JP2024088399A - System, program and information processing method - Google Patents

Abstract

[Problem] To enable the accumulation of terminal information without collecting highly accurate and precise data required for generating a label from the first time. [Solution] A system (100) includes a first acquisition unit (132) that acquires terminal information, a second acquisition unit (133) that acquires clearance information, and a generation unit (137) that generates a label, and the generation unit generates an undetermined label when the terminal information is acquired for the first time, and generates a trusted label or a suspicious label when the terminal information is acquired for the second time or later. [Selected Figure] Figure 9

Description

The present invention relates to a system, a program, and an information processing method.

Various technologies have been proposed in the past regarding the security of information handled by vehicles that communicate with a server, so-called connected cars. For example, Patent Document 1 describes a system that has a function of creating a normal behavior model based on a first set of data including a first event representing communication with the vehicle and vehicle data related to the operation of the vehicle, a function of detecting an abnormality based on the normal behavior model and a second set of data including a second event representing communication with the vehicle and vehicle data related to the operation of the vehicle, a function of determining a mitigation action based on the detected abnormality, and a function of carrying out the mitigation action.

JP 2020-529093 A

In conventional technology such as that described in Patent Document 1, it is necessary to create a normal behavior model from the beginning and then perform anomaly detection based on this normal behavior model. With this method, it is necessary to collect a large amount of highly accurate and precise data for creating the normal behavior model before the initial normal behavior model can be created.

A system according to one aspect of the present invention includes a first acquisition unit that repeatedly acquires terminal information on each of a plurality of terminal devices, a second acquisition unit that acquires clearance information on the security clearance of each of the terminal devices, a generation unit that generates a label indicating the reliability of the terminal information, and a registration unit that registers the terminal information in association with the label, and when the acquisition of the terminal information on one of the terminal devices is the first time, the generation unit generates an undetermined label indicating that it is undetermined whether the terminal device is trustworthy, and when the acquisition is the second or subsequent time, generates a trusted label indicating that the terminal device is trustworthy or a suspicious label indicating that the terminal device is not trustworthy based on the clearance information.

In addition, a program according to another aspect of the present invention causes a processor to execute the steps of repeatedly acquiring, from a plurality of terminal devices, terminal information relating to the surrounding environment detected by each terminal device, acquiring clearance information relating to the security clearance of each terminal device, generating a label indicating the reliability of the terminal information, and registering the terminal information in association with the label, and in the step of generating the label, if the acquisition of the terminal information for one of the terminal devices is the first time, an undetermined label indicating that it is undetermined whether the terminal device is trustworthy is generated, and if the acquisition is the second or subsequent time, a trusted label indicating that the terminal device is trustworthy or a suspicious label indicating that the terminal device is not trustworthy is generated based on the clearance information.

An information processing method according to another aspect of the present invention includes the steps of repeatedly acquiring, from a plurality of terminal devices, terminal information relating to the surrounding environment detected by each of the terminal devices, acquiring clearance information relating to the security clearance of each of the terminal devices, generating a label indicating the reliability of the terminal information, and registering the terminal information in association with the label. In the label generating step, if the acquisition of the terminal information for one of the terminal devices is the first time, an undetermined label indicating that it is undetermined whether the terminal device is trustworthy is generated, and if the acquisition is the second or subsequent time, a trusted label indicating that the terminal device is trustworthy or a suspicious label indicating that the terminal device is not trustworthy is generated based on the clearance information.

1 is a block diagram showing a schematic configuration of a system according to a first embodiment of the present invention. FIG. 2 is a block diagram showing a functional configuration of a vehicle equipped with the system. FIG. 2 is a block diagram showing the functional configuration of a server provided in the system. 1 is a table showing an example of a data structure of a database included in the system. 13 is a table showing another example of the data structure of the database included in the system. FIG. 11 is a block diagram showing a schematic configuration of a system according to a second embodiment of the present invention. 1 is a table showing an example of a data structure of a database included in the system. 13 is a table showing another example of the data structure of the database included in the system. 3 is a flowchart showing the flow of an information processing method according to the embodiment of the present invention.

First Embodiment
First, a first embodiment of the present invention will be described in detail.

The system 100 includes a server 1, a plurality of terminal devices 2, and a communication network N1. The server 1 and the plurality of terminal devices 2 communicate with each other via the communication network N1. The terminal device 2 according to this embodiment is a vehicle. The communication network N1 is, for example, a cellular communication network. The server 1 also communicates with an external server S via a communication network N2. The communication network N2 may be the same as or different from the communication network N1 that handles communication between the server 1 and the vehicle 2. If the communication network N2 is different from the communication network N1, the communication network N2 may be a cellular communication network or a fixed network. The external server S includes, for example, servers managed by a vehicle manufacturer, a vehicle industry association, the police, etc. The terminal device 2 may be mobile, mounted on a vehicle, or carried or worn by a person riding in the vehicle, and its form is not particularly limited. In other words, the terminal device 2 may be, in addition to a vehicle, for example, a drone, a bicycle, a mobile phone, etc.

[vehicle]
The vehicles 2 are so-called connected cars. As shown in FIG 2, each vehicle 2 includes a vehicle communication unit 21, a vehicle storage unit 22, a vehicle control unit 23, and an information acquisition unit 24.

[Vehicle side communication unit]
The vehicle-side communication unit 21 communicates with the server 1. The vehicle-side communication unit 21 according to the present embodiment is configured with a wireless communication module. That is, the vehicle-side communication unit 21 according to the present embodiment wirelessly communicates with the server 1 via the communication network N1.

[Vehicle side memory unit]
The vehicle-side storage unit 22 stores a vehicle program 221. The vehicle program 221 is for operating the vehicle 2. The vehicle-side storage unit 22 according to the present embodiment is configured with a semiconductor memory, a hard disk, and the like.

[Information Acquisition Department]
The information acquisition unit 24 includes at least one of a camera, at least one type of sensor, a receiver for radio waves from a ranging satellite, and a ranging means (Radar, Lidar, etc.). The camera captures at least the outside of the vehicle 2 and generates image data. The image data may be video data or still image data. The at least one type of sensor detects the operation of at least one of the steering wheel, accelerator pedal, brake pedal, turn signal, and wiper to generate driving data. The ranging means emits radio waves or light to the outside of the vehicle, detects the reflected radio waves or light, and generates reflection data.

[Vehicle side control unit]
The vehicle-side control unit 23 includes a collection unit 231, a vehicle-side generation unit 232, a first transmission control unit 233, a second transmission control unit 234, a third transmission control unit 235, a vehicle-side acquisition unit 236, and an operation control unit 237. The vehicle-side control unit 23 according to this embodiment is configured with a processor. This processor executes the vehicle program 221 stored in the vehicle-side storage unit 22. As a result, the vehicle program 221 can cause the processor to function as each of the control blocks 231 to 237.

(Collection Department)
The collection unit 231 collects data from the information acquisition unit 24. The collection unit 231 according to this embodiment collects data periodically.

(Vehicle side generation unit)
The vehicle-side generating unit 232 generates terminal information based on the data collected by the collecting unit 231. The terminal information is information related to each vehicle 2. The terminal information includes at least one of environmental information and vehicle information.

The environmental information is information about the surrounding environment detected by each vehicle 2, and is generated based on image data and reflection data. The environmental information includes, for example, the positions of obstacles around the vehicle and the road surface conditions of the road on which the vehicle 2 is traveling. A specific method for generating the environmental information can use, for example, a trained model constructed by machine learning the relationship between multiple image data generated by the vehicle 2 in the past and obstacles, etc. that appear in images based on the image data.

The vehicle information is information about the vehicle 2 itself, and is generated based on the driving data. The vehicle information includes, for example, at least one of the following: ID, driving speed, latitude, longitude, time of acquisition of radio waves from a ranging satellite, driving direction, angular velocity, steering wheel rotation angle, vertical acceleration, whether the brake lights are on, whether the turn signals are flashing and the flashing direction, lateral acceleration, altitude, and the implementation status of positioning.

(First transmission control unit)
The first transmission control unit 233 controls the vehicle-side communication unit 21 so that the vehicle-side communication unit 21 transmits login information to the server 1. The login information includes the user ID of the vehicle 2, a password corresponding to the user ID, and the like.

(Second transmission control unit)
The second transmission control unit 234 controls the vehicle-side communication unit 21 so that the vehicle-side communication unit 21 transmits the terminal information generated by the vehicle-side generation unit 232 to the server 1. The second transmission control unit 234 causes the vehicle-side communication unit 21 to repeatedly transmit the terminal information. Note that the transmission cycle may be constant or may not be constant.

(Third transmission control unit)
The third transmission control unit 235 controls the vehicle-side communication unit 21 so that the vehicle-side communication unit 21 transmits distribution request information to the server 1 when a predetermined distribution request condition is met. The distribution request information is information requesting distribution of terminal information. The distribution request information transmitted by the third transmission control unit 235 in this embodiment includes the vehicle ID of the sending vehicle 2. The vehicle ID is information for identifying each individual vehicle 2. Furthermore, the distribution request information transmitted by the third transmission control unit 235 in this embodiment includes a topic. The topic is, for example, the area where the requested terminal information was generated. The distribution request condition includes, for example, the vehicle 2 entering the area indicated by the topic.

The third transmission control unit 235 according to this embodiment also controls the vehicle-side communication unit 21 to transmit stop request information to the server 1 when a predetermined distribution stop condition is met. The stop request information is information requesting the stop of distribution of terminal information. The stop request information includes the vehicle ID of the sending vehicle 2 and a topic, similar to the distribution request information. The distribution stop condition includes, for example, the departure of the vehicle 2 from the area indicated by the topic.

(Vehicle side acquisition unit)
When the vehicle-side communication unit 21 transmits distribution request information, the vehicle-side acquisition unit 236 acquires, from the server 1 via the vehicle-side communication unit 21, terminal information corresponding to the distribution request information.

(Motion control section)
The operation control unit 237 performs an operation based on the terminal information acquired by the vehicle side acquisition unit 236. For example, if the vehicle 2 is equipped with a display unit inside the vehicle, the operation control unit 237 performs an operation such as displaying the position of an object indicated by the terminal information on the display unit. In addition, if the vehicle 2 is an autonomous vehicle, the operation control unit 237 steers or stops the vehicle 2 so that the vehicle 2 can avoid contact with an object indicated by the environmental information.

[server]
The server 1 collects terminal information from a plurality of vehicles 2 and distributes the collected terminal information to a vehicle 2 that requires the terminal information. The server 1 according to this embodiment is managed by an operating company of the communication network N1.

{Server configuration}
As shown in FIG. 3, the server 1 includes a server-side communication unit 11 (communication unit), a server-side storage unit 12 , and a server-side control unit 13 .

[Server-side communication unit]
The server-side communication unit 11 communicates with the vehicle 2 via a communication network N1. The server-side communication unit 11 according to the present embodiment also communicates with an external server S via a communication network N2. The server-side communication unit 11 according to the present embodiment is configured with a communication module.

[Server side storage unit]
The server-side storage unit 12 stores a program 121. The program 121 is for operating the server 1. The server-side storage unit 12 according to this embodiment stores a first database 122. The first database 122 accumulates clearance information of a plurality of vehicles 2. The clearance information is information related to the security clearance of the vehicle 2. As shown in FIG. 4, the clearance information according to this embodiment is one of "undecided", "trusted", and "suspicious". "Undecided" is clearance information indicating that it is undecided whether the corresponding vehicle 2 (the user of the vehicle 2) is trustworthy. "Trusted" is clearance information indicating that the corresponding vehicle 2 is trustworthy. "Suspicious" is clearance information indicating that the corresponding vehicle 2 is not trustworthy. In addition, each of the clearance information according to this embodiment is associated with a vehicle ID.

In this embodiment, the clearance information is of three types: "undecided," "trusted," and "suspicious." However, there may be four or more types. For example, "trusted (suspicious)" may be divided into "slightly trusted (suspicious)" and "highly trusted (suspicious)." Furthermore, the clearance information may be a numerical value indicating the degree of trust. Furthermore, the clearance information may indicate the event that caused the information to be determined as trustworthy (suspicious).

As shown in FIG. 3, the server-side storage unit 12 according to this embodiment stores a second database 123. The second database 123 accumulates a plurality of pieces of terminal information collected from each vehicle 2. A distribution flag is associated with each piece of terminal information. The distribution flag is information indicating whether the terminal information has been distributed or not. The server-side storage unit 12 according to this embodiment is configured with a semiconductor memory, a hard disk, or the like. Note that at least one of the first database 122 and the second database 123 may be stored in a device other than the server 1. The server-side storage unit 12 according to this embodiment also stores a subscription table 124. As shown in FIG. 5, the subscription table 124 according to this embodiment is a table indicating the correspondence between topics and vehicle IDs.

[Server side control unit]
3, the server-side control unit 13 includes a determination unit 131, a first acquisition unit 132, a second acquisition unit 133, a third acquisition unit 134, an analysis unit 135, an update unit 136, a server-side generation unit 137 (generation unit), a registration unit 138, a fourth acquisition unit 139, and a distribution unit 140. The server-side control unit 13 according to this embodiment is configured with a processor. The processor executes the program 121 stored in the server-side storage unit 12. As a result, the program 121 causes the processor to function as each of the control blocks 131 to 140.

(Judgment Department)
The determination unit 131 determines whether the vehicle 2 is authenticated. Specifically, the determination unit 131 acquires login information from the vehicle 2 via the server-side communication unit 11, and determines whether the login information matches pre-registered information. When the determination unit 131 determines that the vehicle 2 is authenticated, the server-side communication unit 11 according to this embodiment becomes capable of communicating with the vehicle 2.

(First Acquisition Department)
The first acquisition unit 132 executes a first acquisition step. In the first acquisition step, the first acquisition unit 132 repeatedly acquires terminal information from each of the multiple vehicles 2. When the determination unit 131 determines that the vehicle 2 is authenticated, the first acquisition unit 132 according to this embodiment acquires terminal information from the vehicle 2. This makes it possible to narrow down the vehicles 2 from which terminal information is acquired to those that are authenticated. Being authenticated means that a certain level of trust is possessed, so it is possible to reduce the possibility of acquiring erroneous terminal information from a malicious user.

(Second Acquisition Department)
The second acquisition unit 133 executes a second acquisition step. In the second acquisition step, the second acquisition unit 133 acquires the clearance information of each vehicle 2 that has transmitted the terminal information. Specifically, the second acquisition unit 133 refers to the first database 122 stored in the server-side storage unit 12, and acquires the clearance information corresponding to the vehicle ID of the vehicle 2.

(Third Acquisition Department)
The third acquisition unit 134 further executes a third acquisition step. In the third acquisition step, the third acquisition unit 134 acquires second clearance information. The second clearance information is information on the security clearance of the vehicle 2, and is different from the clearance information acquired by the second acquisition unit 133. The second clearance information according to this embodiment is either "undecided", "trusted", or "suspicious", like the above clearance information. However, the content of the second clearance information is determined by a different scale from the above clearance information. For this reason, even if one of the clearance information and the second clearance information for the same vehicle 2 is "trusted", the other may be "suspicious". The third acquisition unit 134 according to this embodiment acquires the second clearance information from a database of an external server S. As described above, the external server S is managed by a vehicle manufacturer, a vehicle industry association, or the police. Since the vehicle manufacturer, the vehicle industry association, and the police are all highly reliable information sources, the generation of the label can be performed more accurately.

(Server-side generation unit)
The server-side generation unit 137 executes a generation step. In the generation step, the server-side generation unit 137 generates a label indicating the reliability of the terminal information. As described above, the first acquisition unit 132 repeatedly acquires the terminal information. Therefore, the server-side generation unit 137 according to this embodiment generates a label every time the first acquisition unit 132 acquires the terminal information. In addition, the server-side generation unit 137 generates a label for each piece of terminal information transmitted by each of the multiple vehicles 2. When the server-side generation unit 137 acquires the terminal information for a vehicle 2 for the first time and neither the clearance information nor the second clearance information is acquired, the server-side generation unit 137 generates an undetermined label. The undetermined label is a label indicating that it is undetermined whether the terminal information is reliable or not.

When the terminal information of a vehicle 2 is acquired for the second or later time (when a label already associated with the terminal information is updated), a trust label or a suspicious label is generated based on the clearance information and the second clearance information (high or low security clearance). A trust label is a label indicating that the vehicle is trustworthy. A suspicious label is a label indicating that the vehicle is not trustworthy. As will be described in detail later, after acquiring the terminal information, the vehicle 2 analyzes the terminal device and updates the first database 122. Therefore, when the terminal information is acquired for the second or later time, the server-side generation unit 137 generates a trust label or a suspicious label based on the clearance information of the first database 122 updated by the update unit 136. This makes it possible to take measures such as lowering the clearance information of a vehicle 2 that has transmitted erroneous terminal information as a result of analyzing the terminal information. As a result, the accuracy of the label generation can be maintained or improved.

The server-side generation unit 137 according to this embodiment generates a trust label or a suspicious label based on the clearance information and the second clearance information. The server-side generation unit 137 according to this embodiment compares the clearance information and the second clearance information, and generates a label based on the clearance information with the lower reliability. Specifically, when the clearance information and the second clearance information are both "trusted", the server-side generation unit 137 generates a trust label. On the other hand, when one of the clearance information and the second clearance information is "trusted" and the other is "suspicious", the server-side generation unit 137 generates a suspicious label. By using multiple pieces of clearance information in this way, the server-side generation unit 137 can generate labels more accurately. Note that the server-side generation unit 137 may be configured to generate labels using a logic different from that described above. For example, the server-side generation unit 137 may be configured to always generate a label with either the clearance information or the second clearance information as "trusted". Additionally, the server-side generation unit 137 may be configured to change the logic for generating labels according to policies (user operations).

(Registration Department)
The registration unit 138 executes a registration step. In the registration step, the registration unit 138 registers the terminal information in association with a label. The registration unit 138 according to the present embodiment registers the terminal information associated with the label in the second database 123. Note that the registration unit 138 may be configured to prevent tampering with the registered terminal information and label by utilizing a hash chain when registering the terminal information.

(Analysis section)
The analysis unit 135 analyzes the multiple pieces of terminal information acquired so far. The analysis unit 135 according to the present embodiment analyzes the terminal information registered in the second database 123 after acquisition. Specifically, the analysis unit 135 arranges the multiple pieces of terminal information related to one vehicle 2 in chronological order, and sequentially checks whether any suspicious terminal information is included. The analysis unit 135 also performs this check for each vehicle 2. Suspicious terminal information includes, for example, vehicle information indicating unnatural behavior of the vehicle 2, environmental information indicating the presence of an object that should not exist, and the like.

(Update Department)
The update unit 136 updates the first database 122 in accordance with the analysis result by the analysis unit 135. Specifically, when the analysis unit 135 detects terminal information with suspicious content, the update unit 136 lowers the security clearance of the corresponding vehicle 2. Specifically, the clearance information that was "undetermined" or "trusted" is changed to "suspicious."

(Fourth Acquisition Department)
The fourth acquisition unit 139 executes a fourth acquisition step. In the fourth acquisition step, the fourth acquisition unit 139 acquires distribution request information from each vehicle 2. Upon acquiring the distribution request information, the fourth acquisition unit 139 according to the present embodiment registers a pair of a vehicle ID and a topic included in the distribution request information in the subscription table 124 stored in the server-side storage unit 12.

The fourth acquisition unit 139 according to this embodiment also acquires stop request information from each vehicle 2. When the fourth acquisition unit 139 according to this embodiment acquires the stop request information, it deletes the pair of the vehicle ID and the topic included in the distribution request information from the subscription table 124.

(Distribution Department)
The distribution unit 140 executes a distribution step. In the distribution step, the distribution unit 140 distributes the registered terminal information to the vehicle 2 that has transmitted the distribution request information (requested the distribution of the terminal information) among the multiple vehicles 2. As a result, the vehicle 2 that needs the terminal information can easily obtain the terminal information by simply requesting the server to distribute the terminal information, without the vehicle 2 itself having to go to the registration location of the terminal information to obtain it. The distribution unit 140 according to the present embodiment distributes the terminal information that is associated with the trust label and has a distribution flag indicating "not distributed" among the multiple terminal information registered in the second database 123. After that, the distribution unit 140 changes the distribution flag associated with the distributed terminal information to "already distributed". As a result, the vehicle 2 can obtain only the terminal information associated with the trust label. In addition, it is possible to prevent the vehicle 2 from obtaining multiple terminal information with overlapping contents. Therefore, it is possible to perform an operation based on the terminal information associated with the trust label without going through a step in which the vehicle 2 itself extracts the terminal information associated with the trust label from the obtained terminal information.

The distribution unit 140 may be configured to distribute the terminal information associated with the undetermined label or suspicious label with label information attached when a predetermined condition is met. The predetermined condition may be that the fourth acquisition unit 139 has acquired distribution request information requesting the distribution of the terminal information associated with the undetermined label or suspicious label, that the vehicle 2 has a function for identifying labels, and the like. The distribution unit 140 may be configured to register the vehicle 2 that has transmitted the distribution request information upon acquiring the distribution request information, and to periodically distribute the terminal information to the vehicle 2.

{Server action and effect}
The server 1 described above generates an undetermined label when it is the first time that it acquires terminal information for a vehicle 2, and updates the label to a trusted label or suspicious label based on the clearance information when it acquires the terminal information for the second time or later. Therefore, the server 1 makes it possible to accumulate terminal information without having to collect highly accurate data required for generating labels from the first time.

Second Embodiment
Next, a second embodiment of the present invention will be described in detail. For convenience of explanation, the same reference numerals are given to members having the same functions as those described in the first embodiment, and the description thereof will not be repeated.

The server 1A according to this embodiment constitutes part of the system 100A as shown in FIG. 6. In addition to the server 1A, the system 100A includes a second server 1B, a plurality of vehicles 2A, and a communication network N1. The server 1A, the second server 1B, and the plurality of vehicles 2A communicate with each other via the communication network N1. The server 1A and the second server 1B also communicate with an external server S via the communication network N2.

[vehicle]
The multiple vehicles 2A according to this embodiment are classified into multiple groups. The groups are, for example, vehicle manufacturers, business companies that conduct business using vehicles, etc. The multiple vehicles 2A according to this embodiment are classified into a first group and a second group. Note that the multiple vehicles 2A may be classified into three or more groups.

As shown in FIG. 2, each vehicle 2A according to this embodiment includes a vehicle-side communication unit 21, an information acquisition unit 24, a vehicle-side memory unit 22A, and a vehicle-side control unit 23A.

[Vehicle side memory unit]
The vehicle-side storage unit 22A stores a program 221A. The program 221A is for operating the vehicle 2A.

[Vehicle side control unit]
The vehicle-side control unit 23A includes a collection unit 231, a first transmission control unit 233, a third transmission control unit 235, a vehicle-side acquisition unit 236, and an operation control unit 237, as well as a vehicle-side generation unit 232A and a second transmission control unit 234A.

(Vehicle side generation unit)
When the vehicle 2A is classified into the first group, the terminal information generated by the vehicle-side generation unit 232A includes first group distribution information. The first group distribution information is information that is set to be distributed only to the vehicles 2A that belong to the first group among the multiple groups. Furthermore, the terminal information generated by the vehicle-side generation unit 232A according to this embodiment includes common distribution information. The common distribution information is information that is set to be distributed to all the vehicles 2A regardless of the group. The vehicle-side generation unit 232A of the vehicle 2A classified into the first group generates, for example, latitude and longitude as common distribution information, and generates other information as first group distribution information.

When the vehicle 2A is classified into the second group, the terminal information generated by the vehicle-side generation unit 232A includes second group distribution information and common distribution information. The second group distribution information is information that is set to be distributed only to vehicles 2A that belong to the second group out of the multiple groups. The vehicle-side generation unit 232A of the vehicle 2A classified into the second group generates latitude and longitude as common distribution information, and generates other information as second group distribution information. Note that the terminal information included in the second group distribution information may be different from the terminal information included in the first group distribution information (it may be part of the terminal information included in the first group distribution information, the terminal information + α, or a different terminal information).

(Second transmission control unit)
The second transmission control unit 234A controls the vehicle-side communication unit 21 so that the vehicle-side communication unit 21 transmits the terminal information generated by the vehicle-side generation unit 232A to the server 1A and the second server 1B. The second transmission control unit 234A selects the servers 1A and 1B according to the group to which the vehicle 2A is classified, and transmits all terminal information including the group distribution information and the common distribution information. For example, when the vehicle 2A is classified into the first group, the second transmission control unit 234A transmits all terminal information including the first group distribution information and the common distribution information to the server 1A. On the other hand, the second transmission control unit 234A does not transmit all distribution information to the second server 1B. When the vehicle 2A is classified into the second group, the second transmission control unit 234A does not transmit all distribution information to the server 1A. On the other hand, the second transmission control unit 234A transmits all terminal information including the second group distribution information and the common distribution information to the second server 1B.

[server]
The server 1A according to this embodiment is managed by a party related to the vehicles classified into the first group (for example, a vehicle manufacturer, etc.).

{Server configuration}
As shown in FIG. 3, the server 1A includes a server side communication unit 11 (communication unit) similar to that of the server 1 according to the first embodiment, as well as a server side storage unit 12A and a server side control unit 13A.

[Server side storage unit]
The server-side storage unit 12A stores a program 121A. The program 121A is for operating the server 1A. The server-side storage unit 12A according to the present embodiment stores a first database 122A. The first database 122A accumulates clearance information of a plurality of vehicles 2A. As shown in FIG. 7, the clearance information according to the present embodiment is associated with a vehicle ID and a group ID. The group ID is information for identifying the group into which the vehicle 2A is classified. Also, as shown in FIG. 3, the server-side storage unit 12A according to the present embodiment stores a second database 123A. The second database 123A accumulates a plurality of pieces of terminal information collected from each vehicle 2 classified into each group in a form that can be identified as first group distribution information and common distribution information. Also, the server-side storage unit 12A according to the present embodiment stores a subscription table 124A. As shown in FIG. 8, the subscription table 124A according to the present embodiment is a table showing the correspondence between topics, vehicle IDs, and group IDs.

[Server side control unit]
As shown in FIG. 3, the server-side control unit 13A includes a judgment unit 131, a second acquisition unit 133, a third acquisition unit 134, an analysis unit 135, and a server-side generation unit 137 similar to those of the server-side control unit 13 according to the first embodiment, as well as a first acquisition unit 132A, an update unit 136A, a registration unit 138A, a fourth acquisition unit 139A, and a distribution unit 140A.

(First Acquisition Department)
The first acquisition unit 132A in this embodiment repeatedly acquires terminal information from a plurality of vehicles 2A classified into a first group and a plurality of vehicles 2A classified into a second group.

(Update Department)
The update unit 136A according to this embodiment updates the first database 122A in accordance with the analysis result by the analysis unit 135.

(Registration Department)
The registration unit 138A according to this embodiment registers the terminal information in the second database 123A in association with the label.

(Fourth Acquisition Department)
When the fourth acquisition unit 139A according to the present embodiment acquires distribution request information, it refers to the first database 122A and acquires a group ID corresponding to the vehicle ID included in the distribution request information. Then, the fourth acquisition unit 139A registers a pair of the vehicle ID included in the distribution request information, the topic, and the group ID acquired from the first database 122A in the subscription table 124A stored in the server-side storage unit 12A.

(Distribution Department)
The distribution unit 140A according to the present embodiment periodically refers to the subscription table 124A and generates a distribution group. The distribution unit 140A according to the present embodiment includes, among the multiple vehicle IDs registered in the subscription table 124A, those having a common topic and group in one distribution group. Then, the distribution unit 140A distributes terminal information corresponding to each distribution group to each vehicle 2A in units of distribution groups. Specifically, the distribution unit 140A distributes the terminal information acquired from each vehicle 2A classified in the first group to the distribution group classified in the first group without any restrictions. On the other hand, the distribution unit 140A distributes the common distribution information among the terminal information acquired from each vehicle 2A classified in the first group to the distribution group classified in a group different from the first group (here, the second group). That is, the distribution is performed except for the first group distribution information to the distribution group classified in the second group.

[Second Server]
The second server 1B is managed by a person who is involved in vehicles classified into the second group.

{Configuration of the second server}
As shown in FIG. 3, the second server 1B includes a server side communication unit 11 similar to that of the server 1A, as well as a server side storage unit 12B and a server side control unit 13B.

[Server side control unit]
The server-side control unit 13B includes a judgment unit 131, a first acquisition unit 132A, a second acquisition unit 133, a third acquisition unit 134, an analysis unit 135, an update unit 136A, a server-side generation unit 137, a registration unit 138A, and a fourth acquisition unit 139A, which are similar to the server-side control unit 13A of the server 1A, as well as a distribution unit 140B.

(Distribution Department)
The distribution unit 140B according to the present embodiment distributes terminal information corresponding to each distribution group to each vehicle 2A, with each distribution group being a unit. Specifically, the distribution unit 140B distributes the terminal information acquired from each vehicle 2A classified in the second group to the distribution group classified in the second group without any restrictions. On the other hand, the distribution unit 140B distributes common distribution information among the terminal information acquired from each vehicle 2A classified in the second group to the distribution group classified in a group different from the second group (here, the first group). In other words, the distribution unit 140B distributes the terminal information acquired from the vehicle 2A classified in the second group, excluding the second group distribution information, to the distribution group classified in the first group.

{Effects of the second server and the above server}
According to the second server 1B and the server 1A described above, like the server 1 according to the first embodiment, it is possible to accumulate terminal information without having to collect highly accurate and precise data required for generating labels from the first time.
In addition, according to the second server 1B and the above-mentioned server 1A, for example, when multiple groups are in a competitive relationship with each other (for example, in the case of multiple vehicle manufacturers, etc.), they can share terminal information (common distribution information) for areas where they can cooperate, and can maintain the confidentiality of each group for areas where cooperation is difficult.

<Information processing method>
Next, an embodiment of an information processing method according to another aspect of the present invention will be described.

{Information processing method flow}
As shown in FIG. 9, the information processing method includes an information generation step A1, a first acquisition step B1, a second acquisition step B2, a generation step B3, a registration step B4, a request step A2, a distribution step B5, and an operation step A3.

(Information generation step)
In an initial information generating step A1, a plurality of terminal devices 2 repeatedly generate terminal information.

(First acquisition step)
After at least one terminal device 2 generates at least one piece of terminal information, the process proceeds to a first acquisition step B1. In the first acquisition step B1, terminal information is repeatedly acquired from each of the multiple terminal devices 2.

(Second acquisition step)
After acquiring the terminal information, the process proceeds to a second acquisition step B2. In the second acquisition step B2, the clearance information is acquired. The second acquisition step B2 may be performed before acquiring the terminal information, or may be performed in parallel with acquiring the terminal information.

(Generation Step)
After the terminal information is acquired, the process proceeds to a generation step B3. In the generation step, a label indicating the reliability of the terminal information is generated. In the generation step B3, if the acquisition of the terminal information for a terminal device 2 is the first time (B31: YES), an undetermined label is generated (step B32). In addition, in the generation step, if the acquisition of the terminal information for a terminal device 2 is the second or subsequent time (step B31: NO), a trusted label or a suspicious label is generated based on the clearance information (step B33).

(Registration step)
After the label is generated, the process proceeds to registration step B4, where terminal information is registered in association with the label.

(Request step)
After the server 1 has registered at least one piece of terminal information, if a predetermined distribution request condition is met, the process proceeds to request step A2, in which a request is made to the server 1 to distribute the terminal information.

(Delivery step)
After the terminal device 2 requests the distribution of the terminal information, the process proceeds to a distribution step B5. In the distribution step B5, the registered terminal information is distributed to the terminal device 2 that has requested the distribution of the terminal information, among the multiple terminal devices 2.

(Operation steps)
After the server 1 distributes the terminal information, the process proceeds to operation step A3, in which the terminal device 2 performs an operation based on the acquired terminal information.

{Effects of the information processing method}
In the information processing method described above, an undetermined label is generated when terminal information is acquired for a terminal device 2 for the first time, and when it is acquired for the second time or later, the label is updated to a trusted label or a suspicious label based on the clearance information. Therefore, according to the information processing method, it is possible to accumulate terminal information without having to collect highly accurate data required for label generation from the first time.

[Other aspects of the present invention]
The present invention is not limited to the above-described embodiments, and various modifications are possible within the scope of the claims. Embodiments obtained by appropriately combining the technical means disclosed in different embodiments are also included in the technical scope of the present invention.

For example, the above-mentioned systems 100 and 100A include multiple devices, and multiple control blocks are distributed among the devices. However, the multiple control blocks may be integrated into a single device (e.g., server 1 or 1A). In this case, the single device may be referred to as system 100 or 100A.
In addition, some or all of the functions of each of the control blocks can be realized by a logic circuit. For example, an integrated circuit in which a logic circuit that functions as each of the control blocks is formed is also included in the scope of the present invention. In addition, the functions of each of the control blocks can be realized by, for example, a quantum computer.

The effects of each aspect of the present invention described above also contribute to the achievement of, for example, Goal 3 "Ensure good health and well-being for all" and Goal 11 "Ensure sustainable cities and communities" of the Sustainable Development Goals (SDGs) advocated by the United Nations.

100, 100A System 1, 1A Server 1B Second server 11 Server side communication unit 12 Server side storage unit 121 Program 122 First database 123 Second database 13, 13A, 13B Server side control unit 131 Determination unit 132 First acquisition unit 133 Second acquisition unit 134 Third acquisition unit 135 Analysis unit 136 Update unit 137 Server side generation unit 138 Registration unit 139 Fourth acquisition unit 140, 140A, 140B Distribution unit 2, 2A Vehicle (terminal device)
21 Vehicle-side communication unit 22 Vehicle-side storage unit 221 Vehicle program 23, 23A Vehicle-side control unit 231 Collection unit 232, 232A Vehicle-side generation unit 233 First transmission control unit 234, 234A Second transmission control unit 235 Third transmission control unit 236 Vehicle-side acquisition unit 237 Operation control unit 24 Information acquisition unit N Communication network S External server

Claims (10)

a first acquisition unit that repeatedly acquires terminal information regarding each of a plurality of terminal devices;
a second acquisition unit that acquires clearance information relating to the security clearance of each terminal device;
A generation unit that generates a label indicating the reliability of the terminal information;
a registration unit that registers the terminal information in association with the label;
Equipped with
The generation unit acquires the terminal information related to one of the terminal devices,
If it is the first time, an undetermined label is generated to indicate that the reliability is undetermined.
If it is the second or subsequent time, generate a trust label indicating that the device is trustworthy or a suspicious label indicating that the device is not trustworthy based on the clearance information.
system. a third acquisition unit that acquires second clearance information, the second clearance information being information regarding a security clearance of the terminal device and different from the clearance information;
the generation unit generates the trust label or the suspicious label based on the clearance information and the second clearance information.
The system of claim 1 . the terminal device is a vehicle,
The third acquisition unit acquires the second clearance information from a database managed by a vehicle manufacturer, a vehicle industry association, or a police.
The system of claim 2. a database for storing the clearance information;
An analysis unit that analyzes the multiple pieces of terminal information that have been acquired so far;
an update unit that updates the database in response to an analysis result by the analysis unit;
Equipped with
the generation unit generates the trust label or the suspicious label based on the clearance information in the database updated by the update unit.
A system according to any one of claims 1 to 3. a distribution unit that distributes the registered terminal information to a terminal device that has requested distribution of the terminal information among the plurality of terminal devices;
The system of claim 1 . The distribution unit distributes the terminal information associated with the trust label from among the plurality of registered terminal information.
The system of claim 5. The plurality of terminal devices are classified into a plurality of groups,
the terminal information includes first group distribution information that is set to be distributed only to terminal devices that belong to a first group among the plurality of groups,
When the terminal device that has requested the distribution of the terminal information is classified into a second group different from the first group, the distribution unit distributes the terminal information acquired from the terminal device classified into the first group, excluding the first group distribution information.
The system of claim 6. The terminal device includes a determination unit that determines whether the terminal device is authenticated,
the first acquisition unit acquires the terminal information from the terminal device when the determination unit determines that the terminal device is authenticated.
The system of claim 1 . The processor:
repeatedly acquiring terminal information related to a surrounding environment detected by each of the terminal devices from each of the multiple terminal devices;
acquiring clearance information relating to the security clearance of each terminal device;
generating a label indicating the reliability of the terminal information;
registering the terminal information in association with the label;
Run the command,
In the step of generating the label, the acquisition of the terminal information regarding one of the terminal devices includes:
If it is the first time, an undetermined label is generated to indicate that the reliability is undetermined.
If it is the second or subsequent time, generate a trust label indicating that the device is trustworthy or a suspicious label indicating that the device is not trustworthy based on the clearance information.
program. repeatedly acquiring terminal information related to a surrounding environment detected by each of the terminal devices from each of the multiple terminal devices;
acquiring clearance information relating to the security clearance of each terminal device;
generating a label indicating the reliability of the terminal information;
registering the terminal information in association with the label;
having
In the step of generating the label, the acquisition of the terminal information regarding one of the terminal devices includes:
If it is the first time, an undetermined label is generated to indicate that the reliability is undetermined.
If it is the second or subsequent time, generate a trust label indicating that the device is trustworthy or a suspicious label indicating that the device is not trustworthy based on the clearance information.
Information processing methods.

Images