JP2020191048A - On-vehicle device and search system - Google Patents

Abstract

To provide an on-vehicle device and a search system having high search capability while concealing information on a search vehicle and information on a search result.SOLUTION: An on-vehicle device 200 of the present invention searches for a search target having search target information by a sensor mounted on a vehicle 20 by using the search target information received from a search management device 100, and outputs a search result for transmitting the search result to the search management device. The on-vehicle device 200 is characterized in that the search target information includes genuine search target information and spoofed information for disguising a content of the genuine search target information.SELECTED DRAWING: Figure 1

Description

The present invention relates to an in-vehicle device and a search system.

Patent Document 1 discloses a technique for searching a vehicle while protecting personal information. Patent Document 2 discloses a technique for managing information regarding the whereabouts of victims in the event of a disaster. Patent Document 3 discloses a technique for excluding desired probe information from the collection target, if necessary.

JP-A-2018-169880 JP-A-2018-018355 Japanese Unexamined Patent Publication No. 2011-158446

With the increase in the number of self-driving cars, regarding the utilization of data obtained from various sensors installed in running cars, which is called probe data, "examination of standards, rules, methods, etc. necessary for common use in distribution" Is required. In particular, from the viewpoint of privacy protection, it is required to process personal information fairly and transparently. For vehicle-related information possessed by the driver himself / herself, it is desirable to implement informed consent with a business operator that utilizes data in advance, and to utilize the data based on the results. However, while acquiring a large amount of external / internal environment data while the vehicle is running, it is expected that it will be difficult to obtain permission from the data management source.

The present invention has been made in view of the above points, and an object of the present invention is to provide an in-vehicle device and a search system having high search capability while concealing information on a search vehicle and information on a search result. is there.

The in-vehicle device of the present invention that solves the above problems uses the search target information received from the search management device to search for a search target having the search target information by a sensor mounted on the vehicle, and obtains the search result from the search management device. It is an in-vehicle device that is output for transmission to, and is characterized in that the search target information includes genuine search target information and camouflaged information for disguising the contents of the genuine search target information. ..

According to the present invention, by adding camouflaged information to the search target information, the genuine search target information cannot be grasped on the vehicle-mounted device side, and the personal information is more concealed. Further features relating to the present invention will become apparent from the description herein and the accompanying drawings. In addition, problems, configurations, and effects other than those described above will be clarified by the following description of the embodiments.

The block diagram of the search system of 1st Embodiment to which this invention was applied. The flowchart explaining the method of generating the search target information in the search management apparatus of 1st Embodiment. The flowchart explaining the method of delivering the search request from the search management device of 1st Embodiment to a search vehicle. The flowchart explaining the method of registering the search vehicle management information in 1st Embodiment. The flowchart explaining the flow of processing at the time of search on the search management apparatus side of 1st Embodiment. The flowchart explaining the flow of processing at the time of search on the vehicle-mounted device side of 1st Embodiment. It is a flowchart explaining the flow of processing at the time of search on the search management apparatus side of 2nd Embodiment, and is the flowchart corresponding to FIG. 5 of 1st Embodiment. It is a flowchart explaining the flow of processing at the time of a search on the vehicle-mounted apparatus side of 2nd Embodiment, and is the flowchart corresponding to FIG. 6 of 1st Embodiment. .. A ladder chart illustrating a flow of processing for search registration and distribution of a search vehicle according to the first embodiment. The figure explaining an example of the distribution method of the search information list in 2nd Embodiment. The figure explaining the operating state of the sensor of the vehicle at the time of a normal time and the time of a search in 2nd Embodiment. A ladder chart for explaining the flow of processing at the time of searching the search system of the second embodiment. A ladder chart illustrating an example of a method of distributing personal information according to the second embodiment.

<First Embodiment>
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram of a search system according to the first embodiment to which the present invention is applied, and shows a schematic configuration of functional blocks constituting the search system according to the present embodiment.

The search system 1 includes a search management device (management device) 100 on the center side that requests a search, and an in-vehicle device (search device) 200 that searches for a search target. The search management device 100 of the present embodiment is not limited to the stationary type, and may be a mobile type mounted on a vehicle. The in-vehicle device 200 may be a device independent of the vehicle such as a mobile terminal, or a device integrated with the vehicle such as a car navigation system.

The search management device 100 has a search target information creation program 110, a search vehicle management program 120, and a search command management program 130. Each program provides its own function by being executed by the arithmetic unit in the device 100. That is, although the operating subject is each arithmetic unit, each program will be described below with each program as the subject in order to simplify the explanation. The arithmetic unit that executes each program may be an arithmetic unit of a separate device, or executes all of a plurality of programs such as the search target information creation program 110, the search vehicle management program 120, and the search command management program 130. It may be an arithmetic unit of one possible terminal or device.

The search target information creation program 110 includes a search target information creation unit 111 that creates genuine search target information (search conditions) for a search target (for example, a pedestrian or a vehicle) in response to a request from a search requester, and a genuine search. It has a camouflage information giving unit 112 that gives camouflage information to the target information. The search target information includes information for searching for a plurality of types of features. The search vehicle management program 120 has a search vehicle management unit 121 that manages at least one or more search vehicles and their search functions, and a search vehicle management information 122 that is management information managed by the search vehicle management unit 121.

The search command management program 130 includes a search information list 131 that lists search target information, a search instruction management unit 132 that manages search instructions and search status of search targets using the search information list 131, and an in-vehicle device 200. A search result that determines whether or not the search result is a genuine search target by comparing the search result received from the management device communication unit 135 that sends and receives information between the management device communication unit 135 and the genuine search target information. It has a determination unit 133 and a search result notification unit 134 that notifies the search requester of the search result of the search result determination unit 133.

The management device communication unit 135 has a search vehicle request function for requesting whether or not a vehicle existing in the search target area can be searched, and a search target to which disguised information is given to the searchable vehicle. It has a search request instruction function that transmits information and makes a search request, and a reception function that receives search results from the vehicle.

The in-vehicle device 200 uses the search target information received from the search management device 100 to search for a search target having the search target information by a sensor mounted on the vehicle, and outputs the search result to be transmitted to the search management device 100. To do. The in-vehicle device 200 delivers a search vehicle request receiving function that receives a search request from the search management device 100 and notifies the search availability and searchable contents, a search command receiving function that receives search target information, and a search result. A vehicle communication unit 201 having a search result distribution function, a search function management unit 202 that manages functions that can be searched by the own vehicle such as a pedestrian or a vehicle using the search function list 203, and a function for searching and detecting a search target. The search execution unit 204 has a function of adding time / position information to the detected image information and the like, and a function of notifying the vehicle communication unit 201 of the detection result when the vehicle starts the search. It also has a search data management unit 206 that manages search data using the search result list 207 that reflects the search results. The search data management unit 206 has an encryption / anonymization processing function that encrypts and anonymizes the search result information, and a search result storage function that stores the anonymized and encrypted search result information.

FIG. 2 is a flowchart illustrating a method of generating search target information in the search management device of the present embodiment. The flowchart shown in FIG. 2 is a flow for generating search target information in which disguised information is added to genuine search target information so that personal information is not specified from the vehicle-mounted device 200 side as the search management device 100.

First, the search target information creation unit 111 on the search target information creation program 110 acquires genuine search target information (S201). Next, the search target information creation unit 111 determines whether or not there is an item corresponding to the personal information in the genuine search target information (S202). The personal information referred to here can be defined as, for example, information about a living individual, and can identify a specific individual by the name, date of birth, or other description included in the information.

Then, if there is an item corresponding to personal information in the genuine search target information (YES in S202), the item corresponding to personal information is anonymized (S203). Anonymization of personal information means information that cannot identify a specific individual. Known methods for anonymizing personal information include deletion of personally identifiable information, deletion of attributes, deletion of pseudonymization, processing such as generalization and disturbance, and k-anonymization that combines these. The method can be used.

After that, the disguised information giving unit 112 randomly adds disguised information to the anonymized genuine search target information, and generates the search target information to which the disguised information is added (S204). The camouflaged information is information given in order to hide the genuine search target information, and has information for disguising the content of the genuine search target information. For example, it is information used for generalizing by replacing the attribute value of the genuine search target information with a higher value or concept.
The search target information to which the camouflaged information is added includes information that hits other than the genuine search target information. That is, the search target information includes genuine search target information and spoofed information for disguising the content of the genuine search target information. For example, if the attribute of the information of the genuine search target is female, the information of the attribute of male is added, or if the attribute of the information of the genuine search target is 6 years old, the concept of 0 to 10 years old. By replacing with, it is possible to hit information other than the genuine search target information in addition to the genuine search target information when searching, and the genuine search target information can be hidden from the in-vehicle device 200.

FIG. 3 is a flowchart illustrating a method of delivering a search request from the search management device of the present embodiment to the vehicle. First, a search request is delivered from the management device communication unit 135 to a plurality of vehicle-mounted devices 200 under specific conditions according to the instructions of the search instruction management unit 132 (S301). The specific condition corresponds to the range of the search target area through which the vehicle is passing. That is, the search management device 100 delivers the search request to a plurality of vehicles existing in the search target area.

The vehicle that has received the search request delivered from the search management device 100 uses the vehicle communication unit 201 of the in-vehicle device 200 to obtain an ID that can identify the searchable vehicle and information on the search function held by the vehicle in the search management device. It is transmitted to 100, and the search management device 100 receives this information from the vehicle (S302). The vehicle search function is a function that allows the vehicle to detect a search target, such as a pedestrian detection function and an object recognition function, and is detected by a sensor mounted on the vehicle. In order to enable the search vehicle management unit 121 of the search vehicle management program 120 to manage which vehicle has what kind of search function, the search vehicle information is registered in the search vehicle management information 122 (S303).

FIG. 4 is a flowchart illustrating a method of registering search vehicle management information in the present embodiment, and is a flow of accepting a request for a search vehicle as an in-vehicle device 200. First, it is determined whether or not the own vehicle has received the search request from the search management device 100 (S401). The search request is made by transmitting the search information list 131 from the management device communication unit 135 to the vehicle communication unit 201 of the vehicle-mounted device 200 according to the instruction of the search instruction management unit 132. When the own vehicle receives the search request from the search management device 100 (YES in S401), the own vehicle searches the search function management unit 202 for the currently available search function of the own vehicle stored in the search function list 203 (S402). ..

Then, the vehicle ID that can identify the own vehicle and the information of the available search function of the own vehicle are transmitted to the search management device 100 (S403). This transmission is performed from the vehicle communication unit 201 to the management device communication unit 135 of the search management device 100 at the instruction of the search function management unit 202. If the own vehicle does not have the search function requested by the search management device 100, or if the search request from the search management device 100 is not accepted, the vehicle does not have to reply to the request request. .. The search vehicle management information transmitted from the in-vehicle device 200 to the search management device 100 is registered as the search vehicle management information 122 in the search vehicle management unit 121 of the search management device 100 (S404).

FIG. 5 is a flowchart for explaining the flow of processing at the time of search on the search management device side of the present embodiment, and the search management device 100 side distributes search target information to searchable vehicles and receives the search result. It becomes a flow to judge. First, the search target information in which personal information is anonymized and camouflaged information is added is delivered to the in-vehicle device 200 of the searchable vehicle (S501). The search target information to which the camouflage information is added is distributed from the management device communication unit 135 of the search management device 100 to the vehicle communication unit 201 of the vehicle-mounted device 200. As the information of the searchable vehicle, the search vehicle management information 122 held by the search vehicle management unit 121 of the search vehicle management program 120 is used. The search vehicle 20 (see FIG. 11) that receives the search request from the search management device 100 searches for the search target using the search target information to which the camouflaged information is attached, and transmits the search result to the search management device 100. ..

The search management device 100 receives the search result from the search vehicle 20 (S502). The reception may be performed after waiting for a response for a while after the distribution. The search management device 100 compares the genuine search target information with the received search result in the search result determination unit 133, and determines whether the search target can be predicted from the search result (S503). The search result determination unit 133 excludes the disguised information from the information of the search result and predicts the genuine search target from the remaining information. After that, the search result notification unit 134 notifies the search requester of the information of the search result expected to be the search target (S504).

The search management device 100 determines whether or not there is a high possibility of being a search target based on the information of the search result, and if it is determined that there is a high possibility, raises the search request level and the corresponding search vehicle. Requests for distribution of a person image and position information are made to 20. As a result, a more accurate search can be performed while the personal information is kept secret.

FIG. 6 is a flowchart for explaining the flow of processing at the time of search on the in-vehicle device side of the present embodiment. After receiving the search target information from the search management device 100 on the in-vehicle device 200 side and detecting the search target, It is a processing flow at the time of search that delivers the detection information to the search management device 100. First, the vehicle communication unit 201 receives the search target information to which the camouflaged information distributed from the vehicle-mounted device 200 is added (S601).

When the search target information is received (YES in S601), the search target information to which the camouflage information is added is stored in the search information list 205 by the search execution unit 204, and based on the search target information to which the camouflage information is given. , Executes a search for a search target such as a pedestrian or a vehicle (S602). The search execution unit 204 executes the search until the search target is detected (S603), but since the detection is performed based on the search target information to which the spoofed information is attached, the recognition rate is not 100% but a certain level or more. If there is a rate, it is determined that the search target has been detected (hit) (YES in S603). Further, the detection information may be plural in a certain search target area or search period.

Further, the search execution unit 204 adds time information and position information at the time of detection to the detection information determined to have detected the search target (S604). Various detection information such as image information and time position information acquired at the time of detection are stored in the in-vehicle device 200 as a search result list 207 via the search data management unit 206 (S605). After that, the search data management unit 206 anonymizes the personal information included in the detection information (S606) and distributes it from the vehicle communication unit 201 to the search management device 100 (S607). The personal information anonymized by the search data management unit 206 also includes information on the search result and the presence or absence of a hit on the search target information.

FIG. 9 is a ladder chart illustrating a flow of processing for search registration and distribution of a search vehicle.
The center 10 shown in FIG. 9 has a search management device 100, and the vehicle 20 has an in-vehicle device 200. When the search management device 100 of the center 10 acquires the genuine search target information from the search requester, the search target information creation unit 111 anonymizes the item corresponding to the personal information and gives the search target information disguised information. Is created and stored as the search information list 131.

Then, the search information list 131 is distributed to the vehicles 20 existing in the search target area, and it is confirmed whether or not each vehicle 20 can search (S901). Each vehicle 20 inquires a search item that can be detected by the sensor of its own vehicle 20 from the search information list 131 provided by the search management device 100 (S902), creates a search function list 203, and uses it as search vehicle information. It is provided to the search management device 100 together with the vehicle ID (S903). As a result, an agreement is reached on the content of the information to be distributed between the vehicle 20 which is a searcher and an information provider and the center 10.

FIG. 10 is a diagram illustrating an example of a method of distributing the search information list. Here, the search information is registered for distribution to the center 10, and only the registered information is distributed. For example, as shown in FIG. 10, a search information list 131 having three items of search target information, "child", "license plate", and "animal", is distributed to each vehicle 20A to 20C. Each vehicle 20A to 20C delivers a search item that can be detected by its own vehicle 20 from these items to the center 10.

For example, the vehicle 20A informs the center 10 that it has a function of searching for all of "children", "license plates", and "animals", and the vehicle 20B has a function of searching for "children". It is possible to inform the center 10 that the vehicle is present, and that the vehicle 20C has a function of searching for both "children" and "animals".

Based on the information in the search function list 203, the center 10 registers the vehicle 20A capable of detecting the search target from each vehicle 20 as the search vehicle 20. Then, the registered search vehicle 20 is requested to deliver the detection information which is the search result of the search target. The search vehicle 20 detects the search target by using a sensor suitable for detecting the item of the search target information.

FIG. 11 is a diagram for explaining the operating state of the vehicle sensor during normal operation and search. The in-vehicle device 200 may change the sensor accuracy of the sensor mounted on the vehicle according to the search target information. For example, as shown in FIG. 11, during normal automatic driving, the detection sensor in front of the vehicle is operated to detect within the front detection range Sa, but at the time of search, it is adjusted to the item of the search target information. In addition to the detection sensor in front of the vehicle, the detection sensor on the side of the vehicle and the detection sensor in the rear of the vehicle are operated to detect the left and right detection ranges Sb, Sc, and the rear detection range Sd so that the search target can be detected. You may. By adding the left and right detection ranges Sb and Sc and the rear detection range Sd in this way, the sensor accuracy of the sensor mounted on the vehicle can be improved. For example, when searching for the license plate number of the preceding vehicle, only the front detection sensor is operated, and when searching for a pedestrian, the omnidirectional detection sensor may be operated to change the sensor accuracy. Good.

The in-vehicle device 200 of the search vehicle 20 matches the detection information detected by the detection sensor with the search target information. Then, when it is determined that the search target has been detected, a process of shaping the detection information is performed. In the detection information shaping process, a process of anonymizing personal information such as image information and location information included in the detection information is performed. By the anonymization process, for example, the location information (longitude / latitude) of the search target is changed to the information of the municipality name. Then, the in-vehicle device 200 delivers the shaped detection information to the search management device 100 of the center 10 as a search result.

When the center 10 acquires the detection information from the plurality of search vehicles 20, the center 10 analyzes the information. Personal information is anonymized in the detection information, and information that matches the camouflaged information is also included. The search management device 100 of the center 10 excludes the camouflaged information from the detection information and predicts whether the remaining information is the genuine search target information. Then, when it is predicted that the search target information is genuine, personal information such as a detection image and position information stored in the search vehicle 20 is acquired from a public institution or the like.

For example, the genuine search target information held by the center 10 is female in gender, 11 years old in age, 120 cm in height, casual clothes, and reddish. For this genuine search target information, the center 10 When the disguised information that the gender is male is given, the search result in the vehicle and the information transmitted to the center 10 become information on the gender, age, height, and clothes. Then, the center 10 excludes gender, which is disguised information, from the detection information, extracts search target information such as age, height, and clothes, and determines the search result by comparing with the genuine search target information. Then, when the center 10 determines that there is a high possibility that the person is searching, the search request level is raised and the corresponding vehicle is requested to deliver the person image and the position information. In this way, the in-vehicle device 200 changes the content of the search result disclosure to the search management device 100 and transmits it depending on the search request level.

In the search system 1 of the present embodiment, the search management device 100 anonymizes personal information to create search target information to which spoofed information is added, and the search target information is distributed to the in-vehicle device 200. Then, the in-vehicle device 200 searches for the search target using the search target information to which the camouflaged information is added. The search for the search target is performed by the sensor of the vehicle 20, and the detection information of the sensor is distributed to the search management device after the personal information is anonymized by the in-vehicle device 200.

According to the search system 1 of the present embodiment, the search management device 100 creates search target information in which personal information is anonymized and spoofed information is added to the genuine search target information, and the in-vehicle device 200 searches. Since the search target is searched using the search target information created by the management device 100, the in-vehicle device 200, which is the searcher, cannot grasp the personal information of the search target, and the personal information is more concealed. .. Then, since the in-vehicle device 200 anonymizes the personal information included in the search result and provides it to the search management device 100, it is possible to actively promote the disclosure of the search result by the search vehicle and increase the disclosure range thereof. In addition, the disclosure of personal information held in the vehicle is provided only to the organization having the public key, so that the searcher can further improve the search accuracy.

<Second Embodiment>
Next, the second embodiment of the present invention will be described. The same components as those in the first embodiment are designated by the same reference numerals, and detailed description thereof will be omitted.

What is characteristic of this embodiment is that the in-vehicle device 200 is configured to encrypt the detection information before anonymization by using the public key and store the encrypted detection information in the in-vehicle device 200.

FIG. 7 is a flowchart illustrating a flow of processing at the time of search on the search management device 100 side of the present embodiment. The flowchart shown in FIG. 7 is a flowchart corresponding to FIG. 5 of the first embodiment, and is used as a search management device 100 at the time of search for encrypting image information (detection result image) acquired at the time of detection on the vehicle 20 side. It becomes the processing flow of. The search management device 100 also distributes the public key to the searchable vehicle 20 according to the instruction of the search instruction management unit 132, together with the search target information to which the management device communication unit 135 has given disguised information (S701). ..

FIG. 8 is a flowchart illustrating a flow of processing during a search on the vehicle-mounted device side of the present embodiment. The flowchart shown in FIG. 8 is a flowchart corresponding to FIG. 6 of the first embodiment, and is a processing flow at the time of a search for encrypting the detection result image using the public key on the vehicle-mounted device 200 side.

The vehicle-mounted device 200 receives the public key transmitted from the search management device 100 and the search target information to which the camouflaged information is added by the vehicle communication unit 201 (S801). Further, when the search execution unit 204 and the search data management unit 206 store detection information such as image information in the in-vehicle device 200, the public key is used for encryption (S802).

Decryption with the private key may be done outside the search system. The corresponding vehicle is identified from the vehicle ID that holds the result close to the genuine search target information from the search result, the encrypted detection information stored in the vehicle is acquired, and the decryption is performed using the private key. You may do this, or you may send the encrypted detection information to the search management device 100 and decrypt it.

The in-vehicle device 200 of the search vehicle 20 anonymizes the personal information included in the detection information and encrypts the detection information in shaping the detection information. The detection information is encrypted using the public key. When the search management device 100 of the center 10 acquires the detection information from the plurality of search vehicles 20, it decrypts the information using the private key and analyzes the information.

FIG. 12 is a ladder chart illustrating a flow of processing during a search of the search system 1.
As shown in FIG. 12, at the time of searching by the search system 1, the search management device 100 of the center 10 creates a public key and a private key. Then, disguised information is added to the genuine search target information to create the search target information for distribution (S1201). Then, the center 10 requests the search result and provides the public key to the search vehicle 20 (S1202).

The in-vehicle device 200 of the vehicle 20 changes the sensor configuration necessary for searching the search target based on the search target information added to the search result request, and determines the search result for the detection item detected by the sensor. To do. When the search result is the search target, personal information such as detection time and location information is anonymized. The detected personal information is encrypted using the public key (S1203). If it cannot be detected immediately, a search will be conducted for a certain period of time. Then, the information of the search result is distributed to the center 10 (S1204).

The investigation management device 100 of the center 10 removes the camouflaged information from the investigation result information and determines whether or not it is a genuine search target (S1205). If it is a genuine search target, a specific institution will request the disclosure of personal information.

FIG. 13 is a ladder chart illustrating an example of a method of distributing personal information.
As shown in FIG. 13, the center 10 requests the search vehicle 20 to acquire personal information as information on the search result (S1301). The search vehicle 20 confirms whether the requester has the right to access personal information. Then, the personal information which is the encrypted search result is searched (S1302). Then, when it is confirmed that the requester has the access right to the personal information, the encrypted search result (personal information) is delivered to the center 10 (S1303). The center 10 decrypts the search result using the private key (S1304).

According to the search system 1 of the present embodiment, the detection information acquired by the in-vehicle device 200 is encrypted by using the public key, the personal information included in the detection result is anonymized, and then the information is distributed to the search management device 100. , The disclosure range of personal information can be limited.

According to the search system 1 of each of the above-described embodiments, personal information can be concealed and the handling of information can be facilitated by adding anonymization, encryption, and spoofed information when utilizing the information. .. For example, the center 10 side anonymizes the search target information, embeds the camouflaged information, and grasps the embedded items. The search vehicle 20 performs a search based on the search target information that is anonymized and has camouflaged information embedded in it, and notifies the center 10 of the detection information that is the search result. The center 10 determines whether or not it is a search target based on the genuine search target information that it has grasped. As a result, the personal information to be searched cannot be grasped except at the center 10. Further, by encrypting the detection information acquired by the search vehicle 20 with the public key managed by the center 10, it is possible to prevent the detection information including personal information from being viewed only by an organization having a specific access authority.

Although the embodiments of the present invention have been described in detail above, the present invention is not limited to the above-described embodiments, and various designs are designed without departing from the spirit of the present invention described in the claims. You can make changes. For example, the above-described embodiment has been described in detail in order to explain the present invention in an easy-to-understand manner, and is not necessarily limited to the one including all the described configurations. Further, it is possible to replace a part of the configuration of one embodiment with the configuration of another embodiment, and it is also possible to add the configuration of another embodiment to the configuration of one embodiment. Further, it is possible to add / delete / replace a part of the configuration of each embodiment with another configuration.

1 Search system 10 Center 20 Vehicles (search vehicle)
100 Search management device (management device)
110 Search target information creation program 111 Search target information creation unit 112 Impersonation information assignment unit 120 Search vehicle management program 121 Search vehicle management department 122 Search vehicle management information 130 Search command management program 131 Search information list 132 Search instruction management unit 133 Search result judgment Unit 134 Search result notification unit 135 Management device Communication unit 200 In-vehicle device (search device)
201 Vehicle Communication Department 202 Search Function Management Department 203 Search Function List 204 Search Execution Department 205 Search Information List 206 Search Data Management Department 207 Search Result List

Claims (9)

It is an in-vehicle device that uses the search target information received from the search management device to search for a search target having the search target information by a sensor mounted on the vehicle, and outputs the search result to be transmitted to the search management device. ,
The in-vehicle device, characterized in that the search target information includes genuine search target information and camouflaged information for disguising the contents of the genuine search target information. The vehicle-mounted device according to claim 1, wherein the search target information includes information for searching a plurality of types of features. The vehicle-mounted device according to claim 1, wherein the presence or absence of a hit to the search result and the search target information is anonymized. The vehicle-mounted device according to claim 1, wherein when there is information hit by the search, the information before anonymization is encrypted with the public key received from the search management device and stored. The vehicle-mounted device according to claim 1, wherein the sensor accuracy of a sensor mounted on the vehicle is changed according to the search target information. The vehicle-mounted device according to claim 1, wherein the content of the search result disclosure to the search management device is changed and transmitted depending on the search request level. A search system including a plurality of search devices and a management device for managing the plurality of search devices.
The management device acquires genuine search target information, creates search target information in which disguised information is added to the genuine search target information, and distributes the search target information to the plurality of search devices.
The search device searches for a search target using the search target information to which camouflaged information is attached, and provides the search result to the management device.
The management device excludes the camouflaged information from the search result information provided by the search device, compares it with the genuine search target information, and determines whether or not the search result is the search target. A search system characterized by doing. The management device creates search target information in which personal information included in the genuine search target information is anonymized and spoofed information is added to the genuine search target information.
The search device is characterized in that it searches for a search target using the search target information to which anonymized and spoofed information is attached, and anonymizes the personal information contained in the search result and provides it to the management device. The search system according to claim 7. The management device distributes the search target information and the public key,
The search system according to claim 8, wherein the search device encrypts and stores information on a search result in which the personal information is anonymized by using the public key.

Images