JP7105283B2 - Information transmission device and program - Google Patents

Description

The present invention relates to an information transmission device, a personal information disclosure management device, and a program.

A technology has been known that identifies a user's lifestyle pattern and the like based on measurement data of an activity-related amount related to human activities, such as power consumption, and utilizes it for targeted advertising and the like (see, for example, patent documents 1).
[Prior art documents]
[Patent Literature]
[Patent Document 1] JP 2016-134017 A

According to a first aspect of the present invention, an information transmission device is provided. The information transmission device may transmit the personal information of the driver of the vehicle, which includes at least one of the vehicle current location information, the vehicle operation information, and the vehicle state information, to the information providing destination. The information transmitting device may include a receiving unit for receiving personal information together with the vehicle identifier of the vehicle and the personal identifier of the driver from the driver's portable communication terminal or the vehicle. The information transmitting device may include a personal information storage unit that stores a value of personal information for each of a plurality of items of personal information. The information transmission device may include an information provision policy storage unit that stores an information provision policy that is a condition for permitting provision of the value of personal information to an information provider for each item of personal information. The information transmission device may include a transmission unit that transmits the value of the personal information together with at least one of the identifier of the vehicle and the identifier of the driver to the information provider in accordance with the information provision policy for each item of personal information.

The information providing policy storage unit may store the information providing policy for each of the plurality of information providing destinations and for each item of the personal information. The personal information may include the current vehicle location information, and the information provision policy set in the item of the current vehicle location information has a predetermined positional relationship between the current location of the vehicle and a location related to the information providing destination. It may be a policy that permits provision of the current location of the vehicle to the information provider when the conditions are met. The personal information may include the vehicle current location information, and the information provision policy set in the vehicle current location information item is that the driver has reserved the use of a service provided by the information provider. In this case, the policy may be a policy that permits provision of the current location of the vehicle to the information provider. The personal information may include the current vehicle location information, and the information provision policy set in the item of the current vehicle location information may be set only when the vehicle is traveling along a predetermined route, or when the vehicle is The policy may permit provision of the current location of the vehicle to the information provider only when the vehicle is not traveling on a predetermined route. The personal information may include the vehicle current location information, and the information provision policy set in the vehicle current location information item provides the current location information to the information provider, or provides the information provider with the current location information. The policy may be such that the driver can select whether to provide log information indicating the movement history of the vehicle. The information provision policy permits the value of the item corresponding to the information provision policy to be provided to the information provision destination when the driver is a predetermined person, If the person is not a specified person, the policy may not permit the provision of the value of the item corresponding to the information provision policy to the information provider. The information providing destination may include at least 1) a matching server that provides a matching platform service that matches a lender who rents a vehicle and a borrower who rents a vehicle, and 2) the lender, and the information provision policy storage unit For the personal identifier of the driver who is the borrower, an information provision policy in which the information provision destination is the matching server and an information provision policy in which the information provision destination is the lender may be stored. , the information provision policy for the matching server and the information provision policy for the lender may be individually set. The information provision policy storage unit stores an information provision policy set for items of personal information to be disclosed to an information provider together with the driver's personal identifier, and personal information to be disclosed to the information provider together with the vehicle identifier of the vehicle. and an information provision policy set for the item of . The above-mentioned information provision policy is to disclose the above-mentioned personal information to the information provider i) without being linked with the driver's personal identifier but linked with the above-mentioned vehicle identifier, or ii) linked with the above-mentioned vehicle identifier or iii) disclose to the information provider in association with the driver's personal identifier and the vehicle identifier. It may be a policy that allows one to be selected from the above options.

According to a second aspect of the invention, an information transmission device is provided. The information transmission device may transmit the personal information of the driver of the vehicle, which includes at least one of the vehicle current location information, the vehicle operation information, and the vehicle state information, to the information providing destination. The information transmitting device may include a personal information storage unit that stores a value of personal information for each of a plurality of items of personal information. The information transmission device may include an information provision policy storage unit that stores an information provision policy that is a condition for permitting provision of the value of personal information to an information provider for each item of personal information. The information transmission device may include a transmission unit that transmits the value of the personal information to the information provider together with the identifier of the vehicle and the identifier of the driver in accordance with the information provision policy for each item of personal information.

According to a third aspect of the invention, an information transmission device is provided. The information transmission device may transmit the personal information of the information provider to the information provider. The information transmitting device may include a personal information storage unit that stores a value of personal information for each of a plurality of items of personal information. The information transmission device may include an information provision policy storage unit that stores an information provision policy that is a condition for permitting provision of the value of personal information to an information provider for each item of personal information. The information transmission device may include a transmission unit that transmits the value of the personal information to the information provider in accordance with the information provision policy for each item of personal information. The information provision policy corresponds to the target personal information items when the current location of the information provider satisfies the predetermined conditions, or when the location related to the information provider satisfies the predetermined conditions. It may be a policy that permits the value of personal information to be provided to an information provider.

The information provision policy permits provision of the value of the personal information corresponding to the target personal information item to the information provider when the current location of the information provider is a predetermined location. It may be a policy to According to the information provision policy, when the positional relationship between the current location of the information provider and the location of the information provider satisfies a predetermined condition, the personal information corresponding to the target personal information item may be a policy that permits provision of the value of to the information provider. The above-mentioned information provision policy sets the value of the above-mentioned personal information corresponding to the above-mentioned target personal information item when the location related to the above-mentioned information provider is located within a predetermined range from the current location of the above-mentioned information provider. It may be a policy that permits provision to the information provider. The information provision policy sets the value of the personal information corresponding to the target personal information item to the above when the location where the information provider provides the service to the information provider satisfies a predetermined condition. It may be a policy that permits provision to the information provider. The information provision policy is such that when the location where the information provider provides the service to the information provider is a predetermined location, the value of the personal information corresponding to the target personal information item is set to the above. It may be a policy that permits provision to the information provider. The information provision policy satisfies the target personal information items when the status of the information provider satisfies a predetermined condition or when the status of the information provider satisfies a predetermined condition. The policy may permit provision of the value of the corresponding personal information to the information provider.

A fourth aspect of the present invention provides an information transmission device. The information transmission device may transmit the personal information of the information provider to the information provider. The information transmission device may include a personal information storage unit that stores a value of the personal information for each of a plurality of items of the personal information. The information transmission device may include an information provision policy storage unit that stores an information provision policy that is a condition for permitting provision of the value of the personal information to the information provider for each item of the personal information. . The information transmitting device may include a transmitting unit configured to transmit the value of the personal information to the information providing destination according to the information providing policy for each item of the personal information. The transmitting unit may transmit predetermined personal information to a predetermined information providing destination regardless of the information providing policy when it is detected that an abnormality has occurred in the information providing source. .

According to a fifth aspect of the present invention, there is provided a program for causing a computer to function as the information transmission device.

A sixth aspect of the present invention provides a personal information disclosure management device. The personal information disclosure management device may manage the disclosure of the personal information of the information provider to the information provider. The personal information disclosure management device may include a personal information storage unit that stores a value of personal information for each of a plurality of items of personal information. The personal information disclosure management apparatus may include an information provision policy storage unit that stores an information provision policy that is a condition for permitting provision of the value of personal information to an information provider for each item of personal information. The personal information disclosure management apparatus may include a transmission unit that transmits the value of personal information to the information provider together with the personal identifier of the information provider in accordance with the information provision policy for each item of personal information. The information provision policy allows the information provider to select whether to provide the value corresponding to the target personal information item or to provide a log showing the history of the value corresponding to the target personal information item. can be policy. The personal information may include the current location information of the information provider, and the information provision policy set in the current location information item is to provide the current location information to the information provider, or to provide the information provider with the current location information. The information provider may select whether to provide a log indicating the movement history of the information provider.

According to a seventh aspect of the present invention, there is provided a program for causing a computer to function as the personal information disclosure management device.

It should be noted that the above summary of the invention does not list all the necessary features of the invention. Subcombinations of these feature groups can also be inventions.

An example of the communication environment of the permission control server 100 is shown schematically. An example of the flow of processing by the permission control server 100 is shown schematically. An example of the flow of processing by the permission control server 100 is shown schematically. An example of the flow of processing by the permission control server 100 is shown schematically. An example of the functional configuration of the permission control server 100 is shown schematically. An example of a permission policy table 102 is shown schematically. 3 schematically shows a display example of the mobile communication terminal 300 of the user 200. FIG. 3 schematically shows a display example of the mobile communication terminal 300 of the user 200. FIG. 3 schematically shows a display example of the mobile communication terminal 300 of the user 200. FIG. 3 schematically shows a display example of the mobile communication terminal 300 of the user 200. FIG. An example of the flow of processing by the permission control server 100 is shown schematically. An example of a hardware configuration of a computer 1000 functioning as a permission control server 100, a mobile communication terminal 300 of a user 200, a control device of a vehicle 210, or a car navigation system of the vehicle 210 is schematically shown.

Hereinafter, the present invention will be described through embodiments of the invention, but the following embodiments do not limit the invention according to the claims. Also, not all combinations of features described in the embodiments are essential for the solution of the invention.

FIG. 1 schematically shows an example of a communication environment of a permission control server 100. As shown in FIG. The permission control server 100 according to this embodiment manages personal information of the user 200 . The permission control server 100 transmits personal information of the user 200 to the information provider 400 .

Although one user 200 is illustrated in FIG. 1 , the permission control server 100 may manage personal information of multiple users 200 . The permission control server 100 may be an example of an information transmission device. Also, the permission control server 100 may be an example of a personal information disclosure management device. User 200 may be an example of an information provider.

The personal information of the user 200 may include values for multiple items. Personal information of user 200 may include, for example, demographic information such as name, address, gender, phone number, date of birth, age, blood type, income, occupation, and educational background. To give an example of the relationship between personal information items and values, for example, the value "30's" for the item "age", the value "A type" for the item "blood type", and the value "company" for the item "occupation". member.

Also, the personal information of the user 200 may include information about the user's 200 situation. For example, the user's 200 personal information may include the user's 200 current location information. The value of the current location information may be latitude and longitude. For example, the user's 200 personal information may include the user's 200 physical condition information. The physical condition information value may indicate whether the physical condition is good or bad.

Also, the personal information of the user 200 may include information regarding the use of services by the user 200 . For example, the personal information of the user 200 may include reservation information for restaurants, lodging facilities, and the like. For example, the personal information of the user 200 may include purchase history information on an EC site or the like.

Also, the personal information of user 200 may include information about vehicle 210 driven by user 200 . Information about the vehicle 210 may include vehicle current location information indicating the current location of the vehicle 210, for example. The value of the current vehicle location information may be the latitude and longitude of the vehicle 210, for example.

Information about vehicle 210 may include, for example, vehicle operation information about operation of vehicle 210 . The vehicle operation information may include, for example, access operation, steering wheel operation, brake operation, seatbelt wearing/not wearing, and the like.

Information about vehicle 210 may include, for example, vehicle state information about the state of the vehicle. The vehicle status information may include, for example, the failure status of the vehicle 210, remaining gasoline level, remaining battery level, tire air pressure, mileage, wiper operating time, remaining amount of various consumables, and the like.

Information about vehicle 210 may include, for example, the number of passengers. Information about vehicle 210 may include, for example, a vehicle number. Information about vehicle 210 may include visual characteristics of vehicle 210 .

Information about vehicle 210 may include a destination set in car navigation of vehicle 210 . Information about the vehicle 210 may include destinations that are often set in the car navigation system of the vehicle 210 .

In addition, the personal information of the user 200 may include information regarding the residence of the user 200 . For example, the personal information of user 200 includes at-home information indicating whether or not user 200 is at home. Also, for example, the personal information of the user 200 includes electricity usage information indicating how electricity is used in the residence of the user 200 . The electricity usage information includes, for example, electricity usage information. Also, for example, the personal information of the user 200 may include gas usage information indicating the usage status of gas in the residence of the user 200 . The gas usage information includes, for example, gas usage information. Also, for example, the personal information of the user 200 may include water usage information indicating the usage status of the water supply at the residence of the user 200 . The water usage information includes, for example, water usage information.

The information provider 400 may be an organization, group, or the like that uses the personal information of the user 200 for some purpose. The information provider 400 may be, for example, a service provider that provides services to the user 200 . In this embodiment, gas stations, insurance companies, and lodging facilities are used as examples of service providers, but the service providers are not limited to these. Also, the information provider 400 may be, for example, an employment provider that provides employment to the user 200 . That is, the information provider 400 may be, for example, the place of work of the user 200 .

The permission control server 100 receives personal information of the user 200 via the network 10 from, for example, a mobile communication terminal used by the user 200 . The mobile communication terminal may be, for example, a mobile phone such as a smart phone, a tablet terminal, or the like. The permission control server 100 may receive, for example, demographic information on the user 200, information on the situation of the user 200, information on use of services by the user 200, and information on the residence of the user 200 from the mobile communication terminal.

The mobile communication terminal may acquire and manage the personal information of the user 200 using existing technology. The mobile communication terminal may manage user 200 demographic information input by user 200, for example. Also, the mobile communication terminal may manage the current location of the mobile communication terminal as the current location of the user 200 . Also, the mobile communication terminal may receive and manage physical condition information of user 200 from a wearable device worn by user 200 . The mobile communication terminal may acquire and manage reservation information for eating and drinking establishments, lodging facilities, etc., and purchase history information for e-commerce sites, etc., from the user's 200 usage history of web services and application usage history. The mobile communication terminal receives information about the residence of the user 200 from a home monitoring device installed in the home of the user 200, a smart meter, a gas meter or a device attached to the gas meter, a water meter or a device attached to the water meter, and the like. can be managed by

Also, the permission control server 100 receives the personal information of the user 200 via the network 10 from the vehicle 210 driven by the user 200, for example. The permission control server 100 may receive personal information of the user 200 from the car navigation system of the vehicle 210 . The permission control server 100 receives information about the vehicle 210 from the vehicle 210, for example. The permission control server 100 also receives, for example, destinations that have been set or frequently set destinations from the vehicle 210 .

The mobile communication terminal, vehicle 210, and car navigation system may cooperate with each other. For example, the mobile communication terminal, the vehicle 210, and the car navigation system establish a communication connection by short-range wireless communication such as Bluetooth (registered trademark), and perform ID cooperation using the user's 200 personal identifier. Then, the mobile communication terminal or vehicle 210 may aggregate the personal information of the user 200 and transmit it to the permission control server 100 .

Network 10 may include a mobile communication network. Network 10 may include the Internet. The mobile communication terminal of the user 200, the vehicle 210, and the car navigation system of the vehicle 210 may be able to access the network 10 via a wireless base station, a Wi-Fi (registered trademark) access point, or the like.

Permission control server 100 stores a permission policy table 102 . The permission control server 100 stores a permission policy table 102 corresponding to each of multiple users 200 .

The permission policy table 102 includes an information provision policy that is a condition for permitting provision of the value of personal information to the information provider 400, which is registered for each item of personal information. An information provision policy may be registered in the permission policy table 102 for each of a plurality of information providers 400 and for each item of personal information.

FIG. 2 schematically shows an example of the flow of processing by the permission control server 100. As shown in FIG. Here, the flow of processing in which the permission control server 100 registers the permission policy table 102 corresponding to one user 200 and one information provider 400 is schematically shown. Here, a case where the information provider 400 is a service provider that provides services to the user 200 will be described as an example.

In step (the step may be abbreviated as S) 102, between the user 200 and the information provider 400, the user 200 uses the service of the information provider 400, and the user 200 An agreement is formed regarding the continuous provision of personal information to the information provider 400 . The user 200 may form an agreement by communicating with the server of the information provider 400 using a mobile communication terminal, for example.

The server of the information provider 400 registers the personal identifier of the user 200 . The personal identifier may be any information as long as the user 200 can be identified. Examples of personal identifiers include, but are not limited to, IMSI (International Mobile Subscriber Identity), MSISDN (Mobile Subscriber Integrated Services Digital Network Number), SUPI (Subscription Permanent Identifier), address and name. The personal identifier may be an ID uniquely assigned to the user 200 in this system.

In S104, the information provider 400 transmits a registration request to the permission control server 100 while designating the provider identifier of the information provider 400 and the personal identifier of the user 200. FIG. The provider identifier may be any information as long as the information provider 400 can be identified. The registration request may contain information necessary to register the permission policy table 102 . For example, the registration request includes default rules for collecting personal information necessary for the business. Also, for example, the registration request includes a selection of personal information provisions.

At S<b>106 , the permission control server 100 updates the permission policy table 102 linked to the specified user 200 based on the registration request received from the information provider 400 . The permission control server 100 may add to the permission policy table 102 default rules for personal information necessary for the business included in the registration request. The permission control server 100 may add to the permission policy table 102 the prescribed options for the personal information included in the registration request. At this point, the permission policy table 102 related to the information providing destination 400 is in a tentative decision state.

In S<b>108 , the permission control server 100 requests the mobile communication terminal of the user 200 to set an information provision policy regarding the information provider 400 . The mobile communication terminal displays, for example, a UI (User Interface) for receiving information provision policy settings for each of a plurality of items.

In S110, the user 200 sets the information provision policy. The user 200 may set the information provision policy by inputting to the UI displayed by the mobile communication terminal.

In S112, the permission control server 100 receives the setting by the user 200 and updates the permission policy table 102. FIG. At this point, the permission policy for the information provider 400 is formally set.

It is preferable that the permission control server 100 and the information provider 400 have previously agreed on the protocol of the personal information provision policy. In S104, the information provider 400 transmits a registration request to the permission control server 100 in a format conforming to the protocol, so that the permission control server 100 can smoothly reflect the request in the permission policy table 102. FIG.

If the information provider 400 is the place of work of the user 200, the user 200 and the information provider 400 form an agreement in S102 that the user 200 continuously provides personal information to the information provider 400. do. If the information provider 400 wishes to obtain a log of the current position of the vehicle 210 during commuting in order to properly pay the user 200 a commuting allowance for his/her own car, the information provider 400 In S104, the permission control server 100 can be requested to register the following default rules and options.

Regarding the conditions of the "time zone in which information can be provided" and the "location in which information can be provided" of the vehicle's current location, the default is set to "commuting time and only on the commuting route", and the user 200 cannot change it. The commuting time and commuting route can be obtained by cooperating with an employee management system or the like at the information provider 400 . As for the condition of the car navigation destination, the default is set to "do not provide", and the change by the user 200 is prohibited. The user 200 can select whether or not to provide the vehicle operation information. The user 200 can select whether or not to provide the vehicle information. With respect to the vehicle number and appearance features, "provide" is set as the default, and changes by the user 200 are prohibited.

FIG. 3 schematically shows an example of the flow of processing by the permission control server 100. As shown in FIG. Here, the flow of processing for providing new personal information of the user 200 to each of the plurality of information providing destinations 400 by the permission control server 100 is schematically shown.

At S<b>202 , the permission control server 100 receives the personal information of the user 200 . In S204, the permission control server 100 identifies the information provider 400 registered as the provider to whom the personal information of the user 200 is provided.

In S206, the permission control server 100 refers to the information providing policy corresponding to the personal information from the permission policy table 102 corresponding to one of the information providing destinations 400 identified in S204 and the user 200. FIG.

In S208, the permission control server 100 determines whether personal information can be provided to the information provider 400 based on the information provision policy referred to in S206. If it is determined that it can be provided, the process proceeds to S210, and if it is determined that it cannot be provided, the process proceeds to S212. At S<b>210 , the permission control server 100 transmits the personal information to the information provider 400 .

In S212, it is determined whether or not the determination has been completed for all information providing destinations 400 specified in S204. If it is determined that the process has not ended, the process returns to S206 and determines the next information providing destination 400 . If it is determined that the process has ended, the process ends.

FIG. 4 schematically shows an example of the flow of processing by the permission control server 100. As shown in FIG. The flow of processing for providing personal information of user 200 in response to a request from information provider 400 is schematically shown.

At S<b>302 , the permission control server 100 receives a request for personal information of the user 200 from the information provider 400 . In S<b>304 , the permission control server 100 identifies the items to be provided to the information provider 400 among the plurality of items of the personal information of the user 200 .

At S306, the permission control server 100 refers to the information provision policy corresponding to the item identified at S304. In S308, the permission control server 100 determines whether personal information can be provided to the information provider 400 based on the information provision policy referred to in S306. If it is determined that it can be provided, the process proceeds to S310, and if it is determined that it cannot be provided, the process proceeds to S312. At S<b>310 , the permission control server 100 transmits the personal information to the information provider 400 .

In S312, it is determined whether or not all the items specified in S304 have been determined. If it is determined that the process has not ended, the process returns to S306 and determines the next item. If it is determined that the process has ended, the process ends.

As described with reference to FIG. 3, the permission control server 100 may push the personal information of the user 200 to the information provider 400 . 4, the permission control server 100 may transmit personal information of the user 200 in response to a request from the information provider 400. FIG.

FIG. 5 schematically shows an example of the functional configuration of the permission control server 100. As shown in FIG. The permission control server 100 comprises a storage unit 110 , a receiving unit 120 and a transmitting unit 130 .

The storage unit 110 has a personal information storage unit 112 and an information provision policy storage unit 114 . Personal information storage unit 112 stores personal information of user 200 . The personal information storage unit 112 stores a value of personal information for each of a plurality of items of personal information.

The information provision policy storage unit 114 stores an information provision policy that is a condition for permitting provision of the value of personal information to the information provider 400 for each item of personal information. The information provision policy storage unit 114 stores, for example, a permission policy table 102 corresponding to each of multiple users 200 . In the permission policy table 102, an information provision policy and provision availability information are registered for each of a plurality of information provision destinations 400 and for each of a plurality of items of personal information. The provision propriety information indicates whether or not the value of personal information can be provided. In the permission policy table 102, an information provision policy and provision availability information may be registered for each category of the information provision destination 400 and for each of a plurality of items of personal information. The category of the information provider 400 may be determined based on an industry classification or the like.

The information provision policy may include conditions regarding information providers (users). For example, the information provision policy includes conditions regarding the location of the information provider. The information provision policy is a policy that permits provision of personal information values corresponding to target personal information items to the information provider 400 when the current location of the information provider is a predetermined position. you can The information provision policy is a policy that permits the provision of personal information values corresponding to target personal information items to the information provider 400 only when the current location of the information provider is a predetermined position. you can

The information provision policy is a policy that permits the information provider 400 to provide the personal information value corresponding to the target personal information item when the information provider is located within a predetermined area. you can The information provision policy is a policy that permits the information provider 400 to provide the personal information value corresponding to the target personal information item only when the information provider is located within a predetermined area. you can

The information provision policy is a policy that permits the information provider 400 to provide the personal information value corresponding to the target personal information item when the information provider is located on a predetermined route. you can The information provision policy is a policy that permits the information provider 400 to provide the personal information value corresponding to the target personal information item only when the information provider is located on a predetermined route. you can

Also, for example, the information provision policy includes conditions regarding the destination of the information provider. The information provision policy is a policy that permits provision of personal information values corresponding to target personal information items to the information provider 400 when the destination of the information provider is within a predetermined area. can be The information provision policy permits the provision of personal information values corresponding to target personal information items to the information provider 400 only when the destination of the information provider is within a predetermined area. can be

The information provision policy permits the information provider 400 to provide the personal information value corresponding to the target personal information item when the predicted course of the information provider is within a predetermined area. can be The information provision policy permits the provision of personal information values corresponding to target personal information items to the information provider 400 only when the predicted course of the information provider is within a predetermined area. can be

Also, for example, the information provision policy includes conditions regarding the state of the information provider. The information provision policy may be a policy that permits provision of the personal information value corresponding to the target personal information item to the information provider 400 when the physical condition of the user 200 satisfies the condition. The information provision policy may be a policy that permits the provision of personal information values corresponding to target personal information items to the information provider 400 only when the user 200 is in good physical condition. The information provision policy may be a policy that permits provision of the personal information value corresponding to the target personal information item to the information provider 400 only when the user 200 is in poor physical condition.

The information provision policy is a policy that permits provision of the personal information value corresponding to the target personal information item to the information provider 400 when the failure state of the vehicle 210 of the user 200 satisfies the conditions. good. The information provision policy may be a policy that permits the provision of personal information values corresponding to target personal information items to the information provider 400 only when the vehicle 210 is not broken down. The information provision policy may be a policy that permits provision of the personal information value corresponding to the target personal information item to the information provider 400 only when the vehicle 210 is in trouble.

The information providing policy provides the information providing destination 400 with the personal information value corresponding to the target personal information item when the remaining amount of gasoline, the remaining battery amount, or the remaining amount of engine oil of the vehicle 210 satisfies the conditions. may be a policy that allows According to the information provision policy, the personal information value corresponding to the target personal information item is provided only when the remaining amount of gasoline, remaining battery, or remaining amount of engine oil of the vehicle 210 is less than a predetermined amount. It may be a policy that permits provision to destination 400 .

As a specific example, in this system, when the remaining amount of engine oil is less than a predetermined remaining amount, the remaining amount of engine oil is sent to the information providing destination 400 together with the personal identifier of the user 200 who is the driver of the vehicle 210. can be set to be provided to an EC site server, which is an example of The EC site server stores, for example, the personal identifier of the user 200 and the engine oil in association with each other. Thereafter, when the user 200 logs into the EC site server with the personal identifier, the EC site server can control to provide engine oil as a recommended product. Further, when the vehicle 210 is replenished with engine oil, the remaining amount of engine oil may be provided to the EC site server. As a result, when the engine oil is replenished, the fact and the personal identifier of user 200 are notified to the EC site server, and the EC site server can cancel the association between the personal identifier and the engine oil.

The conditions regarding the state of the information provider may include conditions regarding any state of the information provider, such as the moving speed of the information provider.

The information provision policy may include conditions regarding the information provider 400 . For example, the information provision policy includes location-related conditions for the information provider 400 . When the information provider 400 is a service provider, the location related to the information provider 400 may be a location where the information provider 400 provides the user 200 with services. When the information providing destination 400 is the place of work of the user 200, the location related to the information providing destination 400 may be the place of the user 200's place of work.

The information provision policy is a policy that permits provision of a personal information value corresponding to a target personal information item when, for example, the location related to the information provision destination 400 is a predetermined position. good. The information provision policy is, for example, a policy that permits provision of the personal information value corresponding to the target personal information item only when the location regarding the information provision destination 400 is a predetermined position. good.

The information provision policy is, for example, a policy that permits provision of the personal information value corresponding to the target personal information item when the location of the information provision destination 400 is within a predetermined area. you can The information provision policy is, for example, a policy that permits provision of the personal information value corresponding to the target personal information item only when the location of the information provision destination 400 is within a predetermined area. you can

The information provision policy may include conditions regarding the positional relationship between the position of the information provider and the position of the information provider 400 . For example, in the information provision policy, when the positional relationship between the current location of the information provider and the location of the information provider 400 satisfies a predetermined condition, the value of personal information corresponding to the target personal information item. to the information provider 400. For example, when the location of the information providing destination 400 is located within a predetermined range from the current location of the information providing source, the information providing policy specifies that the value of the personal information corresponding to the target personal information item is provided. It may be a policy that permits provision to destination 400 . According to the information provision policy, for example, only when the location of the information provider 400 is located within a predetermined range from the current location of the information provider, the personal information value corresponding to the target personal information item is provided. It may be a policy that permits provision to destination 400 .

For example, the information provision policy corresponds to the target personal information item only when the location related to the information provider 400 is located within a predetermined distance from the information provider along the traveling direction of the information provider. It may be a policy that permits the provision of the value of the personal information to be provided to the information provider 400 .

The information provision policy may include conditions regarding the status of the information provider 400 . For example, the information provision policy includes conditions regarding the business status of the information provider 400 . The information provision policy may be, for example, a policy that permits the provision of personal information values corresponding to target personal information items to the information provider 400 only when the information provider 400 is in business. The information provision policy may be a policy that permits the provision of personal information values corresponding to target personal information items to the information provider 400 only when the information provider 400 is busy. The information provision policy may be a policy that permits the provision of personal information values corresponding to target personal information items to the information provider 400 only when the information provider 400 is not busy. The information provision policy permits the information provider 400 to provide the information provider 400 with the value of personal information corresponding to the target personal information item only when the information provider has made a reservation to use the service with the information provider 400. It may be a policy to The information provision policy permits to provide the information provider 400 with the value of personal information corresponding to the target personal information item only when the information provider has not reserved the information provider 400 to use the service. It may be a policy to

The information provision policy may include conditions regarding information to be provided. The conditions include, for example, conditions regarding accuracy of information to be provided. For example, when the target item is current location information, the information provision policy includes conditions for the accuracy of location information that can be provided. For example, pinpoint latitude and longitude information can be provided to the first information provider 400, and only abstracted latitude and longitude information can be provided to the second information provider 400. can be provided. For example, it is possible to provide information obtained by abstracting the latitude and longitude information received from the user into ranges such as a radius of 1 m, a radius of 100 m, and a radius of 1 km. As a method of abstracting location information, for example, a method of performing the minimum necessary abstraction within the range where k-anonymity is guaranteed may be adopted.

The conditions include, for example, conditions regarding the real-time nature of the information to be provided. For example, when the target item is current location information, the information provision policy includes conditions for providing a real-time current location or providing a log of the current location. For example, the first information provider 400 can be provided with a real-time current location, and the second information provider 400 can be provided with a log of the current location. As a log of the current location, for example, movement history from several minutes ago, movement history from several tens of minutes ago, movement history from several hours ago, movement history for one day, etc. may be selectable.

The information provision policy may include other conditions such as a condition regarding the time period for providing information, a condition regarding the number of times of providing information, a condition regarding a season for providing information, and the like. The condition regarding the time limit for providing information may be, for example, a condition indicating a period during which the value of personal information can be transmitted. The setting of the transmittable period may be performed in arbitrary units. For example, the periods that can be sent are the start date and end date, start time and end time, daily, weekly, monthly, yearly, day of the week, seasonal, even-numbered days, odd-numbered days, and if the child is in elementary school. It is set in an arbitrary unit such as an event unit such as an interval. The condition regarding the number of times information is provided may be a condition indicating the number of times information can be provided. The condition regarding the season for providing information may be a condition indicating the season in which information can be provided.

The receiving unit 120 receives various information. The receiving unit 120 may receive personal information of the user 200 . The receiving unit 120 may receive personal information items and personal information values. If the items of personal information received by the receiving unit 120 are specified, the receiving unit 120 may receive personal information containing only values.

The receiving unit 120 may receive personal information of the user 200 from the mobile communication terminal of the user 200 . The receiving unit 120 may receive personal information of the user 200 from the vehicle 210 of the user 200 . The personal information storage section 112 may store the personal information received by the receiving section 120 .

The mobile communication terminal of the user 200 and the vehicle 210 may transmit personal information to the permission control server 100 each time new personal information is obtained. The mobile communication terminal of the user 200 and the vehicle 210 may transmit the personal information to the permission control server 100 every time the value of the personal information is updated for each personal information item.

The mobile communication terminal of the user 200 and the vehicle 210 may transmit personal information to the permission control server 100 according to predetermined timing. The mobile communication terminal of the user 200 and the vehicle 210 may, for example, periodically or irregularly transmit the personal information updated in each period to the permission control server 100 .

The receiving unit 120 also receives a registration request for the permission policy table 102 from the information provider 400, for example. The receiving unit 120 also receives a transmission request for the personal information of the user 200 from the information provider 400, for example. The receiving unit 120 also receives a setting instruction for the permission policy table 102 from the mobile communication terminal of the user 200, for example.

The receiving unit 120 may receive the personal information of the user 200 together with the personal identifier of the user 200 and the vehicle identifier of the vehicle 210 driven by the user 200 . The vehicle identifier may be any information as long as the vehicle 210 can be identified. For example, the vehicle identifier may be the vehicle number. Personal information storage unit 112 may store a personal identifier of user 200, a vehicle identifier, and a value for each item of personal information in association with each other. Accordingly, the personal information of the specific user 200, the personal information about the specific vehicle 210, and the personal information when the specific user 200 drives the specific vehicle 210 can be easily identified.

The receiving unit 120 may receive the personal information of the user 200 together with the personal identifier of the user 200 or the vehicle identifier of the vehicle 210 driven by the user 200 . The personal information storage unit 112 may store the personal identifier of the user 200 or the vehicle identifier of the vehicle 210 driven by the user 200 in association with the value of each item of personal information.

For example, the receiving unit 120 receives the personal information of the user 200 together with the personal identifier of the user 200 . The personal information storage unit 112 may store the personal identifier of the user 200 and the value of each item of personal information in association with each other. Also, for example, the receiving unit 120 receives the personal information of the user 200 together with the vehicle identifier of the vehicle 210 driven by the user 200 . Personal information storage unit 112 may store the vehicle identifier of vehicle 210 driven by user 200 in association with the value of each item of personal information.

The transmission unit 130 transmits various information. The transmission unit 130 transmits the personal information of the user 200 to the information provider 400 according to the permission policy table 102 .

The transmission unit 130 may push-transmit the personal information of the user 200 to the information provider 400 . For example, the transmitting unit 130 transmits the values of a plurality of items of the personal information of the user 200 to the information providing destination 400 to which the information is to be sent according to the permission policy table 102 corresponding to the information providing destination 400 each time the values are updated. . Further, for example, the transmission unit 130 transmits the values of a plurality of items of the personal information of the user 200 to the information destination 400 to be transmitted according to the permission policy table 102 corresponding to the information destination 400 to be transmitted according to predetermined timing. Send to

The transmission unit 130 may transmit the personal information of the user 200 to the information provider 400 in response to a request from the information provider 400 . For example, when the receiving unit 120 receives a transmission request for the personal information of the user 200 from the information provider 400 , the transmitter 130 transmits information to the information provider according to the permission policy table 102 corresponding to the information provider 400 . 400, the personal information is transmitted.

The transmitting unit 130 may transmit the value of the personal information to the information providing destination 400 according to the information providing policy for each item of personal information. For example, when the value of the first item and the value of the second item are candidates to be transmitted to the information provider 400, the value of the first item is transmitted according to the information provision policy of the first item. If it is determined that the value of the second item can be provided to the information provider 400, and it is determined that the value of the second item cannot be provided to the information provider 400 according to the information provision policy for the second item, the transmission unit 130 sends the value of the first item and the second value, only the value of the first item is transmitted to the information provider 400 .

The transmitting unit 130 transmits the value of the personal information to the information provider 400 together with the personal identifier of the user 200 and the vehicle identifier of the vehicle 210 driven by the user 200 in accordance with the information provision policy for each item of personal information. good. The transmission unit 130 transmits the value of the personal information to the information provider 400 together with the personal identifier of the user 200 or the vehicle identifier of the vehicle 210 driven by the user 200 in accordance with the information provision policy for each item of personal information. good too. For example, the transmission unit 130 transmits the value of personal information to the information provider 400 together with the personal identifier of the user 200 according to the information provision policy for each item of personal information. Further, for example, the transmission unit 130 transmits the value of personal information to the information provider 400 together with the vehicle identifier of the vehicle 210 driven by the user 200 in accordance with the information provision policy for each item of personal information.

The transmission unit 130 may transmit the predetermined personal information to the predetermined information provider 400 regardless of the information provision policy when it is detected that an abnormality has occurred in the information provider. .

Permission control by the permission control server 100 according to this embodiment can be applied to various fields.

A method of using a mobile communication terminal called BYOD (Bring Your Own Device) is known. BYOD means bringing a personal smartphone or the like to the work site and using it for work. It is expected that the use of mobile communication terminals that employees are accustomed to use for work will improve work efficiency and reduce the cost of preparing dedicated work terminals. On the other hand, from the company's point of view, there are disadvantages such as increased information security risks, and from the employee's point of view, concerns about privacy protection in their private lives. In addition, unlike BYOD, there may be cases where employees use their own private cars for business. If the private car owned by an employee is a so-called connected car, the same disadvantages as BYOD may occur.

When the permission control according to the present embodiment is applied to business use of BYOD or private cars, for example, the following information provision policy may be set.

User 200 may set an information provision policy to provide his or her travel log to the company he or she works for only if his or her current location is on the premises of his or her place of work. Knowing the current location of employees is particularly effective in companies that have introduced a free address system. If the workplace premises are vast, it is conceivable that employees will move around the workplace premises in their own connected cars during working hours. In such a case, an application example of providing a movement log of a connected car (for example, a GPS (Global Positioning System) log of a connected car) to a company as long as the connected car is located on the workplace premises is also conceivable. . Whether or not to provide location information for a mobile communication terminal or a connected car, whether or not to provide movement logs to companies is automatically turned on/off according to the user's current location. For example, it is possible to prevent an unforeseen situation in which the movement history of an employee who left early due to poor physical condition is unintentionally collected even after leaving early.

Another application installed in the same mobile communication terminal/connected car may be, for example, an application that notifies family members of when it is time for them to return home. In such applications, based on the position of home, the current location of the user, and the speed of movement of the user (if necessary, information such as traffic ), calculate the estimated time to return home, and notify it to the smartphone of the family. If the user permits, the user's own current location information itself may be notified in real time to the smartphone of the family member.

As another application installed in the same mobile communication terminal/connected car, for example, a coupon reception application for a restaurant may be installed. For example, based on your current location, moving speed, moving direction (or destination, etc.), etc., you can search for restaurants that are within 30 minutes from now, based on your demographic data (e.g. age・Set an information provision policy to disclose information such as gender. On the other hand, it is assumed that each restaurant has set an advertisement/coupon distribution policy such as "distribute coupons to women in their twenties who are likely to enter the restaurant within 30 minutes from now." As a result, the user 200 can receive only the advertisements/coupons that are necessary for him/herself (matching his/her own location information and travel direction), and the user 200 can receive only the advertisements/coupons that are highly likely to visit his/her store from the viewpoint of the restaurant. Advertisements can be delivered efficiently by focusing on

As illustrated above, multiple applications are installed on one mobile communication terminal and one connected car, and each application can store personal information such as the current location under what conditions and to whom. It is set whether disclosure is possible. According to the permission control according to this embodiment, such various information provision policies can be grasped and set from a unified user interface.

The permission control according to the present embodiment can also be applied to, for example, a smartphone app for mountaineering (hereinafter referred to as "climbing app"). The functions of a general mountaineering app are as follows. When a user who has installed a mountaineering app on his/her smartphone taps the "start climbing" icon and then climbs a mountain, he/she can acquire movement log data in which the trajectory of the user's walking is superimposed on a mountaineering map. Data and photos taken during mountain climbing (hereinafter referred to as personal information) can be shared and enjoyed by climbing app users. The user can freely set whether or not to disclose such personal information to other climbing application users and, if so, at what timing.

When the permission control according to the present embodiment is applied to a mountaineering application, for example, the following functions may be added to the application.

When the biosensor worn by the user 200 who is a climber detects that the physical condition of the user 200 is abnormal, the personal information of the user 200, the trajectory of the user 200 walking (that is, the current location information) and the application The mountain climbing plan (the route plan from the start of climbing to the descent) that was entered in , is forcibly sent to a predetermined contact (for example, a family member's smartphone). As a result, even if the climber himself loses consciousness due to slipping down from the mountain trail and becomes unable to operate the smartphone himself, as long as the climber's smartphone is in a state where communication is possible, the climber's current status will be The position can be communicated to the outside. As a result, even if the climber forgets to tell someone about his or her climbing plan or forgets to submit a mountain climbing notification, the possibility of being safely rescued increases.

Permission control according to the present embodiment can quickly notify a caregiver of the care recipient's current location when the care receiver's physical condition suddenly changes, or notify the child's current location to the parent when the child's physical condition suddenly changes. It can be applied to various uses such as quick notification. In these cases, regardless of what kind of information provision policy the information provider such as the care receiver and child has set, the permission control server 100, if the information provider's physical condition is detected, Priority may be given to transmitting the value of the item of personal information determined in advance to a predetermined contact. The permission control according to this embodiment can also be applied to vehicle failure. The permission control server 100, when an impact is applied to the vehicle or a sudden acceleration of the vehicle is detected, regardless of what kind of information provision policy the vehicle driver or the vehicle owner has set in advance, the permission control server 100 Priority may be given to transmitting the defined personal information to a predetermined contact.

FIG. 6 schematically shows an example of the permission policy table 102. As shown in FIG. Here, a case where the permission control according to the present embodiment is mainly applied to MaaS (Mobility as a Service) will be described.

The permission policy table 102 includes an item column 510 and a plurality of information provider columns 520 . The information providing destination column 520 is registered for each of the plurality of information providing destinations 400 . FIG. 6 illustrates, as a plurality of information providing destinations 400, a gas station, an insurance company, a hotel reserved by the user 200, and the place of work of the user 200. FIG. The information provision destination column 520 includes a availability information column 522 and a condition column 524 .

The propriety information column 522 includes transmission propriety information indicating whether or not to permit provision of the corresponding personal information to the corresponding information provider 400 . The condition column 524 contains the information provision policy. FIG. 6 illustrates only the information provision policy for the vehicle location item. As shown in FIG. 6, the information provision policy storage unit 114 may store transmission propriety information and an information provision policy for each of a plurality of information provision destinations 400 and for each of a plurality of items of personal information.

The availability information column 522 and the condition column 524 may be configurable by the user 200 . The availability information column 522 and the condition column 524 may be freely set by the user 200 . Alternatively, for example, the information provider 400 may set defaults for the availability information column 522 and the condition column 524, and the user 200 may change the defaults.

According to the permission policy table 102 illustrated in FIG. 6, the transmission unit 130 transmits highly accurate position information of the vehicle current location information of the vehicle 210 to the gas station in real time. In addition, the transmission unit 130 transmits a log of low-precision position information regarding the vehicle current position information of the vehicle 210 to the insurance company. Further, the transmitting unit 130 transmits the vehicle current location information of the vehicle 210 to the reserved hotel in real time only on the day of reservation and within a radius of 5 km from the hotel. In addition, the transmission unit 130 transmits a log of the vehicle current location information of the vehicle 210 to the place of work only for the work day and the location information on the work route.

The information provision policy set in the vehicle current location information item is whether the current location information is provided to the information provider 400 or log information indicating the movement history of the vehicle 210 is provided to the information provider 400. may be a policy that the user 200 can select.

The information provision policy set in the vehicle current location information item provides information on the current location of the vehicle 210 when the positional relationship between the current location of the vehicle 210 and a location related to the information providing destination 400 satisfies a predetermined condition. It may be a policy that permits provision to destination 400 . Further, the information provision policy set in the vehicle current location information item is such that when the user 200 reserves the use of a service provided by the mobile communication terminal 300, the current location of the vehicle 210 is sent to the information provider 400. may be a policy that permits provision of

The information provision policy set in the current vehicle location information item is a policy that permits the current location of the vehicle to be provided to the information provider only when the vehicle 210 is traveling along a predetermined route. you can As a result, for example, the vehicle current location information can be provided to the place of work only when the user 200 is traveling on the commute route by the vehicle 210, and the privacy of the user 200 can be protected when the user 200 is traveling other than the commute route. can contribute to

The information provision policy set in the current vehicle location information item is a policy that permits the current location of the vehicle to be provided to the information provider only when the vehicle 210 is not traveling on a predetermined route. may As a result, for example, when the user 200 travels on a route other than the route to work, the place of work can be made to know where the user 200 is traveling, which contributes to the management of the user 200 by the place of work.

The information provision policy permits the value of the item corresponding to the information provision policy to be provided to the information provision destination 400 when the user 200 who is the driver of the vehicle 210 is a predetermined person. If the person 200 is not a predetermined person, the policy may not permit the provision of the value of the item corresponding to the information providing policy to the information providing destination 400 .

For example, assume that a family shares one vehicle 210 . For example, assume a family of five members, grandfather, grandmother, father, mother, and child. In this case, it is conceivable to set the mobile communication terminals of the family (for example, the mobile communication terminals of the father and mother) as the information providing destination 400 . In this case as well, communication may be established between the mobile communication terminal of the driver and the vehicle 210, and the driving information may be transmitted together with the driver's personal identifier. Driving information may be transmitted.

In this case, for example, an information provision policy can be set so that various types of driving information are disclosed to the portable communication terminals of family members only when the driver is a grandfather or grandmother. As a result, for example, when the grandfather or grandmother is driving the vehicle 210, the father or mother can acquire the current vehicle location information and the vehicle operation information, thereby reducing the degree of worry of the father or mother. can be done. In addition, if information is uniformly transmitted regardless of who the driver is, for example, when the child drives, the current vehicle location information and vehicle operation information will be transmitted to the father or mother. For example, a child's privacy can be protected by setting information to be disclosed only if the driver is a grandfather or grandmother, although this would be an invasion of privacy. In addition, since the driving information of the grandfather and grandmother can be obtained separately from the driving information of other family members, it is possible to accurately grasp and analyze the driving information of the grandfather and grandmother.

Further, for example, when the vehicle 210 deviates from a predetermined route (for example, a usual shopping route), the information provision policy is set so that the vehicle current location information and the vehicle operation information are transmitted to the family's mobile communication terminal. can be set. Thereby, when there is a possibility that some kind of abnormality has occurred, it is possible to let the family know that.

Further, for example, when the vehicle 210 is located within a predetermined range from the home, the information provision policy can be set so that the current vehicle location information of the vehicle 210 is disclosed to the portable communication terminal of the family. As a result, the driver's return home timing can be notified to the family in advance. The predetermined range may be, for example, a range within a radius of Xm with the home as the starting point. The predetermined range may be arbitrarily set and may be changed.

Further, the permission control server 100 detects, for example, that an impact stronger than a predetermined impact is applied to the vehicle 210, or that the acceleration of the vehicle 210 exceeds a predetermined threshold. When it is detected, regardless of what kind of information provision policy the user 200 who is the driver has set, priority is given to various driving information including vehicle current location information to the family's mobile communication terminal. may be disclosed to

Whether the information provision policy is set by the driver himself or by the driver's family, it is preferable that the driver can grasp and adjust what kind of information provision policy is currently set. (Some of them may have mandatory policies that cannot be adjusted by the driver). For example, the current information provision policy may be displayed on the display of the driver's mobile communication terminal or the display of the vehicle 210 . Of course, when using a rental car or car sharing, the vehicle current location information and vehicle operation information of the vehicle 210 may be notified to the mobile communication terminal of the driver's family.

It is preferable that the current vehicle location information and the vehicle operation information are associated with both the personal identifier of the driver and the vehicle identifier of the vehicle 210 and transmitted to various information providers. As a result, even when a certain driver drives a plurality of vehicles 210, the preferences and habits of the driver can be analyzed. Such information is useful for car rental companies, insurance companies, car sharing companies, and EC site operators who try to understand drivers' preferences. Moreover, even when a certain vehicle 210 is driven by a plurality of drivers, it is possible to analyze how the vehicle 210 has been driven so far. Such information is useful to the owner of vehicle 210 and vehicle maintenance companies. If the driver agrees, the latitude/longitude information (GPS information) of the driver's portable communication terminal and the latitude/longitude information (GPS information) of the vehicle 210 may be transmitted to various information providers.

According to the invention according to this embodiment, it is possible to perform effective analysis while respecting privacy in situations where there is no one-to-one correspondence between the driver and the vehicle. The effect will be described with a more specific example. For example, assume a situation where one user 200 uses a rental car and drives different vehicles every day. The information provider 400 can cross-obtain and evaluate driving information of a plurality of vehicles by the user. Alternatively, even in a situation where one vehicle is shared by all family members of the user 200, the information provider 400 can select and acquire only the driving information while the vehicle is being driven by the user 200 himself/herself. can be done. Such information is, for example, valuable information from the viewpoint of a rental car company, an insurance company, etc., who want to evaluate the polite driving of the user 200 . Alternatively, the information providing destination 400 may determine how the vehicle has been operated even in a situation in which a single vehicle is driven by a plurality of drivers in turn (for example, a rental car or a situation in which the vehicle is shared among family members). It is possible to cross-obtain and evaluate the driving information of a plurality of drivers as history information on whether the vehicle has been operated in the same manner. Such information is valuable information for car maintenance companies and car parts dealers who want to predict wear and the like of vehicle parts, for example.

When the information provider 400 wants to analyze the driving preferences and habits of the user 200, the permission control server 100 provides the information provider 400 with information that is linked only to the driver's personal identifier, not to the vehicle identifier. You may provide various personal information. When the information provider 400 wants to predict the wear of parts of the vehicle, the permission control server 100 provides the information provider 400 with information that is not linked to the driver's personal identifier, but is linked only to the vehicle identifier. Various driving information may be provided. User privacy can be respected by not linking various types of personal information with identifiers that are not necessary for analysis.

The information provision policy may be a policy that indicates with what identifier certain personal information can be linked to be disclosed to the information provider 400 . For example, the information provision policy requires that personal information be disclosed to the information provider i) in association with the vehicle identifier rather than in connection with the driver's personal identifier, or ii) in connection with the vehicle identifier or iii) Disclose to the information provider in association with the driver's personal identifier and vehicle identifier. can be policy. The information provision policy may be a policy in which one of i) and ii) can be selected. The information provision policy may be a policy in which one of i) and iii) can be selected. The information provision policy may be a policy in which one of ii) and iii) can be selected.

The permission control server 100 may receive a request from the information provider 400 as to what kind of identifier the information is associated with, and may provide various types of personal information in association with only the identifier corresponding to the request.

Assume that the police and the driver's employer are set as one of the many information providing destinations 400 . For example, if the inter-vehicle distance between one's own vehicle and another vehicle continues to be extremely short for a predetermined time or longer, the vehicle identifier of the own vehicle (or the personal identifier of the driver of the own vehicle) It can be set so that the vehicle current location information of the own vehicle is disclosed to a police server or the like. Also, for example, when a driving behavior that violates the Road Traffic Law is observed in the own vehicle, the vehicle identifier of the own vehicle (or the driver's personal identifier) and the vehicle's current location information are disclosed to the police server, etc. It is acceptable to have a policy that

The information provider 400 may include, for example, the lender and a matching server that provides a matching platform service that matches the lender who rents the vehicle 210 with the borrower who rents the vehicle 210 . The information provision policy storage unit 114 stores an information provision policy with the information provider 400 as the matching server and an information provision policy with the information provider 400 as the lender for the personal identifier of the user 200 who is the borrower. good. The permission control server 100 may be able to individually set the information provision policy for the matching server and the information provision policy for the lender according to instructions from the user 200 .

Thus, the permission control according to this embodiment can be applied to car sharing between individuals. The permission control server 100 allows the user 200 who is the borrower to select how much of his or her driving information to disclose to the lender or matching server. The permission control server 100 also enables the lender to request the user 200 to disclose the driving information. A user 200 who proactively discloses driving information is allowed to enjoy some merit such as a reduced rental fee, for example.

Communication is established between the mobile communication terminal of the user 200 and the lessor's vehicle 210 before the start of driving, and the personal identifier of the user 200 and various driving information are sent from the mobile communication terminal of the user 200 to the lessor or the matching server. to be sent to Alternatively, the lessor's vehicle 210 may transmit various driving information together with the personal identifier 200 .

Whether the information provision policy is set by the user 200 himself or by the lender, it is preferable that the user 200 can grasp and adjust what kind of information provision policy is currently set (some , there may be an enforcement policy that cannot be adjusted from the user 200). For example, the current information provision policy may be displayed on the display of the mobile communication terminal of user 200 or the display of vehicle 210 .

For example, the user 200 selects whether or not to accept the policy of disclosing the vehicle current location information of the vehicle 210 to the lender in real time before a predetermined time from the scheduled return time. By allowing the user 200 who has accepted the policy to rent the vehicle 210 at a lower rate, the user 200 will have a financial advantage. The lessor side has the advantage of being able to obtain information for grasping whether the vehicle 210 is likely to be returned as scheduled.

Further, for example, the user 200 selects whether or not to accept the policy of disclosing information on vehicle operation of the vehicle 210 (sudden braking, abrupt steering, legal speed, etc.) to the matching server. . Such information is stored with the user's 200 personal identifier and disclosed to potential future lenders. The lender can refuse to lend the vehicle 210 to the user 200 who drives badly. By allowing the user 200 who drives carefully to rent the vehicle 210 at a lower price in the future, careful driving can be promoted.

Also, for example, if the vehicle 210 is not returned to the lender 30 minutes or more after the scheduled return time, the lender may set the current location information of the vehicle 210 to be disclosed to the lender in real time. The lender may set the vehicle 210 not to be rented to the user 200 who does not accept this condition.

Also, for example, if the vehicle 210 is located in an area where it cannot be returned by the scheduled return time (for example, if the vehicle is scheduled to be returned near Tokyo Station at 21:00, is located in Sendai), the current location information of the vehicle 210 may be set to be disclosed to the lessor.

The above example can also be applied to regular rental cars. In the case of a normal rental car, the lender and the matching server are substantially the same. An insurance company may be added as an information provider. A user 200 who actively discloses driving information and who drives well may enjoy benefits such as a discount not only on the rental fee but also on the insurance area.

FIG. 7 schematically shows a display example of the mobile communication terminal 300 of the user 200. As shown in FIG. A specific example of the UI 600 for setting the permission policy table 102 is shown here. Note that the mobile communication terminal 300 and the vehicle 210 may be ID-linked in advance, and the permission policy table 102 may be set from both the mobile communication terminal 300 and the in-vehicle display of the vehicle 210 .

In the UI 600 illustrated in FIG. 7, tabs are prepared for each information providing destination 400 . The user 200 can switch the information provider 400 to be set by selecting a tab.

FIG. 7 exemplifies a scene in which whether or not to provide current vehicle location information, whether or not to provide a car navigation destination, and whether or not to provide driving operation information is set. The user 200 can select the current vehicle location information from, for example, non-providable, available, and conditionally available. If conditionally available is selected, the detailed condition setting screen may be displayed.

FIG. 8 schematically shows a display example of the mobile communication terminal 300 of the user 200. As shown in FIG. Here, one specific example of the detailed condition setting screen 610 is shown. FIG. 8 exemplifies a detailed condition setting screen for providing current location information to OO hotel.

For example, when the user 200 selects that the vehicle current location information can be provided, the accuracy of the position information that can be provided, whether or not the position information can be provided in real time, the time zone in which the information can be provided, and the location in which the position information can be provided. is configurable.

As described above, in this system, for example, it is possible to set the accuracy of position information to be provided and whether to provide real-time provision or log provision for the current vehicle location information of the vehicle 210 . Also, it is possible to limit the area of the location information that can be provided. For example, it is possible to set the present vehicle location information to be available only when the user 200 is located within a predetermined area. Further, for example, it is possible to set the vehicle current location information to be available only when the user 200 is located on a predetermined route. Further, for example, it is possible to set so that the current vehicle location information can be provided only to stores within a radius of X km from the current location of the user 200 . Further, for example, it is possible to set so that the current vehicle location information can be provided only to a service area within X km ahead of the user 200 in the traveling direction.

FIG. 9 schematically shows a display example of the mobile communication terminal 300 of the user 200. As shown in FIG. Here, one specific example of the detailed condition setting screen 620 is shown. FIG. 9 exemplifies a detailed condition setting screen for providing location information of the user 200 to the workplace of the user 200 .

The user 200 can set the time zone in which information can be provided and the limitation of the location in which information can be provided for location information by selecting options on the UI. Choices may be determined, for example, by the place of work. As a result, the user 200 can be allowed to make settings desired by the workplace while leaving the user 200 at his/her discretion.

FIG. 10 schematically shows a display example of the mobile communication terminal 300 of the user 200. As shown in FIG. Here, a case is exemplified in which it is possible to switch between the setting UI for the information provision policy for each information provider 400 and for each item of personal information to be provided. By providing a UI such as that illustrated in FIG. 10, a complicated information provision policy can be set more quickly.

FIG. 11 schematically shows an example of the flow of processing by the permission control server 100. As shown in FIG. Here, the user 200 selects whether the information provision policy provides a value corresponding to the target personal information item or provides a log showing the history of the value corresponding to the target personal information item. A possible policy will be described as an example.

In S402, personal information (vehicle current location information of vehicle 210, vehicle operation information, etc.) is transmitted in real time from user 200's portable communication terminal or vehicle 210 driven by user 200 to permission control server 100. FIG. Specifically, a combination of the personal identifier of the user 200 , personal information items and values, and time information is sent to the permission control server 100 .

In S404, the permission control server 100 refers to the permission policy table 102 of the user 200. FIG. The permission control server 100 determines whether or not to transmit the personal information to the information provider 400 by executing the processes of S406, S408, and S410. The permission control server 100 may execute the processes of S406, S408, and S410 for each of the plurality of information providing destinations 400. FIG.

In S406, the permission control server 100 determines whether or not the personal information may be transmitted to the information providing destination 400 based on the information providing policy. The permission control server 100 may refer to the information provision policy set for the item of personal information received in S402, and compare the personal information with the information provision policy to determine whether transmission is possible.

If it is determined in S406 that transmission is possible, in S408 the permission control server 100 determines whether real-time transmission or log transmission is possible. If real-time transmission is possible, the permission control server 100 immediately transmits the personal information of the user 200 to the information provider 400 .

When it is determined that real-time transmission is impossible and log transmission is possible, the permission control server 100 generates log data in S410. The permission control server 100 transmits the generated log data to the information provider 400 at a predetermined timing. It should be noted that even if the personal information is processed by the permission control server 100 as appropriate according to the information provision policy, such as reducing the accuracy of the location information, performing necessary anonymization processing, etc., and then transmitted to the information provision destination 400 good.

In the above-described embodiment, the case where the permission control server 100 stores the permission policy table 102 and executes permission control of the personal information of the user 200 has been described as an example, but the present invention is not limited to this. For example, the mobile communication terminal 300 of the user 200, the vehicle 210 driven by the user 200, or the car navigation system of the vehicle 210 stores the permission policy table 102 and executes permission control for transmission of personal information of the user 200. may In this case, the mobile communication terminal 300, the vehicle 210, and the car navigation system may be examples of the information transmitting device. Also, the mobile communication terminal 300, the vehicle 210, and the car navigation system may be examples of a personal information disclosure management device.

FIG. 12 schematically shows an example of a hardware configuration of a computer 1200 functioning as the permission control server 100, the mobile communication terminal 300 of the user 200, the control device of the vehicle 210, or the car navigation system of the vehicle 210. As shown in FIG. Programs installed on the computer 1200 cause the computer 1200 to function as one or more "parts" of the apparatus of the present embodiments, or cause the computer 1200 to operate or perform operations associated with the apparatus of the present invention. Multiple "units" can be executed and/or the computer 1200 can be caused to execute the process or steps of the process according to the present invention. Such programs may be executed by CPU 1212 to cause computer 1200 to perform certain operations associated with some or all of the blocks in the flowcharts and block diagrams described herein.

Computer 1200 according to this embodiment includes CPU 1212 , RAM 1214 , and graphics controller 1216 , which are interconnected by host controller 1210 . Computer 1200 also includes input/output units such as communication interface 1222 , storage device 1224 , and IC card drives, which are connected to host controller 1210 via input/output controller 1220 . Storage devices 1224 may be hard disk drives, solid state drives, and the like. Computer 1200 also includes legacy input/output units, such as ROM 1230 and keyboard, which are connected to input/output controller 1220 via input/output chip 1240 .

The CPU 1212 operates according to programs stored in the ROM 1230 and RAM 1214, thereby controlling each unit. Graphics controller 1216 retrieves image data generated by CPU 1212 into a frame buffer or the like provided in RAM 1214 or itself, and causes the image data to be displayed on display device 1218 .

Communication interface 1222 communicates with other electronic devices over a network. Storage device 1224 stores programs and data used by CPU 1212 within computer 1200 . The IC card drive reads programs and data from IC cards and/or writes programs and data to IC cards.

ROM 1230 stores therein programs that are dependent on the hardware of computer 1200, such as a boot program that is executed by computer 1200 upon activation. Input/output chip 1240 may also connect various input/output units to input/output controller 1220 via USB ports, parallel ports, serial ports, keyboard ports, mouse ports, and the like.

A program is provided by a computer-readable storage medium such as an IC card. The program is read from a computer-readable storage medium, installed in storage device 1224 , RAM 1214 , or ROM 1230 , which are also examples of computer-readable storage media, and executed by CPU 1212 . The information processing described within these programs is read by computer 1200 to provide coordination between the programs and the various types of hardware resources described above. An apparatus or method may be configured by implementing information operations or processing according to the use of computer 1200 .

For example, when communication is performed between the computer 1200 and an external device, the CPU 1212 executes a communication program loaded into the RAM 1214 and sends communication processing to the communication interface 1222 based on the processing described in the communication program. you can command. Under the control of the CPU 1212, the communication interface 1222 reads the transmission data stored in the transmission buffer area provided in the RAM 1214, the storage device 1224, or a recording medium such as an IC card, and transmits the read transmission data to the network. Received data transmitted or received from a network is written in a receive buffer area or the like provided on a recording medium.

The CPU 1212 also causes the RAM 1214 to read all or necessary portions of files or databases stored in an external recording medium such as a storage device 1224 or an IC card, and performs various types of processing on the data on the RAM 1214. may be executed. CPU 1212 may then write back the processed data to an external recording medium.

Various types of information, such as various types of programs, data, tables, and databases, may be stored on recording media and subjected to information processing. CPU 1212 performs various types of operations on data read from RAM 1214, information processing, conditional decisions, conditional branching, unconditional branching, and information retrieval, which are described throughout this disclosure and are specified by instruction sequences of programs. Various types of processing may be performed, including /replace, etc., and the results written back to RAM 1214 . In addition, the CPU 1212 may search for information in a file in a recording medium, a database, or the like. For example, when a plurality of entries each having an attribute value of a first attribute associated with an attribute value of a second attribute are stored in the recording medium, the CPU 1212 selects the first attribute from among the plurality of entries. search for an entry that matches the specified condition of the attribute value of the attribute, read the attribute value of the second attribute stored in the entry, and thereby determine the first attribute that satisfies the predetermined condition An attribute value of the associated second attribute may be obtained.

The programs or software modules described above may be stored in a computer-readable storage medium on or near computer 1200 . Also, a recording medium such as a hard disk or RAM provided in a server system connected to a dedicated communication network or the Internet can be used as a computer-readable storage medium, whereby the program can be transferred to the computer 1200 via the network. offer.

The blocks in the flowcharts and block diagrams in this embodiment may represent steps in the process in which the operations are performed or "parts" of the apparatus responsible for performing the operations. Certain steps and "sections" may be provided with dedicated circuitry, programmable circuitry provided with computer readable instructions stored on a computer readable storage medium, and/or computer readable instructions provided with computer readable instructions stored on a computer readable storage medium. It may be implemented by a processor. Dedicated circuitry may include digital and/or analog hardware circuitry, and may include integrated circuits (ICs) and/or discrete circuitry. Programmable circuits, such as Field Programmable Gate Arrays (FPGAs), Programmable Logic Arrays (PLAs), etc., perform AND, OR, EXCLUSIVE OR, NOT AND, NOT OR, and other logical operations. , flip-flops, registers, and memory elements.

A computer-readable storage medium may comprise any tangible device capable of storing instructions to be executed by a suitable device, such that a computer-readable storage medium having instructions stored thereon may be illustrated in flowchart or block diagram form. It will comprise an article of manufacture containing instructions that can be executed to create means for performing specified operations. Examples of computer-readable storage media may include electronic storage media, magnetic storage media, optical storage media, electromagnetic storage media, semiconductor storage media, and the like. More specific examples of computer readable storage media include floppy disks, diskettes, hard disks, random access memory (RAM), read only memory (ROM), erasable programmable read only memory (EPROM or flash memory) , electrically erasable programmable read only memory (EEPROM), static random access memory (SRAM), compact disc read only memory (CD-ROM), digital versatile disc (DVD), Blu-ray disc, memory stick , integrated circuit cards, and the like.

The computer readable instructions may be assembler instructions, Instruction Set Architecture (ISA) instructions, machine instructions, machine dependent instructions, microcode, firmware instructions, state setting data, or object oriented programming such as Smalltalk, JAVA, C++, etc. language, and any combination of one or more programming languages, including conventional procedural programming languages, such as the "C" programming language or similar programming languages. good.

Computer readable instructions are used to produce means for a processor of a general purpose computer, special purpose computer, or other programmable data processing apparatus, or programmable circuits to perform the operations specified in the flowchart or block diagrams. A general purpose computer, special purpose computer, or other programmable data processor, locally or over a wide area network (WAN), such as the Internet, etc., to execute such computer readable instructions. It may be provided in the processor of the device or in a programmable circuit. Examples of processors include computer processors, processing units, microprocessors, digital signal processors, controllers, microcontrollers, and the like.

Although the present invention has been described above using the embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments. It is obvious to those skilled in the art that various modifications or improvements can be made to the above embodiments. It is clear from the description of the scope of the claims that forms with such modifications or improvements can also be included in the technical scope of the present invention.

The execution order of each process such as actions, procedures, steps, and stages in the devices, systems, programs, and methods shown in the claims, the specification, and the drawings is etc., and it should be noted that they can be implemented in any order unless the output of the previous process is used in the subsequent process. Regarding the operation flow in the claims, the specification, and the drawings, even if the description is made using "first," "next," etc. for convenience, it means that it is essential to carry out in this order. not a thing

10 network 100 permission control server 102 permission policy table 110 storage unit 112 personal information storage unit 114 information provision policy storage unit 120 reception unit 130 transmission unit 200 user 210 vehicle 300 mobile communication terminal 400 Information providing destination 510 Item column 520 Information providing destination column 522 Availability information column 524 Condition column 600 UI 610 Detailed condition setting screen 620 Detailed condition setting screen 1200 Computer 1210 Host controller 1212 CPU 1214 RAM , 1216 graphic controller, 1218 display device, 1220 input/output controller, 1222 communication interface, 1224 storage device, 1230 ROM, 1240 input/output chip

Claims (13)

An information transmission device for transmitting personal information of a vehicle driver and including at least one of current vehicle location information, vehicle operation information, and vehicle status information of the vehicle to an information provider,
a receiving unit that receives the personal information together with the vehicle identifier of the vehicle and the personal identifier of the driver from the mobile communication terminal of the driver or the vehicle;
a personal information storage unit that stores a value of the personal information for each of a plurality of items of the personal information;
an information provision policy storage unit that stores an information provision policy, which is a condition for permitting provision of the value of the personal information to the information provider, for each item of the personal information;
In response to the reception of the personal information by the receiving unit, it is determined whether or not the value of the personal information satisfies the conditions included in the information provision policy corresponding to the item of personal information. a transmission unit configured to transmit the value of the personal information together with at least one of the identifier of the vehicle and the identifier of the driver to the information providing destination when determined ;
with
The personal information includes the vehicle current location information,
The information provision policy set in the item of the current vehicle location information specifies the current location of the vehicle as the information provider when the positional relationship between the vehicle's current location and a location related to the information provider satisfies a predetermined condition. A policy that allows you to provide to
The transmitting unit transmits the current vehicle location information to the vehicle identifier and the vehicle only when the location related to the information providing destination is located within a predetermined distance from the current location of the vehicle along the traveling direction of the vehicle. An information transmission device that transmits information together with at least one of the identifiers of the driver to the information provider . 2. The information transmitting apparatus according to claim 1, wherein said information providing policy storage unit stores said information providing policy for each of said plurality of information providing destinations and for each item of said personal information. An information transmission device for transmitting personal information of a vehicle driver and including at least one of current vehicle location information, vehicle operation information, and vehicle status information of the vehicle to an information provider,
a receiving unit that receives the personal information together with the vehicle identifier of the vehicle and the personal identifier of the driver from the mobile communication terminal of the driver or the vehicle;
a personal information storage unit that stores a value of the personal information for each of a plurality of items of the personal information;
an information provision policy storage unit that stores an information provision policy, which is a condition for permitting provision of the value of the personal information to the information provider, for each item of the personal information;
In response to the reception of the personal information by the receiving unit, it is determined whether or not the value of the personal information satisfies the conditions included in the information provision policy corresponding to the item of personal information. a transmission unit configured to transmit the value of the personal information together with at least one of the identifier of the vehicle and the identifier of the driver to the information providing destination when determined;
with
The personal information includes the vehicle current location information,
The information provision policy set in the current vehicle location information item permits the current location of the vehicle to be provided to the information provider only when the vehicle is traveling along a predetermined route. policy and
The transmission unit transmits the vehicle current location information together with at least one of an identifier of the vehicle and an identifier of the driver to the information provider only when the vehicle is traveling on the route. Information transmitter. The information provision policy set in the vehicle current location information item provides the current location information to the information provider, or provides log information indicating the movement history of the vehicle to the information provider. It is a policy that the driver can select whether to
The information transmitting device according to any one of claims 1 to 3 . The information provision policy permits the value of the item corresponding to the information provision policy to be provided to the information provision destination when the driver is a predetermined person, 5. The policy according to any one of claims 1 to 4 , wherein if the person is not a specified person, the value of the item corresponding to the information provision policy is not permitted to be provided to the information provider. Information transmitter. The information provider is at least
1) a matching server that provides a matching platform service that matches a lessor who rents a vehicle with a lessee who rents a vehicle; and 2) includes the lessor,
The information provision policy storage unit stores an information provision policy in which the information provision destination is the matching server and an information provision policy in which the information provision destination is the lender, respectively, for the personal identifier of the driver who is the borrower. death,
The driver can individually set the information provision policy for the matching server and the information provision policy for the lender.
The information transmission device according to any one of claims 1 to 5 . The information provision policy storage unit stores an information provision policy set for items of personal information to be disclosed to an information provider together with the driver's personal identifier, and personal information to be disclosed to the information provider together with the vehicle identifier of the vehicle. storing an information provision policy set for items of
The information transmitting device according to any one of claims 1 to 6 . According to the information provision policy, the personal information is disclosed to an information provider i) in association with the vehicle identifier without being associated with the driver's personal identifier, or ii) in association with the vehicle identifier. or iii) linking with the driver's personal identifier and the vehicle identifier and disclosing it to the information provider. 8. The information transmitting apparatus according to any one of claims 1 to 7 , which is a policy that allows one to be selected from the above options. The information provision policy permits the provision of personal information values corresponding to target personal information items to the information provider only when the physical condition of the driver satisfies a predetermined condition. and
Only when the physical condition of the driver satisfies the condition, the transmission unit transmits the personal information value corresponding to the target personal information item together with at least one of the identifier of the vehicle and the identifier of the driver, 9. The information transmission device according to any one of claims 1 to 8, which transmits to said information provider. The information provision policy permits the provision of personal information values corresponding to target personal information items to the information provider only when the failure state of the preceding vehicle satisfies a predetermined condition. and
Only when the failure state of the vehicle satisfies the condition, the transmission unit transmits the personal information value corresponding to the target personal information item together with at least one of the identifier of the vehicle and the identifier of the driver, 10. The information transmitting device according to any one of claims 1 to 9, which transmits to said information providing destination. According to the information provision policy, only when the remaining amount of gasoline, remaining battery, or remaining amount of engine oil of the vehicle satisfies a predetermined condition, the personal information value corresponding to the target personal information item is set to the personal information value. It is a policy that permits provision of information to the recipient,
The transmission unit transmits a value of personal information corresponding to a target personal information item only when the remaining amount of gasoline, the remaining battery amount, or the remaining amount of engine oil of the vehicle satisfies the condition, and transmits the identifier of the vehicle. 11. The information transmission device according to claim 1, wherein the information is transmitted to the information providing destination together with at least one of the information and the driver's identifier. 12. The information transmitting device according to any one of claims 1 to 11, wherein said transmitting unit transmits said personal information value together with said vehicle identifier and said driver identifier to said information provider. . A program for causing a computer to function as the information transmission device according to any one of claims 1 to 12 .

Images