JP2021140698A - On-vehicle security device - Google Patents

Abstract

To provide an on-vehicle security device capable of improving security while suppressing complication in structure and increase of costs when a cargo chamber of a vehicle is used to receive a baggage.SOLUTION: An on-vehicle security device comprises, for example, a setting unit, a detection unit, and a control unit. The setting unit sets a baggage reception mode that permits reception of an authenticated baggage into a first region for a vehicle in which the first region in a vehicle chamber where reception of an authenticated baggage which has been authenticated in advance is allowed and a second region other than the first region are set. The detection unit detects an openable state of a door in communication with the first region. The control unit outputs warning information that suppress entry to the second region when a behavior indicating possibility of entry of a carrier of the authenticated baggage into the second region is detected in the openable state of the door.SELECTED DRAWING: Figure 3

Description

An embodiment of the present invention relates to an in-vehicle security device.

In recent years, with the increase in the use of online shopping and the like, there are increasing opportunities to use delivery by vendors (so-called home delivery). In this case, if the recipient is absent, redelivery processing is required, which causes problems such as an increase in delivery work and an increase in labor costs. In apartment houses, etc., delivery boxes, etc. may be installed and used, but there are problems in terms of installation space and cost. Therefore, a technique has been proposed in which the luggage compartment space of the vehicle is used for receiving luggage. For example, a vehicle having a small back door for receiving luggage has been proposed (Patent Document 1). In addition, a technology has been proposed that allows the door to be opened by using a one-time password, saves imaging information when an intrusion into a part other than the luggage compartment is detected, and performs alarm processing (alarm processing). Patent Document 2).

JP-A-2019-59259 Japanese Unexamined Patent Publication No. 2019-114907

However, in the case of the technology of Patent Document 1, a vehicle having specifications capable of receiving luggage is newly prepared or a large-scale modification is required, resulting in an increase in cost, an increase in vehicle weight, and pressure on the luggage space. Etc. occur. Further, in the case of the technique of Patent Document 2, intrusion into a portion other than the luggage compartment is detected, but the detection and the alarm are detected after the intrusion, and there is room for improvement in terms of crime prevention.

Therefore, one of the problems of the present invention is to provide an in-vehicle crime prevention device capable of further improving security while suppressing complication of structure and increase in cost when the luggage compartment of the vehicle is used for receiving luggage. To do.

The vehicle-mounted security device according to the embodiment of the present invention includes, for example, a setting unit, a detection unit, and a control unit. The setting unit first sets the authenticated luggage for the vehicle in which the first area where the pre-certified certified luggage is allowed to be accepted in the vehicle interior and the second area other than the first area are set. Set a baggage claim mode that allows the area to be accepted. The detection unit detects the openable state of the door communicating with the first region. When the control unit detects a behavior indicating the possibility of the authenticated luggage carrier entering the second area while the door can be opened, the control unit outputs warning information for suppressing the intrusion into the second area. According to this configuration, for example, before the luggage carrier invades the second area, the alarm information is output at a time when there is a possibility of intrusion, so that the security can be improved.

The control unit of the vehicle-mounted security device according to the embodiment of the present invention is based on, for example, the distance from the boundary surface between the first region and the second region to the luggage carrier and the speed of the behavior of the luggage carrier. The possibility of the carrier entering the second area may be determined. According to this configuration, for example, the approach detection to the second region can be performed at an appropriate timing based on the speed of the behavior of the luggage carrier.

The control unit of the vehicle-mounted security device according to the embodiment of the present invention may make the content of the warning information different based on, for example, the high possibility of the luggage carrier entering the second region. According to this configuration, for example, excessive warning can be easily avoided. For example, when the possibility of intrusion is low, a gentle expression warning can be output, and conversely, when the possibility of intrusion is high, a strict expression warning can be output, and the intrusion intention is not recognized. It is less likely to cause discomfort to a person, and it is easy to give an efficient warning to a person who is recognized as having an intention to invade.

The control unit of the vehicle-mounted security device according to the embodiment of the present invention may output, for example, information indicating that the vehicle interior is being monitored as warning information. According to this configuration, for example, a more specific message can be given to the luggage carrier.

The control unit of the vehicle-mounted security device according to the embodiment of the present invention may output warning information to a recognition device that can be recognized outside the vehicle. According to this configuration, for example, it is possible to notify a person outside the vehicle that an emergency situation has occurred, and the security can be further improved.

FIG. 1 is an exemplary and schematic configuration diagram of a vehicle in which a luggage compartment and a passenger compartment communicate with each other on which the in-vehicle security device according to the embodiment can be mounted. FIG. 2 is an exemplary and schematic block diagram showing a functional configuration of a vehicle including an in-vehicle security device according to an embodiment. FIG. 3 is a block diagram schematically and schematically showing a configuration when the in-vehicle crime prevention device according to the embodiment is realized by a CPU. FIG. 4 is an exemplary and schematic diagram showing a state in which a luggage carrier (delivery person) carries a certified luggage into the luggage compartment of a vehicle in the in-vehicle crime prevention device according to the embodiment. FIG. 5 is an exemplary and schematic diagram illustrating the behavior prediction of a luggage carrier (delivery person) in the in-vehicle crime prevention device according to the embodiment. FIG. 6 is an exemplary and schematic diagram illustrating other behavior predictions of a luggage carrier (delivery person) in the vehicle-mounted security device according to the embodiment. FIG. 7 is an exemplary and schematic diagram illustrating a change in seat posture in the home delivery mode in the vehicle-mounted security device according to the embodiment. FIG. 8 is an exemplary flowchart illustrating a security process when receiving a certified baggage in the vehicle-mounted security device according to the embodiment in the luggage compartment of the vehicle. FIG. 9 is an exemplary flowchart illustrating the behavior prediction process in the flowchart of FIG. FIG. 10 is an exemplary flowchart illustrating another behavior prediction process in the flowchart of FIG. FIG. 11 is an exemplary flowchart illustrating a security process that involves changing the seat posture when receiving the certified luggage in the vehicle-mounted security device according to the embodiment in the luggage compartment of the vehicle. FIG. 12 is an exemplary and schematic diagram showing a state in which a luggage carrier (delivery person) carries a certified luggage into the luggage compartment of a vehicle in which the luggage compartment and the passenger compartment are separated in the in-vehicle crime prevention device according to the embodiment. It is a figure.

Hereinafter, exemplary embodiments of the present invention will be disclosed. The configurations of the embodiments shown below, as well as the actions, results, and effects produced by such configurations, are examples. The present invention can be realized by a configuration other than the configurations disclosed in the following embodiments, and at least one of various effects based on the basic configuration and derivative effects can be obtained. ..

FIG. 1 is an exemplary and schematic configuration diagram of a vehicle 12 capable of mounting an ECU (electronic control unit) 10 including an in-vehicle security device of the present embodiment. The vehicle 12 is a so-called "two-box type" vehicle in which the vehicle compartment 14 is separated from the engine room 16 in which the engine or the like is mounted. In the passenger compartment 14, the luggage compartment 14a and the passenger compartment 14b communicate with each other. The luggage compartment 14a is separated from the passenger compartment 14b by the backrest 18a of the rear seat 18 installed in the passenger compartment 14. That is, the luggage compartment 14a and the passenger compartment 14b are only simply separated and substantially communicate with each other.

The vehicle 12 may be, for example, an automobile (internal engine vehicle) whose drive source is an internal combustion engine (engine, not shown), or an automobile (electric vehicle) whose drive source is an electric motor (motor, not shown). , Fuel cell vehicle, etc.), or a vehicle (hybrid vehicle) that uses both of them as drive sources. Further, the vehicle 12 can be equipped with various transmission devices, and can be equipped with various devices (systems, parts, etc.) necessary for driving the internal combustion engine and the electric motor. In addition, the method, number, layout, and the like of the devices involved in driving the wheels (front wheels, rear wheels) in the vehicle 12 can be set in various ways.

The vehicle 12 of the present embodiment is, for example, a vehicle that enables the luggage compartment 14a to be used as a receiving place (temporary storage place for receiving) of the cargo (delivery baggage) delivered by the delivery company (courier company). Then, the in-vehicle crime prevention control (control by the in-vehicle security device) executed by the ECU 10 monitors the behavior of the delivery person (luggage carrier) when bringing the luggage into the luggage compartment 14a, and issues a message or a warning as necessary. Output. As a result, a third-party delivery person can invade the cabin 14b, which is substantially in communication with the luggage compartment 14a, even if the baggage recipient, who is the owner of the vehicle 12, does not exist around the vehicle 12. It can be suppressed and security can be improved.

In the present embodiment, the luggage delivered to the luggage compartment 14a is a luggage that has been approved (certified) to be received in the luggage compartment 14a in advance. The authentication of home delivery using the luggage compartment 14a is, for example, an authentication code (for example, one-time pass) issued only once to the delivery person by the management system of the delivery company in advance at the request of the package recipient (user M). It is executed using code) etc. An authentication code is issued for each package, or for each delivery when multiple packages are delivered at the same time (in the case of individual delivery). Then, when the delivery person approaches the vehicle 12 designated as the delivery place, the delivery person opens a specific door of the vehicle 12, for example, the luggage compartment 14a by receiving authentication using the issued authentication code. The back door 12a can be opened only once, and the luggage can be delivered to the luggage compartment 14a. After the delivery is completed, the back door 12a is closed and locked, so that only the user M (regular user such as the owner) of the vehicle 12 can open the door of the vehicle 12 including the back door 12a. Maintain the security of the vehicle 12 after the delivery act. The ECU 10 (vehicle-mounted security device) of the present embodiment does not output an alarm when a third party such as a delivery person invades the room 14b, but depends on the behavior of the delivery person during the delivery work. It is configured to estimate the possibility of intrusion into 14b and output various messages at a stage before the intrusion act (illegal act) according to the degree of the possibility. As a result, it is possible to suppress intrusion and output a message in consideration of not giving excessive discomfort to the delivery person who shows normal delivery behavior and behavior.

In order to realize the above-mentioned monitoring operation (message output, etc.), in the vehicle 12, the ECU 10 is provided with at least a part of the rear region and the side portion of the vehicle 12 including the passenger compartment 14b to the luggage compartment 14a of the vehicle 12. An imaging unit 20 capable of imaging the image is connected. The installation position of the imaging unit 20 can be appropriately changed as long as at least the area of the luggage compartment 14a and at least the upper body of the luggage carrier delivering the luggage to the luggage compartment 14a can be imaged. Further, the ECU 10 is provided with a vehicle so that the user M of the vehicle 12 (for example, the owner of the vehicle 12 or a person who has obtained the permission of the owner) can receive the delivered luggage using the luggage compartment 14a of the vehicle 12. A mode changeover switch 22 for setting the control state of 12 to the home delivery mode is connected. The mode changeover switch 22 may be installed, for example, on a part of the steering wheel or dashboard of the vehicle 12. Further, an antenna in which the user M of the vehicle 12 receives a mode switching signal for setting the control state of the vehicle 12 to the home delivery mode at a remote location (for example, at home or on the go) using a mobile terminal Ma or the like such as a smartphone. 24 are connected.

Further, as a device for outputting a message when the delivery person opens the back door 12a of the vehicle 12, for example, a speaker 26 for outputting a voice message is connected to the ECU 10. The speaker 26 is an example of an in-vehicle audio output device described later. Further, as a device for outputting a message, for example, an indoor display device 28 for displaying a visible message is arranged at a position visible from the luggage compartment 14a, for example, on the back surface of the headrest 18b of the rear seat 18. The indoor display device 28 may be installed at a position where the message content can be visually recognized from the luggage compartment 14a, and may be, for example, the ceiling of the vehicle 12 or the back of the backrest 18a of the rear seat 18. Further, the indoor display device 28 may be configured to be stored in the normal mode other than the home delivery mode and appear (protruding, exposed) at a position visible only when the home delivery mode is switched.

In addition, the ECU 10 is connected to a back door lock mechanism 30 that controls the door lock of the back door 12a, a seat setting mechanism 34 that changes the settings (position, posture, etc.) of the rear seat 18 and the front seat 32. There is. Further, a back door opening / closing mechanism 36 that controls the opening / closing of the back door 12a is connected. The back door opening / closing mechanism 36 may be, for example, a motor-driven mechanism or a cylinder mechanism using hydraulic pressure or pneumatic pressure. The ECU 10 is connected to a power supply unit 38 or the like that supplies electric power to each mechanism, a detection unit, or the like when the ECU 10 is driven and the delivery mode is controlled. The power supply unit 38 may be shared with the power supply unit for supplying electric power to the entire vehicle 12, or may be provided exclusively for in-vehicle crime prevention. Although FIG. 1 shows an example in which the ECU 10 performs various processes executed in the vehicle 12, individual ECUs may be provided for each process or for each similar process. Further, the ECU 10 shown in FIG. 1 may execute vehicle control other than the in-vehicle security device.

FIG. 2 is an exemplary and schematic block diagram showing a functional configuration of a vehicle 12 including an ECU 10 (vehicle-mounted security device).

As illustrated in FIG. 2, the vehicle 12 is provided with various switches, mechanisms, sensors, and the like for realizing in-vehicle crime prevention processing in the ECU 10. For example, a door handle switch 40, a door lock mechanism 42, a door opening / closing mechanism 44, a seat setting mechanism 34, an imaging setting mechanism 46, and a traveling control system 48 are connected. Further, the vehicle 12 includes an image pickup unit 20, a mode changeover switch 22, a luggage information transmission / reception unit 50, an acceleration sensor 52, a sound collection unit 54, a GPS (Global Positioning System) receiver 56, an IG (ignition) switch 58, and a shift sensor. 60, an indoor display device 28, an external display device 62, an in-vehicle sound output device 64 (speaker 26), an external sound output device 66, and the like are provided. The vehicle exterior display device 62 and the vehicle exterior audio output device 66 are position examples of the recognition device capable of recognizing the output of the alarm outside the vehicle of the vehicle 12.

The ECU 10 is composed of a computer or the like, and executes in-vehicle crime prevention processing by the cooperation of hardware and software. Specifically, the ECU 10 includes a CPU (Central Processing Unit) 10a, a ROM (Read Only Memory) 10b, a RAM (Random Access Memory) 10c, and an SSD (Solid State Drive) 10d. The CPU 10a, ROM 10b, and RAM 10c may be provided in the same circuit board.

The CPU 10a can read a program installed and stored in a non-volatile storage device such as a ROM 10b, and execute arithmetic processing according to the program. For example, the CPU 10a determines the behavior of the delivery person in the luggage compartment 14a based on the captured image acquired by the imaging unit 20, an appropriate message according to the situation, the opening / closing operation of the back door 12a, and the solution of the back door 12a. Realize an in-vehicle security unit (in-vehicle security device) that executes in-vehicle security processing such as locking operation and locking operation.

The ROM 10b stores various programs, parameters necessary for executing the programs, and the like. The RAM 10c temporarily stores (holds) various data used in the calculation by the CPU 10a and the captured image data captured by the imaging unit 20. The SSD 10d is a rewritable non-volatile storage unit, and continues to store captured image data acquired from the CPU 10a and the imaging unit 20 even when the power of the ECU 10 is turned off. The CPU 10a, ROM 10b, RAM 10c, and the like can be integrated in the same package. Further, the ECU 10 may have a configuration in which another logical operation processor such as a DSP (digital signal processor), a logic circuit, or the like is used instead of the CPU 10a. Further, an HDD (hard disk drive) may be provided instead of the SSD 10d, and the SSD 10d and the HDD may be provided separately from the ECU 10.

The door handle switch 40 is a control switch provided on each door of the vehicle 12 for opening and closing the door. For example, a switch provided on the door handle to output a door lock request signal or a door unlock request signal, or the like. Is. Further, the door handle switch 40 may be configured as a switch that unlocks the door lock and opens the door based on the operation of the door handle switch 40, and locks the door lock and closes the door. good. The door handle switch 40 may be a mechanical switch or a non-contact type switch. The door handle switch 40 includes a driver's door switch 40a provided on the driver's door, a passenger door switch 40b provided on the passenger door, a right rear door switch 40c provided on the right rear door, and a left rear seat. The left rear seat door switch 40d provided on the door, the back door switch 40e provided on the back door 12a, and the like are included. The back door switch 40e is required for the in-vehicle crime prevention process in the ECU 10, and the other door handle switch 40 may be omitted as appropriate. For example, the right rear seat door switch 40c and the left rear seat door switch 40d may be omitted.

The door lock mechanism 42 is a mechanism for locking or unlocking the doors provided on each door of the vehicle 12, and is based on the operating state of the door handle switch 40 and the door lock control signal provided via the ECU 10. Then, the unlocked state and the locked state are switched for each door. The door lock mechanism 42 operates by a solenoid or a motor to switch between a locked state and an unlocked state. The door lock mechanism 42 includes a driver's door lock mechanism 42a provided on the driver's door, a passenger door lock mechanism 42b provided on the passenger door, and a right rear door lock mechanism 42c provided on the right rear door. The left rear seat door lock mechanism 42d provided on the left rear seat door, the back door lock mechanism 30 provided on the back door 12a, and the like are included. When the driver's door switch 40a is operated by a regular user (owner of the vehicle 12, etc.), in addition to the driver's door lock mechanism 42a, the passenger seat door lock mechanism 42b, the right rear seat door lock mechanism 42c, and the left The rear seat door lock mechanism 42d and the back door lock mechanism 30 may be interlocked to perform an unlocking operation or a locking operation.

The door opening / closing mechanism 44 is a mechanism that realizes an automatic or semi-automatic opening / closing operation of the doors provided on each door of the vehicle 12, and can be configured by a motor or the like. Further, the door opening / closing mechanism 44 may be a mechanism for adjusting the opening / closing speed at the time of opening / closing the door. For example, the opening operation speed may be reduced before the door reaches the fully opened state, and the door may be prevented from coming into contact with an object or the like existing around the vehicle 12 at high speed when the door is opened. Further, when the door to be controlled is a sliding door, the door opening / closing mechanism 44 adjusts the sliding speed of the door. The door opening / closing mechanism 44 includes a driver's door opening / closing mechanism 44a provided on the driver's door, a passenger's door opening / closing mechanism 44b provided on the passenger's door, and a right rear door opening / closing mechanism 44c provided on the right rear door. The left rear seat door opening / closing mechanism 44d provided on the left rear seat door, the back door opening / closing mechanism 36 provided on the back door 12a, and the like are included. The back door opening / closing mechanism 36 is required for the in-vehicle crime prevention process in the ECU 10, and the door opening / closing mechanism 44 for automatically opening and closing other doors may be omitted as appropriate.

The seat setting mechanism 34 sets each seat mounted in the passenger compartment 14 of the vehicle 12. For example, the position of the seat in the front-rear direction, the angle of the backrest, the height of the headrest, etc. are adjusted. The seat setting mechanism 34 can adjust the position of the seat in the front-rear direction, the angle of the backrest, the height of the headrest, and the like according to the physique of the driver and passengers during normal use of the vehicle 12. In this case, the posture may be automatically adjusted based on the physique of the user (driver or passenger), or may be appropriately changed when the seat is used. Further, in the present embodiment, the seat setting mechanism 34 sets the home delivery mode by the mode changeover switch 22 in the setting at the time of normal use (setting at the time of boarding) and the home delivery mode, that is, at the time of non-boarding. Toggle the setting when it is done. The seat setting mechanism 34 can be operated by, for example, a drive mechanism using a motor. The seat setting mechanism 34 includes a driver seat setting mechanism 34a provided on the driver's seat, a passenger seat setting mechanism 34b provided on the passenger seat, a right rear seat setting mechanism 34c provided on the right rear seat, and a left rear seat. The left rear seat setting mechanism 34d provided on the seat is included. The details of the seat setting in the home delivery mode will be described later, but by changing the seat setting, the position of the rear seat 18 and the position of the rear seat 18 and the position of the rear seat 18 can be prevented so that a third-party delivery person cannot enter the cabin 14b from the luggage compartment 14a. The height of the headrest of the rear seat 18 is changed. Further, even if the driver's seat side door or the passenger's seat side door is opened, the driver's seat setting mechanism 34a sets the position of the driver's seat and the height of the headrest so that it is difficult to get into the driver's seat. Similarly, the passenger seat setting mechanism 34b sets the position of the passenger seat and the height of the headrest in a state where it is difficult to get into the passenger seat or when it is difficult to open the glove box or the like.

The image pickup setting mechanism 46 is a mechanism for moving the position of the image pickup unit 20 installed on the top surface or the like of the vehicle 12. As described above, the imaging unit 20 can image at least the area of the luggage compartment 14a and at least the upper body of the delivery person who is delivering the package to the luggage compartment 14a. However, depending on the setting state of the rear seat 18, the size of the delivered luggage, and the like, the luggage delivered to the luggage compartment 14a and the luggage compartment 14a, the face of the person in charge of delivery, and the like may not be imaged. Therefore, the imaging setting mechanism 46 moves the position of the imaging unit 20 to change the imageable area, so that the luggage delivered to the luggage compartment 14a and the luggage compartment 14a, the face of the person in charge of delivery, and the like are within the imaging range. Make it possible to capture and image. The image pickup setting mechanism 46, for example, moves the carrier supporting the image pickup unit 20 on the rails extending in the front-rear direction and the vehicle width direction of the vehicle 12. The carrier can be moved by a drive mechanism such as a motor.

The travel control system 48 performs engine control, motor control, power supply control, and the like during normal travel of the vehicle 12, while in the home delivery mode, control prohibition control by the engine and motor, travel system power cut control, fuel cut control, and the like are performed. And so on.

The imaging unit 20 can image at least the area of the luggage compartment 14a and at least the upper body of the delivery person who is delivering the package to the luggage compartment 14a, and can also image the inside of the cabin 14b. The image pickup unit 20 is, for example, a digital camera incorporating an image pickup element such as a CCD (Charge Coupled Device) or a CIS (CMOS image sensor). The imaging unit 20 can output moving image data (captured image data) at a predetermined frame rate. The imaging unit 20 has a wide-angle lens or a fisheye lens, and is directed to the rear of the vehicle 12, for example, and can photograph a range of, for example, 140 ° to 220 ° in the horizontal direction. The captured image data captured by the imaging unit 20 may be temporarily stored in a volatile memory (for example, RAM 10c) and updated sequentially, or may be non-volatile when a specific condition is satisfied. It may be stored in a memory (for example, SSD10d).

In the present embodiment, the delivery mode can be switched by operating the mode changeover switch 22 in the passenger compartment 14b of the vehicle 12 as described above. The home delivery mode can also be switched by a home delivery mode setting signal (information transmitted by the user M of the vehicle 12 using a mobile terminal Ma or the like such as a smartphone) received by the luggage information transmission / reception unit 50 via the antenna 24. Is. In addition, the baggage information transmission / reception unit 50 has an authentication code (for example, a one-time pass code) issued by the management system of the courier company at the request of user M (baggage recipient), and features of the authenticated baggage, for example. , It is possible to receive information necessary for delivery such as size and shape information and individual information. In addition, the baggage information transmission / reception unit 50 may transmit the delivery status of the cargo, the warning status for the behavior of the delivery person, the captured image data captured by the imaging unit 20, and the like to the user M, the management system of the courier company, and the like. can.

The acceleration sensor 52 is a sensor that detects the acceleration received by the vehicle 12, and detects, for example, the acceleration (impact) received by the vehicle 12 when any object comes into contact with the vehicle 12. In the present embodiment, for example, when a delivery person accidentally hits a cargo or the like against the vehicle 12 when carrying in the cargo, the acceleration received by the vehicle 12 due to the action is detected. The acceleration sensor 52 may be shared with the existing acceleration sensor in the vehicle 12, or may be provided for an in-vehicle security device.

The sound collecting unit 54 is, for example, a microphone that collects sounds outside the vehicle and inside the vehicle interior 14, and as described above, the delivery person mistakenly hits the vehicle 12 with the luggage or the like when carrying in the luggage. It is possible to collect the contact sound generated in some cases and the surrounding conditions of the vehicle 12, such as the sound of wind and the sound of rain. The ECU 10 comprehensively determines the situation based on the surrounding conditions of the vehicle 12 imaged by the imaging unit 20, the acceleration acquired by the acceleration sensor 52, the surrounding sounds of the vehicle 12 collected by the sound collecting unit 54, and the like, and determines the vehicle. It may be detected whether or not the baggage or the like has come into contact with the twelve, and whether or not the back door 12a has been closed against the intention of the delivery person due to the wind or the like while the baggage is being carried in. Details of control based on the detection results of the acceleration sensor 52 and the sound collecting unit 54 will be described later.

The GPS receiver 56 acquires information on the position where the vehicle 12 currently exists. By providing the current position of the vehicle 12 in which the delivery mode is set to the management system of the delivery company or the mobile terminal of the delivery person, for example, the delivery destination of the package registered in the management system of the delivery company (for example, the home address). ), For example, even when going out, the luggage can be picked up using the luggage compartment 14a of the vehicle 12. That is, the user M can receive the luggage more smoothly at the place where the vehicle 12 is parked. The GPS receiver 56 may use the GPS receiver included in the navigation system mounted on the vehicle 12.

The ECU 10 can acquire information from the IG switch 58 and the shift sensor 60 of the vehicle 12. For example, information indicating the starting state of the vehicle 12 obtained from the IG switch 58, information indicating the parking state obtained from the shift sensor 60, and information on carrying in the luggage imaged by the imaging unit 20 (whether or not the luggage exists in the luggage compartment 14a). Information) and the like, it is possible to notify the user M of forgetting to unload the luggage from the vehicle 12. Details of these notifications will be described later.

As described above, the indoor display device 28 displays a message to the person in charge of delivering the package (third party). For example, a message such as "Currently monitoring the interior of the vehicle" or "Thank you for delivery" is displayed to the delivery person who opened the back door 12a to create a situation in which behavior other than the delivery act is unlikely to occur. In addition, if the delivery person is considered to be an act other than the delivery act, for example, an act of trying to invade the guest room 14b, a stronger warning message such as "Please do not invade the guest room. It is a fraudulent act." Display and create a situation to prevent the occurrence of fraudulent activities.

The vehicle exterior display device 62 is, for example, a hazard lamp, a headlight, a stop lamp, or the like mounted on the vehicle 12. The vehicle exterior display device 62 is located around the vehicle 12 in a situation where the delivery person opens the back door 12a to deliver the luggage, or is trying to commit a fraudulent act such as intruding into the guest room 14b. Make it recognizable by the three parties. For example, the hazard lamp, the headlight, the stop lamp, etc. are blinked. It should be noted that the external display device 62 blinks faster and the amount of light is emphasized when the person in charge of delivery is deemed to be committing a fraudulent act than when the person in charge of delivery is performing an act which is considered to be a delivery act. You may want to make a high blinking.

Similar to the indoor display device 28, the in-vehicle voice output device 64 (speaker 26) outputs a message voice to the person in charge of delivery of the cargo (third party). For example, a voice message such as "Currently monitoring the interior of the vehicle" or "Thank you for delivery" is output to the delivery person who opened the back door 12a to create a situation in which behavior other than delivery is unlikely to occur. .. In addition, if the delivery person is regarded as an act other than the delivery act, for example, an act of trying to invade the guest room 14b, a stronger warning message such as "Please do not invade the guest room. It is a fraudulent act." Output a voice message to create a situation to prevent the occurrence of fraudulent activities.

The vehicle-outside sound output device 66 is a speaker or the like that can output a sound that can be recognized even outside the horn or outside the vehicle. The out-of-vehicle voice output device 66 sends a horn or a voice message so that a third party around the vehicle 12 can recognize a situation in which a delivery person or the like is trying to commit a fraudulent act such as intrusion into the guest room 14b. By outputting, it is possible to make the surrounding third party clearly recognize that the vehicle 12 may be in a dangerous situation. Since the notification by the external voice output device 66 has a high notification effect to the surroundings, it is desirable not to output the notification when it is regarded as a normal delivery act.

FIG. 3 is a block diagram schematically and schematically showing a configuration in which the vehicle-mounted security unit (vehicle-mounted security device) 68 according to the embodiment is realized by the CPU 10a of the ECU 10. The CPU 10a realizes the vehicle-mounted security unit 68 as shown in FIG. 3 by executing the vehicle-mounted security program read from the ROM 10b. Although not shown in FIG. 3, the CPU 10a can realize various modules necessary for controlling the vehicle 12 in addition to the in-vehicle crime prevention unit 68.

The vehicle-mounted security unit 68 includes modules such as a setting unit 70, a detection unit 72, and a security control unit 74 in order to execute the vehicle-mounted security process. The in-vehicle security unit 68 processes when a delivery person who has been certified for delivery of cargo opens the back door 12a of the vehicle 12, processes to record the behavior, and outputs a message according to the behavior of the delivery person. Perform the processing to be performed. The in-vehicle crime prevention unit 68 warns, in particular, when the delivery person commits an act other than the delivery act, for example, a fraudulent act deemed to invade the guest room 14b, and executes a process for preventing the fraudulent act. do. The details of the vehicle-mounted security unit 68 will be described below.

The setting unit 70 sets and cancels the home delivery mode. In the delivery mode (baggage receiving mode), the luggage compartment 14a as the first area where the acceptance of pre-authenticated and authenticated luggage is allowed in the passenger compartment 14, and the first area other than the luggage compartment 14a (first area). This mode allows the vehicle 12 in which the passenger compartment 14b as two regions is set to accept the certified luggage in the luggage compartment 14a. As described above, the setting unit 70 operates the mode changeover switch 22 provided in the driver's seat of the vehicle 12 or the home delivery mode from the mobile terminal Ma possessed by the user M obtained via the luggage information transmission / reception unit 50. It can be set by the setting signal. The mode changeover switch 22 can be operated by, for example, authentication by a passcode that only the user M can know, so that the security can be further improved.

The detection unit 72 is a detailed module and includes a door lock state detection unit 72a, a door open / close state detection unit 72b, a vehicle state detection unit 72c, and the like. The detection unit 72 mainly detects whether or not the back door 12a is in an openable state, such as an open / closed state and a locked / unlocked state of the back door 12a communicating with the luggage compartment 14a.

The door lock state detection unit 72a is, for example, a door lock mechanism 42 (driver's door lock mechanism 42a, passenger's door lock mechanism 42b, right rear seat door lock mechanism 42c, left rear seat door lock mechanism 42d, back door lock mechanism 30. ), The locked state of each door is detected and provided to the security control unit 74.

The door open / close state detection unit 72b is a door open / close mechanism 44 (driver's seat door open / close mechanism 44a, passenger seat door open / close mechanism 44b, right rear seat door open / close mechanism 44c, left rear seat door open / close mechanism 44d, back door open / close mechanism 36). Based on the state, it detects whether each door is in the open state or the closed state and provides it to the security control unit 74. The door open / closed state detection unit 72b may detect that the door has changed to the open state when the lock mechanism of each door changes from the locked state to the unlocked state.

As described above, the vehicle state detection unit 72c acquires various information indicating the state of the vehicle 12 and uses it for various processes in the crime prevention control unit 74. The vehicle state detection unit 72c acquires, for example, the acceleration value from the acceleration sensor 52 and provides it to the crime prevention control unit 74. As described above, the acceleration value can be used, for example, to determine whether or not the delivery person accidentally hits the vehicle 12 with the cargo or the like when the cargo is brought in. Further, the vehicle state detection unit 72c is a sound collected by the sound collecting unit 54 outside the vehicle, for example, a contact sound generated when a delivery person accidentally hits the vehicle 12 with the luggage or the like when the delivery person carries in the luggage. And the surrounding conditions of the vehicle 12, such as the sound of wind and the sound of rain, are detected and provided to the crime prevention control unit 74. The sound collected by the sound collecting unit 54 can also be used to determine whether or not a luggage or the like has hit the vehicle 12. Further, the sound collected by the sound collecting unit 54 can be used when detecting whether or not the back door 12a is closed due to wind or the like against the intention of the delivery person during the loading of the cargo. can.

The vehicle state detection unit 72c acquires GPS information indicating the current position of the vehicle 12 from the GPS receiver 56, and provides the security control unit 74 with information indicating where the vehicle 12 can receive the luggage. Further, the vehicle state detection unit 72c acquires the information indicating the operating state of the IG switch 58 and the information indicating whether or not the parking state is obtained from the shift sensor 60, and provides the information to the crime prevention control unit 74. The operating state of the IG switch 58 and the shift information of the shift sensor 60 can be used when determining whether or not to notify the user M of forgetting to unload the luggage from the vehicle 12.

The crime prevention control unit 74 executes in-vehicle crime prevention processing based on various information acquired from the setting unit 70 and the detection unit 72 and the captured image data acquired from the imaging unit 20. The security control unit 74 includes an authentication processing unit 74a, an imaging control unit 74b, a door lock control unit 74c, a door opening / closing control unit 74d, a luggage determination unit 74e, and a person determination unit 74f as detailed modules for executing in-vehicle security processing. It includes an action prediction processing unit 74g, a warning processing unit 74h, a contact determination processing unit 74i, a sheet control unit 74j, a notification control unit 74k, and the like.

The authentication processing unit 74a performs an authentication process for whether or not to open (unlock) the back door 12a when receiving the authenticated luggage carried by the delivery person in the luggage compartment 14a of the vehicle 12. As described above, when the package is received in the luggage compartment 14a of the vehicle 12, the user M is requested to issue an authentication code (one-time pass coat) to the delivery company's management system for the package to be delivered. To ask. The management system issues an authentication code to the user M and the person in charge of delivery. The user M sets the home delivery mode for the setting unit 70 and registers the authentication code for the authentication processing unit 74a by the setting operation using the mobile terminal Ma or the like via the baggage information transmission / reception unit 50. The authentication processing unit 74a executes authentication as to whether or not to unlock and open the back door 12a at the request of the delivery person having the authentication code.

The image pickup control unit 74b performs processing such as starting and stopping the operation of the image pickup unit 20, and whether or not to save the captured image data captured by the image pickup unit 20 in the SSD 10d. When the image pickup image data captured by the image pickup unit 20 is held in a volatile memory such as a RAM 10c, the image pickup control unit 74b executes an update process by overwriting at regular intervals (for example, every 30 seconds). That is, the authentication processing unit 74a executes a holding process for holding the images behind the luggage compartment 14a and the vehicle 12 for the most recent fixed period. The authentication processing unit 74a may execute the holding process of the captured image data for a certain period of time, for example, when the vehicle 12 is parked (when the IG switch 58 is in the OFF state and the shift sensor 60 is in the parking P state). Then, on the condition that the back door lock mechanism 30 of the back door 12a is unlocked by the door lock state detection unit 72a in the home delivery mode, the image pickup unit 20 may be activated to execute the holding process of the captured image data. .. As described above, the image pickup control unit 74b avoids squeezing the memory area by performing the loop saving operation of holding the captured image data for a certain period of time.

Further, when it is determined that the delivery person has performed an act other than the delivery act, for example, an act deemed to invade the guest room 14b, the authentication processing unit 74a sequentially records the captured image data in a non-volatile memory such as SSD10d. Switch to the process of saving. In this case, the captured image data for the most recent fixed period, which has been held in the RAM 10c until then, is stored in accordance with the SSD 10d. That is, it is possible to save the captured image data obtained by capturing the action from a certain period (for example, 30 seconds) back to the action regarded as intrusion.

Further, the image pickup control unit 74b stops the recording / saving process of the image capture image data of the image pickup unit 20 when the back door 12a is unlocked by using the authentication code and the back door 12a is closed or locked. be able to. After the recording / saving process is stopped, the image pickup control unit 74b may stop the operation of the image pickup unit 20 or restart the update process of the captured image data for the RAM 10c or the like at regular intervals. The update process of the captured image data at regular intervals may be completed after a certain period of time has elapsed, or may be continuously executed while the vehicle 12 is parked.

The door lock control unit 74c executes a process of unlocking the back door lock mechanism 30 of the back door 12a when the authentication is established by the authentication processing unit 74a. Further, when the luggage is carried into the luggage compartment 14a and the back door 12a is closed, a process of locking the back door lock mechanism 30 is executed. The door lock control unit 74c provides the door lock control state, particularly the door lock control state of the back door 12a, to the image pickup control unit 74b and uses it for switching the recording mode of the image pickup unit 20. In the door lock control unit 74c, when the back door 12a is unlocked and opened due to the establishment of the authentication and then the back door 12a is closed without carrying in the luggage, the back door 12a may be, for example, wind or wind. It may be determined that the closing operation has been performed due to a human error, and the lock may not be locked for a certain period of time, for example. That is, the delivery person can open the back door 12a again without performing the authentication process, and can carry in the cargo. On the contrary, when the back door 12a is not opened after the back door 12a is closed, the door lock control unit 74c locks the back door lock mechanism 30 of the back door 12a regardless of whether or not the cargo is carried in. , Ensure security. In this case, in order to carry the luggage into the luggage compartment 14a, it is necessary to obtain an authentication code for unlocking the back door lock mechanism 30 of the back door 12a again.

The baggage determination unit 74e determines whether or not the baggage has been delivered (carried in) to the luggage compartment 14a based on the captured image data captured by the image pickup unit 20, whether or not the delivered baggage is a certified baggage, and the like. Can be determined. The luggage is a luggage that has been approved for delivery to the luggage compartment 14a by the user M, and the size information, packing shape information, individual mouth information, etc. of the luggage are registered in the management system when the authentication code is issued. Then, when the delivery mode is set in the setting unit 70, the size information of the luggage, the packing shape information, the individual mouth information, and the like can also be registered in the in-vehicle crime prevention unit 68. Therefore, the baggage determination unit 74e can determine whether or not the authenticated baggage has been delivered to the luggage compartment 14a based on this information (whether or not the baggage exists in the luggage compartment 14a). If the package determination unit 74e determines that the delivered package is not a certified package, the package determination unit 74e may provide a package error message to the delivery person via the warning processing unit 74h.

The person determination unit 74f determines whether or not the person approaching the vehicle 12 is a delivery person carrying the authenticated baggage. As described above, the luggage determination unit 74e can determine whether or not the luggage delivered to the luggage compartment 14a is a certified luggage. Therefore, the person determination unit 74f approaches, for example, when an approaching person in the vehicle 12 carries a luggage and the luggage matches the characteristics of the luggage to be authenticated based on the captured image data captured by the imaging unit 20. The person can be identified as the person in charge of delivery.

As shown in FIG. 4, the behavior prediction processing unit 74g predicts the behavior when the delivery person W brings the cargo T into the luggage compartment 14a of the vehicle 12, and does not show any behavior other than the delivery action. Judge whether or not. The behavior of the delivery person can be predicted by analyzing the captured image data captured by the imaging unit 20. For example, the skeleton points can be extracted from the captured image data to predict the behavior of the delivery person. In FIG. 4, the delivery person W who delivers the certified package T makes a certification request, and after the certification is established, the certified package T is carried into the luggage compartment 14a with the back door 12a of the vehicle 12 opened. It is an exemplary and schematic diagram which shows the state of doing. Further, FIG. 5 is a diagram for explaining the behavior prediction of the delivery person W in a state where the back door 12a of the vehicle 12 is opened after the authentication is established, and is a diagram showing the tip of the arm Wa (skeleton point) of the delivery person W. It is an exemplary and schematic diagram which shows how Wa1 shows the behavior of approaching a cabin 14b from a luggage compartment 14a. Further, FIG. 6 is a diagram showing another example for explaining the behavior prediction of the delivery person W in a state where the back door 12a of the vehicle 12 is opened after the authentication is established, and is a diagram showing the head Wb (skeleton) of the delivery person W. It is an exemplary and schematic view which shows the behavior that the tip Wb1 of the point) approaches from a luggage compartment 14a to a cabin 14b.

When the behavior prediction processing unit 74g determines that the person approaching the vehicle 12 is the delivery person W carrying the baggage T to be authenticated by the person determination unit 74f, for example, from the moving image being captured by the image pickup unit 20, for example, Cut out the image every 0.1 seconds. At this point, the image pickup control unit 74b has not stored the captured image data in the SSD 10d. Then, the behavior prediction processing unit 74g compares, for example, the positions (skeleton points) of the body, hands, etc. 0.1 seconds ago, and based on the positions of the body and hands of the delivery person W and the movement distance of the body and hands. Convert speeds sequentially. For example, as shown in FIG. 5, the moving speed of, for example, the arm Wa, which is a part of the body of the delivery person W, is acquired every 0.1 seconds. Further, the behavior prediction processing unit 74g sets a virtual boundary surface L at the boundary portion between the luggage compartment 14a and the cabin 14b based on the captured image data of the imaging unit 20, for example, the tip of the arm Wa of the delivery person W. The distance Xa between the portion Wa1 and the boundary surface L is sequentially calculated. The boundary surface L can be defined as a surface of the headrest 18b that rises vertically from the center of the headrest 18b in the front-rear direction of the vehicle to the ceiling of the vehicle 12 when the rear seat 18 is in the posture (described later) when the delivery mode is set. can.

The behavior prediction processing unit 74g determines whether or not the tip portion Wa1 exceeds the boundary surface L from the relationship between the distance and the speed of the tip portion Wa1 of the arm Wa from the boundary surface L. In this case, for example, when the tip Wa1 of the arm Wa approaches the boundary surface L and the moving speed of the tip Wa1 is 150 mm / s or more, the distance Xa to the boundary surface L reaches 200 mm. At this point, the delivery person W (the tip Wa1 of the arm Wa) determines that there is a possibility of invading the cabin 14b beyond the boundary surface L. When the tip Wa1 of the arm Wa approaches the boundary surface L and the moving speed of the tip Wa1 is less than 150 mm / s and 75 mm / s or more, when the distance Xa to the boundary surface L reaches 100 mm. , The delivery person W (the tip Wa1 of the arm Wa) determines that there is a possibility of invading the cabin 14b beyond the boundary surface L. That is, it is determined that the faster the speed of approaching the boundary surface L of the delivery person W, the more likely it is that the intrusion is possible at a position farther from the boundary surface L. That is, the behavior prediction processing unit 74g is based on the distance from the boundary surface L between the luggage compartment 14a and the guest room 14b to the delivery person W and the speed of the behavior of the delivery person W, and the guest room 14b of the delivery person W. Determine the possibility of intrusion into. Then, when the delivery person W (the tip Wa1 of the arm Wa) determines that there is a possibility of invading beyond the boundary surface L, the warning processing unit 74h, which will be described later, performs an alarm process for restraining the invasion action. Is executed. As shown in FIG. 6, even if the distance Xb between the tip end portion Wb1 of the head Wb and the boundary surface L is used as a part of the body of the delivery person W, the delivery person W invades the guest room 14b in the same manner. The possibility can be estimated.

Further, the behavior prediction processing unit 74g may determine the possibility of intrusion by referring to the acceleration of the movement of the delivery person W. The behavior prediction processing unit 74g calculates the acceleration of the hand and body by comparing the speed information of the body and hand calculated every 0.1 seconds with the speed information of 0.1 seconds before. May be good. For example, when the speed of the body (tip Wb1 of the head Wb) or hand (tip Wa1 of the arm Wa) of the delivery person W approaches the boundary surface L at 150 mm / s or more, the acceleration is 0 (constant speed) or positive. In this case, when the distance Xa (distance Xb) to the boundary surface L reaches 250 mm, that is, when the moving speed of the arm Wa is constant or accelerating, it is sufficiently far from the boundary surface L at that time. However, the delivery person W (the tip Wa1 of the arm Wa) determines that there is a possibility of invading the cabin 14b beyond the boundary surface L. Further, when the speed of the body (tip Wb1 of the head Wb) or hand (tip Wa1 of the arm Wa) of the delivery person W approaches the boundary surface L at 150 mm / s or more and the acceleration is negative, the boundary surface L is reached. When the distance Xa (distance Xb) of the above reaches 100 mm, that is, when the moving speed of the arm Wa is slowing down, even if it is sufficiently close to the boundary surface L at that time, the delivery person W (arm Wa) It is determined that the tip portion Wa1) is unlikely to cross the boundary surface L and invade the cabin 14b. That is, when the delivery person W is acting agilely, the possibility of intrusion can be determined even at a place where the distance to the boundary surface L is sufficiently long. As a result, the warning processing unit 74h can execute an alarm processing that restrains the intrusion action according to the behavior of the delivery person W. Note that FIGS. 5 and 6 show an example of calculating the speed and acceleration of the behavior (behavior) of the delivery person W in a state where the luggage T is carried into the luggage compartment 14a. The determination by the behavior prediction processing unit 74g can be carried out regardless of the presence or absence.

Returning to FIG. 3, in the warning processing unit 74h, when the delivery person W who delivers the authenticated package T makes a certification request and the back door 12a of the vehicle 12 is opened after the authentication is established, the delivery person A process of outputting a message or an alarm is executed according to the behavior of W.

For example, when the behavior prediction processing unit 74g determines that there is a possibility of invading the luggage compartment 14a, the warning processing unit 74h records the image capture image data being imaged by 20 to the image pickup control unit 74b ( For example, storage in SSD 10d) is started. In this case, the image pickup control unit 74b may also store the image capture image data temporarily held such as the RAM 10c, for example, from 30 seconds before. That is, the behavior before it is actually determined that there is a possibility of intrusion is also saved, which can contribute to the improvement of the reliability and the amount of information of the stored information. In addition, the warning processing unit 74h outputs warning information for suppressing an action determined to have a possibility of intrusion. The warning processing unit 74h displays a warning message on, for example, a position within the field of view of the delivery person W, for example, an indoor display device 28 installed on the headrest 18b of the rear seat 18. The content of the warning message is, for example, "Warning, it is prohibited to enter the cabin in front of the rear seat. Please close the back door immediately after loading the luggage and perform the delivery completion operation." Or "Do not enter the cabin." Please display a message such as "This is a fraudulent activity." Further, a voice message warning with the same content may be output from the in-vehicle voice output device 64 (speaker 26). Further, for example, a hazard lamp, a headlight, a stop lamp, or the like as the external display device 62 may be turned on or blinked to notify the surroundings that a problem has occurred in the vehicle 12. Further, the horn may be sounded as the out-of-vehicle audio output device 66, for example, to notify that a problem has occurred in the vehicle 12 as well. The notification using the indoor display device 28, the vehicle exterior display device 62, the vehicle interior audio output device 64, and the vehicle exterior audio output device 66 may be executed individually or in combination of two or more. When the behavior prediction processing unit 74g determines that there is a possibility of intrusion, the warning processing unit 74h stores the text data (processing content) or the imaging image stored in the SSD 10d on the mobile terminal Ma of the user M. A copy of the image data (moving image) or the like may be transmitted via the notification control unit 74k to report the facts.

Further, the warning processing unit 74h is to send a message or notification so that the delivery person W can easily recognize that the security measures have been taken even when the behavior prediction processing unit 74g does not determine that there is a possibility of intrusion. It may be.

In the warning processing unit 74h, for example, the door lock control unit 74c unlocks the back door lock mechanism 30 after the authentication according to the authentication request of the delivery person W (condition 1), and the person determination unit 74f carries the luggage T. When the delivery person W is confirmed based on the characteristics of the above (condition 2), a notification indicating that the inside of the luggage compartment 14a is being monitored is given. For example, the warning processing unit 74h displays a message such as "Currently monitoring the interior of the vehicle" or "Thank you for delivery" on the indoor display device 28 to create a situation in which behavior other than the delivery act is unlikely to occur. .. Further, a voice message having the same content may be output from the in-vehicle voice output device 64 (speaker 26). The notification using the indoor display device 28 and the in-vehicle audio output device 64 may be executed independently or in combination.

In this way, based on the high possibility of intrusion into the guest room 14b of the delivery person W, when the content of the warning information is different, for example, when the possibility of intrusion is low, a gentle expression warning is output. If it is possible, and conversely, if there is a high possibility of intrusion, a strict warning can be output. As a result, it is difficult to give discomfort to the delivery person W who is not recognized as having an intrusion intention, and an efficient warning can be given to the delivery person W who is temporarily recognized as having an intrusion intention. ..

Further, the warning processing unit 74h may output an alarm when a door other than the door (in the above case, the back door 12a) specified for receiving the luggage T is about to be opened. For example, when the delivery person W does not notice or misunderstands that the cargo T is carried in from the back door 12a, a message calling attention to the delivery person W is output. Specifically, after the delivery person W requested authentication from his / her own terminal or the like and the back door lock mechanism 30 of the vehicle 12 was unlocked, the delivery person W operated the door handles other than the back door 12a. This is the case when it is detected by the door lock state detection unit 72a. In this case, the warning processing unit 74h outputs a voice message such as "Please bring in the luggage from the back door" using, for example, an external speaker arranged as the outside voice output device 66. In the case of a power back door in which the back door 12a is automatically opened by the back door opening / closing mechanism 36, for example, such an alarm is executed immediately before the start of the opening operation of the back door 12a. When the back door 12a is a manually operated door, the back door 12a is unlocked by the back door lock mechanism 30, but the back door 12a is closed. If the warning processing unit 74h does not receive the unlock control signal of the back door 12a based on the authentication from the door lock control unit 74c, that is, if it receives only the door handle opening operation signal, it is a mischief to the vehicle 12. It may be determined that the act is an act, and a normal security alarm or the like may be output.

Further, when the back door 12a, which has been unlocked and opened by authentication during the delivery act, is closed, the warning processing unit 74h promptly carries in the luggage T while maintaining the unlocked state of the back door lock mechanism 30. Notifications that encourage work may be given.

For example, the door lock control unit 74c locks the back door lock mechanism 30 when authentication is performed, the luggage T is carried into the luggage compartment 14a, and the back door 12a is automatically or manually closed. On the other hand, although the door lock control unit 74c has been authenticated and the back door 12a has been opened, the luggage T has not been carried into the luggage compartment 14a (including the case where individual delivery has not been completed), and the door lock control unit 74c is automatically or manually operated. When the back door 12a is closed, the lock by the back door lock mechanism 30 is temporarily suspended. For example, the back door 12a may be closed during the loading due to the wind or an erroneous operation of the delivery person W. In such a case, the warning processing unit 74h outputs a voice message such as "Open the back door and bring in the luggage promptly." Using the outside voice output device 66 or the like.

The warning processing unit 74h determines whether or not to output the above-mentioned alarm based on whether or not the following conditions 1 to 3 are satisfied. The condition 1 is that the delivery person W carries the baggage T to be authenticated, and the unlocking and opening operation of the back door 12a is certified at the request of the delivery person W. Condition 2 is that the cargo determination unit 74e confirms that the cargo T has been carried into the luggage compartment 14a based on the captured image data of the image pickup unit 20. In this confirmation, for example, the presence or absence of the luggage T can be confirmed based on the comparison between the captured image data when the luggage T is not carried into the luggage compartment 14a and the current captured image data. Condition 3 is that the door open / close control unit 74d has confirmed the closing operation of the back door 12a. Then, when all the conditions 1 to 3 are satisfied, the door lock control unit 74c determines that the loading of the luggage T is completed, and locks the back door lock mechanism 30. On the other hand, if condition 1 is satisfied and at least one of condition 2 and condition 3 is not satisfied, it is estimated that the back door 12a has closed due to an erroneous operation of the delivery person W, wind, or the like. can do. In such a case, the door lock control unit 74c does not lock the back door lock mechanism 30, and the warning processing unit 74h outputs a message prompting the carry-in work of the luggage T as described above. The door lock control unit 74c may lock the back door lock mechanism 30 with priority given to security after a predetermined period of time has elapsed (for example, after 1 minute has passed) after the notification by the warning processing unit 74h. ..

Further, the warning processing unit 74h may output a message for ensuring the safety of the delivery person W at the time of carrying in the cargo T, a message for preventing damage to the cargo T, and the like.

The warning processing unit 74h ensures the safety of the delivery person W based on whether or not the following conditions 1 to 3 are satisfied when the back door 12a is automatically opened and closed by the back door opening / closing mechanism 36, for example. Determines whether or not to output the message of. The condition 1 is that the delivery person W carries the baggage T to be authenticated, and the unlocking and opening operation of the back door 12a is certified at the request of the delivery person W. Condition 2 is that it is confirmed that the cargo determination unit 74e has completed the delivery of the cargo T into the luggage compartment 14a based on the captured image data of the imaging unit 20. In this case, it is desirable to also confirm that the hand of the delivery person W is away from the baggage T based on the captured image data of the image capturing unit 20. Condition 3 is confirmed that the person determination unit 74f has evacuated to the outside of the virtual area of the back door 12a, which has been confirmed in advance by the delivery person W in a test or the like, based on the image data captured by the image pickup unit 20. It is that you are.

Then, when all the conditions 1 to 3 are satisfied, the warning processing unit 74h sends a message such as "the back door is closed" via, for example, the in-vehicle audio output device 64 or the out-of-vehicle audio output device 66. And output. Then, the door opening / closing control unit 74d controls the back door opening / closing mechanism 36 to close the back door 12a, and after the closing operation is completed, the door lock control unit 74c locks the back door lock mechanism 30. On the other hand, if a predetermined period or more has passed before the condition 3 is satisfied (for example, 1 minute), the warning processing unit 74h sends a message such as "Close the back door. Please move away from the back door." It is output via the in-vehicle audio output device 64 and the out-of-vehicle audio output device 66. In addition to or in place of this voice message, a text message may be displayed on the room display device 28.

Further, the warning processing unit 74h corrects the loading state of the luggage T, for example, when the luggage T is not delivered in a predetermined area of the luggage compartment 14a after the delivery of the luggage T (after the loading). Message may be output. That is, a message is output to alert the delivery person W so as to prevent the back door 12a from being pinched by closing the back door 12a when the vehicle is carried in in a state of protruding from the luggage compartment 14a. As the content of the message, for example, a voice message or a display message such as "Please put your luggage in the center of the luggage compartment, being careful not to get caught" or "Please put your luggage in the center of the luggage compartment" is output. ..

Based on the determination result of the luggage determination unit 74e, the warning processing unit 74h backs the luggage T based on whether or not the following conditions 1 to 3 are satisfied when the luggage T is carried into the luggage compartment 14a. It is determined whether or not to output the above-mentioned message in order to avoid being pinched or damaged by the door 12a. The condition 1 is that the delivery person W carries the baggage T to be authenticated, and the unlocking and opening operation of the back door 12a is certified at the request of the delivery person W. Condition 2 is that it is confirmed that the cargo determination unit 74e has completed the delivery of the cargo T into the luggage compartment 14a based on the captured image data of the imaging unit 20. In this case, it is desirable to also confirm that the hand of the delivery person W is away from the baggage T based on the captured image data of the image capturing unit 20. Condition 3 is that it is confirmed that the carried-in luggage T is in a predetermined area (area where pinching does not occur) in the luggage compartment 14a stored in the ROM 10b or the like in advance. In this case, it is possible to confirm whether or not the luggage T is stored in the predetermined area based on the captured image data of the imaging unit 20. Further, in another embodiment, an area sensor or the like may be arranged in the luggage compartment 14a, and based on the detection result, it may be detected whether or not the luggage T does not protrude from the predetermined area. Based on the determination result of the cargo determination unit 74e, the warning processing unit 74h outputs a message for correcting the carry-in position of the cargo T to avoid pinching, as described above, when the condition 3 is not satisfied. The warning processing unit 74h may repeat the output of the message until the condition 3 is satisfied. Further, the door opening / closing control unit 74d may control the back door opening / closing mechanism 36 so as to temporarily suspend the closing operation of the back door 12a. Depending on the size and shape of the luggage T, the current capacity of the luggage compartment 14a may not be able to accommodate the luggage T. In that case, the seat control unit 74j may change the seat layout of the rear seat 18 to increase the volume of the luggage compartment 14a so that the luggage T can be carried in. The layout change of the rear seat 18 will be described later.

Further, the warning processing unit 74h may output a message for preventing the user M from forgetting to unload the luggage T. As described above, when the cargo T is received using the luggage compartment 14a of the vehicle 12, the luggage T may be left in the luggage compartment 14a due to forgetting that the delivery destination is specified to the vehicle 12. Therefore, if the luggage T is left in the luggage compartment 14a at the end of use of the vehicle 12, the warning processing unit 74h may give a notification such as "Please unload the luggage."

The warning processing unit 74h keeps the cargo T carried into the luggage compartment 14a based on the determination result of the cargo determination unit 74e and the state of the vehicle 12 acquired by the vehicle state detection unit 72c, for example, the operating state of the IG switch 58. Judge whether or not. That is, it is determined whether or not to output the misplacement prevention notification of the luggage T (reminder for forgetting to unload the home delivery luggage) based on whether or not the following conditions 1 to 3 are satisfied. The condition 1 is that the delivery person W carries the baggage T to be authenticated, and the unlocking and opening operation of the back door 12a is certified at the request of the delivery person W. Condition 2 is that it is confirmed that the cargo determination unit 74e has completed the delivery of the cargo T into the luggage compartment 14a based on the captured image data of the imaging unit 20. The condition 3 is that the vehicle state detection unit 72c has detected that the vehicle 12 has turned on the IG switch 58 for traveling and then turned off (for example, arriving at home). When the conditions 1 to 3 are satisfied, the warning processing unit 74h uses the in-vehicle audio output device 64 (speaker 26) or the like to give the user M (driver, owner of the vehicle 12, etc.) the above-mentioned luggage. The notification for preventing forgetting to unload T is output, and the user M is urged to exist and pick up the luggage (take it out from the luggage compartment 14a). The warning processing unit 74h clears the information of conditions 1 to 3 after executing the notification for preventing forgetting to unload the luggage T. That is, the output timing of the forgotten unloading prevention notification is set only once when the IG switch 58 is turned off, and the next time another baggage T is received, the unloading forgetting prevention notification can be executed separately. After the condition 3 is satisfied, the condition 2 may be denied. For example, when the luggage T is moved from the luggage compartment 14a to another place (for example, the cabin 14b) before the vehicle 12 starts. In such a case, the warning processing unit 74h does not output the unloading forgetting prevention notification, clears the information of other conditions, and can separately execute the unloading forgetting prevention notification the next time another baggage T is received. To do so.

Returning to FIG. 3, the contact determination processing unit 74i determines whether or not the delivery person W may have brought the cargo T into contact with the outer plate or the like of the vehicle 12 when the cargo T is carried in, and the image pickup control unit 74b Switching between saving and non-storing of the captured image data of the imaging unit 20 in the above. As described above, the image pickup control unit 74b maintains the image pickup state of the image pickup unit 20 while the vehicle 12 is parked, and holds the captured image data for a certain period of time. For example, the capacity of the volatile memory is set to about 1 minute, and the old information is overwritten by being saved in a loop. The acceleration sensor 52 can acquire acceleration information even when the vehicle 12 is parked, and outputs the acceleration information when an impact is applied to the outer panel of the vehicle 12 to cause acceleration. The contact determination processing unit 74i may have a person (delivery person W) around the vehicle 12 based on the determination result of the person determination unit 74f (determination result based on the analysis of the captured image data of the imaging unit 20). If it can be confirmed, it is estimated that the delivery person W may have hit an object (for example, a luggage T) on the outer panel of the vehicle 12 when the acceleration information equal to or higher than a predetermined threshold value is acquired from the vehicle state detection unit 72c. .. Then, the contact determination processing unit 74i requests the image pickup control unit 74b to save the image capture image data of the image pickup unit 20 in a non-volatile memory such as SSD 10d. That is, the captured image data is left as evidence of a contact accident. In this case, the captured image data captured before acquiring the acceleration information above a predetermined threshold value and stored in the volatile memory is stored, for example, 30 seconds back, before and after the contact accident. The situation can be clearly saved, and the reliability of information and the amount of information can be improved. The image pickup control unit 74b ends the saving process of the captured image data when the information of the lock completion of the back door 12a is acquired from the door lock state detection unit 72a or after a predetermined time period elapses.

When the contact determination processing unit 74i can confirm that there is no person around the vehicle 12 by the determination of the person determination unit 74f, the contact determination processing unit 74i determines that the generated acceleration is caused by the vehicle 12 shaking due to, for example, wind, and images the image. The captured image data is not stored in the non-volatile memory by the control unit 74b. As a result, it is possible to suppress the capacity pressure of the non-volatile memory. The contact determination processing unit 74i uses the ambient sound of the vehicle 12 acquired from the sound collecting unit 54 by the vehicle state detection unit 72c as a proof element at the time of a contact accident, whether or not to determine the presence or absence of contact and save the captured image data. May be good.

Next, the seat control unit 74j will be described. As shown in FIG. 1, in the case of the vehicle 12 in which the luggage compartment 14a and the passenger compartment 14b communicate with each other, a third party (delivery charge) opens the luggage compartment 14a by opening the back door 12a in the delivery mode. When permitting the person W), it is desirable to create a situation in which the delivery person W is unlikely to invade the guest room 14b. On the other hand, when it is not in the home delivery mode, that is, when traveling, it is desirable to secure a more comfortable environment of the guest room 14b. Therefore, the seat control unit 74j changes the layout of the rear seat 18 and the front seat 32 to a state suitable for each situation in the delivery mode and the non-delivery mode.

First, when the home delivery mode is set in the setting unit 70 at the request of the user M, for example, the in-vehicle security unit 68 receives an operation signal of the mode changeover switch 22 or a request from the mobile terminal Ma of the user M. When the signal is acquired, the control of the engine and the motor that are the drive source of the vehicle 12 is prohibited. It also cuts running power and controls fuel cuts. That is, even if the delivery person W invades the driver's seat, the vehicle 12 cannot be moved.

Subsequently, when the delivery mode is set in the setting unit 70, the seat control unit 74j controls the right rear seat setting mechanism 34c and the left rear seat setting mechanism 34d, and as shown in FIG. 7, the rear seat 18 The backrest 18a is changed to an upright posture up to, for example, around 90 °. Further, the headrest 18b of each rear seat 18 is extended to the maximum height. As a result, the communication space S communicating from the luggage compartment 14a to the guest room 14b is narrowed, and it is possible to prevent the delivery person W from invading the guest room 14b side from the communication space S. Further, the capacity of the luggage compartment 14a can be increased by setting the backrest 18a in an upright posture. The right rear seat setting mechanism 34c and the left rear seat setting mechanism 34d can adjust the postures of the backrest 18a and the headrest 18b, for example, by driving a motor. As a result, it is possible to prevent the posture from being easily changed after the posture is adjusted.

Further, the seat control unit 74j may also adjust the posture of the front seat 32 when the delivery mode is set in the setting unit 70. For example, the seat control unit 74j drives the driver's seat setting mechanism 34a to move the front seat 32 on the driver's seat side to the front position, puts the backrest 32a in the front leaning posture, and extends the headrest 32b to the maximum height. .. As a result, for example, the space between the steering wheel and the front seat 32 is narrowed so that it is difficult to get into the driver's seat. Similarly, the seat control unit 74j drives the passenger seat setting mechanism 34b to move the front seat 32 on the passenger seat side to the front position, puts the backrest 32a in the front leaning posture, and extends the headrest 32b to the maximum height. Let me. As a result, for example, the space between the glove box and the front seat 32 is narrowed to make it difficult to get into the passenger seat and to make it difficult to open the glove box. The driver's seat setting mechanism 34a and the passenger seat setting mechanism 34b can adjust the position of the front seat 32 in the front-rear direction and the posture of the backrest 32a and the headrest 32b, for example, by driving a motor. As a result, it is possible to prevent the posture from being easily changed after the posture is adjusted. In this way, the seat control unit 74j adjusts the posture of the front seat 32 in the delivery mode, so that even if the delivery person W tries to invade the guest room 14b side, the situation cannot be created. , It becomes easier to obtain a further suppression effect of intrusion.

The posture adjustment of each seat by the seat control unit 74j is executed on condition that there is no occupant in the passenger cabin 14b. For example, when the delivery mode is set by using the mode changeover switch 22, the seat control unit 74j adjusts the posture of each seat after the door lock mechanism 42 locks each door. Even when the delivery mode is set using the user M's mobile terminal Ma, the seat control unit 74j adjusts the posture of each seat on the condition that the door lock mechanism 42 locks each door. To.

When the baggage determination unit 74e or the like determines that the delivery of the baggage T has been completed, that is, the baggage determination unit 74e confirms that the baggage T exists in the luggage compartment 14a, and the door open / close control unit 74d backs up. When the closing operation of the door 12a is confirmed, the seat control unit 74j drives the seat setting mechanism 34 to return each seat to the state before the shift to the home delivery mode. For example, the position in the front-rear direction of the front seat 32, the angle of the backrest 32a and the height of the headrest 32b, the angle of the backrest 18a of the rear seat 18 and the height of the headrest 18b are set by the user M for driving. Return to, and the user M makes the vehicle 12 immediately available.

By the way, depending on the size and shape of the delivered luggage T, the backrest 18a of the rear seat 18 may not fit in the luggage compartment 14a only in the upright posture. As described above, when the home delivery mode is set, information on the size and shape can be obtained as the characteristic information of the package T to be delivered. Therefore, the seat control unit 74j can change the layout of the rear seat 18 and the front seat 32 when the delivery mode is set, based on the feature information of the luggage T. When the luggage T is large, the rear seat 18 is stored. For example, the backrest 18a and the headrest 18b are made parallel to the seating surface of the rear seat 18 so that the whole is in a flat state. That is, the space that can be used as the luggage compartment 14a is expanded. Further, when the luggage T is a long object, either the left or right side of the rear seat 18 and the corresponding driver's seat or passenger's seat are set to a fully flat state, and a space that can be used as a luggage compartment 14a in the front-rear direction of the vehicle is provided. Expanding. Further, when the luggage T is large and long, the entire cabin 14b may be used as the luggage compartment 14a.

The size and shape may include an error based on the characteristic information of the cargo T, and the cargo T may not fit in the luggage compartment 14a when the delivery person W tries to carry it in. In this case, the seat control unit 74j may change each seat layout so as to correspond to the actual size and shape of the cargo T prior to the loading work of the cargo T.

As described above, when the delivery person W carries the baggage T to be authenticated and the unlocking and opening operation of the back door 12a is authenticated at the request of the delivery person W, the unlock signal of the back door 12a is sent. Based on this, the imaging unit 20 is activated to start imaging the delivery person W and the baggage T. At this time, the cargo determination unit 74e determines the size and shape of the cargo T to be carried in based on the captured image data. Based on the determination result, the seat control unit 74j selects an appropriate seat layout from the relationship between the size and shape of the luggage T and the seat layout, which is stored in advance in the ROM 10b or the like, and performs the seat layout in the same manner as in the above example. change. In this case, the warning processing unit 74h may notify the seat layout change and notify that the seat layout change has been completed, prompting the delivery person W to carry in the luggage T. good. As described above, even when the characteristic information of the luggage T and the actual characteristics of the luggage T are different, it is possible to secure an appropriate space of the guest room 14b and smoothly carry in the luggage T. Further, even if the information indicating the size and shape is not registered in the feature information of the luggage T, there is an advantage that it can be handled at the time of carrying in.

As described above, when the seat layout is changed, in the imaging unit 20 arranged at a predetermined position (for example, the central portion of the ceiling) of the guest room 14b, the changed seat may block the luggage T or the luggage compartment 14a. The entire area that can be used as an image may not be within the imaging range. In such a case, the image pickup control unit 74b may drive the image pickup setting mechanism 46 to change the installation position of the image pickup unit 20 according to the sheet layout. As described above, the image pickup setting mechanism 46 moves, for example, the carrier supporting the image pickup unit 20 on the rails extending in the front-rear direction and the vehicle width direction of the vehicle 12. For example, the rail is composed of a first rate and a second rail, and the first rail extends the central portion of the ceiling of the vehicle 12 in the front-rear direction of the vehicle. The second rail extends in the vehicle width direction and is connected in a T shape at the rear end portion (rear side of the vehicle) of the first rail. As a result, the image pickup unit 20 mounted on the carrier can cover almost the entire area of the vehicle interior 14 as the image pickup range. Then, the imaging unit 20 can image the positions of the delivery person W existing near the rear of the vehicle 12, the luggage T carried by the delivery person W, and the luggage T carried into the luggage compartment 14a. can. In the non-delivery mode, the imaging unit 20 can be used as a part of the in-vehicle monitoring system that captures the situation in the vehicle interior 14 when the vehicle 12 is used and uses it for various controls. Therefore, the image pickup control unit 74b may return to the initial position, for example, the central position of the ceiling of the vehicle 12 when the loading of the luggage T is completed and the closing operation and locking of the back door 12a are completed.

When the sheet layout is changed in this way, the behavior prediction processing unit 74g appropriately changes the position of the boundary surface L for restricting the intrusion of the delivery person W, and the warning processing unit 74h is changed. It is desirable to determine the type and timing of the alarm (message) to be output based on the boundary surface L.

Subsequently, the notification control unit 74k is completed via the luggage information transmission / reception unit 50 when the delivery person W completes the delivery of the luggage T into the luggage compartment 14a and the closing operation and locking of the back door 12a are completed. Send the notification to user M. Further, when the behavior prediction processing unit 74g determines that the delivery person W may invade the luggage compartment 14a, the determination and the image captured by the imaging unit 20 whose storage has been started by the imaging control unit 74b. A copy of the data (video) is transmitted to the user M. Further, as described above, the notification control unit 74k determines the possibility of a contact accident or the like during the delivery work of the package T, and the image capture image of the image pickup unit 20 whose storage is started by the image pickup control unit 74b. A copy of the data (video) is transmitted to the user M. In addition, the notification control unit 74k may appropriately transmit the state information of the vehicle 12 when the delivery mode is set to the user M.

An example of the operation of the in-vehicle security device configured as described above will be described with reference to the flowcharts of FIGS. 8 to 11. In the example described below, it is assumed that the imaging unit 20 is always activated even when the vehicle 12 is parked and is in the imaging state. As described above, it is assumed that the captured image data is stored in a loop using a capacity of about 1 minute of the volatile memory, and is sequentially overwritten from the oldest information.

The setting unit 70 of the vehicle-mounted crime prevention unit 68 always uses the mode changeover switch 22 or the luggage information transmission / reception unit 50, regardless of whether the IG switch 58 of the vehicle 12 is ON or OFF (ON or OFF of the main power supply). It is confirmed whether or not the delivery mode ON signal (delivery mode setting signal) provided from the mobile terminal Ma of the above is received (No in S100). When the home delivery mode ON signal is received (Yes in S100), the setting unit 70 sets the home delivery mode to ON (S102).

When the home delivery mode is set to ON, the authentication processing unit 74a of the security control unit 74 monitors whether or not the delivery person W makes an authentication request for the authenticated package T. Then, when the authentication request is made by the delivery person W and the authentication is established, the door lock control unit 74c drives and unlocks the back door lock mechanism 30 of the back door 12a, and at the same time, sends an opening operation signal of the back door switch 40e. Monitor whether or not it has been acquired (No in S104). When the back door 12a is unlocked and the back door 12a is opened, the door opening / closing control unit 74d opens the back door opening / closing mechanism 36 when the back door 12a is provided with an automatic opening / closing mechanism. S106). If the back door 12a does not have an automatic opening / closing mechanism, the delivery person W performs an opening operation, and the door opening / closing state detection unit 72b provides the security control unit 74 with an opening operation signal of the back door 12a.

When the back door 12a is opened, the behavior prediction processing unit 74g executes the behavior prediction processing of the delivery person W based on the captured image data captured by the imaging unit 20 (S108). The details of the behavior prediction process will be described with reference to the flowchart of FIG.

The behavior prediction processing unit 74g cuts out an image from the moving image captured by the imaging unit 20 every 0.1 seconds, for example, and is in charge of delivery and the boundary surface L virtually set at the boundary portion between the luggage compartment 14a and the cabin 14b. _{For example, the distance X (X 1} > X ₂ >>...> X _X ) of the person W from the tip Wa 1 (skeleton point) of the arm Wa is calculated. _{Further, the velocity V (V 1} > V ₂ >>...> V _X ) of the tip Wa 1 of the arm Wa at that time is calculated. _{For example, it is determined whether the distance X 1} between the boundary surface L and the tip Wa 1 of the arm Wa is within a predetermined value (for example, 200 mm) (S200), and when the distance X ₁ is within 200 mm (Yes in S200), then. _{It is determined whether or not the velocity V 1} of the tip portion Wa 1 of the above is equal to or higher than a predetermined value (for example, 150 mm / s) (S202). At this time, when the speed V ₁ is 150 mm / s or more (Yes in S202), the behavior prediction processing unit 74 g indicates that the delivery person W is located at a position sufficiently far from the boundary surface L, but moves swiftly to the boundary surface. It is presumed that it is approaching L. That is, the delivery person W determines that there is a possibility of invading the guest room 14b beyond the boundary surface L (S204), and temporarily ends this flow.

At the determination timing of S200, when the distance X ₁ is farther than 200 mm (No of S200), or when the speed V ₁ is less than 150 mm / s at S202 (substantially the same timing of S200) (No of S202). _{At the next processing timing, it is determined whether the distance X 2} between the boundary surface L and the tip Wa 1 of the arm Wa is within a predetermined value (for example, 150 mm) (S206), and when the distance X ₂ is within 150 mm (S206). _{Yes), it is determined whether the velocity V 2} of the tip portion Wa 1 at that time is equal to or higher than a predetermined value (for example, 100 mm / s) (S208). At this time, when the speed V ₂ is 100 mm / s or more (Yes in S208), the behavior prediction processing unit 74 g indicates that the delivery person W is still at a position far from the boundary surface L, but the boundary is relatively fast. It is estimated that the surface L is approaching. That is, the delivery person W determines that there is a possibility of invading the guest room 14b beyond the boundary surface L (S204), and temporarily ends this flow.

_{When the distance X 2} is farther than 100 mm (No in S206) at the determination timing of _{S206, or when the velocity V 2} is less than 100 mm / s in S208 (No in S208), the boundary surface is at the next processing timing. It is determined whether the distance X between L and the tip Wa1 of the arm Wa is within a predetermined value. Then, the same processing as the above-described processing is sequentially and repeatedly executed (S210, S212). Then, a predetermined time (e.g., 1 minute) from the start of action prediction processing is passed, if the distance _{X X} between the tip portion Wa1 of the interface L and arm Wa is aways than a predetermined value (e.g., 100 mm) (S210 No), in the behavior prediction processing unit 74g, there is no sign that the delivery person W approaches the boundary surface L even after a predetermined time has passed since the delivery person W started the loading work of the luggage T, and the guest room 14b exceeds the boundary surface L. It is determined that there is little (or no) possibility of invading the (S214). Further, when the distance _{X X} between the tip portion Wa1 of the interface L and arm Wa even if the predetermined value was within 100 mm (Yes in S210), the speed _{V X} is less than 75 mm / s (S212 of No ), In the behavior prediction processing unit 74g, although the delivery person W is approaching the boundary surface L, the movement is slow, there is no sign of further approaching the boundary surface L, and the guest room 14b exceeds the boundary surface L. It is determined that there is little (or no) possibility of invading the (S214), and this flow is temporarily terminated. In S212, when the velocity V _X of the tip Wa1 is 75 mm / s or more (Yes in S212), the delivery person W estimates that there is still a possibility of approaching the boundary surface L. That is, it is determined that there is a possibility of invading the guest room 14b beyond the boundary surface L (S204), and this flow is temporarily terminated.

Returning to the flowchart of FIG. 8, when the intrusion determination into the guest room 14b (second area) is not performed in S108 (flow chart of FIG. 9) (No in S110), the luggage determination unit 74e may be used in the indoor display device 28 or , The in-vehicle voice output device 64 (speaker 26) is used to output a monitoring message (display or voice) to the delivery person W (S112). For example, a message such as "Currently monitoring the interior of the vehicle" or "Thank you for delivery" is output to the delivery person who opened the back door 12a to create a situation in which behavior other than the delivery act is unlikely to occur.

Subsequently, the luggage determination unit 74e determines that the luggage T has been carried in based on the captured image data in the cabin 14b imaged by the imaging unit 20 (S114). If the luggage T has not been delivered (No in S114) and the predetermined time (for example, No. 2 minutes) has not passed (No in S116), the door open / close control unit 74d closes the back door 12a. Check if it is (S118). Then, when the back door 12a is not closed (No in S118), it is determined that the delivery person W is in the middle of the carry-in work, and the process proceeds to S108 to predict the behavior of the delivery person W. And the subsequent processing is executed repeatedly. In S114, if the luggage T has already been carried in (Yes in S114), the process of S116 is skipped.

In S110, when the intrusion determination into the guest room 14b (second area) is made in S108 (flow chart of FIG. 9) (Yes in S110), or in S116, a predetermined time elapses without the loading of the luggage T being completed. If this is the case (Yes in S116), the image pickup control unit 74b confirms whether or not the recording (save) of the image captured image data imaged by the image pickup unit 20 has been started in a non-volatile memory such as SSD 10d (S120). Then, when the recording (save) has not been started yet (No in S120), the recording (save) of the captured image data captured by the imaging unit 20 in the non-volatile memory is started and held in the volatile memory. The captured image data indicating the situation before the predetermined time elapses without the intrusion determination or the undelivered is recorded (saved) in the non-volatile memory (S122). If recording (save) has already started in S120 (Yes in S120), the process of S122 is skipped.

Then, the warning processing unit 74h considers that the delivery person W may have an act other than the delivery act, for example, an act of trying to invade the guest room 14b, and the indoor display device 28 or the in-vehicle audio output device 64 (speaker). A warning message to the delivery person W is output by using 26) or the like (S124). For example, as a strong warning message, a voice message such as "Please do not invade the guest room. It is a fraudulent activity." Or a display message is output to create a situation where it is easy to prevent the occurrence of fraudulent activity. After starting the output processing of the warning message in S124, the process proceeds to the processing of S118, and it is continuously determined whether or not the back door 12a is closed.

When the vehicle 12 is closed in S118 (Yes in S118), the door opening / closing control unit 74d drives the back door opening / closing mechanism 36 to close the back door 12a, and the door lock control unit 74c The back door lock mechanism 30 is driven to lock the back door 12a, and the warning processing unit 74h stops the output message (S126). Further, the image pickup control unit 74b ends the recording (save) process of the image pickup image data captured by the image pickup unit 20 (S128). In this case, the imaging process (holding process in the volatile memory) of the imaging unit 20 may be continued. Then, the notification control unit 74k transmits the processing completion information in the home delivery mode to the mobile terminal Ma or the like of the user M, the setting unit 70 turns off the home delivery mode (S130), and operates a series of in-vehicle security devices (home delivery). Mode processing) ends. The notification control unit 74k transmits, for example, information indicating that the delivery of the baggage T has been completed and the vehicle 12 has been locked to the user M. In addition, when the notification control unit 74k outputs a warning or the like due to an act considered to be fraudulent, such as the possibility that the delivery person W may invade the guest room 14b, the fact report and the image recording recorded at that time are taken. A copy of the image data is transmitted to the mobile terminal Ma or the like of the user M.

FIG. 10 is a flowchart showing another example of the behavior prediction process of S108 of FIG. _{In the flowchart of FIG. 10, the distance X (X 1} > X ₂ >>...> X _X ) between the boundary surface L and the tip Wa 1 of the delivery person W, for example, the arm Wa, and the tip Wa 1 of the arm Wa at that time. An example is shown in which the behavior of the delivery person W is predicted by further adding the acceleration of the tip Wa1 to the velocity V (V ₁ > V ₂ >> V _{X) of.}

_{For example, it is determined whether the distance X 1} between the boundary surface L and the tip Wa 1 of the arm Wa is within a predetermined value (for example, 250 mm) (S300), and when the distance X ₁ is within 250 mm (Yes in S300), then. _{It is determined whether or not the velocity V 1} of the tip portion Wa 1 of the above is equal to or higher than a predetermined value (for example, 150 mm / s) (S302). At this time, if the speed _{V 1} is greater than 150 mm / s (Yes in S302), further, the acceleration of the tip Wa1 is positive when it is (acceleration> 0) (Yes in S304), the behavior prediction unit 74g is It is presumed that the delivery person W is trying to approach the boundary surface L while gaining momentum with agile movement although it exists at a position sufficiently far from the boundary surface L. In this case, it is determined that there is a possibility of entering the guest room 14b beyond the boundary surface L (S306), and this flow is temporarily terminated.

At the determination timing of S300, when the distance X ₁ is farther than 250 mm (No of S300), or when the speed V ₁ is less than 150 mm / s at S302 (substantially the same timing of S300) (No of S302). _{At the next processing timing, it is determined whether the distance X 2} between the boundary surface L and the tip end Wa 1 of the arm Wa is within a predetermined value (for example, 200 mm) (S308). Further, even if the speed _{V 1} is was 150 mm / s or more (S302 of Yes), the acceleration of the tip Wa1 is if it is zero or negative (the acceleration ≦ 0) (S304 of No), the process proceeds to S308 do.

In S308, when the distance X ₂ is within 200 mm (Yes in S308), _{it is determined whether the velocity V 2} of the tip Wa1 at that time is equal to or higher than a predetermined value (for example, 100 mm / s) (S310). At this time, when the velocity V ₂ is 100 mm / s or more (Yes in S310), and when the acceleration of the tip Wa1 is positive (acceleration> 0) (Yes in S312), the behavior prediction processing unit 74g It is presumed that the delivery person W is trying to approach the boundary surface L while being relatively fast and gaining momentum, although it is still far from the boundary surface L. In this case, it is determined that there is a possibility of entering the guest room 14b beyond the boundary surface L (S306), and this flow is temporarily terminated.

_{When the distance X 2} is farther than 200 mm at the determination timing of S308 (No of S308), it is determined at the next processing timing whether the distance X between the boundary surface L and the tip Wa 1 of the arm Wa is within a predetermined value. When the speed V ₂ is less than 100 mm / s in S310 (No in S310), it is determined at the next processing timing whether the distance X between the boundary surface L and the tip Wa 1 of the arm Wa is within a predetermined value. .. Further, even when the velocity V ₂ is 100 mm / s or more (Yes in S310), the acceleration of the tip Wa1 is 0 or negative (acceleration ≦ 0) (No in S312). At the processing timing, it is determined whether the distance X between the boundary surface L and the tip portion Wa1 of the arm Wa is within a predetermined value.

Then, the same processing as the above-described processing is sequentially and repeatedly executed (S314, S316, S318). Then, a predetermined time (e.g., 1 minute) from the start of action prediction processing is passed, if the distance _{X X} between the tip portion Wa1 of the interface L and arm Wa is aways than a predetermined value (e.g., 100 mm) (S314 No), the behavior prediction processing unit 74g estimates that the delivery person W does not seem to approach the boundary surface L even after a predetermined time has passed since the start of the loading work of the luggage T. In this case, the delivery person W determines that there is little (or no) possibility of invading the guest room 14b beyond the boundary surface L (S320). Moreover, even if when the distance _{X X} between the tip portion Wa1 of the interface L and the arm Wa was within 100 mm (Yes in S314), the speed _{V X} is less than 75 mm / s (No in S316), action In the prediction processing unit 74g, although the delivery person W is approaching the boundary surface L, the movement is slow, there is no sign of further approaching the boundary surface L, and the delivery person W crosses the boundary surface L and invades the guest room 14b. It is determined that the possibility is low (or none) (S320), and this flow is temporarily terminated. Further, even when the velocity V2 is 75 mm / s or more in S316 (Yes in S310), the same applies when the acceleration of the tip Wa1 is 0 or negative (acceleration ≦ 0) in S318 (No in S318). In addition, the behavior prediction processing unit 74g estimates that the delivery person W is approaching the boundary surface L, but there is no sign of further approaching the boundary surface L without accelerating the slow movement. In this case, the delivery person W determines that there is little (or no) possibility of invading the guest room 14b beyond the boundary surface L (S320), and temporarily terminates this flow. In S318, when the acceleration of the tip Wa1 is positive (acceleration> 0) (Yes in S318), the behavior prediction processing unit 74g has the delivery person W close to the boundary surface L, and the operation is slow. However, it is presumed that there is a sign that the operation is accelerated and that the boundary surface L is approaching. In this case, the delivery person W determines that there is a possibility of invading the guest room 14b beyond the boundary surface L (S306), and temporarily ends this flow.

In this way, when performing the behavior prediction processing, by determining the intrusion possibility including the acceleration of the movement of the delivery person W, it is possible to determine the intrusion possibility with higher accuracy even at a position farther from L. It can be carried out. In FIGS. 9 and 10, an example of calculating the distance to the boundary surface L, the velocity of the tip Wa1, and the acceleration based on the state shown in FIG. 5, that is, the tip Wa1 of the arm Wa of the delivery person W. showed that. In another example, the same effect can be obtained by calculating the distance to the boundary surface L, the velocity of the tip Wa1, and the acceleration based on the state shown in FIG. 6, that is, the tip Wb1 of the head Wb of the delivery person W. Can be obtained.

FIG. 11 is a flowchart illustrating the operation of the in-vehicle security device when the seat layout is changed in the delivery mode. Note that FIG. 11 basically includes only S400, which is a process of changing the seat to the home delivery mode posture, and S402, which is a process of returning the seat before shifting to the home delivery mode when the loading of the luggage T is completed. The flow of processing is the same as the flowchart of FIG. Therefore, substantially the same processing is assigned the same step number (S number), and detailed description thereof will be omitted.

When the delivery mode is set to ON in the setting unit 70 in the process of S102, the seat control unit 74j drives the seat setting mechanism 34 to change the rear seat 18 to the delivery mode posture (S400). For example, the posture of the backrest 18a of the rear seat 18 is changed to an upright posture up to around 90 °. Further, the headrest 18b of each rear seat 18 is extended to the maximum height. As a result, the communication space S communicating from the luggage compartment 14a to the guest room 14b is narrowed, and it is possible to prevent the delivery person W from invading the guest room 14b side from the communication space S. That is, the intrusion suppression effect can be obtained. When changing the seat to the home delivery mode posture, the layout of the rear seat 18 and the front seat 32 may be changed according to the size and shape of the luggage T.

In the seat posture in the home delivery mode, when the back door 12a is closed in S126, the back door 12a is locked, and the output of a message such as a warning is stopped, the seat control unit 74j drives the seat setting mechanism 34. , For example, the vehicle 12 is returned to the seat posture in which the vehicle 12 can be comfortably used (S402).

As described above, according to the in-vehicle crime prevention device of the present embodiment, when the luggage compartment 14a of the vehicle 12 is used for receiving the luggage T, the security is further improved while suppressing the complication of the structure and the increase in cost. Can be made to. Then, the occurrence of redelivery of the delivery person W can be reduced, and efficient delivery work can be performed.

In the above-mentioned example, as the vehicle 12, as shown in FIG. 1, a so-called "two-box type" in which the vehicle compartment 14 is separated from the engine room 16 in which the engine or the like is mounted is shown. In this case, the passenger compartment 14 of the vehicle 12 shows an example in which the luggage compartment 14a and the passenger compartment 14b communicate with each other. As another type, FIG. 12 shows a so-called "three-box type (sedan type)" vehicle 12A. In the case of the vehicle 12A, the luggage compartment 14a and the passenger compartment 14b are completely separated, and even when the back door 12Aa is opened, it is difficult for the luggage compartment 14a to enter the passenger compartment 14b. By applying the device, it is possible to receive the luggage T in the home delivery mode, and the same effect can be obtained. For example, when the back door 12Aa of the vehicle 12A is opened, a message or a warning for suppressing intrusion or mischief into the vehicle 12A can be output. In addition, the behavior of the delivery person W can be monitored, and the captured image data thereof can be recorded (saved).

As shown in FIG. 12, in the case of the vehicle 12A, since the back door 12Aa is composed of an iron plate, after the back door 12Aa is opened, the image pickup unit 20 in the vehicle interior 14 is a back door. In some cases, the rear view is obstructed by 12Aa and the delivery person W and the luggage T cannot be imaged. Therefore, the crime prevention control unit 74 performs the vehicle baggage determination process by the baggage determination unit 74e and the person determination process by the person determination unit 74f based on the captured image data provided by the image pickup unit 20 that constantly performs imaging while parking. The delivery person W approaching 12A is detected through the rear glass. Then, when the delivery person W requests the unlocking of the back door lock mechanism 30 of the back door 12Aa based on the successful authentication after the delivery person W requests the authentication, the imaging control unit 74b includes the face of the delivery person W through the rear glass. Recording (save) of the captured image data to a non-volatile memory such as SSD10d is started. In this case as well, the image pickup control unit 74b is loop-stored in the volatile memory using a capacity of about 1 minute before the start of recording (save), and stores the imaged image data, for example, 30 seconds in the non-volatile memory. .. That is, before the back door 12Aa is opened and the field of view is obstructed, the face image of the delivery person W is acquired to ensure security. During this period, the warning processing unit 74h displays a message such as "Currently monitoring the interior of the vehicle" or "Thank you for delivery" to the delivery person W who opened the back door 12Aa, and other than the delivery act. Create a situation where it is difficult for the behavior of. Further, the warning processing unit 74h is other than a delivery act such that the delivery person W moves to the side of the vehicle 12A and opens the driver's seat side door and the rear seat door based on the captured image data of the imaging unit 20. If an act, for example, is considered to invade the guest room 14b, a stronger warning message such as "Please do not invade the guest room. It is a fraudulent act." Is displayed to create a situation to prevent the occurrence of fraudulent activity. You may do so.

In addition, as in the above-mentioned example, the posture of the rear seat 18 and the front seat 32 can be changed and the seat layout can be changed according to the size and shape of the luggage T, and the same effect can be obtained. Can be done.

Further, in the above-mentioned example, the delivery person W carries in the cargo T, but if the cargo to be carried in is authenticated and the person to be carried in is given an authentication code, the general public (friends and friends) Similarly, the luggage compartment 14a can be used as a carry-in place for the luggage T (family, etc.).

The above-mentioned in-vehicle security unit device includes at least a back door lock mechanism 30 that automatically locks and unlocks the back door 12a (back door 12Aa), an imaging unit 20 that includes the vehicle rear region in the imaging range, an in-vehicle audio output device 64, and the like. If the vehicle 12 (vehicle 12A) is equipped with the above, this can be realized by installing an in-vehicle security program in the control system of the vehicle 12 (vehicle 12A). In this case, the program that realizes each function module of the in-vehicle security unit 68 is a file in an installable format or an executable format, such as a CD-ROM, a flexible disk (FD), a CD-R, or a DVD (Digital Versatile Disk). It may be configured to be recorded and provided on a computer-readable recording medium.

Further, the above-mentioned program may be stored on a computer connected to a network such as the Internet and provided by downloading via the network. Further, the program executed in the present embodiment may be configured to be provided or distributed via a network such as the Internet.

Although the embodiments and modifications of the present invention have been described, these embodiments and modifications are presented as examples and are not intended to limit the scope of the invention. These novel embodiments can be implemented in various other embodiments, and various omissions, replacements, and changes can be made without departing from the gist of the invention. These embodiments and modifications thereof are included in the scope and gist of the invention, and are also included in the scope of the invention described in the claims and the equivalent scope thereof.

10 ... ECU, 10a ... CPU, 12, 12A ... Vehicle, 12a, 12Aa ... Back door, 14 ... Car compartment, 14a ... Luggage compartment, 14b ... Guest room, 18 ... Rear seat, 18a ... Backrest, 18b ... Headrest, 20 ... Imaging unit, 22 ... mode changeover switch, 28 ... indoor display device, 30 ... back door lock mechanism, 34 ... seat setting mechanism, 36 ... back door opening / closing mechanism, 40 ... door handle switch, 42 ... door lock mechanism, 44 ... door Opening / closing mechanism, 46 ... Imaging setting mechanism, 62 ... Outside display device, 64 ... Inside sound output device, 66 ... Outside sound output device, 68 ... In-vehicle security unit, 70 ... Setting unit, 72 ... Detection unit, 72a ... Door lock state Detection unit, 72b ... Door open / close state detection unit, 72c ... Vehicle condition detection unit, 74 ... Security control unit, 74a ... Authentication processing unit, 74b ... Imaging control unit, 74c ... Door lock control unit, 74d ... Door open / close control unit, 74e ... Luggage determination unit, 74f ... Person determination unit, 74g ... Behavior prediction processing unit, 74h ... Warning processing unit, 74i ... Contact determination processing unit, 74j ... Sheet control unit, 74k ... Notification control unit, L ... Boundary surface, M ... user, Ma ... mobile terminal, T ... luggage.

Claims (5)

For a vehicle in which a first area in which pre-certified certified luggage is allowed to be accepted and a second area other than the first area are set, the certified luggage is placed in the first area. A setting unit that sets the baggage acceptance mode that allows acceptance, and
A detection unit that detects the openable state of the door communicating with the first region, and
Control to output warning information to suppress invasion into the second area when the behavior indicating the possibility of invasion of the second area by the luggage carrier of the authenticated luggage is detected in the openable state of the door. Department and
In-vehicle security device. The control unit is based on the distance from the boundary surface between the first region and the second region to the luggage carrier and the speed of the behavior of the luggage carrier, and the second region of the luggage carrier. The vehicle-mounted security device according to claim 1, which determines the possibility of intrusion into the vehicle. The vehicle-mounted crime prevention device according to claim 1 or 2, wherein the control unit differs in the content of the warning information based on the high possibility of the luggage carrier invading the second area. The vehicle-mounted security device according to any one of claims 1 to 3, wherein the control unit outputs information indicating that the vehicle interior is currently being monitored as the warning information. The vehicle-mounted security device according to any one of claims 1 to 4, wherein the control unit outputs the warning information to a recognition device that can be recognized outside the vehicle.

Images