JP2023111674A - Mobility service providing system, mobility service providing method, and mobility service providing apparatus - Google Patents

Abstract

To protect privacy of a user by restricting sharing of information on service items to be used, in accordance with a relationship between the user and a reservation user, when the user who is provided with a mobility service that operates a vehicle is different from the reservation user who makes a reservation for the mobility service.SOLUTION: A control apparatus 2 determines (S30), when a user who is provided with a mobility service is different from a reservation user who makes a reservation for the mobility service, a relationship between the reservation user and the user by collating the reservation user and the user with a registrant database 23; and restricts (S31-S35) information to be shared between the reservation user and the user, out of information on service items to be used, which are matters available for the user in the mobility service, in accordance with the relationship between the reservation user and the user.SELECTED DRAWING: Figure 5

Description

The present invention relates to a mobile service providing system, a mobile service providing method, and a mobile service providing apparatus.

In Patent Document 1, a watcher who receives a request from a watching target person (for example, an elderly person) who uses on-demand transportation can make a reservation for on-demand transportation, and the date and time of getting on and off, the stop point, and the name of the person getting on and off. , and a notification method for transmitting notification information to the watcher as to whether or not the person to be watched has boarded the vehicle as reserved.

JP 2016-212536 A

In transportation services that operate vehicles, if the user who receives the transportation service is different from the person who makes a reservation for the transportation service, the items that the user can use in the transportation service (hereinafter referred to as "service usage items") It may be desirable for bookers to share information about For example, if the user receiving the mobile service is a young child or an elderly person, it may be preferable for the subscriber to share information indicating the user's current location.
On the other hand, if the user and the reservation person share all information, there is a risk that the user's privacy will not be protected.
In the present invention, when a user who receives provision of a transportation service for operating a vehicle is different from a person who makes a reservation for the transportation service, the sharing of information regarding service usage items can be performed according to the relationship between the user and the person who made the reservation. The purpose is to protect the privacy of users by restricting

According to one aspect of the present invention, a mobile service providing system for operating vehicles is provided. A mobile service providing system receives reservation information including at least information on a user who receives the mobile service from a vehicle provided for the mobile service and an electronic device which is a terminal device operated by a person who makes a reservation for the mobile service. and a control device for arranging a vehicle for use by the user according to the reservation information. The control device has a registrant database that stores pre-registered registrants to use the mobile service providing system and information about the relationship between the registrants, and if the registrant and the user are different, By checking the reservation person and user against the registrant database, the relationship between the reservation person and the user is determined, and depending on the relationship between the reservation person and the user, Restrict the information shared by the subscriber and the user among the information on the service usage items that can be done.

According to the present invention, in the case where a user who receives provision of transportation services for operating a vehicle is different from a person who makes a reservation for the transportation service, the sharing of information regarding service usage items can be established between the user and the person who made the reservation. limit accordingly. This makes it possible to protect the privacy of the user.

1 is a schematic configuration diagram of an example of a mobile service providing system according to an embodiment; FIG. 2 is an explanatory diagram of an example of the functional configuration of the first electronic device of FIG. 1; FIG. FIG. 2 is an explanatory diagram of an example of a functional configuration of a control device in FIG. 1; 2 is an explanatory diagram of an example of the functional configuration of the second electronic device of FIG. 1; FIG. FIG. 4 is an explanatory diagram of an example of restricting sharing of information on service usage items; FIG. 4 is a sequence diagram of an example of operations when reserving a mobile service; 6 is a flowchart of an example of relationship determination processing; FIG. 4 is a sequence diagram of an example of operations when using a mobile service;

BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the description of the drawings, the same or similar parts are denoted by the same or similar reference numerals, and overlapping descriptions are omitted. Each drawing is schematic and may differ from the actual one. The embodiments shown below exemplify devices and methods for embodying the technical idea of the present invention, and the technical idea of the present invention is specific to the devices and methods illustrated in the following embodiments. not something to do. Various modifications can be made to the technical idea of the present invention within the technical scope described in the claims.

(composition)
FIG. 1 is a schematic configuration diagram of an example of a mobile service providing system according to an embodiment. The mobile service providing system 1 is a system that provides a mobile service that moves a user by operating a vehicle 3 . In this specification, the vehicle 3 provided for the mobile service by the mobile service providing system 1 is referred to as "service vehicle".
A mobile service providing system 1 includes at least a control device 2 and a service vehicle 3 .
The first electronic device 4 is a terminal device operated by a person who reserves a mobile service by the mobile service providing system 1 (hereinafter referred to as a "reserver"), and the second electronic device 5 is a mobile service provider. It is a terminal device operated by a person (hereinafter referred to as a "user") who receives the mobile service provided by the system 1. FIG. For example, the first electronic device 4 may be a mobile information terminal that can be carried by the reservation person, a small computer that is easy to carry, or a computer installed on a desk. For example, the second electronic device 5 may be, for example, a mobile information terminal that can be carried by the reservation person, or a small computer that is easy to carry.

The subscriber accesses the control device 2 using the first electronic device 4 when booking the mobile service. Before making a reservation for the mobile service, the reservation person installs dedicated application software for using the mobile service providing system 1 in the first electronic device 4 in advance, and makes a reservation using the dedicated application software. may In the following description, "application software" is simply referred to as "software". Alternatively, the reservation person may use the browser function of the first electronic device 4 to make a reservation for the mobile service on a site that accepts reservations for the mobile service on the Internet.
The first electronic device 4 receives an input operation by a reservation person regarding the reservation of the mobile service. The first electronic device 4 generates reservation information for applying for a mobile service reservation based on the information input by the reservation person, and transmits the reservation information to the control device 2 . The reservation information includes, for example, information about the user who receives the transportation service (for example, identification information of the user), the boarding location and boarding date and time of the service vehicle 3, and the information of the alighting location from the service vehicle 3. may contain.

The first electronic device 4 comprises a communication device 40 , a human machine interface (HMI) 41 and a controller 42 .
The communication device 40 provides communication functionality between the first electronic device 4 and external devices. The communication method used by the communication device 40 may be, for example, wireless communication using a public mobile communication network, satellite communication, or the like. The first electronic device 4 transmits and receives data to and from the control device 2 and the second electronic device 5 using the communication device 40 .
The HMI 41 is an interface device that exchanges information between the first electronic device 4 and the reservation person. The HMI 41 includes a display device that can be visually recognized by the reservation person, and a speaker and buzzer that output an alarm sound, notification sound, and audio information. The HMI 41 also includes an operator and a voice input device for receiving an operation input to the first electronic device 4 by the reservation person. The operator may be a button, switch, lever, dial, keyboard, touch panel, or the like.

The controller 42 is an electronic control unit (ECU) that controls the operation of the first electronic device 4 . Controller 42 includes a processor 43 and peripheral components such as storage device 44 . The processor 43 may be, for example, a CPU (Central Processing Unit) or an MPU (Micro-Processing Unit). The storage device 44 is a non-transitory tangible storage medium such as a register, a cache memory, a ROM (Read Only Memory) used as a main storage device, a RAM (Random Access Memory), etc. ).
The functions of the first electronic device 4 to be described below are realized by, for example, the processor 43 executing a computer program stored in the storage device 44 .

The control device 2 receives the reservation information from the first electronic device 4 and arranges the service vehicle 3 to be used by the user according to the reservation information. The control device 2 includes a processor 20 , a storage device 21 , a communication device 22 , a registrant database (registrant DB) 23 , a map database (map DB) 24 and a reservation database (reservation DB) 25 .
The processor 20 may be, for example, a CPU or MPU. The storage device 21 may include a non-temporary tangible storage medium such as a register, a cache memory, and a ROM or RAM used as a main storage device. The functions of the control device 2 described below are realized by the processor 20 executing a computer program stored in the storage device 21, for example.

The communication device 22 provides a communication function between the control device 2 and external devices. The communication method of the communication device 22 may be, for example, wired communication or wireless communication via a public mobile communication network, satellite communication, road-to-vehicle communication with the service vehicle 3, or the like.
The control device 2 transmits and receives data to and from the service vehicle 3 , the first electronic device 4 and the second electronic device 5 through the communication device 22 .

The registrant DB 23 is a database for registering persons who use the mobile service providing system 1 . In the following description, a person registered in the registrant DB 23 is referred to as a "registrant". For example, as users of the mobile service providing system 1, a registrant who reserves a mobile service by the mobile service providing system 1 and a user who receives the mobile service are registered in the registrant DB23.
Various modes can be adopted as modes for registering the registrant and the user in the registrant DB 23 . For example, the reservation person and the user are registered in the registrant DB 23 as persons who can both reserve and use the mobile service (that is, persons who can use the mobile service providing system 1 both as the reservation person and as the user). good too.

Also, for example, a person who can only make a reservation for mobile services (that is, a person who can use the mobile service providing system 1 only as a subscriber) or a person who can both make reservations and use mobile services can be used as a main registrant. A person who is registered in the DB 23 and can only use the mobile service (that is, a person who can use the mobile service providing system 1 only as a user) may be registered as a secondary registrant accompanying the main registrant.
Further, for example, a person who can only use mobile services or a person who can both reserve and use mobile services is registered in the registrant DB 23 as a main registrant, and a person who can only make reservations for mobile services is registered as a main registrant. You may register as a subsidiary registrant accompanying the registrant.

Also, if there is a relationship between different registrants registered in the registrant DB 23, the relationship between the registrants is registered in the registrant DB 23. FIG.
As such a relationship between registrants, it may be registered in the registrant DB 23 that one registrant is the legal supervisor of another registrant. Examples of legal oversight include registering that a registrant is the parent of another registrant, is the guardian of another registrant, or is an older child of another registrant. good.
Further, as a relationship between registrants, for example, it may be registered in the registrant DB 23 that a certain registrant is a person who provides care services to other registrants.
Thus, the relationship in which one registrant is the legal supervisor of another registrant and the relationship in which one registrant provides care services to another registrant are referred to herein as "first relationship”.

Further, as a relationship between registrants, it is possible to register in the registrant DB 23 that a person is entrusted as a business and makes reservations for mobile services for other registrants. For example, it may be registered that a registrant is a secretary or butler of another registrant.
In this specification, a relationship in which a certain registrant is entrusted with work and reserves a mobile service for another registrant is referred to as a "second relationship" in this specification.

Various modes can be adopted as modes for registering relationships between registrants in the registrant DB 23 . For example, when registering a relationship between registrants who are separately registered as persons who can both reserve and use mobile services, link information linking these registrants and the relationship between these registrants may be stored in the registrant DB 23.
In addition, when registering the relationship between the primary registrant and secondary registrants registered accompanying the primary registrant, relationship attribute information indicating the relationship between the primary registrant and secondary registrants shall be provided. , may be stored in the registrant DB 23 in addition to the registration information of the main registrant or secondary registrant.

The map DB 24 stores map information of areas where the mobile service providing system 1 provides mobile services. The map information may be, for example, map data for navigation (hereinafter simply referred to as "navigation map").
Upon receiving the reservation information from the first electronic device 4, the control device 2 calculates a travel route from the boarding location to the alighting location included in the reservation information based on the map information stored in the map DB 24. In addition, the control device 2 predicts the drop-off date and time when the service vehicle 3 departs at the boarding date and time included in the reservation information, travels along the travel route, and arrives at the drop-off location.
The control device 2 converts the boarding location, boarding date and time, and drop-off location included in the reservation information received from the first electronic device 4, and the travel route and drop-off date and time calculated by the control device 2, into the travel plan of the service vehicle 3 (i.e. , a travel plan for a mobile service provided to the user), together with the identification information of the user, is stored in the reservation DB 25 .
In addition, the control device 2 transmits to the service vehicle 3 a travel plan including the boarding location, boarding date and time, drop-off location, drop-off date and time, and travel route.

The service vehicle 3 is a vehicle that operates according to a user's request (a so-called demand-type transportation vehicle), and may be, for example, a shared taxi or a robot taxi. The service vehicle 3 is an autonomous vehicle that automatically drives the service vehicle 3 by the controller 36 according to the travel plan transmitted from the control device 2 without the involvement of the driver (human).
Upon receiving the travel plan from the control device 2, the service vehicle 3 travels to the boarding place so as to arrive by the boarding date and time included in the travel plan. When the user gets on the service vehicle 3 at the boarding place, the service vehicle 3 travels to the alighting place along the travel route included in the travel plan.

The service vehicle 3 includes a sensor 30 , a positioning device 31 , a map database (map DB) 32 , a communication device 33 , an in-vehicle terminal 34 , an in-vehicle device 35 , a controller 36 and an actuator 37 .
The sensors 30 include object sensors that detect objects around the service vehicle 3 and vehicle sensors that detect various information (vehicle status) obtained from the service vehicle 3 .
The object sensor detects the surrounding environment of the service vehicle 3, such as the relative position between an object existing around the service vehicle 3 and the service vehicle 3, the distance between the service vehicle 3 and the object, and the direction in which the object exists. Object sensors may include, for example, cameras that capture the surrounding environment of the service vehicle 3 . Also, for example, the object sensor may include a rangefinder such as a laser range finder (LRF), a radar, or a LiDAR (Light Detection and Ranging) laser radar. The object sensor outputs ambient environment information, which is information about the detected ambient environment of the service vehicle 3 , to the controller 36 .
The vehicle sensors include, for example, a vehicle speed sensor that detects the traveling speed (vehicle speed) of the service vehicle 3, a wheel speed sensor that detects the rotational speed of each tire provided on the service vehicle 3, and acceleration (deceleration) of the service vehicle 3 in three axial directions. ), a steering angle sensor that detects the steering angle (including the turning angle), a gyro sensor that detects the angular velocity generated in the service vehicle 3, and a yaw rate sensor that detects the yaw rate. may contain. Vehicle sensors output vehicle status information to controller 36 .

The positioning device 31 measures the current position and attitude of the service vehicle 3 . The positioning device 31 may comprise, for example, a Global Positioning System (GNSS) receiver. A GNSS receiver may be, for example, a global positioning system (GPS) receiver or the like. The positioning device 31 may comprise an inertial navigation system. The positioning device 31 outputs current position information of the measured current position to the controller 36 .
The map DB 32 stores map information. The map information may include map data for navigation (hereinafter simply referred to as "navigation map") and high-precision map data suitable as a map for automatic driving (hereinafter simply referred to as "high-precision map"). .
The communication device 33 provides a communication function between the service vehicle 3 and external devices. The communication method by the communication device 33 may be, for example, radio communication by a public mobile communication network, satellite communication, road-to-vehicle communication, or the like.
The service vehicle 3 transmits and receives data to and from the control device 2 through the communication device 33 .

The in-vehicle terminal 34 is a terminal device used by a user who gets on the service vehicle 3 . The terminal device may be an information terminal device separate from the controller 36 or may be an HMI for exchanging information between the user and the controller 36 . The user can use the in-vehicle terminal 34 to use various information providing services (for example, Internet, news, video, and music distribution services) and obtain coupons. Further, for example, the in-vehicle terminal 34 can be used for user authentication procedures when starting to use the service vehicle 3 . It can also be used, for example, by the user to change the travel plan of the service vehicle 3 .
The in-vehicle equipment 35 includes a window opening/closing device, a door locking device, an air conditioner, an audio device, and the like of the service vehicle 3 .

Controller 36 is an electronic control unit that controls service vehicle 3 . For example, the controller 36 performs autonomous driving control of the service vehicle 3 . Controller 36 includes a processor 38 and peripheral components such as storage device 39 . Processor 38 may be, for example, a CPU or MPU. The storage device 39 may include non-temporary tangible storage media such as registers, cache memory, and ROM, RAM, etc. used as main storage devices. The functions of the controller 36 are realized, for example, by the processor 38 executing a computer program stored in the storage device 39 .
The controller 36 executes autonomous driving control for driving the service vehicle 3 according to the driving plan based on the surrounding environment information and vehicle state information from the sensor 30, the positioning result of the positioning device 31, and the map information of the map DB 32. . For example, the controller 36 determines a target travel trajectory for the service vehicle 3 based on the current position and attitude of the service vehicle 3, the travel route included in the travel plan, map information, and the surrounding environment of the service vehicle 3. calculate. For example, a route space map that expresses the route around the service vehicle 3 and the presence or absence of objects, and a risk map that quantifies the degree of danger of the driving place are generated, and the motion characteristics of the service vehicle 3, the vehicle state information, and the route space are generated. A target travel trajectory for the service vehicle 3 to travel is generated based on the map and the risk map. The controller 36 drives the actuator 37 so that the service vehicle 3 travels along the generated target travel trajectory.
The actuator 37 operates the steering device, the driving device and the braking device of the service vehicle 3 in response to a control signal from the controller 36 to cause the vehicle behavior of the service vehicle 3 to automatically move the service vehicle 3. drive. The actuator 37 includes a steering actuator, an accelerator opening actuator, and a brake control actuator. Further, the actuator 37 operates the door motor of the service vehicle 3 according to the control signal from the controller 36 to automatically open and close the door of the service vehicle 3 (for example, the slide door of the rear seat).

The second electronic device 5 is a terminal device used by the user of the service vehicle 3 . For example, the second electronic device 5 may be used in a user authentication procedure when starting to use the service vehicle 3, and may be used by the user to change the travel plan of the service vehicle 3. . When using the mobile service using the second electronic device 5, the user installs dedicated software for using the mobile service providing system 1 on the second electronic device 5 in advance.

The second electronic device 5 comprises a positioning device 50 , a communication device 51 , an HMI 52 and a controller 53 .
The positioning device 50 measures the current position of the second electronic device 5 (that is, the current position of the user). The positioning device 50 may comprise, for example, a Global Positioning System (GNSS) receiver. A GNSS receiver may be, for example, a global positioning system (GPS) receiver or the like. The positioning device 50 may comprise an inertial navigation system. The positioning device 50 outputs current position information of the second electronic device 5 to the controller 36 .

The communication device 51 provides a communication function between the second electronic device 5 and an external device. The communication method of the communication device 51 may be, for example, radio communication by a public mobile communication network, satellite communication, or the like. The second electronic device 5 transmits and receives data to and from the control device 2 and the first electronic device 4 through the communication device 51 .
The HMI 52 is an interface device that exchanges information between the second electronic device 5 and the user. The HMI 52 includes a display device that can be visually recognized by the reservation person, and a speaker and buzzer that output alarm sounds, notification sounds, and audio information. In addition, the HMI 52 includes an operator and a voice input device for receiving operation input to the second electronic device 5 by the reservation person. The operator may be a button, switch, lever, dial, keyboard, touch panel, or the like.

The controller 53 is an electronic control unit that controls the operation of the second electronic device 5 . Controller 53 includes a processor 54 and peripheral components such as storage device 55 . Processor 54 may be, for example, a CPU or MPU. The storage device 55 may include non-temporary tangible storage media such as registers, cache memory, and ROM, RAM, etc. used as main storage devices.
The functions of the second electronic device 5 to be described below are realized by executing a computer program stored in the storage device 55 by the processor 54, for example.

When a mobile service is provided by the mobile service providing system 1, the person who makes a reservation for the mobile service may be different from the user who receives the mobile service. For example, if the Booker is the User's legal supervisor (e.g., if the User is a young child and the User's parent is booking a transport service on behalf of the child); A person who provides care services to a user may book mobility services on behalf of the user.
In such cases, when it is desirable for the user and the person who made the reservation to share information regarding service usage items that the user can use in transportation services so that the user can safely arrive at the place of drop-off. There is For example, if the user receiving the transportation service is a young child or an elderly person, it may be preferable for the user and the reservation person to share information indicating the user's current location.

However, if the reservation person and the user are different and all information is shared between the user and the reservation person, the behavior of the user will be constantly monitored by the reservation person, and the user's privacy will be compromised. may not be protected.
For example, there are cases where the reservation person is the user's secretary, butler, or the like, who makes a reservation for the mobile service for the user under commission as a business. For such users, if all information is shared by the reserving party, even information that is not necessary for business will always be disclosed to the reserving party, and there is a risk that the privacy of the user will be violated. There is
Therefore, in the mobile service providing system 1 of the embodiment, when the reservation person and the user are different, the relationship between the reservation person and the user is determined by comparing the reservation person and the user with the registrant DB 23. do. Then, according to the relationship between the reserving person and the user, the information shared between the reserving person and the user is restricted among the information on the service usage items.
As a result, if the relationship between the reservation person and the user is such that it is not desirable to share information on service usage items, it is possible to limit the sharing of information on service usage items. , it is possible to protect the privacy of the user.

Details of the mobile service providing system 1 will be described below. 2A to 2C are explanatory diagrams of examples of functional configurations of the first electronic device 4, the control device 2, and the second electronic device 5, respectively.
The first electronic device 4 includes a reservation person information transmission section 60 , a reservation information generation section 61 and an approval request section 62 .
The control device 2 includes a reservation setting unit 70 , a position information acquisition unit 71 , a vehicle allocation unit 72 , a travel plan setting unit 73 , a relationship attribute determination unit 74 and a limit setting unit 75 .
The second electronic device 5 includes a location information acquisition section 80 , a restriction status notification section 81 , a restriction change request section 82 and a shared item approval section 83 .

The reservation person information transmission unit 60 transmits identification information of the reservation person to the control device 2 when reserving the mobile service using the first electronic device 4 . For example, the reservation person information transmitting unit 60 may transmit identification information of the reservation person to the control device 2 for authentication of the reservation person when logging into the control device 2 . Further, the reservation person information transmitting unit 60 may transmit the identification information of the reservation person to the control device 2 at the same time as the reservation information.
When the reservation person operates the HMI 41 to input information necessary for reservation of the mobile service (information on the user, boarding place, boarding date and time, and getting off place), the reservation information generation unit 61 generates reservation information. As described above, the reservation information includes the user's identification information, and information on the boarding location, boarding date and time, and alighting location. The reservation information generator 61 transmits the generated reservation information to the control device 2 .

Upon receiving the reservation information from the first electronic device 4, the reservation setting unit 70 of the control device 2 registers the reservation information in the reservation DB 25, thereby setting a reservation for the mobile service for the user specified by the reservation information.
When dedicated software for using the mobile service providing system 1 is installed in the second electronic device 5, the reservation setting unit 70 stores reservation notification information for notifying the user that the mobile service has been reserved. to the second electronic device 5 . For example, the reservation setting unit 70 may transmit the reservation notification information to the second electronic device 5 by push-type data transmission. Thereby, the dedicated software installed in the second electronic device 5 can promptly receive the reservation notification information.

The location information acquisition unit 80 of the second electronic device 5 acquires the current location information of the second electronic device 5 (that is, the current location information of the user) from the positioning device 50 . Upon receiving the reservation notification information from the control device 2 , the position information acquisition section 80 transmits the current position information of the second electronic device 5 to the control device 2 . For example, the position information acquisition unit 80 may periodically transmit the current position information to the control device 2 until the mobile service ends (for example, until the user gets off the service vehicle 3 at the drop-off location). Further, for example, the current position information may be periodically transmitted to the control device 2 until the user gets on the service vehicle 3 at the boarding place.

The position information acquisition unit 71 of the control device 2 receives the current position information of the second electronic device 5 transmitted from the second electronic device 5 . Also, the current location information of the service vehicle 3 transmitted from the service vehicle 3 is received.
The dispatch unit 72 determines the service vehicle 3 to be used by the user based on the boarding place and the current position of the service vehicle 3 included in the reservation information. For example, the dispatch unit 72 selects the service vehicle 3 located closest to the boarding place from among the service vehicles 3 that are not currently used by other users and that can arrive at the boarding place by the boarding date and time. You can Then, the dispatch unit 72 stores the identification information of the selected service vehicle 3 in the reservation DB 25 .

Next, the travel plan setting unit 73 calculates a travel route from the boarding location to the alighting location based on the map information stored in the map DB 24 . Further, the travel plan setting unit 73 predicts the drop-off date and time when the service vehicle 3 departs on the boarding date and time, travels along the travel route, and arrives at the drop-off location. The travel plan setting unit 73 stores the calculated travel route and get-off date and time in the reservation DB 25 . As a result, the boarding location, boarding date and time, and drop-off location included in the reservation information, and the alighting date and time and travel route calculated by the travel plan setting unit 73 are stored in the reservation DB 25 as a travel plan for the transportation service provided to the user. be.
The travel plan setting unit 73 transmits travel plan information related to the travel plan to the service vehicle 3 selected by the dispatch unit 72 (that is, the service vehicle 3 to be used by the user).

Next, based on the identification information of the reservation person received from the first electronic device 4 and the identification information of the user included in the reservation information, the relationship attribute determination unit 74 determines whether the reservation person and the user are different. determine whether When the reservation person and the user are different, the relationship attribute determination unit 74 compares the reservation person's identification information and the user's identification information with the registrant DB 23 to determine the relationship between the reservation person and the user. determine the relationship between
For example, the relationship attribute determination unit 74 determines that the relationship between the reservation person and the user is the first relationship (i.e., the relationship that the reservation person is the legal supervisor of the user, or the relationship that the reservation person provides care to the user. It is determined whether the relationship is a service provider relationship). Also, for example, the relationship attribute determination unit 74 determines that the relationship between the reservation person and the user is the second relationship (that is, the relationship where the reservation person is entrusted as a business and makes a reservation for the transportation service for the user). ).

The restriction setting unit 75 sets restrictions on information shared between the subscriber and the user, among the information on the service usage items, according to the relationship between the subscriber and the user. For example, the restriction setting unit 75 restricts sharing between the reservation person and the user with respect to the information related to the service use item specified in advance among the information related to the service use item.
Here, the service usage items specified in advance include, for example, changes in travel plans (that is, changes in at least one of the boarding location, boarding date and time, drop-off location, drop-off date and time, or travel route, or setting of waypoints). , operation of the in-vehicle terminal 34 , and operation of the in-vehicle device 35 .

FIG. 3 is an explanatory diagram showing an example of limiting information about service usage items set by the limit setting unit 75, which is shared between the subscriber and the user. For example, when the relationship between the reservation person and the user is the first relationship, the restriction setting unit 75 permits the reservation person and the user to share all the information regarding the service usage items.
In addition, for example, when the relationship between the reservation person and the user is the second relationship, information related to the place of boarding, the date and time of boarding, the place of getting off, the date and time of getting off, and the current position of the user before boarding the service vehicle 3 Allow information to be shared with subscribers and users. In addition to this, other information is restricted (prohibited) from being shared with subscribers and users.

That is, the control device 2 permits sharing of all the information regarding the service usage items when the relationship between the subscriber and the user is the first relationship. In addition to this, the control device 2 restricts the information to be shared among the information on the service usage items when the relationship between the subscriber and the user is the second relationship.
In FIG. 3, a change of boarding place and a change of alighting place are described as "change of boarding place", and a change of boarding date and time and alighting time are described as "change of boarding/alighting time". Further, in FIG. 3, the current position of the user before boarding the service vehicle 3 is described as "current position (before boarding)", and the current position of the user while boarding the service vehicle 3 is described as "current position (While riding)”. Further, in FIG. 3, the current position of the user after getting off the service vehicle 3 is described as "current position (after getting off)", and the operation of the in-vehicle terminal 34 and the in-vehicle equipment 35 is referred to as "in-vehicle equipment operation. ”. Note that the "seat position change" described in FIG. 3 indicates that the user seated in the seat designated by the reservation person is seated in a seat different from the seat designated by the reservation person. Also, the state in which the user is seated on the seat is detected using, for example, a camera capable of capturing an image of the interior of the vehicle, a pressure sensor arranged on the seat, or the like.
In addition, for example, when the relationship between the reservation person and the user is neither the first relationship nor the second relationship, the restriction setting unit 75 sets the service usage items specified in advance (for example, listed in FIG. 3). service usage items) may be restricted.

The restriction setting unit 75 stores, in the reservation DB 25, restriction information, which is information for restricting sharing between the subscriber and the user, among the information regarding the service usage items. For example, the restriction information may be information indicating whether sharing of information on service usage items is restricted (prohibited) or permitted. For example, the value "1" may be set when restricted (prohibited), and the value "0" may be set when permitted. The limit setting unit 75 transmits the limit information to the service vehicle 3 , the first electronic device 4 and the second electronic device 5 .
Upon receiving the restriction information from the control device 2, the controller 36 of the service vehicle 3 displays a restriction state regarding sharing of information on service usage items on the display screen of the in-vehicle terminal 34. FIG. This allows users to see how sharing of information about service usage items is restricted.
Also, the controller 36 restricts sharing of information regarding service usage items according to the restriction information. For example, if the sharing of information about changes in travel plans is restricted (prohibited), sharing of information about changes in travel plans by the user operating the in-vehicle terminal 34 is restricted (prohibited) with the reservation person.

Upon receiving the restriction information from the control device 2, the restriction status notification unit 81 of the second electronic device 5 displays on the display device of the HMI 52 the status that sharing of the information on the service usage item is restricted. This allows the user to see how sharing of information about service usage items with subscribers is restricted.
In consideration of the case where the user wishes to change the service usage items for which sharing of information with the subscriber is restricted, information sharing is restricted by operating the first electronic device 4. You may enable it to change a service utilization item.

In this case, for example, the HMI 52 receives a change operation by the user to change the restricted service usage item. Upon receiving a change operation by the user, the restriction change requesting unit 82 generates change request information requesting a change of the restricted service usage item. The restriction change request unit 82 transmits change request information to the control device 2 .
Upon receiving the change request information, the limit setting unit 75 of the control device 2 changes the limit information stored in the reservation DB 25 based on the change request information. The limit setting unit 75 transmits the changed limit information to the service vehicle 3 and the first electronic device 4 .

Upon receiving the restriction information from the control device 2, the approval requesting unit 62 of the first electronic device 4 displays on the display device of the HMI 41 a state in which sharing of the information on the service usage items with the user is restricted. This allows the subscriber to confirm how sharing of information on service usage items with the user is restricted.
In consideration of the case where the user permits sharing of information on service usage items for which sharing is restricted (prohibited), make it possible for the reservation person to request approval to share information on service usage items from the user. good too.
In this case, for example, the HMI 41 receives a request operation from the reserving person requesting approval for the sharing of the information on the service usage item for which sharing is restricted (prohibited) between the reserving person and the user. Upon receiving the request operation by the reservation person, the approval requesting unit 62 transmits to the second electronic device 5 approval request information requesting approval for sharing information. The approval request information may be sent to the second electronic device 5 via the control device 2 .

When the shared item approval unit 83 of the second electronic device 5 receives the approval request information from the approval request unit 62 , it displays the approval request from the reservation person on the display device of the HMI 52 . For example, the shared item approval unit 83 displays, on the display device of the HMI 52, the service use item for which the reservation person is requesting use approval.
The HMI 52 accepts a user's approval operation for approving or disapproval of sharing information on service usage items with a subscriber. Upon receiving an approval operation by the user, the shared item approval unit 83 generates approval information indicating service use items for which sharing of information is approved. Shared item approval unit 83 transmits the generated approval information to control device 2 .
Note that the user may operate the in-vehicle terminal 34 to perform an approval operation or a denial operation. In this case, the in-vehicle terminal 34 of the service vehicle 3 may include the shared item approval unit 83 .

Upon receiving the approval information from the second electronic device 5, the restriction setting unit 75 of the control device 2 cancels the restriction on the service usage items for which the user has approved sharing of information with the subscriber. Specifically, the restriction setting unit 75 changes the restriction information stored in the reservation DB 25 to cancel the restriction on the service usage items for which the user has approved the information sharing. For example, among the restriction information stored in the reservation DB 25, the restriction information of the service use item approved by the user may be changed from the value "1" indicating restriction (prohibition) to the value "0" indicating permission. The restriction setting unit 75 stores the changed setting information in the reservation DB 25 .
Also, the limit setting unit 75 transmits the changed setting information to the service vehicle 3 . The controller 36 of the service vehicle 3 limits service usage items for which information can be shared between the user and the reservation person according to the changed limit information.

On the other hand, the shared item approval unit 83 of the second electronic device 5 does not transmit the approval information to the control device 2 upon receiving the user's disapproval operation. As a result, the restriction on the sharing of information on service usage items with respect to subscribers is not lifted. In this case, the shared item approval unit 83 may transmit, to the first electronic device 4, denial information indicating that the sharing of the information on the service usage item has been denied. The denial information may also be sent to the first electronic device 4 via the control device 2 . Upon receiving the denial information from the second electronic device 5, the approval requesting unit 62 of the first electronic device 4 sends a notification to the display device of the HMI 41 to inform the user that the sharing of the information on the service usage item has been denied. may be displayed.

(motion)
FIG. 4 is a sequence diagram of an example of the operation of the mobile service providing system 1 when reserving a mobile service.
In step S<b>1 , the first electronic device 4 accepts an operation of a reservation person who logs in to the control device 2 .
In step S<b>2 , the reservation person information transmission unit 60 transmits identification information of the reservation person to the control device 2 .
In step S3, the control device 2 authenticates the reservation person based on the received identification information.

In step S4, the reservation information generation unit 61 generates reservation information including user identification information, boarding place, boarding date and time, and alighting place based on the input operation of the reservation person.
In step S<b>5 , the reservation information generator 61 transmits the reservation information to the control device 2 .
In step S6, the reservation setting unit 70 of the control device 2 sets a reservation for the mobile service for the user specified by the reservation information.
In step S<b>7 , the reservation setting unit 70 transmits reservation notification information to the second electronic device 5 to notify the user that the mobile service has been reserved.
In step S<b>8 , the location information acquisition unit 80 of the second electronic device 5 starts transmitting the current location information of the second electronic device 5 .

In step S<b>9 , the service vehicle 3 transmits current position information of the service vehicle 3 .
In step S10, the vehicle allocation unit 72 of the control device 2 determines the service vehicle 3 to be used by the user based on the boarding place and the current position of the service vehicle 3 included in the reservation information. The travel plan setting unit 73 calculates the travel route from the boarding place to the drop-off place and the expected drop-off date and time for the service vehicle 3 .
In step S<b>11 , the travel plan setting unit 73 transmits the travel plan information of the service vehicle 3 to the service vehicle 3 .
In step S12, the relationship attribute determination unit 74 of the control device 2 determines whether or not the reservation person and the user are different. When the reservation person and the user are different, the relationship attribute determination unit 74 and the restriction setting unit 75 select the reservation person and Execute relationship determination processing to limit information shared with users.

FIG. 5 is a flowchart of an example of relationship determination processing.
In step S<b>30 , the relationship attribute determination unit 74 collates the identification information of the reservation person and the identification information of the user with the registrant DB 23 .
In step S31, the relationship attribute determination unit 74 determines whether or not the relationship between the reservation person and the user is the first relationship. If the relationship between the reservation person and the user is the first relationship (step S31: Y), the process proceeds to step S32. If the relationship between the reservation person and the user is not the first relationship (step S31: N), the process proceeds to step S33.

In step S32, the restriction setting unit 75 permits sharing of all the information related to preset service usage items (see FIG. 3, for example) between the subscriber and the user. After that, the relationship determination process ends.
In step S33, the relationship attribute determination unit 74 determines whether or not the relationship between the reservation person and the user is the second relationship. If the relationship between the reservation person and the user is the second relationship (step S33: Y), the process proceeds to step S34. If the relationship between the reservation person and the user is not the second relationship (step S33: N), the process proceeds to step S35.

In step S34, the restriction setting unit 75 permits sharing of a part of the information (for example, see FIG. 3) related to the preset service usage items between the reserving person and the user. After that, the relationship determination process ends.
In step S35, the restriction setting unit 75 restricts (prohibits) sharing of all information related to preset service usage items (see FIG. 3, for example) between the subscriber and the user. After that, the relationship determination process ends.

Please refer to FIG. In step S<b>13 , the restriction setting unit 75 sets restriction information, which is information for restricting sharing between the reservation person and the user, among the information on the service usage items, to the service vehicle 3 , the first electronic device 4 , and the second electronic device. 5. The controller 36 of the service vehicle 3 restricts information on service usage items that can be shared between the subscriber and the user according to the restriction information.
In step S<b>14 , the restriction state notification unit 81 of the second electronic device 5 displays on the display device of the HMI 52 the state in which sharing of the information regarding the service usage item is restricted.

In step S<b>15 , the approval requesting unit 62 of the first electronic device 4 displays on the display device of the HMI 41 a state in which sharing of information regarding service usage items with the user is restricted.
In step S16, the approval requesting unit 62 accepts a request operation from the reserving person to request approval for sharing the information on the service usage item for which sharing is restricted (prohibited) between the reserving person and the user.
In step S<b>17 , the approval requesting unit 62 transmits approval request information requesting approval for sharing information to the second electronic device 5 .

In step S<b>18 , the shared item approval unit 83 of the second electronic device 5 displays the approval request from the reservation person on the display device of the HMI 52 . Then, the shared item approval unit 83 accepts an approval operation by the user to approve the sharing of the information on the service usage item whose sharing is restricted (prohibited) between the subscriber and the user.
In step S<b>19 , the shared item approval unit 83 transmits to the control device 2 approval information indicating information regarding service usage items for which sharing between the reserving person and the user is approved.
In step S20, the restriction setting unit 75 of the control device 2 cancels the restriction on the information on the service usage items that the user has approved to be shared by the subscriber and the user. Furthermore, the restriction setting unit 75 changes the restriction information stored in the reservation DB 25 based on the approval information.

In step S<b>21 , the limit setting unit 75 transmits the changed limit information to the first electronic device 4 .
In step S<b>22 , the approval requesting unit 62 of the first electronic device 4 displays on the display device of the HMI 41 a state in which the restriction on sharing of the service usage item information with the user has been changed.

FIG. 6 is a sequence diagram of an example of operations when using a mobile service.
Note that the operation shown in FIG. 6 is the operation after the relationship attribute determination unit 74 determines that the relationship between the reservation person and the user is the second relationship in step S33.
In step S40, the user gets on the service vehicle 3 at the boarding place designated by the reservation information. At that time, the user uses the second electronic device 5 to perform an authentication operation for using the mobile service.
When the authentication operation is performed, the second electronic device 5 transmits the identification information of the user to the control device 2 in step S41. In steps S40 and S41, the in-vehicle terminal 34 provided in the service vehicle 3 may be used instead of the second electronic device 5 to perform the authentication operation.

In step S42, the control device 2 authenticates the user based on the received identification information.
When the user is successfully authenticated, the control device 2 transmits opening instruction information including an instruction to automatically open the door to the service vehicle 3 in step S43.
In step S<b>44 , the controller 36 of the service vehicle 3 operates the actuator 37 according to the opening instruction information to operate the door motor and the like of the service vehicle 3 to open the door of the service vehicle 3 .

In step S45, the controller 36 transmits to the control device 2 seating information indicating that the user has taken a seat.
In step S46, the control device 2 transmits closing instruction information including an instruction to automatically close the door to the service vehicle 3 based on the received seating information.
In step S<b>47 , the controller 36 of the service vehicle 3 operates the actuator 37 according to the closing instruction information to operate the door motor of the service vehicle 3 and close the door of the service vehicle 3 .
In step S<b>48 , the controller 36 transmits to the control device 2 boarding completion information indicating that the user has boarded the service vehicle 3 .
In step S49, upon receiving the boarding completion information, the restriction setting unit 75 of the control device 2 terminates (prohibits) sharing of all information regarding service use items between the reservation person and the user.

That is, in the case where the relationship between the reservation person and the user is the second relationship, the control device 2, until the user gets on the service vehicle 3, provides the information on the service usage items to the reservation person. and users share.
Although illustration is omitted, when the relationship between the reservation person and the user is the first relationship, the control device 2, until the user gets off the service vehicle 3, Information is shared between the reservation person and the user.
In step S<b>50 , the restriction setting unit 75 transmits to the first electronic device 4 sharing end information indicating that sharing between the subscriber and the user has ended for all the information related to the service usage items.
In step S51, the approval requesting unit 62 of the first electronic device 4 displays on the display device of the HMI 41 a state in which sharing of information on service usage items with the user is restricted (sharing of all information on service usage items is prohibited). restricted status).
In step S<b>52 , the control device 2 transmits authentication completion notification information to the service vehicle 3 . Upon receiving the authentication completion notification information, the controller 36 of the service vehicle 3 starts the service vehicle 3 and starts driving toward the drop-off location according to the travel plan received from the control device 2 . The process of transmitting the authentication completion notification information to the service vehicle 3 may be performed after the boarding completion information is transmitted to the control device 2 .

(Effect of Embodiment)
(1) A mobile service providing system 1 for operating vehicles, a mobile service providing method, and a mobile service providing apparatus are composed of a service vehicle 3 provided for the mobile service and a terminal device operated by a person who makes a reservation for the mobile service. A control device 2 that receives reservation information including at least information about a user who receives transportation services from a first electronic device 4 that is a Prepare.
The control device 2 has a registrant DB 23 that stores registrants pre-registered to use the mobile service providing system and information about the relationship between the registrants. , the relationship between the reservation person and the user is determined by comparing the reservation person and the user with the registrant DB 23, and depending on the relationship between the reservation person and the user, the user in the mobile service Restrict information that is shared between the subscriber and the user, out of the information on service usage items that can be used.
As a result, if the relationship between the reservation person and the user is such that it is not desirable to share information on service usage items, it is possible to limit the sharing of information on service usage items. , it is possible to protect the privacy of the user.

(2) The control device 2 is used as a relationship between the reservation person and the user. It may also be determined whether the person is the person making the booking for the mobile service on behalf of the person.
This makes it possible to determine whether or not it is necessary to restrict sharing of information regarding service use items that can be used by the user according to the relationship between the reservation person and the user.

(3) When the relationship between the reservation person and the user is the first relationship, the control device 2 permits sharing of all information related to the service usage items, and the relationship between the reservation person and the user When the relationship is the second relationship, the information to be shared among the information regarding the service usage item is restricted.
As a result, it is possible to change the information to be shared among the information on the service usage items according to the relationship between the reservation person and the user, and according to the relationship between the reservation person and the user, It becomes possible to protect the privacy of the user.

(4) When the relationship between the reservation person and the user is the first relationship, the control device 2 shares information on service usage items until the user gets off the service vehicle 3. do. In addition to this, when the relationship between the reservation person and the user is the second relationship, information on the service usage items is shared until the user gets on the service vehicle 3 .
This makes it possible to change the conditions for sharing information on service usage items according to the relationship between the reservation person and the user, and according to the relationship between the reservation person and the user, privacy can be protected.

(5) The first relationship is that the reservation person is the legal supervisor of the user or a person who provides nursing care services to the user, and the second relationship is that the reservation person is entrusted as a business and the user may be a person who makes reservations for mobile services for
This makes it possible to determine whether or not it is necessary to limit the service usage items that can be used by the user according to the relationship between the reservation person and the user.

(Modification of first embodiment)
(1) In the first embodiment, when it is determined that the relationship between the reservation person and the user is not the second relationship, in step S35 the limit setting unit 75 sets all the information related to the preset service usage items. On the other hand, it is configured to restrict (prohibit) sharing between the reservation person and the user. However, it is not limited to this.
That is, even if it is determined that the relationship between the reservation person and the user is not the second relationship, information on the preset service usage items is obtained as in the processing performed by the limit setting unit 75 in step S34 A configuration may be adopted in which a part of the information is permitted to be shared between the reserving person and the user.

1... Mobile service providing system 2... Control device 3... Service vehicle 4... First electronic device 5... Second electronic device 20, 38, 43, 54... Processor 21, 39, 44, 55... Memory Device 22, 33, 40, 51... Communication device 23... Registrant database 24, 32... Map database 25... Reservation database 30... Sensor 31, 50... Positioning device 34... In-vehicle terminal 35... In-vehicle Devices 36, 42, 53 Controller 37 Actuator 41, 52 Human-machine interface 60 Reservation person information transmission unit 61 Reservation information generation unit 62 Approval request unit 70 Reservation setting unit 71 Position information acquisition unit 72 Vehicle allocation unit 73 Travel plan setting unit 74 Relationship attribute determination unit 75 Restriction setting unit 80 Location information acquisition unit 81 Restriction state notification unit 82 Restriction change request part, 83... shared item approval part

Claims (7)

A mobile service providing system for operating a vehicle,
a vehicle served by the mobile service;
Reservation information including at least information of a user who receives the provision of the mobile service is received from an electronic device, which is a terminal device operated by a person who makes a reservation for the mobile service, and the mobile service is used according to the reservation information. a control device that arranges a vehicle for use by a person;
with
The control device is
a registrant database that stores registrants pre-registered to use the mobile service providing system and information about relationships between the registrants;
determining the relationship between the reservation person and the user by checking the reservation person and the user against the registrant database when the reservation person and the user are different;
According to the relationship between the reservation person and the user, the information shared by the reservation person and the user among the information related to the service usage items that the user can use in the mobile service. Restrict,
A mobile service providing system characterized by: The control device determines that the relationship between the reservation person and the user is such that the reservation person is a legal supervisor of the user, a person who provides nursing care services to the user, or a person who is entrusted as a business. 2. The mobile service providing system according to claim 1, wherein it is determined whether or not the person who makes the reservation for the mobile service for the user. The control device is
permitting sharing of all information relating to the service usage item when the relationship between the subscriber and the user is a first relationship;
restricting information to be shared among the information on the service usage items when the relationship between the reservation person and the user is the second relationship;
3. The mobile service providing system according to claim 1 or 2, characterized by: The control device is
when the relationship between the reservation person and the user is the first relationship, sharing information about the service usage items until the user gets off the vehicle;
When the relationship between the reservation person and the user is the second relationship, sharing information about the service usage items until the user gets on the vehicle;
4. The mobile service providing system according to any one of claims 1 to 3, characterized by: The first relationship is that the reservation person is a legal supervisor of the user or a person who provides care services to the user,
5. The mobile service providing system according to claim 3, wherein said second relationship is that said reservation person is a person who makes a reservation for said mobile service for said user under entrustment as a business. . A transportation service providing method for operating a vehicle, comprising:
registrants pre-registered to use the mobile service providing method and information about relationships between the registrants are stored in advance in a registrant database;
An electronic device, which is a terminal device operated when reserving the transportation service, receives an operation by a reservation person who reserves the transportation service, and controls reservation information including at least information of users who receive the transportation service. to the device,
The control device
Arranging a vehicle to be used by the user according to the reservation information,
determining the relationship between the reservation person and the user by comparing the reservation person and the user with the registrant database when the reservation person and the user are different;
According to the relationship between the reservation person and the user, the information shared by the reservation person and the user among the information related to the service usage items that the user can use in the mobile service. Restrict,
A mobile service providing method characterized by: A mobile service providing device for operating a vehicle,
registrants pre-registered to use the mobile service providing device and information about relationships between the registrants are stored in advance in a registrant database;
An electronic device, which is a terminal device operated when reserving the transportation service, receives an operation by a reservation person who reserves the transportation service, and controls reservation information including at least information of users who receive the transportation service. a process of sending to the device;
A process of arranging a vehicle to be used by the user according to the reservation information;
a process of determining the relationship between the reservation person and the user by comparing the reservation person and the user with the registrant database when the reservation person and the user are different;
According to the relationship between the reservation person and the user, the information shared by the reservation person and the user among the information related to the service usage items that the user can use in the mobile service. limiting process;
A mobile service providing apparatus comprising a computer that executes

Images