definition information 603, and an application program 604.

  The electronic signature 601 is attached by the service center 40 or the like using a known technique, and is used to guarantee the validity of the information described in the application information 602 and below. Therefore, when the electronic signature 601 is valid, the application program 604 is authenticated, and when the electronic signature 601 is not valid, the application program 604 is not authenticated.

  The application information 602 includes at least information of “application name”, “program size”, “update date / time”, and “authentication level”. “App name” is information for identifying the application program 604. When the user installs or executes the application program 604, the additional application management unit 509 appropriately displays the “application name” on the display device 102, and requests the user to select it.

  “Program size” is the program size of the application program 604. When the application program 604 is installed, the additional application management unit 509 compares the “program size” with the program size of the actually distributed application program 604, so that the distributed application program 604 is restored to the original one. Verify whether they are the same.

  “Update date / time” is information representing the latest update date / time of the application program 604. When the application program 604 having the same name has already been installed, the additional application management unit 509 compares the update date and time. When the “update date and time” is newer than the installed date, the application program for updating is added. 604 is installed.

  “Authentication level” is information indicating the authentication level of the application program 604. The additional application management unit 509, for example, assumes that “authentication level = 1” represents authentication and “authentication level = 0” represents non-authentication, and manages this “authentication information” in association with the application program 604. Further, the database management unit 507 uses this “authentication information” for database access control. However, it is assumed that “authentication level = 0” when the electronic signature 601 is not attached or when the validity is not recognized.

  The DB configuration definition information 603 is information added when the application program 604 uses a database, and is not added when the database is not used. Details of the DB configuration definition information 603 will be described next with reference to FIGS. The application program 604 is a program described in Java (registered trademark) or the like that constitutes a main body portion of the additional application distributed by the application distribution package 60.

  FIG. 4 is a diagram showing an example of DB configuration definition information according to the present embodiment, where (a) shows an example of database definition information when no inheritance database is provided, and (b) shows a case where an inheritance database is provided. An example of database definition information is shown. 5 is a diagram showing an example of the configuration of the database constructed by the database definition information of FIG. 4A, and FIG. 6 is a diagram of the configuration of the database constructed by the database definition information of FIG. 4B. It is the figure which showed the example.

  As shown in FIG. 4, the DB configuration definition information 61 and 62 is database definition information described using SQL (Structured Query Language) which is a known database language. In the DB configuration definition information 61 in FIG. 4A, “CREATE TABLE” 611 represents a keyword indicating database creation processing, “POI” 612 represents the name of the database, and 613 represents a field definition in the database.

  The additional application management unit 509 requests the database management unit 507 to construct a database based on the DB configuration definition information 61 when installing the additional application. Then, the database management unit 507 constructs a POI database 63 as shown in FIG. At this time, the POI database 63 is provided with fields of “ID” 631, “Name” 632, “Latitude” 633, and “Longitude” 634 according to the DB configuration definition information 61. In FIG. 5, in order to make the configuration of the POI database 63 easier to understand, a database in a state where a predetermined additional application has already stored the record 635 is shown. 635 does not exist.

  In the DB configuration definition information 62 in FIG. 4B, “INHERITS (POI)” 621 is added at the end of the definition sentence for database generation. By adding “INHERITS (POI)” 621, the inheritance relationship of the newly defined TLEMA_POI database can be described. In the case of this example, the parent database of the TLEMA_POI database is a POI database, and a field of “phone number” is added to the field of the parent database.

  When a new database is constructed in accordance with the DB configuration definition information 62, a TLEMA_POI database 64 shown in FIG. 6 is obtained. In the TLEMA_POI database 64, a field of “telephone number” 645 is added to “ID” 641, “name” 642, “latitude” 643, and “longitude” 644 which are the same fields as the POI database 63.

  In FIG. 3, a plurality of DB configuration definition information 603 can be included in the application distribution package 60. In this case, a plurality of databases can be constructed and used by one additional application.

  FIG. 7 is a diagram illustrating an example of the configuration of the additional application management DB according to the present embodiment. As shown in FIG. 7, the record of the additional application management DB 510 includes fields of “application ID” 651, “application name” 652, “authentication” 653, “DB use” 654, and “update date and time” 655. Is done.

  Here, “application ID” 651 is identification information used when managing an additional application internally, and “application name” 652 is information used when displaying the name of the additional application on the display device 102 or the like. “Authentication” 653 is information on the authentication level attached to the additional application (see FIG. 3), “DB use” 654 is information indicating whether the additional application uses a database, “Update date and time” "655" is information on the update date and time of the app when the app was last installed (see FIG. 3).

  A record in the additional application management DB 510 is created by the additional application management unit 509 with reference to the application distribution package 60 of the additional application when the additional application is installed. Further, when the additional application is updated and installed, it is appropriately updated according to the update contents including the field of “update date and time” 655. The field “authentication” 653 is referred to when the database management unit 507 controls access to the database.

  FIG. 8 is a diagram showing an example of the configuration of the data configuration definition DB according to the present embodiment. As shown in FIG. 8, the record of the data configuration definition DB 511 includes fields of “DBID” 661, “DB name” 662, “inheritance source DBID” 663, “owner application ID” 664, and “DB configuration definition information” 665. It is comprised including.

  Here, “DBID” 661 is identification information when the database is managed internally, and “DB name” 662 is information used when displaying the name of the database on the display device 102 or the like. The “inheritance source DBID” 663 is the DBID of the inheritance source database (parent database) when there is a database to be inherited in the database. The “owner application ID” 664 is the owner of the database, that is, the application ID of the additional application that has built the database. The “DB configuration definition information” 665 is database definition information of the database. The “owner application ID” of the built-in program such as the navigation processing unit 506 is “0”.

  The record of the data configuration definition DB 511 is created by the database management unit 507 with reference to the application distribution package 60 of the additional application when the additional application is installed and the database is newly constructed. When the additional application is updated, the field of “DB configuration definition information” 665 is updated.

  FIG. 9 is a diagram illustrating an example of an application installation and update process flow in the car navigation apparatus according to the present embodiment.

  When the control unit 504 (see FIG. 2) receives the operation information of the application installation request from the remote controller 105 or the like via the input processing unit 502 (step S11), the control unit 504 (see FIG. 2) receives the application distribution package from the service center 40 via the communication unit 503. The application having the shape of 60 is downloaded (step S12).

  Upon receiving the notification that the application has been downloaded from the control unit 504, the additional application management unit 509 analyzes the application information 602 included in the downloaded application distribution package 60 (step S13). Then, the additional application management unit 509 searches whether an application having the same name as the application name included in the application information 602 already exists in the additional application management DB 510, and determines whether the application has already been installed. Determination is made (step S14). As a result of the determination, if the downloaded application has not been installed yet (No in step S14), the additional application management unit 509 further determines whether the DB configuration definition information 603 is added to the application distribution package 60. Determine whether. (Step S15).

  If the DB configuration definition information 603 has been added as a result of the determination (Yes in step S15), the additional application management unit 509 installs the downloaded application and constructs a new database based on the DB configuration definition information 603. (Step S16). At this time, the additional application management unit 509 newly adds a record (see FIG. 7) including the application name 652 of the installed application to the additional application management DB 510, and the database management unit 507 includes the data configuration definition DB 511. A new record (see FIG. 8) including the DB name 662 of the newly constructed database is added.

  On the other hand, when the DB configuration definition information 603 has not been added (No in step S15), the additional application management unit 509 installs the application (step S17). At this time, the additional application management unit 509 newly adds a record (see FIG. 7) including the application name 652 of the installed application to the additional application management DB 510.

  If the downloaded application is already installed in the determination in step S14 (Yes in step S14), the additional application management unit 509 displays the update date and time included in the application information 602 of the downloaded application and the additional application management. The update date and time of the application having the same name as the application included in the DB 510 is compared, and it is determined whether or not the update date and time of the downloaded application is newer (step S18). If the updated date and time of the downloaded application is newer (Yes in step S18), the additional application management unit 509 further determines whether or not the DB configuration definition information 603 is added to the application distribution package 60. Is determined (step S19).

  As a result of the determination, when the DB configuration definition information 603 has been added (Yes in step S19), the additional application management unit 509 further searches the data configuration definition DB 511 and the DB in which the application is the owner application. The configuration definition information 665 is extracted, and it is determined whether or not the DB configuration definition information 665 is the same as the DB configuration definition information 603 added to the application distribution package 60 (step S20).

  As a result of the determination, if the two DB configuration definition information is not the same (No in step S20), the additional application management unit 509 installs the application by using the downloaded application program 604 and DB configuration definition information 603. While updating, the field structure of the said database is changed (step S21). At this time, the additional application management unit 509 updates the record of the application in the additional application management DB 510 with the application information 602, and the database management unit 507 updates the record of the database in the data configuration definition DB 511 with the DB configuration definition information 603. To do.

  On the other hand, when the DB configuration definition information 603 is not added in the determination in step S19 (No in step S19), or when both the DB configuration definition information is the same in the determination in step S20 (Yes in step S20). The additional application management unit 509 updates the installation of the application (step S22), and updates the record of the application in the additional application management DB 510 with the application information 602.

  Further, when the update date and time of the downloaded application is not newer in the determination in step S18 (No in step S18), the latest application has already been installed. The process is terminated as it is.

  By installing and updating the application as described above, the application and the database used by the application can be managed in the data configuration definition DB 511, so that the malfunction of the application due to version mismatch between the application and the database can be prevented. it can. In addition, inheritance relationships between databases can be managed.

  FIG. 10 is a diagram schematically illustrating an example of database access control rules according to the present embodiment. Here, the access to the database is controlled depending on whether the application accessing the database is a built-in application (such as the navigation processing unit 506), an authenticated additional application, or an unauthenticated additional application.

In this embodiment, database access control rules are set as shown in (1) to (5) below.
(1) The owner application can refer to the database built by itself and modify it (for example, (1) in FIG. 10).
(2) Regardless of authentication or non-authentication, an additional application cannot refer to or modify a database constructed by another additional application. (For example, (2) in FIG. 10).
(3) The authenticated additional application can refer to the embedded DB 512 (for example, (3) in FIG. 10).
(4) The unauthenticated additional application cannot refer to or modify the embedded DB 512 (for example, (4) in FIG. 10).
(5) The embedded application 521 can refer to the inheritance destination database regardless of whether the owner application is authenticated or not (for example, (5) in FIG. 10).

Each of these rules has the following effects.
(1) and (2): The database can be protected from malicious applications (data alteration and leakage prevention), and the database dependency between the applications can be simplified.
(3) An extended service utilizing a database for navigation processing (embedded DB 512) can be realized. For example, it is possible to realize an application that shows POI data of the navigation POIDB 5121 differently from the embedded application 521, an application that customizes a music selection algorithm based on a music information database managed by the embedded application 521, and the like.
(4) The database can be protected from malicious applications.
(5) Since the built-in application 521 such as the navigation processing unit 506 can use the database accumulated by the additional application, the convenience for the user is improved. For example, the POI information downloaded by the additional application can be used from the navigation processing unit 506.

  FIG. 11 is a diagram showing a list of examples of database access control rules according to the present embodiment. As shown in FIG. 11, the database access control information is shown separately for each attribute difference between the database access application 676 and the accessed database 675.

  In FIG. 11, the access application 676 is divided into an embedded application 673 and an additional application 674, and the additional application 674 is further divided into an authentication application 6741 and an unauthenticated application 6742 based on the authentication field 653 of the additional application management DB 510. Has been. The accessed database 675 is divided into a built-in DB 671 and an additional application DB 672, and the additional application DB 672 is further based on the owner application ID field 664 of the data configuration definition DB 511, and for the own application 6721 and the other application 6722. It is divided into and. Further, the own application 6721 and the other application 6722 are classified into embedded DB inheritance DB67211, 67221 and embedded DB non-inheritance DB67212, 67222 based on the inheritance source DBID field 663 of the database configuration definition DB511. The

  The access control data when the access application 676 classified as described above accesses the accessed database 675 is indicated as reference ◯, reference ×, modification ○, and modification ×. Here, a circle indicates that reference or modification to the database is possible, and a cross indicates that reference or modification to the database is not possible.

  FIG. 12 is a diagram showing an example of the flow of processing for determining database access control in the database management unit according to the present embodiment. As illustrated in FIG. 12, when the database management unit 507 receives an access request for a database in which a DB name is designated from an application (access application) that is attempting to access the database (step S31), the database management unit 507 searches the additional application management DB 510. The application ID of the application is acquired (step S32).

  Next, the database management unit 507 searches the data configuration definition DB 511 based on the designated DB name, and acquires the owner application ID 664 of the record having the DB name (step S33). Then, the database management unit 507 determines whether or not the access application is an embedded application (step S34). When the access application is not an embedded application (No in step S34), the access application is an authentication application. It is determined whether or not there is (step S35).

  As a result of the determination in step S35, when the access application is an authentication application (Yes in step S35), the database management unit 507 determines whether the accessed database is the embedded DB 512 based on the owner application ID 664 of the acquired database. Is determined (step S36). At this time, when the owner application ID is “0”, it is the embedded DB 512, and when the owner application ID is other than “0”, it is an additional application. As a result of the determination in step S36, when the accessed database is the embedded DB 512 (Yes in step S36), the database management unit 507 prohibits modification to the database (modification ×) and permits reference ( Reference (circle)) (step S37).

  When the access application is not an authentication application in step S35 (No in step S35), or in step S36, the accessed database is not the embedded DB 512 (No in step S36), the database management unit 507 further Then, it is determined whether or not the accessed database is the own application DB (step S38). When the database to be accessed is not the own application DB (No in step S38), the database management unit 507 prohibits both modification and reference to the database (modification ×, reference ×) (step S39). When the database to be accessed is the own application DB (Yes in step S38), the database management unit 507 permits both modification and reference to the database (modification ○, reference ○) (step S40).

  On the other hand, if it is determined in step S34 that the access application is a built-in application (Yes in step S34), the database management unit 507 further determines whether or not the accessed database is the embedded DB 512 (step S41). . As a result of the determination, when the accessed database is not the embedded DB 512 (No in step S41), the database management unit 507 further determines that the accessed database (in this case, the accessed database is the additional application DB 513). It is determined whether the embedded DB 512 is inherited (step S42).

  As a result of the determination, if the accessed database does not inherit the embedded DB 512 (No in step S42), the database management unit 507 prohibits both modification and reference to the database (modification ×, reference ×) ( Step S43). Further, when the accessed database is the embedded DB 512 in step S41 (Yes in step S41), or when the accessed database inherits the embedded DB 512 in step S42 (Yes in step S42), database management is performed. The unit 507 permits both modification and reference to the database (modification ○, reference ○) (step S44).

  FIG. 13 is a diagram illustrating an example of a flow of processing when the navigation processing unit 506 according to the present embodiment searches the embedded DB 512 and the inherited additional application DB 513 together. The flow of the process is the process after the completion of the access control information determination performed at the time of database access shown in FIG. 12, and modification and reference are permitted for the navigation POIDB 5121 and its inheritance destination POI extension DB 5131. ing.

  First, the navigation processing unit 506 receives a user operation for instructing “POI search”, for example (step S51). Next, the navigation processing unit 506 makes a “POI search request” to the database management unit 507 (step S52).

  The database management unit 507 receives the “POI search request” (step S53), and searches the database inheriting the navigation POIDB 5121 with reference to the data configuration definition DB 511 (step S54). As a result, it is assumed here that the POI extension DB 5131 has been searched. Subsequently, the database management unit 507 makes a “POI search request” to the navigation POIDB 5121 and its inheritance database (POI extension DB 5131) (step S55).

  In response to the request, the navigation POIDB 5121 and the POI extension DB 5131 each execute POI search processing (steps S56 and S57), and report the search results to the database management unit 507, respectively. Then, the database management unit 507 acquires the search results, sorts the search results, for example, sorts the search results in order of the distance from the vehicle position (step S58), and sorts the search results in the navigation processing unit 506. Is reported (step S59). Further, the navigation processing unit 506 displays the search result acquired from the database management unit 507 on the display device 102 via the display processing unit 501 (step S60).

  As described above, according to the present embodiment, the access control to the database is performed using the attributes of the database access application (whether it is an embedded application, an authenticated additional application, or an unauthenticated additional application) and the attributes of the accessed database ( Protecting the database from malicious applications because it is divided into finely divided according to whether it is a built-in DB, a DB for an additional application of its own application, a DB for an additional application of another application, or the presence of inheritance of a built-in DB) In addition, the database constructed by the built-in application or the additional application can be utilized so as to improve the convenience for the user.

It is the figure which showed the example of the schematic structure of the whole car navigation system with which embodiment of this invention is applied. It is the figure which showed the example of the structure of the functional block of the main body apparatus part in the car navigation apparatus which concerns on embodiment of this invention. It is the figure which showed the example of a structure of the application delivery package when the car navigation apparatus which concerns on embodiment of this invention downloads an additional application from a service center. 4A and 4B are diagrams showing examples of DB configuration definition information according to the embodiment of the present invention, in which FIG. 5A is an example of database definition information when an inheritance database is not provided, and FIG. An example of information is shown. It is the figure which showed the example of the structure of the database constructed | assembled with the database definition information of Fig.4 (a). It is the figure which showed the example of the structure of the database constructed | assembled with the database definition information of FIG.4 (b). It is the figure which showed the example of the structure of additional application management DB which concerns on embodiment of this invention. It is the figure which showed the example of the structure of data structure definition DB which concerns on embodiment of this invention. It is the figure which showed the example of the flow of the installation and update process of an application in the car navigation apparatus of embodiment of this invention. It is the figure which showed typically the example of the rule of the access control of the database which concerns on embodiment of this invention. It is the figure which put together and showed the example of the rule of the access control of the database which concerns on embodiment of this invention in the list. It is the figure which showed the example of the flow of a process which determines the access control of a database in the database management part which concerns on embodiment of this invention. It is the figure which showed the example of the flow of a process at the time of the navigation process part 506 which concerns on embodiment of this invention searching together embedded DB512 and DB 513 for additional applications of the inheritance destination.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Car navigation system 5 Vehicle 10 Car navigation apparatus 20 Base station 30 Communication network 40 Service center 50 GPS satellite 101 Main body apparatus part 102 Display apparatus 103 GPS receiver 105 Remote control 106 Mobile telephone 401 Communication part 402 Request processing part 403 Content management part 404 Content DB
405 Application management unit 406 Application DB
501 Display processing unit 502 Input processing unit 503 Communication unit 504 Control unit 505 Sensor driver 506 Navigation processing unit 507 Database management unit 508 Additional application processing unit 509 Additional application management unit 510 Additional application management DB
511 Data structure definition DB
512 Embedded DB
513 DB for additional applications
514 Call processing unit 5121 POIDB for navigation
5122 Address Book for Calls 5131 POI Expansion DB

Claims (5)

An input device; a display device; and a storage device storing a predetermined embedded database related to route guidance. The database is searched based on input information input from the input device, and the searched information is displayed in the display. A car navigation device configured to include a computer displaying on the device,
The computer is
When an application, which is an application program downloaded from another computer via a predetermined communication network, is installed as an additional application, information including the identification information of the additional application and information on the presence / absence of authentication of the additional application is added. Remember as information,
When constructing the embedded database, or when constructing an additional database by the additional application, the identification information of the database related to the embedded database or the additional database to be constructed, the identification information of the application that constructs the database, and the Information including database configuration definition information is stored as database management information,
When accessing the embedded database or the additional database, refer to the additional application management information and the database management information,
Determining whether the application that accesses the database is an embedded application or the additional application that is pre-installed in the car navigation device, and whether the application is an authentication application or a non-authentication application; ,
Determining whether the accessed database is the built-in database or the additional database, and whether the accessing application is a database constructed by another application or a database constructed by another application;
A car navigation device characterized in that, based on the result obtained by the determination, whether or not the database can be accessed is determined and the access operation is performed. The computer
In the case of constructing the additional database, if the embedded database is designated as a database inherited by the additional database, the identification information of the inheritance source database is included in the database management information and stored.
When there is a search request from the built-in application to the built-in database, referring to the database management information and when there is identification information of an additional database whose inheritance is the built-in database, together with the built-in database The car navigation device according to claim 1, wherein the additional database is also searched. An input device; a display device; and a storage device storing a predetermined embedded database related to route guidance. The database is searched based on input information input from the input device, and the searched information is displayed in the display. A database management method in a car navigation device configured to include a computer displaying on a device,
The computer is
When an application, which is an application program downloaded from another computer via a predetermined communication network, is installed as an additional application, information including the identification information of the additional application and information on the presence / absence of authentication of the additional application is added. Remember as information,
When constructing the embedded database, or when constructing an additional database by the additional application, the identification information of the database related to the embedded database or the additional database to be constructed, the identification information of the application that constructs the database, and the Information including database configuration definition information is stored as database management information,
When accessing the embedded database or the additional database, refer to the additional application management information and the database management information,
Determining whether the application that accesses the database is an embedded application or the additional application that is pre-installed in the car navigation device, and whether the application is an authentication application or a non-authentication application; ,
Determining whether the accessed database is the built-in database or the additional database, and whether the accessing application is a database constructed by another application or a database constructed by another application;
A database management method comprising: determining whether or not the database can be accessed based on a result obtained by the determination and performing the access operation. The computer
In the case of constructing the additional database, if the embedded database is designated as a database inherited by the additional database, the identification information of the inheritance source database is included in the database management information and stored.
When there is a search request from the built-in application to the built-in database, referring to the database management information and when there is identification information of an additional database whose inheritance is the built-in database, together with the built-in database The database management method according to claim 3, wherein the additional database is also searched.   A program for causing a computer to execute the database management method according to claim 3 or 4.

Images