WO2020188691A1 - In-vehicle device and communication method - Google Patents

In-vehicle device and communication method Download PDF

Info

Publication number
WO2020188691A1
WO2020188691A1 PCT/JP2019/011133 JP2019011133W WO2020188691A1 WO 2020188691 A1 WO2020188691 A1 WO 2020188691A1 JP 2019011133 W JP2019011133 W JP 2019011133W WO 2020188691 A1 WO2020188691 A1 WO 2020188691A1
Authority
WO
WIPO (PCT)
Prior art keywords
vehicle device
information
acquisition unit
server
vehicle
Prior art date
Application number
PCT/JP2019/011133
Other languages
French (fr)
Japanese (ja)
Inventor
良一 柏原
Original Assignee
三菱電機株式会社
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 三菱電機株式会社 filed Critical 三菱電機株式会社
Priority to PCT/JP2019/011133 priority Critical patent/WO2020188691A1/en
Publication of WO2020188691A1 publication Critical patent/WO2020188691A1/en

Links

Images

Classifications

    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61B—DIAGNOSIS; SURGERY; IDENTIFICATION
    • A61B5/00—Measuring for diagnostic purposes; Identification of persons
    • A61B5/117—Identification of persons
    • A61B5/1171—Identification of persons based on the shapes or appearances of their bodies or parts thereof
    • A—HUMAN NECESSITIES
    • A61—MEDICAL OR VETERINARY SCIENCE; HYGIENE
    • A61B—DIAGNOSIS; SURGERY; IDENTIFICATION
    • A61B5/00—Measuring for diagnostic purposes; Identification of persons
    • A61B5/117—Identification of persons
    • A61B5/1171—Identification of persons based on the shapes or appearances of their bodies or parts thereof
    • A61B5/1172—Identification of persons based on the shapes or appearances of their bodies or parts thereof using fingerprinting
    • G—PHYSICS
    • G08—SIGNALLING
    • G08G—TRAFFIC CONTROL SYSTEMS
    • G08G1/00—Traffic control systems for road vehicles
    • G—PHYSICS
    • G08—SIGNALLING
    • G08G—TRAFFIC CONTROL SYSTEMS
    • G08G1/00—Traffic control systems for road vehicles
    • G08G1/09—Arrangements for giving variable traffic instructions
    • G—PHYSICS
    • G08—SIGNALLING
    • G08G—TRAFFIC CONTROL SYSTEMS
    • G08G1/00—Traffic control systems for road vehicles
    • G08G1/16—Anti-collision systems

Definitions

  • the present invention relates to an in-vehicle device capable of communicating with a server and a communication method thereof.
  • Patent Document 1 proposes a technique capable of selecting whether or not to allow other passengers to view the acquired biometric information.
  • Patent Document 2 proposes a technique capable of selecting whether or not to acquire biometric information of an intruder in order to prevent theft of a vehicle.
  • biometric information that can identify individuals as big data on a server and utilize it for IoT (Internet of Things).
  • IoT Internet of Things
  • an object of the present invention is to provide a technique capable of protecting biometric information that can be personally identified.
  • the in-vehicle device is an in-vehicle device mounted on a vehicle and capable of communicating with a server, and at least one type of first biometric information capable of personally identifying a occupant of the vehicle, and the in-vehicle device to the server.
  • the first biometric information acquired by the acquisition unit is transmitted from the in-vehicle device to the server based on the acquisition unit that acquires the transmission permission for transmitting the biometric information and whether or not the acquisition unit has acquired the transmission permission. It is provided with a control unit that controls the operation.
  • control is performed to transmit the acquired first biometric information from the in-vehicle device to the server based on whether or not the transmission permission has been acquired. According to such a configuration, it is possible to protect the first biometric information that can be personally identified.
  • FIG. It is a block diagram which shows the structure of the vehicle-mounted device which concerns on Embodiment 1.
  • FIG. It is a block diagram which shows the structure of the in-vehicle device which concerns on Embodiment 2. It is a flowchart which shows the operation of the in-vehicle device and the server which concerns on Embodiment 2. It is a figure which shows the display example by the in-vehicle device which concerns on Embodiment 2. It is a block diagram which shows the hardware composition of the in-vehicle device which concerns on other modification. It is a block diagram which shows the hardware composition of the in-vehicle device which concerns on other modification.
  • FIG. 1 is a block diagram showing a configuration of an in-vehicle device 1 according to a first embodiment of the present invention.
  • a vehicle on which the in-vehicle device 1 is mounted and which is the subject of attention will be described as “own vehicle”.
  • the in-vehicle device 1 of FIG. 1 includes an acquisition unit 11 and a control unit 12, and can communicate with the server 41 wirelessly or the like.
  • the acquisition unit 11 acquires at least one type of first biometric information.
  • the first biometric information is biometric information that can personally identify a passenger such as a driver of the own vehicle, and includes at least one of the types thereof, for example, face information, fingerprint information, voiceprint information, and pupil information. ..
  • the first biometric information includes face information
  • an image analysis device that acquires face information from a passenger's image captured by a camera, or an interface thereof is applied to the acquisition unit 11.
  • fingerprint information for example, a sensor that detects fingerprint information from the steering wheel of the own vehicle or an interface thereof is applied to the acquisition unit 11.
  • voiceprint information for example, a voice analysis device that acquires voiceprint information from the passenger's voice acquired by a microphone, or an interface thereof is applied to the acquisition unit 11.
  • the first biological information includes the pupil information
  • an image analysis device for acquiring the pupil information from the image of the passenger captured by the camera, or an interface thereof is applied to the acquisition unit 11.
  • the acquisition unit 11 acquires not only the first biometric information but also the transmission permission for transmitting the first biometric information from the in-vehicle device 1 to the server 41.
  • various input devices that accept input operations such as transmission permission from the passenger or an interface thereof are applied to the acquisition unit 11.
  • the control unit 12 controls to transmit the first biometric information acquired by the acquisition unit 11 from the in-vehicle device 1 to the server 41 based on whether or not the acquisition unit 11 has acquired the transmission permission.
  • the in-vehicle device 1 controls to transmit the acquired first biometric information to the server 41 based on whether or not the transmission permission is acquired. .. According to such a configuration, it is possible to prevent the first biometric information capable of personally identifying the passenger from being transmitted to the server 41 without the passenger's knowledge. Therefore, the first biometric information can be prevented from being transmitted to the server 41. Legal protection and use will be possible.
  • FIG. 2 is a block diagram showing a configuration of an in-vehicle device 1 according to a second embodiment of the present invention.
  • the in-vehicle device 1 of FIG. 2 is connected to the server 41 via the network 42. Further, the in-vehicle device 1 is connected to the user interface device 46 by wire or wirelessly.
  • the server 41 includes a storage unit 41a and a sensing processing unit 41b, and is arranged in a remote location including overseas, for example.
  • a storage unit 41a for example, a memory described later is used.
  • the storage unit 41a is provided inside the server 41 in FIG. 2, it may be provided outside the server 41.
  • Information including a plurality of types of first biometric information and a plurality of types of second biometric information is appropriately transmitted from the in-vehicle device 1 or the like to the server 41, and a plurality of types of information transmitted from the in-vehicle device 1 or the like are appropriately transmitted to the storage unit 41a.
  • the first biological information and a plurality of types of second biological information are appropriately stored.
  • the first biometric information is biometric information that can personally identify the passengers of the own vehicle, as in the first embodiment.
  • the second biometric information is biometric information that cannot personally identify the passenger of the own vehicle, and its type is, for example, at least one of physique information, weight information, body temperature information, blood pressure information, and heart rate information.
  • the information stored in the storage unit 41a is not only used in the sensing processing unit 41b of the server 41, but also used in IoT and the like as big data for developing new technologies and new functions such as automatic operation and improving performance. ..
  • the sensing processing unit 41b executes a predetermined process based on the information including the first biometric information transmitted from the in-vehicle device 1.
  • the predetermined process includes a determination process for determining the state of the occupant of the own vehicle based on the information including the first biological information transmitted from the in-vehicle device 1.
  • the sensing processing unit 41b of the own vehicle based on the information including a plurality of types of first and second biological information transmitted from the in-vehicle device 1 and the information stored in the storage unit 41a.
  • a configuration for executing a determination process for determining the passenger status will be described.
  • the result of this determination process indicates, for example, either a normal state, a poor physical condition that is worse than the normal state, or a dead man state (death or unconsciousness) that is worse than the poor physical condition.
  • the user interface device 46 has a notification function for notifying the passenger of various information by at least one of display and voice output, an acquisition function for acquiring various operations from the passenger, and a processing function for processing various information. ..
  • the user interface device 46 will be described as being a display device with a touch panel, but the present invention is not limited to this.
  • the user interface device 46 of FIG. 2 is provided outside the in-vehicle device 1, it may be provided inside the in-vehicle device 1.
  • the user interface device 46 may be a device such as a navigation device fixed to the own vehicle, or a device such as a communication terminal brought into the own vehicle.
  • the in-vehicle device 1 of FIG. 2 includes a biological information acquisition unit 11a, a permission acquisition unit 11b, an external communication control unit 12a, an in-vehicle communication control unit 12b, a permission control unit 12c, a sensing processing unit 12d, and a storage unit 13. It has a DMS (Driver Monitoring System) function that monitors the consciousness and health of passengers.
  • DMS Driver Monitoring System
  • the biological information acquisition unit 11a and the permission acquisition unit 11b are included in the concept of the acquisition unit 11 in FIG.
  • the out-of-vehicle communication control unit 12a, the in-vehicle communication control unit 12b, the permission control unit 12c, and the sensing processing unit 12d are included in the concept of the control unit 12 in FIG.
  • the biometric information acquisition unit 11a acquires a plurality of types of first biometric information and a plurality of types of second biometric information. For example, various sensors for detecting such information or an interface thereof is applied to the biological information acquisition unit 11a for acquiring physique information, weight information, body temperature information, blood pressure information, and heart rate information. In the following description, information including a plurality of types of first and second biometric information acquired by the biometric information acquisition unit 11a may be collectively referred to as "acquired information".
  • the permission acquisition unit 11b acquires a transmission permission for transmitting the first biometric information from the in-vehicle device 1 to the server 41, as in the first embodiment. Further, the permission acquisition unit 11b has a storage permission for storing the first biometric information in the storage unit 41a on the server 41 side (hereinafter referred to as “server side storage permission”) and a storage unit on the own vehicle side for the first biometric information. Acquire the memory permission (hereinafter referred to as "vehicle side memory permission”) for storing in 13.
  • the out-of-vehicle communication control unit 12a communicates with the server 41 via the network 42 under the control of the permission control unit 12c. Through this communication, the permission control unit 12c can transmit various information to the server 41 and cause the server 41 to execute various processes.
  • the in-vehicle communication control unit 12b communicates with the user interface device 46 under the control of the permission control unit 12c. Through this communication, the permission control unit 12c allows the user interface device 46 to notify the passenger of various information, and the permission acquisition unit 11b can acquire the transmission permission from the passenger.
  • the in-vehicle communication control unit 12b for example, a communication device using an in-vehicle LAN (Local Area Network) is used.
  • the permission control unit 12c performs various controls based on the various permits acquired by the permission acquisition unit 11b.
  • the permission control unit 12c transfers the acquired information acquired by the biological information acquisition unit 11a from the vehicle-mounted communication control unit 12a of the in-vehicle device 1. Send to 41.
  • the permission control unit 12c causes the sensing processing unit 41b on the server 41 side to execute the determination process based on the acquired information transmitted to the server 41. As a result, the state of the passengers of the own vehicle is determined.
  • the permission control unit 12c stores the acquisition information transmitted from the in-vehicle device 1 to the server 41 on the server 41 side when the permission acquisition unit 11b acquires the transmission permission and the server-side storage permission.
  • a plurality of types of first and second biometric information acquired by the biometric information acquisition unit 11a and transmitted from the vehicle-mounted device 1 to the server 41 are stored in the storage unit 41a.
  • the permission control unit 12c causes the sensing processing unit 12d on the own vehicle side to execute a determination process based on the acquired information when the permission acquisition unit 11b does not acquire the transmission permission.
  • the permission control unit 12c stores the acquired information on the vehicle side when the permission acquisition unit 11b acquires the vehicle side storage permission. As a result, a plurality of types of first and second biometric information acquired by the biometric information acquisition unit 11a are stored in the storage unit 13.
  • the storage unit 13 stores various information.
  • a memory described later is used.
  • the storage unit 13 is provided inside the vehicle-mounted device 1 in FIG. 2, it may be provided outside the vehicle-mounted device 1.
  • the sensing processing unit 12d on the own vehicle side determines the state of the occupant of the own vehicle based on the information including the first biological information, similarly to the sensing processing unit 41b on the server 41 side described above. Judgment Judgment processing is executed.
  • the sensing processing unit 12d determines the state of the occupant of the own vehicle based on the acquired information acquired by the biological information acquisition unit 11a and the information stored in the storage unit 13. Will be described as executing.
  • the amount of information stored in the storage unit 13 of the vehicle-mounted device 1 is smaller than the amount of information stored in the storage unit 41a of the server 41. Therefore, it is assumed that the determination process of the sensing processing unit 12d of the in-vehicle device 1 is limited to the determination processing of the sensing processing unit 41b of the server 41, and the accuracy of the determination processing is lower than that of the sensing processing unit 41b.
  • FIG. 3 is a flowchart showing the operation of the in-vehicle device 1 and the server 41 according to the second embodiment. This operation is performed, for example, when the biological information acquisition unit 11a acquires the acquired information.
  • step S1 the permission control unit 12c notifies the user interface device 46 that the passenger is urged to input whether or not to allow transmission.
  • FIG. 4 is a diagram showing a display example of a screen prompting the passenger to input whether or not to allow transmission as an example of the notification. As shown in FIG. 4, on this screen, confirmation items in accordance with the personal information protection laws and regulations of each country, such as the purpose of use for transmitting acquired information, a permission button 46a for permitting transmission, and transmission permission are displayed. The prohibition button 46b for prohibiting the above is displayed.
  • the permission control unit 12c determines whether or not the permission acquisition unit 11b has acquired the transmission permission. For example, when an input operation is performed on the permission button 46a of FIG. 4, it is determined that the permission acquisition unit 11b has acquired the transmission permission, and the process proceeds to step S2. Further, for example, when an input operation is performed on the prohibition button 46b of FIG. 4, it is determined that the permission acquisition unit 11b has not acquired the transmission permission, and the process proceeds to step S10.
  • step S2 the permission control unit 12c notifies the user interface device 46 that the passenger is urged to input whether or not the vehicle side memory permission is permitted. As a result, for example, the same screen as in step S1 (FIG. 4) is displayed.
  • step S2 the permission control unit 12c determines whether or not the permission acquisition unit 11b has acquired the vehicle-side storage permission, as in step S1. If it is determined that the permission acquisition unit 11b has acquired the vehicle-side storage permission, the process proceeds to step S3, and if it is determined that the permission acquisition unit 11b has not acquired the vehicle-side storage permission, the process proceeds to step S4. Proceed to.
  • step S3 the permission control unit 12c stores the acquired information in the storage unit 13. After that, the process proceeds to step S4.
  • step S4 the permission control unit 12c notifies the user interface device 46 that the passenger is urged to input whether or not to allow storage on the server side. As a result, for example, the same screen as in step S1 (FIG. 4) is displayed.
  • step S4 the permission control unit 12c determines whether or not the permission acquisition unit 11b has acquired the server-side storage permission, as in step S1. If it is determined that the permission acquisition unit 11b has acquired the server-side storage permission, the process proceeds to step S5, and if it is determined that the permission acquisition unit 11b has not acquired the server-side storage permission, the process proceeds to step S7. Proceed to.
  • step S5 the permission control unit 12c transmits the acquired information from the in-vehicle device 1 to the server 41.
  • step S6 the server 41 stores the acquired information in the storage unit 41a under the control of the permission control unit 12c.
  • the acquired information stored in the storage unit 41a is used within the range notified by the user interface device 46 in step S4.
  • the sensing processing unit 41b performs a determination process of determining the state of the occupant of the own vehicle based on the acquired information and the information stored in the storage unit 41a under the control of the permission control unit 12c. Execute. After that, the process proceeds to step S9.
  • step S7 the permission control unit 12c transmits the acquired information from the in-vehicle device 1 to the server 41.
  • the sensing processing unit 41b executes a determination process for determining the state of the occupant of the own vehicle in the same manner as in step S6, but unlike step S6, the acquired information is not stored in the storage unit 41a. After that, the process proceeds to step S9.
  • step S9 the server 41 transmits the result of the determination process of step S6 or step S8 to the in-vehicle device 1.
  • the transmitted result of the determination process is used for controlling the automatic driving of the own vehicle. After that, the operation of FIG. 3 ends.
  • step S10 the permission control unit 12c notifies the user interface device 46 that the passenger is urged to input whether or not the vehicle side memory permission is permitted. As a result, for example, the same screen as in step S1 (FIG. 4) is displayed.
  • step S10 the permission control unit 12c determines whether or not the permission acquisition unit 11b has acquired the vehicle-side storage permission, as in step S1. If it is determined that the permission acquisition unit 11b has acquired the vehicle-side storage permission, the process proceeds to step S11, and if it is determined that the permission acquisition unit 11b has not acquired the vehicle-side storage permission, the process proceeds to step S12. Proceed to.
  • step S11 the permission control unit 12c stores the acquired information in the storage unit 13. After that, the process proceeds to step S12.
  • step S12 the permission control unit 12c notifies the user interface device 46 that the determination process performed by the sensing function on the vehicle side may be more limited than the determination process performed by the sensing function on the server 41 side. Let me.
  • step S12 the sensing processing unit 12d determines the state of the occupant of the own vehicle based on the acquired information and the information stored in the storage unit 13 under the control of the permission control unit 12c. Execute the process. The result of the determination process is used for controlling the automatic driving of the own vehicle. After that, the operation of FIG. 3 ends.
  • step S4 may be performed at the same timing as step S2.
  • the in-vehicle device 1 when the transmission permission is obtained, the information including the first biometric information is transmitted from the in-vehicle device 1 to the server 41 and based on the information.
  • the determination process is executed on the server 41 side. According to such a configuration, when the transmission of the information is permitted, the state of the occupant can be determined with relatively high accuracy, and as a result, for example, appropriate automatic driving can be realized. ..
  • the own vehicle side is made to execute the determination process based on the information including the first biometric information. According to such a configuration, even if the transmission of the information is not permitted, the state of the occupant can be determined with a certain degree of accuracy, and as a result, for example, a certain degree of automatic driving is realized. be able to.
  • the server-side storage permission when the server-side storage permission is acquired, the information including the first biometric information is stored in the server 41 side, and when the vehicle-side storage permission is acquired, the first biometric information is stored. Store the included information on the own vehicle side. According to such a configuration, it is possible to prevent the first biometric information that can be personally identified from being stored on the server 41 side and the own vehicle side without the passenger's knowledge, and thus the first biometric information. Will be legally protected and used.
  • the transmission and storage of the second biometric information is performed in accordance with the transmission and storage of the first biometric information, but the present invention is not limited to this.
  • the information transmitted from the in-vehicle device 1 to the server 41 may include the first biometric information but may not include the second biometric information. Then, the sensing processing unit 41b may execute a determination process for determining the state of the passenger of the own vehicle based on the information.
  • the permission acquisition unit 11b has a server-side storage permission for selectively storing a plurality of types of first biometric information and a plurality of types of second biometric information on the server 41 side (hereinafter referred to as "selective storage permission"). (Note) may be obtained.
  • selective storage permission for example, when either "OK” or "NG” is selected by the passenger for each of the types (items) such as face information, fingerprint information, physique information, weight information, body temperature information, and heart rate information.
  • the permission acquisition unit 11b may acquire the selection storage permission based on the selection result.
  • the user interface device 46 is displayed and audio output is performed so that the passenger can select either "OK” or "NG” for each type (item). May be good.
  • the permission control unit 12c has a plurality of types of first biometric information and a plurality of types of first biometric information acquired by the biometric information acquisition unit 11a when the permission acquisition unit 11b acquires the transmission permission and the selective storage permission.
  • 2 Biological information may be transmitted from the in-vehicle device 1 to the server 41. Then, the permission control unit 12c may selectively store the transmitted plurality of types of first biometric information and the plurality of types of second biometric information in the storage unit 41a on the server 41 side based on the selective storage permission. ..
  • step S12 of FIG. 3 of the second embodiment when the result of the determination process executed by the sensing processing unit 12d of the in-vehicle device 1 is a deadman state (predetermined result), the passenger and the own vehicle In order to protect the lives of people in the vicinity, it is preferable that an emergency notification is given to the outside of the in-vehicle device 1. Therefore, in such a case, the permission control unit 12c may transmit the acquisition information including the first biometric information to the server 41 regardless of whether or not the permission acquisition unit 11b has acquired the transmission permission.
  • the permission control unit 12c obtains the first biometric information included in the acquisition information. It may not be stored in the server 41 side (storage unit 41a). Further, in this case, the permission control unit 12c may notify the user interface device 46 that the acquired information is transmitted to the server 41 but is not stored in the server 41.
  • the acquisition unit 11 and the control unit 12 of FIG. 1 described above are hereinafter referred to as “acquisition unit 11 and the like”.
  • the acquisition unit 11 and the like are realized by the processing circuit 81 shown in FIG. That is, the processing circuit 81 acquires at least one type of first biometric information capable of personally identifying the passenger of the own vehicle and a transmission permission for transmitting the first biometric information from the in-vehicle device 1 to the server 41.
  • Dedicated hardware may be applied to the processing circuit 81, or a processor that executes a program stored in the memory may be applied.
  • the processor include a central processing unit, a processing unit, an arithmetic unit, a microprocessor, a microcomputer, a DSP (Digital Signal Processor), and the like.
  • the processing circuit 81 may be, for example, a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, an ASIC (Application Specific Integrated Circuit), or an FPGA (Field Programmable Gate). Array), or a combination of these.
  • Each of the functions of each part such as the acquisition unit 11 may be realized by a circuit in which the processing circuits are dispersed, or the functions of each part may be collectively realized by one processing circuit.
  • the processing circuit 81 When the processing circuit 81 is a processor, the functions of the acquisition unit 11 and the like are realized by combining with software and the like.
  • the software and the like correspond to, for example, software, firmware, or software and firmware.
  • Software and the like are described as programs and stored in memory.
  • the processor 82 applied to the processing circuit 81 realizes the functions of each part by reading and executing the program stored in the memory 83. That is, when the in-vehicle device 1 is executed by the processing circuit 81, at least one kind of first biometric information capable of personally identifying the passenger of the own vehicle and the first biometric information from the in-vehicle device 1 to the server 41 are transmitted.
  • the result is a step of acquiring a transmission permission for transmission and a step of controlling transmission of the acquired first biometric information from the in-vehicle device 1 to the server 41 based on whether or not the transmission permission has been acquired.
  • a memory 83 for storing a program to be executed is provided. In other words, it can be said that this program causes the computer to execute the procedure or method of the acquisition unit 11 or the like.
  • the memory 83 is a non-volatile or non-volatile memory such as a RAM (RandomAccessMemory), a ROM (ReadOnlyMemory), a flash memory, an EPROM (ErasableProgrammableReadOnlyMemory), and an EEPROM (ElectricallyErasableProgrammableReadOnlyMemory). Volatile semiconductor memory, HDD (Hard Disk Drive), magnetic disk, flexible disk, optical disk, compact disk, mini disk, DVD (Digital Versatile Disc), its drive device, etc., or any storage medium that will be used in the future. You may.
  • each function of the acquisition unit 11 and the like is realized by either hardware or software has been described above.
  • the present invention is not limited to this, and a configuration may be configured in which a part of the acquisition unit 11 or the like is realized by dedicated hardware and another part is realized by software or the like.
  • the acquisition unit 11 realizes its function by a processing circuit 81 as dedicated hardware, an interface, a receiver, and the like, and other than that, the processing circuit 81 as a processor 82 reads a program stored in the memory 83. It is possible to realize the function by executing it.
  • the processing circuit 81 can realize each of the above-mentioned functions by hardware, software, or a combination thereof.
  • the in-vehicle device 1 described above includes at least one of a vehicle device such as a PND (Portable Navigation Device) and a navigation device, a communication terminal including a mobile terminal such as a mobile phone, a smartphone and a tablet, and a vehicle device and a communication terminal. It can also be applied to an in-vehicle system constructed as a system by appropriately combining the functions of a separately installed application and a server. In this case, each function or each component of the in-vehicle device 1 described above may be dispersedly arranged in each device for constructing the system, or may be centrally arranged in any of the devices. ..
  • each embodiment and each modification can be freely combined, and each embodiment and each modification can be appropriately modified or omitted.
  • 1 in-vehicle device 11 acquisition unit, 12 control unit, 41 server.

Landscapes

  • Health & Medical Sciences (AREA)
  • Life Sciences & Earth Sciences (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Heart & Thoracic Surgery (AREA)
  • Pathology (AREA)
  • Engineering & Computer Science (AREA)
  • Biomedical Technology (AREA)
  • Biophysics (AREA)
  • Medical Informatics (AREA)
  • Molecular Biology (AREA)
  • Surgery (AREA)
  • Animal Behavior & Ethology (AREA)
  • General Health & Medical Sciences (AREA)
  • Public Health (AREA)
  • Veterinary Medicine (AREA)
  • Traffic Control Systems (AREA)

Abstract

The purpose of the present invention is to provide art capable of protecting biological information that can identify a person. An in-vehicle device 1 is an in-vehicle device that is mounted in a vehicle and that can communicate with a server, and is provided with: an acquisition unit which acquires at least one type of first biological information capable of identifying an occupant riding in a vehicle, and also acquires transmission permission for transmitting the first biological information from the in-vehicle device to the server; and a control unit which, depending on whether or not the acquisition unit has acquired the transmission permission, performs control to transmit the first biological information acquired by the acquisition unit to the server from the in-vehicle device.

Description

車載機器及び通信方法In-vehicle equipment and communication method
　本発明は、サーバと通信可能な車載機器、及び、その通信方法に関する。 The present invention relates to an in-vehicle device capable of communicating with a server and a communication method thereof.
　車両に搭載される車載機器において、当該車両の搭乗者から生体情報を取得する技術が提案されている。例えば特許文献１では、取得された生体情報の閲覧を他の搭乗者に許可するか否かを選択可能な技術が提案されている。また例えば特許文献２では、車両の盗難防止のために侵入者の生体情報を取得するか否かを選択可能な技術が提案されている。 For in-vehicle devices mounted on vehicles, a technology for acquiring biometric information from the passengers of the vehicle has been proposed. For example, Patent Document 1 proposes a technique capable of selecting whether or not to allow other passengers to view the acquired biometric information. Further, for example, Patent Document 2 proposes a technique capable of selecting whether or not to acquire biometric information of an intruder in order to prevent theft of a vehicle.
特開２０１７－０４５２４２号公報Japanese Unexamined Patent Publication No. 2017-405242 特開２００４－１１４９４０号公報Japanese Unexamined Patent Publication No. 2004-114940
　さて、自動運転などの新技術を今後発展させていくためには、個人を特定できるような生体情報などをビッグデータとしてサーバに集約してＩｏＴ（Internet of Things）に活用することが好ましい。しかしながら、サーバにそのような生体情報を送信すると、昨今、全世界的に法規などによって厳格化されている個人情報の保護が損なわれてしまうという問題があった。 By the way, in order to develop new technologies such as autonomous driving in the future, it is preferable to collect biometric information that can identify individuals as big data on a server and utilize it for IoT (Internet of Things). However, when such biometric information is transmitted to a server, there is a problem that the protection of personal information, which is stricter by laws and regulations worldwide, is impaired in recent years.
　そこで、本発明は、上記のような問題点を鑑みてなされたものであり、個人特定が可能な生体情報の保護が可能な技術を提供することを目的とする。 Therefore, the present invention has been made in view of the above problems, and an object of the present invention is to provide a technique capable of protecting biometric information that can be personally identified.
　本発明に係る車載機器は、車両に搭載され、サーバと通信可能な車載機器であって、車両の搭乗者の個人特定が可能な少なくとも１種類の第１生体情報と、車載機器からサーバに第１生体情報を送信するための送信許可とを取得する取得部と、取得部が送信許可を取得したか否かに基づいて、取得部で取得された第１生体情報を車載機器からサーバに送信する制御を行う制御部とを備える。 The in-vehicle device according to the present invention is an in-vehicle device mounted on a vehicle and capable of communicating with a server, and at least one type of first biometric information capable of personally identifying a occupant of the vehicle, and the in-vehicle device to the server. 1 The first biometric information acquired by the acquisition unit is transmitted from the in-vehicle device to the server based on the acquisition unit that acquires the transmission permission for transmitting the biometric information and whether or not the acquisition unit has acquired the transmission permission. It is provided with a control unit that controls the operation.
　本発明によれば、送信許可が取得されたか否かに基づいて、取得された第１生体情報を車載機器からサーバに送信する制御を行う。このような構成によれば、個人特定が可能な第１生体情報を保護することができる。 According to the present invention, control is performed to transmit the acquired first biometric information from the in-vehicle device to the server based on whether or not the transmission permission has been acquired. According to such a configuration, it is possible to protect the first biometric information that can be personally identified.
　本発明の目的、特徴、態様及び利点は、以下の詳細な説明と添付図面とによって、より明白となる。 The object, feature, aspect and advantage of the present invention will be made clearer by the following detailed description and accompanying drawings.
実施の形態１に係る車載機器の構成を示すブロック図である。It is a block diagram which shows the structure of the vehicle-mounted device which concerns on Embodiment 1. FIG. 実施の形態２に係る車載機器の構成を示すブロック図である。It is a block diagram which shows the structure of the in-vehicle device which concerns on Embodiment 2. 実施の形態２に係る車載機器及びサーバの動作を示すフローチャートである。It is a flowchart which shows the operation of the in-vehicle device and the server which concerns on Embodiment 2. 実施の形態２に係る車載機器による表示例を示す図である。It is a figure which shows the display example by the in-vehicle device which concerns on Embodiment 2. その他の変形例に係る車載機器のハードウェア構成を示すブロック図である。It is a block diagram which shows the hardware composition of the in-vehicle device which concerns on other modification. その他の変形例に係る車載機器のハードウェア構成を示すブロック図である。It is a block diagram which shows the hardware composition of the in-vehicle device which concerns on other modification.
　＜実施の形態１＞
　図１は、本発明の実施の形態１に係る車載機器１の構成を示すブロック図である。以下、車載機器１が搭載され、着目の対象となる車両を「自車両」と記載して説明する。 <Embodiment 1>
FIG. 1 is a block diagram showing a configuration of an in-vehicle device 1 according to a first embodiment of the present invention. Hereinafter, a vehicle on which the in-vehicle device 1 is mounted and which is the subject of attention will be described as “own vehicle”.
　図１の車載機器１は、取得部１１と、制御部１２とを備えており、サーバ４１と無線などによって通信可能となっている。 The in-vehicle device 1 of FIG. 1 includes an acquisition unit 11 and a control unit 12, and can communicate with the server 41 wirelessly or the like.
　取得部１１は、少なくとも１種類の第１生体情報を取得する。第１生体情報は、自車両の運転者などの搭乗者の個人特定が可能な生体情報であり、その種類として例えば、顔情報、指紋情報、声紋情報、及び、瞳孔情報の少なくとも１つを含む。 The acquisition unit 11 acquires at least one type of first biometric information. The first biometric information is biometric information that can personally identify a passenger such as a driver of the own vehicle, and includes at least one of the types thereof, for example, face information, fingerprint information, voiceprint information, and pupil information. ..
　第１生体情報が顔情報を含む場合には、取得部１１には、例えば、カメラで撮像された搭乗者の画像から顔情報を取得する画像解析装置、またはそのインターフェースが適用される。第１生体情報が指紋情報を含む場合には、取得部１１には、例えば、自車両のハンドルから指紋情報を検出するセンサ、またはそのインターフェースが適用される。第１生体情報が声紋情報を含む場合には、取得部１１には、例えば、マイクで取得された搭乗者の音声から声紋情報を取得する音声解析装置、またはそのインターフェースが適用される。第１生体情報が瞳孔情報を含む場合には、取得部１１には、例えば、カメラで撮像された搭乗者の画像から瞳孔情報を取得する画像解析装置、またはそのインターフェースが適用される。 When the first biometric information includes face information, for example, an image analysis device that acquires face information from a passenger's image captured by a camera, or an interface thereof is applied to the acquisition unit 11. When the first biometric information includes fingerprint information, for example, a sensor that detects fingerprint information from the steering wheel of the own vehicle or an interface thereof is applied to the acquisition unit 11. When the first biometric information includes voiceprint information, for example, a voice analysis device that acquires voiceprint information from the passenger's voice acquired by a microphone, or an interface thereof is applied to the acquisition unit 11. When the first biological information includes the pupil information, for example, an image analysis device for acquiring the pupil information from the image of the passenger captured by the camera, or an interface thereof is applied to the acquisition unit 11.
　取得部１１は、第１生体情報だけでなく、車載機器１からサーバ４１に第１生体情報を送信するための送信許可を取得する。取得部１１には、例えば、搭乗者から送信許可などの入力操作を受け付ける各種入力装置、またはそのインターフェースが適用される。 The acquisition unit 11 acquires not only the first biometric information but also the transmission permission for transmitting the first biometric information from the in-vehicle device 1 to the server 41. For example, various input devices that accept input operations such as transmission permission from the passenger or an interface thereof are applied to the acquisition unit 11.
　制御部１２は、取得部１１が送信許可を取得したか否かに基づいて、取得部１１で取得された第１生体情報を車載機器１からサーバ４１に送信する制御を行う。 The control unit 12 controls to transmit the first biometric information acquired by the acquisition unit 11 from the in-vehicle device 1 to the server 41 based on whether or not the acquisition unit 11 has acquired the transmission permission.
　＜実施の形態１のまとめ＞
　以上のような本実施の形態１に係る車載機器１によれば、送信許可を取得したか否かに基づいて、取得された第１生体情報を車載機器１からサーバ４１に送信する制御を行う。このような構成によれば、搭乗者が知らずに、当該搭乗者の個人特定が可能な第１生体情報がサーバ４１に送信されてしまうことを抑制することができるので、当該第１生体情報の合法的な保護及び利用が可能となる。 <Summary of Embodiment 1>
According to the in-vehicle device 1 according to the first embodiment as described above, the in-vehicle device 1 controls to transmit the acquired first biometric information to the server 41 based on whether or not the transmission permission is acquired. .. According to such a configuration, it is possible to prevent the first biometric information capable of personally identifying the passenger from being transmitted to the server 41 without the passenger's knowledge. Therefore, the first biometric information can be prevented from being transmitted to the server 41. Legal protection and use will be possible.
　＜実施の形態２＞
　図２は、本発明の実施の形態２に係る車載機器１の構成を示すブロック図である。図２の車載機器１は、ネットワーク４２を介してサーバ４１と接続されている。また、車載機器１は、有線または無線によってユーザインターフェース機器４６と接続されている。 <Embodiment 2>
FIG. 2 is a block diagram showing a configuration of an in-vehicle device 1 according to a second embodiment of the present invention. The in-vehicle device 1 of FIG. 2 is connected to the server 41 via the network 42. Further, the in-vehicle device 1 is connected to the user interface device 46 by wire or wirelessly.
　＜サーバ＞
　サーバ４１は、記憶部４１ａと、センシング処理部４１ｂとを備えており、例えば海外を含む遠隔地に配設される。記憶部４１ａには、例えば、後述するメモリなどが用いられる。なお図２では、記憶部４１ａは、サーバ４１内部に設けられているが、サーバ４１外部に設けられてもよい。 <Server>
The server 41 includes a storage unit 41a and a sensing processing unit 41b, and is arranged in a remote location including overseas, for example. For the storage unit 41a, for example, a memory described later is used. Although the storage unit 41a is provided inside the server 41 in FIG. 2, it may be provided outside the server 41.
　サーバ４１には、車載機器１などから複数種類の第１生体情報及び複数種類の第２生体情報を含む情報が適宜送信され、記憶部４１ａには、車載機器１などから送信された複数種類の第１生体情報及び複数種類の第２生体情報などが適宜記憶される。第１生体情報は、実施の形態１と同様、自車両の搭乗者の個人特定が可能な生体情報である。一方、第２生体情報は、自車両の搭乗者の個人特定ができない生体情報であり、その種類として例えば、体格情報、体重情報、体温情報、血圧情報、及び、心拍数情報の少なくとも１つを含む。記憶部４１ａに記憶された情報は、サーバ４１のセンシング処理部４１ｂに用いられるだけでなく、例えば自動運転などの新技術及び新機能の開発並びに性能向上のためのビッグデータとしてＩｏＴなどに用いられる。 Information including a plurality of types of first biometric information and a plurality of types of second biometric information is appropriately transmitted from the in-vehicle device 1 or the like to the server 41, and a plurality of types of information transmitted from the in-vehicle device 1 or the like are appropriately transmitted to the storage unit 41a. The first biological information and a plurality of types of second biological information are appropriately stored. The first biometric information is biometric information that can personally identify the passengers of the own vehicle, as in the first embodiment. On the other hand, the second biometric information is biometric information that cannot personally identify the passenger of the own vehicle, and its type is, for example, at least one of physique information, weight information, body temperature information, blood pressure information, and heart rate information. Including. The information stored in the storage unit 41a is not only used in the sensing processing unit 41b of the server 41, but also used in IoT and the like as big data for developing new technologies and new functions such as automatic operation and improving performance. ..
　センシング処理部４１ｂは、車載機器１から送信された第１生体情報を含む情報に基づいて、予め定められた処理を実行する。本実施の形態２では、予め定められた処理は、車載機器１から送信された第１生体情報を含む情報に基づいて自車両の搭乗者の状態を判定する判定処理を含む。 The sensing processing unit 41b executes a predetermined process based on the information including the first biometric information transmitted from the in-vehicle device 1. In the second embodiment, the predetermined process includes a determination process for determining the state of the occupant of the own vehicle based on the information including the first biological information transmitted from the in-vehicle device 1.
　以下ではその一例として、センシング処理部４１ｂは、車載機器１から送信された複数種類の第１及び第２生体情報を含む情報と、記憶部４１ａに記憶された情報とに基づいて、自車両の搭乗者の状態を判定する判定処理を実行する構成について説明する。この判定処理の結果は、例えば、正常状態、正常状態よりも体調が悪い体調不良状態、及び、体調不良状態よりも体調が悪いデッドマン状態（死亡または意識不明）のいずれかを示す。 In the following, as an example thereof, the sensing processing unit 41b of the own vehicle based on the information including a plurality of types of first and second biological information transmitted from the in-vehicle device 1 and the information stored in the storage unit 41a. A configuration for executing a determination process for determining the passenger status will be described. The result of this determination process indicates, for example, either a normal state, a poor physical condition that is worse than the normal state, or a dead man state (death or unconsciousness) that is worse than the poor physical condition.
　＜ユーザインターフェース機器＞
　ユーザインターフェース機器４６は、表示及び音声出力の少なくとも１つによって各種情報を搭乗者に通知する通知機能と、搭乗者からの各種操作を取得する取得機能と、各種情報を処理する処理機能とを有する。以下、ユーザインターフェース機器４６はタッチパネル付き表示装置であるものとして説明するが、これに限ったものではない。また、図２のユーザインターフェース機器４６は、車載機器１外部に設けられているが、車載機器１内部に設けられてもよい。加えて、ユーザインターフェース機器４６は、自車両に固定されたナビゲーション装置などの機器であってもよいし、自車両に持ち込まれた通信端末などの機器であってもよい。 <User interface device>
The user interface device 46 has a notification function for notifying the passenger of various information by at least one of display and voice output, an acquisition function for acquiring various operations from the passenger, and a processing function for processing various information. .. Hereinafter, the user interface device 46 will be described as being a display device with a touch panel, but the present invention is not limited to this. Further, although the user interface device 46 of FIG. 2 is provided outside the in-vehicle device 1, it may be provided inside the in-vehicle device 1. In addition, the user interface device 46 may be a device such as a navigation device fixed to the own vehicle, or a device such as a communication terminal brought into the own vehicle.
　＜車載機器＞
　図２の車載機器１は、生体情報取得部１１ａと、許可取得部１１ｂと、車外通信制御部１２ａと、車内通信制御部１２ｂと、許可制御部１２ｃと、センシング処理部１２ｄと、記憶部１３とを備えており、搭乗者の意識状態及び健康状態をモニタするＤＭＳ（Driver Monitoring System）機能を有している。ここで、生体情報取得部１１ａ、及び、許可取得部１１ｂは、図１の取得部１１の概念に含まれる。また、車外通信制御部１２ａ、車内通信制御部１２ｂ、許可制御部１２ｃ、及び、センシング処理部１２ｄは、図１の制御部１２の概念に含まれる。 <In-vehicle device>
The in-vehicle device 1 of FIG. 2 includes a biological information acquisition unit 11a, a permission acquisition unit 11b, an external communication control unit 12a, an in-vehicle communication control unit 12b, a permission control unit 12c, a sensing processing unit 12d, and a storage unit 13. It has a DMS (Driver Monitoring System) function that monitors the consciousness and health of passengers. Here, the biological information acquisition unit 11a and the permission acquisition unit 11b are included in the concept of the acquisition unit 11 in FIG. Further, the out-of-vehicle communication control unit 12a, the in-vehicle communication control unit 12b, the permission control unit 12c, and the sensing processing unit 12d are included in the concept of the control unit 12 in FIG.
　生体情報取得部１１ａは、複数種類の第１生体情報と、複数種類の第２生体情報とを取得する。体格情報、体重情報、体温情報、血圧情報、及び、心拍数情報を取得する生体情報取得部１１ａには、例えばこれら情報を検出する各種センサ、またはそのインターフェースが適用される。以下の説明では、生体情報取得部１１ａで取得された複数種類の第１及び第２生体情報を含む情報をまとめて「取得情報」と記すこともある。 The biometric information acquisition unit 11a acquires a plurality of types of first biometric information and a plurality of types of second biometric information. For example, various sensors for detecting such information or an interface thereof is applied to the biological information acquisition unit 11a for acquiring physique information, weight information, body temperature information, blood pressure information, and heart rate information. In the following description, information including a plurality of types of first and second biometric information acquired by the biometric information acquisition unit 11a may be collectively referred to as "acquired information".
　許可取得部１１ｂは、実施の形態１と同様に、車載機器１からサーバ４１に第１生体情報を送信するための送信許可を取得する。また許可取得部１１ｂは、第１生体情報をサーバ４１側の記憶部４１ａに記憶するための記憶許可（以下「サーバ側記憶許可」と記す）と、第１生体情報を自車両側の記憶部１３で記憶するための記憶許可（以下「車両側記憶許可」と記す）とを取得する。 The permission acquisition unit 11b acquires a transmission permission for transmitting the first biometric information from the in-vehicle device 1 to the server 41, as in the first embodiment. Further, the permission acquisition unit 11b has a storage permission for storing the first biometric information in the storage unit 41a on the server 41 side (hereinafter referred to as “server side storage permission”) and a storage unit on the own vehicle side for the first biometric information. Acquire the memory permission (hereinafter referred to as "vehicle side memory permission") for storing in 13.
　車外通信制御部１２ａは、許可制御部１２ｃの制御によって、サーバ４１とネットワーク４２を介して通信を行う。この通信により、許可制御部１２ｃは、各種情報をサーバ４１に送信したり、サーバ４１に各種処理を実行させたりすることが可能となっている。 The out-of-vehicle communication control unit 12a communicates with the server 41 via the network 42 under the control of the permission control unit 12c. Through this communication, the permission control unit 12c can transmit various information to the server 41 and cause the server 41 to execute various processes.
　車内通信制御部１２ｂは、許可制御部１２ｃの制御によって、ユーザインターフェース機器４６と通信を行う。この通信により、許可制御部１２ｃは、ユーザインターフェース機器４６に各種情報を搭乗者に通知させること、許可取得部１１ｂは、搭乗者からの送信許可を取得することが可能となっている。なお、車内通信制御部１２ｂには、例えば、車両内ＬＡＮ（Local Area Network）を用いる通信装置などが用いられる。 The in-vehicle communication control unit 12b communicates with the user interface device 46 under the control of the permission control unit 12c. Through this communication, the permission control unit 12c allows the user interface device 46 to notify the passenger of various information, and the permission acquisition unit 11b can acquire the transmission permission from the passenger. For the in-vehicle communication control unit 12b, for example, a communication device using an in-vehicle LAN (Local Area Network) is used.
　許可制御部１２ｃは、許可取得部１１ｂで取得された各種許可に基づいて各種制御を行う。 The permission control unit 12c performs various controls based on the various permits acquired by the permission acquisition unit 11b.
　本実施の形態２では、許可制御部１２ｃは、許可取得部１１ｂが送信許可を取得した場合に、生体情報取得部１１ａで取得された取得情報を、車載機器１の車外通信制御部１２ａからサーバ４１に送信する。この際、許可制御部１２ｃは、サーバ４１に送信された取得情報に基づく判定処理を、サーバ４１側のセンシング処理部４１ｂに実行させる。これにより、自車両の搭乗者の状態が判定される。 In the second embodiment, when the permission acquisition unit 11b acquires the transmission permission, the permission control unit 12c transfers the acquired information acquired by the biological information acquisition unit 11a from the vehicle-mounted communication control unit 12a of the in-vehicle device 1. Send to 41. At this time, the permission control unit 12c causes the sensing processing unit 41b on the server 41 side to execute the determination process based on the acquired information transmitted to the server 41. As a result, the state of the passengers of the own vehicle is determined.
　また、許可制御部１２ｃは、許可取得部１１ｂが送信許可及びサーバ側記憶許可を取得した場合に、車載機器１からサーバ４１に送信された取得情報をサーバ４１側に記憶させる。これにより、生体情報取得部１１ａで取得され、車載機器１からサーバ４１に送信された複数種類の第１及び第２生体情報が、記憶部４１ａに記憶される。 Further, the permission control unit 12c stores the acquisition information transmitted from the in-vehicle device 1 to the server 41 on the server 41 side when the permission acquisition unit 11b acquires the transmission permission and the server-side storage permission. As a result, a plurality of types of first and second biometric information acquired by the biometric information acquisition unit 11a and transmitted from the vehicle-mounted device 1 to the server 41 are stored in the storage unit 41a.
　加えて、許可制御部１２ｃは、許可取得部１１ｂが送信許可を取得しなかった場合に、取得情報に基づく判定処理を、自車両側のセンシング処理部１２ｄに実行させる。 In addition, the permission control unit 12c causes the sensing processing unit 12d on the own vehicle side to execute a determination process based on the acquired information when the permission acquisition unit 11b does not acquire the transmission permission.
　また、許可制御部１２ｃは、許可取得部１１ｂが車両側記憶許可を取得した場合に、取得情報を車両側に記憶させる。これにより、生体情報取得部１１ａで取得された複数種類の第１及び第２生体情報が記憶部１３に記憶される。 Further, the permission control unit 12c stores the acquired information on the vehicle side when the permission acquisition unit 11b acquires the vehicle side storage permission. As a result, a plurality of types of first and second biometric information acquired by the biometric information acquisition unit 11a are stored in the storage unit 13.
　記憶部１３は、各種情報を記憶する。記憶部１３には、例えば、後述するメモリなどが用いられる。なお図２では、記憶部１３は、車載機器１内部に設けられているが、車載機器１外部に設けられてもよい。 The storage unit 13 stores various information. For the storage unit 13, for example, a memory described later is used. Although the storage unit 13 is provided inside the vehicle-mounted device 1 in FIG. 2, it may be provided outside the vehicle-mounted device 1.
　自車両側のセンシング処理部１２ｄは、許可制御部１２ｃの制御により、上述したサーバ４１側のセンシング処理部４１ｂと同様に、第１生体情報を含む情報に基づいて自車両の搭乗者の状態を判定する判定処理を実行する。 Under the control of the permission control unit 12c, the sensing processing unit 12d on the own vehicle side determines the state of the occupant of the own vehicle based on the information including the first biological information, similarly to the sensing processing unit 41b on the server 41 side described above. Judgment Judgment processing is executed.
　以下ではその一例として、センシング処理部１２ｄは、生体情報取得部１１ａで取得された取得情報と、記憶部１３に記憶された情報とに基づいて、自車両の搭乗者の状態を判定する判定処理を実行するものとして説明する。なお、車載機器１の記憶部１３に記憶された情報は、サーバ４１の記憶部４１ａに記憶された情報よりも情報量が少ない。このため、車載機器１のセンシング処理部１２ｄの判定処理は、サーバ４１のセンシング処理部４１ｂの判定処理よりも限定され、判定処理の精度はセンシング処理部４１ｂよりも低いことが想定される。 In the following, as an example thereof, the sensing processing unit 12d determines the state of the occupant of the own vehicle based on the acquired information acquired by the biological information acquisition unit 11a and the information stored in the storage unit 13. Will be described as executing. The amount of information stored in the storage unit 13 of the vehicle-mounted device 1 is smaller than the amount of information stored in the storage unit 41a of the server 41. Therefore, it is assumed that the determination process of the sensing processing unit 12d of the in-vehicle device 1 is limited to the determination processing of the sensing processing unit 41b of the server 41, and the accuracy of the determination processing is lower than that of the sensing processing unit 41b.
　＜動作＞
　図３は、本実施の形態２に係る車載機器１及びサーバ４１の動作を示すフローチャートである。なお、この動作は、例えば生体情報取得部１１ａが取得情報を取得した場合に行われる。 <Operation>
FIG. 3 is a flowchart showing the operation of the in-vehicle device 1 and the server 41 according to the second embodiment. This operation is performed, for example, when the biological information acquisition unit 11a acquires the acquired information.
　まずステップＳ１にて、許可制御部１２ｃは、搭乗者に送信許可の可否の入力操作を促す旨をユーザインターフェース機器４６に通知させる。図４は、当該通知の一例として、搭乗者に送信許可の可否の入力操作を促す画面の表示例を示す図である。図４に示すように、この画面には、例えば取得情報を送信する利用目的などの、各国の個人情報保護法規に則った確認事項と、送信許可を許可するための許可ボタン４６ａと、送信許可を禁止するための禁止ボタン４６ｂとが表示される。 First, in step S1, the permission control unit 12c notifies the user interface device 46 that the passenger is urged to input whether or not to allow transmission. FIG. 4 is a diagram showing a display example of a screen prompting the passenger to input whether or not to allow transmission as an example of the notification. As shown in FIG. 4, on this screen, confirmation items in accordance with the personal information protection laws and regulations of each country, such as the purpose of use for transmitting acquired information, a permission button 46a for permitting transmission, and transmission permission are displayed. The prohibition button 46b for prohibiting the above is displayed.
　このステップＳ１にて、許可制御部１２ｃは、許可取得部１１ｂが送信許可を取得したか否かを判定する。例えば、図４の許可ボタン４６ａに対して入力操作が行われた場合には、許可取得部１１ｂが送信許可を取得したと判定されて、処理がステップＳ２に進む。また例えば、図４の禁止ボタン４６ｂに対して入力操作が行われた場合には、許可取得部１１ｂが送信許可を取得しなかったと判定されて、処理がステップＳ１０に進む。 In this step S1, the permission control unit 12c determines whether or not the permission acquisition unit 11b has acquired the transmission permission. For example, when an input operation is performed on the permission button 46a of FIG. 4, it is determined that the permission acquisition unit 11b has acquired the transmission permission, and the process proceeds to step S2. Further, for example, when an input operation is performed on the prohibition button 46b of FIG. 4, it is determined that the permission acquisition unit 11b has not acquired the transmission permission, and the process proceeds to step S10.
　ステップＳ２にて、許可制御部１２ｃは、搭乗者に車両側記憶許可の可否の入力操作を促す旨をユーザインターフェース機器４６に通知させる。これにより、例えばステップＳ１と同様の画面（図４）が表示される。 In step S2, the permission control unit 12c notifies the user interface device 46 that the passenger is urged to input whether or not the vehicle side memory permission is permitted. As a result, for example, the same screen as in step S1 (FIG. 4) is displayed.
　このステップＳ２にて、許可制御部１２ｃはステップＳ１と同様に、許可取得部１１ｂが車両側記憶許可を取得したか否かを判定する。許可取得部１１ｂが車両側記憶許可を取得したと判定された場合には処理がステップＳ３に進み、許可取得部１１ｂが車両側記憶許可を取得しなかったと判定された場合には処理がステップＳ４に進む。 In this step S2, the permission control unit 12c determines whether or not the permission acquisition unit 11b has acquired the vehicle-side storage permission, as in step S1. If it is determined that the permission acquisition unit 11b has acquired the vehicle-side storage permission, the process proceeds to step S3, and if it is determined that the permission acquisition unit 11b has not acquired the vehicle-side storage permission, the process proceeds to step S4. Proceed to.
　ステップＳ３にて、許可制御部１２ｃは、取得情報を記憶部１３に記憶する。その後、処理がステップＳ４に進む。 In step S3, the permission control unit 12c stores the acquired information in the storage unit 13. After that, the process proceeds to step S4.
　ステップＳ４にて、許可制御部１２ｃは、搭乗者にサーバ側記憶許可の可否の入力操作を促す旨をユーザインターフェース機器４６に通知させる。これにより、例えばステップＳ１と同様の画面（図４）が表示される。 In step S4, the permission control unit 12c notifies the user interface device 46 that the passenger is urged to input whether or not to allow storage on the server side. As a result, for example, the same screen as in step S1 (FIG. 4) is displayed.
　このステップＳ４にて、許可制御部１２ｃはステップＳ１と同様に、許可取得部１１ｂがサーバ側記憶許可を取得したか否かを判定する。許可取得部１１ｂがサーバ側記憶許可を取得したと判定された場合には処理がステップＳ５に進み、許可取得部１１ｂがサーバ側記憶許可を取得しなかったと判定された場合には処理がステップＳ７に進む。 In this step S4, the permission control unit 12c determines whether or not the permission acquisition unit 11b has acquired the server-side storage permission, as in step S1. If it is determined that the permission acquisition unit 11b has acquired the server-side storage permission, the process proceeds to step S5, and if it is determined that the permission acquisition unit 11b has not acquired the server-side storage permission, the process proceeds to step S7. Proceed to.
　ステップＳ５にて、許可制御部１２ｃは、取得情報を車載機器１からサーバ４１に送信する。 In step S5, the permission control unit 12c transmits the acquired information from the in-vehicle device 1 to the server 41.
　ステップＳ６にて、サーバ４１は、許可制御部１２ｃの制御により、取得情報を記憶部４１ａに記憶する。ここで記憶部４１ａに記憶された取得情報は、ステップＳ４にてユーザインターフェース機器４６が通知した範囲で用いられる。またステップＳ６にて、センシング処理部４１ｂは、許可制御部１２ｃの制御により、取得情報と、記憶部４１ａに記憶された情報とに基づいて、自車両の搭乗者の状態を判定する判定処理を実行する。その後、処理がステップＳ９に進む。 In step S6, the server 41 stores the acquired information in the storage unit 41a under the control of the permission control unit 12c. Here, the acquired information stored in the storage unit 41a is used within the range notified by the user interface device 46 in step S4. Further, in step S6, the sensing processing unit 41b performs a determination process of determining the state of the occupant of the own vehicle based on the acquired information and the information stored in the storage unit 41a under the control of the permission control unit 12c. Execute. After that, the process proceeds to step S9.
　ステップＳ７にて、許可制御部１２ｃは、取得情報を車載機器１からサーバ４１に送信する。ステップＳ８にて、センシング処理部４１ｂは、ステップＳ６と同様に、自車両の搭乗者の状態を判定する判定処理を実行するが、ステップＳ６と異なり、取得情報は記憶部４１ａに記憶されない。その後、処理がステップＳ９に進む。 In step S7, the permission control unit 12c transmits the acquired information from the in-vehicle device 1 to the server 41. In step S8, the sensing processing unit 41b executes a determination process for determining the state of the occupant of the own vehicle in the same manner as in step S6, but unlike step S6, the acquired information is not stored in the storage unit 41a. After that, the process proceeds to step S9.
　ステップＳ９にて、サーバ４１は、ステップＳ６またはステップＳ８の判定処理の結果を車載機器１に送信する。送信された判定処理の結果は、自車両の自動運転の制御などに用いられる。その後、図３の動作が終了する。 In step S9, the server 41 transmits the result of the determination process of step S6 or step S8 to the in-vehicle device 1. The transmitted result of the determination process is used for controlling the automatic driving of the own vehicle. After that, the operation of FIG. 3 ends.
　ステップＳ１からステップＳ１０に処理が進んだ場合、許可制御部１２ｃは、搭乗者に車両側記憶許可の可否の入力操作を促す旨をユーザインターフェース機器４６に通知させる。これにより、例えばステップＳ１と同様の画面（図４）が表示される。 When the process proceeds from step S1 to step S10, the permission control unit 12c notifies the user interface device 46 that the passenger is urged to input whether or not the vehicle side memory permission is permitted. As a result, for example, the same screen as in step S1 (FIG. 4) is displayed.
　このステップＳ１０にて、許可制御部１２ｃはステップＳ１と同様に、許可取得部１１ｂが車両側記憶許可を取得したか否かを判定する。許可取得部１１ｂが車両側記憶許可を取得したと判定された場合には処理がステップＳ１１に進み、許可取得部１１ｂが車両側記憶許可を取得しなかったと判定された場合には処理がステップＳ１２に進む。 In this step S10, the permission control unit 12c determines whether or not the permission acquisition unit 11b has acquired the vehicle-side storage permission, as in step S1. If it is determined that the permission acquisition unit 11b has acquired the vehicle-side storage permission, the process proceeds to step S11, and if it is determined that the permission acquisition unit 11b has not acquired the vehicle-side storage permission, the process proceeds to step S12. Proceed to.
　ステップＳ１１にて、許可制御部１２ｃは、取得情報を記憶部１３に記憶する。その後、処理がステップＳ１２に進む。 In step S11, the permission control unit 12c stores the acquired information in the storage unit 13. After that, the process proceeds to step S12.
　ステップＳ１２にて、許可制御部１２ｃは、車両側のセンシング機能により行われる判定処理が、サーバ４１側のセンシング機能により行われる判定処理よりも限定される場合がある旨をユーザインターフェース機器４６に通知させる。 In step S12, the permission control unit 12c notifies the user interface device 46 that the determination process performed by the sensing function on the vehicle side may be more limited than the determination process performed by the sensing function on the server 41 side. Let me.
　そして、このステップＳ１２にて、センシング処理部１２ｄは、許可制御部１２ｃの制御により、取得情報と、記憶部１３に記憶された情報とに基づいて、自車両の搭乗者の状態を判定する判定処理を実行する。判定処理の結果は、自車両の自動運転の制御などに用いられる。その後、図３の動作が終了する。 Then, in step S12, the sensing processing unit 12d determines the state of the occupant of the own vehicle based on the acquired information and the information stored in the storage unit 13 under the control of the permission control unit 12c. Execute the process. The result of the determination process is used for controlling the automatic driving of the own vehicle. After that, the operation of FIG. 3 ends.
　なお、図３の動作において各ステップの順序は適宜変更されてもよい。例えば、ステップＳ４はステップＳ２と同じタイミングで行われてもよい。 Note that the order of each step may be changed as appropriate in the operation shown in FIG. For example, step S4 may be performed at the same timing as step S2.
　＜実施の形態２のまとめ＞
　以上のような本実施の形態２に係る車載機器１によれば、送信許可が取得された場合に、第１生体情報を含む情報を、車載機器１からサーバ４１に送信し、当該情報に基づく判定処理を、サーバ４１側に実行させる。このような構成によれば、当該情報の送信が許可された場合に、比較的高い精度で搭乗者の状態を判定することができ、その結果として例えば適切な自動運転などを実現することができる。 <Summary of Embodiment 2>
According to the in-vehicle device 1 according to the second embodiment as described above, when the transmission permission is obtained, the information including the first biometric information is transmitted from the in-vehicle device 1 to the server 41 and based on the information. The determination process is executed on the server 41 side. According to such a configuration, when the transmission of the information is permitted, the state of the occupant can be determined with relatively high accuracy, and as a result, for example, appropriate automatic driving can be realized. ..
　また本実施の形態２では、送信許可が取得されなかった場合に、第１生体情報を含む情報に基づく判定処理を、自車両側に実行させる。このような構成によれば、当該情報の送信が許可されなかった場合であっても、ある程度の精度で搭乗者の状態を判定することができ、その結果として例えばある程度の自動運転などを実現することができる。 Further, in the second embodiment, when the transmission permission is not obtained, the own vehicle side is made to execute the determination process based on the information including the first biometric information. According to such a configuration, even if the transmission of the information is not permitted, the state of the occupant can be determined with a certain degree of accuracy, and as a result, for example, a certain degree of automatic driving is realized. be able to.
　また本実施の形態２では、サーバ側記憶許可が取得された場合に、第１生体情報を含む情報をサーバ４１側に記憶させ、車両側記憶許可が取得された場合に、第１生体情報を含む情報を自車両側に記憶させる。このような構成によれば、搭乗者が知らずに、個人特定が可能な第１生体情報がサーバ４１側及び自車両側に記憶されてしまうことを抑制することができるので、当該第１生体情報の合法的な保護及び利用が可能となる。 Further, in the second embodiment, when the server-side storage permission is acquired, the information including the first biometric information is stored in the server 41 side, and when the vehicle-side storage permission is acquired, the first biometric information is stored. Store the included information on the own vehicle side. According to such a configuration, it is possible to prevent the first biometric information that can be personally identified from being stored on the server 41 side and the own vehicle side without the passenger's knowledge, and thus the first biometric information. Will be legally protected and used.
　＜変形例１＞
　実施の形態２では、第２生体情報の送信及び記憶を、第１生体情報の送信及び記憶に合わせて行ったがこれに限ったものではない。 <Modification example 1>
In the second embodiment, the transmission and storage of the second biometric information is performed in accordance with the transmission and storage of the first biometric information, but the present invention is not limited to this.
　その一例として、車載機器１からサーバ４１に送信される情報は、第１生体情報を含むが、第２生体情報を含まない情報であってもよい。そして、センシング処理部４１ｂは、当該情報に基づいて、自車両の搭乗者の状態を判定する判定処理を実行してもよい。 As an example, the information transmitted from the in-vehicle device 1 to the server 41 may include the first biometric information but may not include the second biometric information. Then, the sensing processing unit 41b may execute a determination process for determining the state of the passenger of the own vehicle based on the information.
　また別例として、許可取得部１１ｂは、複数種類の第１生体情報及び複数種類の第２生体情報を選択的にサーバ４１側に記憶するためのサーバ側記憶許可（以下「選択記憶許可」と記す）を取得してもよい。例えば、顔情報、指紋情報、体格情報、体重情報、体温情報、及び、心拍数情報などの種類（項目）のそれぞれについて「ＯＫ」及び「ＮＧ」のいずれかが搭乗者によって選択された場合に、許可取得部１１ｂは、当該選択結果に基づく選択記憶許可を取得してもよい。この際、例えば図３のステップＳ４において、搭乗者が、種類（項目）ごとに「ＯＫ」及び「ＮＧ」のいずれかを選択できるように、ユーザインターフェース機器４６の表示や音声出力が行われてもよい。 As another example, the permission acquisition unit 11b has a server-side storage permission for selectively storing a plurality of types of first biometric information and a plurality of types of second biometric information on the server 41 side (hereinafter referred to as "selective storage permission"). (Note) may be obtained. For example, when either "OK" or "NG" is selected by the passenger for each of the types (items) such as face information, fingerprint information, physique information, weight information, body temperature information, and heart rate information. , The permission acquisition unit 11b may acquire the selection storage permission based on the selection result. At this time, for example, in step S4 of FIG. 3, the user interface device 46 is displayed and audio output is performed so that the passenger can select either "OK" or "NG" for each type (item). May be good.
　このような構成において、許可制御部１２ｃは、許可取得部１１ｂが送信許可及び選択記憶許可を取得した場合に、生体情報取得部１１ａで取得された複数種類の第１生体情報及び複数種類の第２生体情報を車載機器１からサーバ４１に送信してもよい。そして、許可制御部１２ｃは、選択記憶許可に基づいて、送信された複数種類の第１生体情報及び複数種類の第２生体情報を選択的にサーバ４１側の記憶部４１ａに記憶させてもよい。 In such a configuration, the permission control unit 12c has a plurality of types of first biometric information and a plurality of types of first biometric information acquired by the biometric information acquisition unit 11a when the permission acquisition unit 11b acquires the transmission permission and the selective storage permission. 2 Biological information may be transmitted from the in-vehicle device 1 to the server 41. Then, the permission control unit 12c may selectively store the transmitted plurality of types of first biometric information and the plurality of types of second biometric information in the storage unit 41a on the server 41 side based on the selective storage permission. ..
　＜変形例２＞
　実施の形態２の図３のステップＳ１２において、車載機器１のセンシング処理部１２ｄで実行された判定処理の結果が、デッドマン状態（予め定められた結果）である場合には、搭乗者及び自車両周辺の人の生命を守るために、車載機器１外部への緊急通知が行われることが好ましい。そこで、そのような場合には、許可制御部１２ｃは、許可取得部１１ｂが送信許可を取得したか否かに関わらず、第１生体情報を含む取得情報をサーバ４１に送信してもよい。 <Modification 2>
In step S12 of FIG. 3 of the second embodiment, when the result of the determination process executed by the sensing processing unit 12d of the in-vehicle device 1 is a deadman state (predetermined result), the passenger and the own vehicle In order to protect the lives of people in the vicinity, it is preferable that an emergency notification is given to the outside of the in-vehicle device 1. Therefore, in such a case, the permission control unit 12c may transmit the acquisition information including the first biometric information to the server 41 regardless of whether or not the permission acquisition unit 11b has acquired the transmission permission.
　ただし、許可制御部１２ｃは、許可取得部１１ｂが送信許可を取得せず、かつ、取得情報が車載機器１からサーバ４１に送信された場合に、当該取得情報に含まれる第１生体情報を、サーバ４１側（記憶部４１ａ）に記憶させないようにしてもよい。またこの場合に、許可制御部１２ｃは、取得情報がサーバ４１に送信されるがサーバ４１に記憶されない旨をユーザインターフェース機器４６に通知させてもよい。以上のような構成によれば、第１生体情報の合法的な保護を維持しつつ、第１生体情報の利用を促進することが可能となる。 However, when the permission acquisition unit 11b does not acquire the transmission permission and the acquisition information is transmitted from the in-vehicle device 1 to the server 41, the permission control unit 12c obtains the first biometric information included in the acquisition information. It may not be stored in the server 41 side (storage unit 41a). Further, in this case, the permission control unit 12c may notify the user interface device 46 that the acquired information is transmitted to the server 41 but is not stored in the server 41. With the above configuration, it is possible to promote the use of the first biometric information while maintaining the legal protection of the first biometric information.
　＜その他の変形例＞
　上述した図１の取得部１１及び制御部１２を、以下「取得部１１等」と記す。取得部１１等は、図５に示す処理回路８１により実現される。すなわち、処理回路８１は、自車両の搭乗者の個人特定が可能な少なくとも１種類の第１生体情報と、車載機器１からサーバ４１に第１生体情報を送信するための送信許可とを取得する取得部１１と、取得部１１が送信許可を取得したか否かに基づいて、取得部１１で取得された第１生体情報を車載機器１からサーバ４１に送信する制御を行う制御部１２と、を備える。処理回路８１には、専用のハードウェアが適用されてもよいし、メモリに格納されるプログラムを実行するプロセッサが適用されてもよい。プロセッサには、例えば、中央処理装置、処理装置、演算装置、マイクロプロセッサ、マイクロコンピュータ、ＤＳＰ（Digital Signal Processor）などが該当する。 <Other variants>
The acquisition unit 11 and the control unit 12 of FIG. 1 described above are hereinafter referred to as “acquisition unit 11 and the like”. The acquisition unit 11 and the like are realized by the processing circuit 81 shown in FIG. That is, the processing circuit 81 acquires at least one type of first biometric information capable of personally identifying the passenger of the own vehicle and a transmission permission for transmitting the first biometric information from the in-vehicle device 1 to the server 41. The acquisition unit 11, the control unit 12 that controls the in-vehicle device 1 to transmit the first biometric information acquired by the acquisition unit 11 to the server 41 based on whether or not the acquisition unit 11 has acquired the transmission permission. To be equipped. Dedicated hardware may be applied to the processing circuit 81, or a processor that executes a program stored in the memory may be applied. Examples of the processor include a central processing unit, a processing unit, an arithmetic unit, a microprocessor, a microcomputer, a DSP (Digital Signal Processor), and the like.
　処理回路８１が専用のハードウェアである場合、処理回路８１は、例えば、単一回路、複合回路、プログラム化したプロセッサ、並列プログラム化したプロセッサ、ＡＳＩＣ（Application Specific Integrated Circuit）、ＦＰＧＡ（Field Programmable Gate Array）、またはこれらを組み合わせたものが該当する。取得部１１等の各部の機能それぞれは、処理回路を分散させた回路で実現されてもよいし、各部の機能をまとめて一つの処理回路で実現されてもよい。 When the processing circuit 81 is dedicated hardware, the processing circuit 81 may be, for example, a single circuit, a composite circuit, a programmed processor, a parallel programmed processor, an ASIC (Application Specific Integrated Circuit), or an FPGA (Field Programmable Gate). Array), or a combination of these. Each of the functions of each part such as the acquisition unit 11 may be realized by a circuit in which the processing circuits are dispersed, or the functions of each part may be collectively realized by one processing circuit.
　処理回路８１がプロセッサである場合、取得部１１等の機能は、ソフトウェア等との組み合わせにより実現される。なお、ソフトウェア等には、例えば、ソフトウェア、ファームウェア、または、ソフトウェア及びファームウェアが該当する。ソフトウェア等はプログラムとして記述され、メモリに格納される。図６に示すように、処理回路８１に適用されるプロセッサ８２は、メモリ８３に記憶されたプログラムを読み出して実行することにより、各部の機能を実現する。すなわち、車載機器１は、処理回路８１により実行されるときに、自車両の搭乗者の個人特定が可能な少なくとも１種類の第１生体情報と、車載機器１からサーバ４１に第１生体情報を送信するための送信許可とを取得するステップと、送信許可が取得されたか否かに基づいて、取得された第１生体情報を車載機器１からサーバ４１に送信する制御を行うステップと、が結果的に実行されることになるプログラムを格納するためのメモリ８３を備える。換言すれば、このプログラムは、取得部１１等の手順や方法をコンピュータに実行させるものであるともいえる。ここで、メモリ８３は、例えば、ＲＡＭ（Random Access Memory）、ＲＯＭ（Read Only Memory）、フラッシュメモリ、ＥＰＲＯＭ（Erasable Programmable Read Only Memory）、ＥＥＰＲＯＭ（Electrically Erasable Programmable Read Only Memory）などの、不揮発性または揮発性の半導体メモリ、ＨＤＤ（Hard Disk Drive）、磁気ディスク、フレキシブルディスク、光ディスク、コンパクトディスク、ミニディスク、ＤＶＤ（Digital Versatile Disc）、そのドライブ装置等、または、今後使用されるあらゆる記憶媒体であってもよい。 When the processing circuit 81 is a processor, the functions of the acquisition unit 11 and the like are realized by combining with software and the like. The software and the like correspond to, for example, software, firmware, or software and firmware. Software and the like are described as programs and stored in memory. As shown in FIG. 6, the processor 82 applied to the processing circuit 81 realizes the functions of each part by reading and executing the program stored in the memory 83. That is, when the in-vehicle device 1 is executed by the processing circuit 81, at least one kind of first biometric information capable of personally identifying the passenger of the own vehicle and the first biometric information from the in-vehicle device 1 to the server 41 are transmitted. The result is a step of acquiring a transmission permission for transmission and a step of controlling transmission of the acquired first biometric information from the in-vehicle device 1 to the server 41 based on whether or not the transmission permission has been acquired. A memory 83 for storing a program to be executed is provided. In other words, it can be said that this program causes the computer to execute the procedure or method of the acquisition unit 11 or the like. Here, the memory 83 is a non-volatile or non-volatile memory such as a RAM (RandomAccessMemory), a ROM (ReadOnlyMemory), a flash memory, an EPROM (ErasableProgrammableReadOnlyMemory), and an EEPROM (ElectricallyErasableProgrammableReadOnlyMemory). Volatile semiconductor memory, HDD (Hard Disk Drive), magnetic disk, flexible disk, optical disk, compact disk, mini disk, DVD (Digital Versatile Disc), its drive device, etc., or any storage medium that will be used in the future. You may.
　以上、取得部１１等の各機能が、ハードウェア及びソフトウェア等のいずれか一方で実現される構成について説明した。しかしこれに限ったものではなく、取得部１１等の一部を専用のハードウェアで実現し、別の一部をソフトウェア等で実現する構成であってもよい。例えば、取得部１１については専用のハードウェアとしての処理回路８１、インターフェース及びレシーバなどでその機能を実現し、それ以外についてはプロセッサ８２としての処理回路８１がメモリ８３に格納されたプログラムを読み出して実行することによってその機能を実現することが可能である。 The configuration in which each function of the acquisition unit 11 and the like is realized by either hardware or software has been described above. However, the present invention is not limited to this, and a configuration may be configured in which a part of the acquisition unit 11 or the like is realized by dedicated hardware and another part is realized by software or the like. For example, the acquisition unit 11 realizes its function by a processing circuit 81 as dedicated hardware, an interface, a receiver, and the like, and other than that, the processing circuit 81 as a processor 82 reads a program stored in the memory 83. It is possible to realize the function by executing it.
　以上のように、処理回路８１は、ハードウェア、ソフトウェア等、またはこれらの組み合わせによって、上述の各機能を実現することができる。 As described above, the processing circuit 81 can realize each of the above-mentioned functions by hardware, software, or a combination thereof.
　また、以上で説明した車載機器１は、ＰＮＤ（Portable Navigation Device）及びナビゲーション装置などの車両装置と、携帯電話、スマートフォン及びタブレットなどの携帯端末を含む通信端末と、車両装置及び通信端末の少なくとも１つにインストールされるアプリケーションの機能と、サーバとを適宜に組み合わせてシステムとして構築される車載システムにも適用することができる。この場合、以上で説明した車載機器１の各機能あるいは各構成要素は、前記システムを構築する各機器に分散して配置されてもよいし、いずれかの機器に集中して配置されてもよい。 Further, the in-vehicle device 1 described above includes at least one of a vehicle device such as a PND (Portable Navigation Device) and a navigation device, a communication terminal including a mobile terminal such as a mobile phone, a smartphone and a tablet, and a vehicle device and a communication terminal. It can also be applied to an in-vehicle system constructed as a system by appropriately combining the functions of a separately installed application and a server. In this case, each function or each component of the in-vehicle device 1 described above may be dispersedly arranged in each device for constructing the system, or may be centrally arranged in any of the devices. ..
　なお、本発明は、その発明の範囲内において、各実施の形態及び各変形例を自由に組み合わせたり、各実施の形態及び各変形例を適宜、変形、省略したりすることが可能である。 It should be noted that, within the scope of the present invention, each embodiment and each modification can be freely combined, and each embodiment and each modification can be appropriately modified or omitted.
　本発明は詳細に説明されたが、上記した説明は、すべての態様において、例示であって、本発明がそれに限定されるものではない。例示されていない無数の変形例が、本発明の範囲から外れることなく想定され得るものと解される。 Although the present invention has been described in detail, the above description is an example in all aspects, and the present invention is not limited thereto. It is understood that innumerable variations not illustrated can be assumed without departing from the scope of the present invention.
　１　車載機器、１１　取得部、１２　制御部、４１　サーバ。 1 in-vehicle device, 11 acquisition unit, 12 control unit, 41 server.

Claims (12)

  1. 　車両に搭載され、サーバと通信可能な車載機器であって、
    　前記車両の搭乗者の個人特定が可能な少なくとも１種類の第１生体情報と、前記車載機器から前記サーバに前記第１生体情報を送信するための送信許可とを取得する取得部と、
    　前記取得部が前記送信許可を取得したか否かに基づいて、前記取得部で取得された前記第１生体情報を前記車載機器から前記サーバに送信する制御を行う制御部と
    を備える、車載機器。     An in-vehicle device that is mounted on a vehicle and can communicate with a server.
    An acquisition unit that acquires at least one type of first biometric information capable of personally identifying the occupant of the vehicle, and a transmission permission for transmitting the first biometric information from the in-vehicle device to the server.
    An in-vehicle device including a control unit that controls transmission of the first biological information acquired by the acquisition unit from the in-vehicle device to the server based on whether or not the acquisition unit has acquired the transmission permission. ..
  2. 　請求項１に記載の車載機器であって、
    　前記制御部は、
    　前記取得部が前記送信許可を取得した場合に、前記取得部で取得された前記第１生体情報を含む情報を前記車載機器から前記サーバに送信する、車載機器。     The in-vehicle device according to claim 1.
    The control unit
    An in-vehicle device that transmits information including the first biological information acquired by the acquisition unit from the in-vehicle device to the server when the acquisition unit acquires the transmission permission.
  3. 　請求項２に記載の車載機器であって、
    　前記制御部は、
    　前記サーバに送信された前記情報に基づく予め定められた処理を、前記サーバ側に実行させる、車載機器。     The in-vehicle device according to claim 2.
    The control unit
    An in-vehicle device that causes the server side to execute a predetermined process based on the information transmitted to the server.
  4. 　請求項３に記載の車載機器であって、
    　前記制御部は、
    　前記取得部が前記送信許可を取得しなかった場合に、前記情報に基づく前記予め定められた処理を前記車両側に実行させる、車載機器。     The in-vehicle device according to claim 3.
    The control unit
    An in-vehicle device that causes the vehicle side to perform the predetermined process based on the information when the acquisition unit does not acquire the transmission permission.
  5. 　請求項４に記載の車載機器であって、
    　前記予め定められた処理は、前記情報に基づいて前記搭乗者の状態を判定する判定処理を含む、車載機器。     The in-vehicle device according to claim 4.
    The predetermined process is an in-vehicle device including a determination process for determining the state of the passenger based on the information.
  6. 　請求項１に記載の車載機器であって、
    　前記取得部は、前記第１生体情報を前記サーバ側に記憶するための記憶許可をさらに取得し、
    　前記制御部は、
    　前記取得部が前記送信許可及び前記記憶許可を取得した場合に、前記取得部で取得された前記第１生体情報を前記車載機器から前記サーバに送信して前記サーバ側に記憶させる、車載機器。     The in-vehicle device according to claim 1.
    The acquisition unit further acquires a storage permission for storing the first biometric information on the server side.
    The control unit
    An in-vehicle device that, when the acquisition unit acquires the transmission permission and the storage permission, transmits the first biological information acquired by the acquisition unit from the in-vehicle device to the server and stores it on the server side.
  7. 　請求項１に記載の車載機器であって、
    　前記取得部は、前記第１生体情報を前記車両側に記憶するための記憶許可をさらに取得し、
    　前記制御部は、
    　前記取得部が前記記憶許可を取得した場合に、前記取得部で取得された前記第１生体情報を前記車両側に記憶させる、車載機器。     The in-vehicle device according to claim 1.
    The acquisition unit further acquires a storage permit for storing the first biological information on the vehicle side, and obtains the storage permission.
    The control unit
    An in-vehicle device that stores the first biological information acquired by the acquisition unit on the vehicle side when the acquisition unit acquires the storage permission.
  8. 　請求項５に記載の車載機器であって、
    　前記制御部は、
    　前記車載機器で実行された前記判定処理の結果が予め定められた結果である場合に、前記取得部が前記送信許可を取得したか否かに関わらず、前記情報を前記車載機器から前記サーバに送信する、車載機器。     The in-vehicle device according to claim 5.
    The control unit
    When the result of the determination process executed by the in-vehicle device is a predetermined result, the information is transmitted from the in-vehicle device to the server regardless of whether or not the acquisition unit has acquired the transmission permission. In-vehicle device to transmit.
  9. 　請求項８に記載の車載機器であって、
    　前記制御部は、
    　前記取得部が前記送信許可を取得せずに送信された前記情報に含まれる前記第１生体情報を、前記サーバ側に記憶させない、車載機器。     The in-vehicle device according to claim 8.
    The control unit
    An in-vehicle device in which the acquisition unit does not store the first biometric information included in the information transmitted without acquiring the transmission permission on the server side.
  10. 　請求項１に記載の車載機器であって、
    　前記少なくとも１種類の第１生体情報は、複数種類の第１生体情報であり、
    　前記取得部は、
    　前記搭乗者の個人特定ができない複数種類の第２生体情報と、前記複数種類の第１生体情報及び前記複数種類の第２生体情報を選択的に前記サーバ側に記憶するための記憶許可とをさらに取得し、
    　前記制御部は、
    　前記取得部が前記送信許可及び前記記憶許可を取得した場合に、前記取得部で取得された前記複数種類の第１生体情報及び前記複数種類の第２生体情報を前記車載機器から前記サーバに送信し、送信された前記複数種類の第１生体情報及び前記複数種類の第２生体情報を選択的に前記サーバ側に記憶させる、車載機器。     The in-vehicle device according to claim 1.
    The at least one type of first biometric information is a plurality of types of first biometric information.
    The acquisition unit
    A plurality of types of second biometric information that cannot identify the individual of the passenger, and a storage permit for selectively storing the plurality of types of first biometric information and the plurality of types of second biometric information on the server side. Get more,
    The control unit
    When the acquisition unit acquires the transmission permission and the storage permission, the plurality of types of first biological information and the plurality of types of second biological information acquired by the acquisition unit are transmitted from the in-vehicle device to the server. An in-vehicle device that selectively stores the transmitted plurality of types of first biometric information and the plurality of types of second biometric information on the server side.
  11. 　請求項１に記載の車載機器であって、
    　前記少なくとも１種類の第１生体情報は、顔情報、指紋情報、声紋情報、及び、瞳孔情報の少なくとも１つを含む、車載機器。     The in-vehicle device according to claim 1.
    The at least one type of first biometric information is an in-vehicle device including at least one of face information, fingerprint information, voiceprint information, and pupil information.
  12. 　車両に搭載され、サーバと通信可能な車載機器の通信方法であって、
    　前記車両の搭乗者の個人特定が可能な少なくとも１種類の第１生体情報と、前記車載機器から前記サーバに前記第１生体情報を送信するための送信許可とを取得し、
    　前記送信許可が取得されたか否かに基づいて、取得された前記第１生体情報を前記車載機器から前記サーバに送信する制御を行う、通信方法。     It is a communication method for in-vehicle devices that are mounted on vehicles and can communicate with servers.
    At least one type of first biometric information capable of personally identifying the passenger of the vehicle and a transmission permission for transmitting the first biometric information from the in-vehicle device to the server are acquired.
    A communication method that controls transmission of the acquired first biometric information from the in-vehicle device to the server based on whether or not the transmission permission has been acquired.
PCT/JP2019/011133 2019-03-18 2019-03-18 In-vehicle device and communication method WO2020188691A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PCT/JP2019/011133 WO2020188691A1 (en) 2019-03-18 2019-03-18 In-vehicle device and communication method

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/JP2019/011133 WO2020188691A1 (en) 2019-03-18 2019-03-18 In-vehicle device and communication method

Publications (1)

Publication Number Publication Date
WO2020188691A1 true WO2020188691A1 (en) 2020-09-24

Family

ID=72519207

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/JP2019/011133 WO2020188691A1 (en) 2019-03-18 2019-03-18 In-vehicle device and communication method

Country Status (1)

Country Link
WO (1) WO2020188691A1 (en)

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2007080921A1 (en) * 2006-01-13 2007-07-19 Nec Corporation Information recording system, information recording device, information recording method, and information collection program
WO2014013985A1 (en) * 2012-07-17 2014-01-23 日産自動車株式会社 Driving assistance system and driving assistance method

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2007080921A1 (en) * 2006-01-13 2007-07-19 Nec Corporation Information recording system, information recording device, information recording method, and information collection program
WO2014013985A1 (en) * 2012-07-17 2014-01-23 日産自動車株式会社 Driving assistance system and driving assistance method

Similar Documents

Publication Publication Date Title
CN106965674B (en) Method and system for operating a vehicle when an occupant experiences a potential disorder
US11210873B2 (en) Safety for vehicle users
US9278696B2 (en) Vehicle onboard safety system
EP1770572A2 (en) Information processing apparatus and information processing method, information processing system, program and recording media
KR20180082105A (en) Vehicle terminal device and control method thereof
US10159410B2 (en) Method and apparatus for biometric data gathering and dissemination
JP2015184968A (en) Operation characteristic diagnostic method
JP2006248254A (en) Physical examination network system
JP2014065428A (en) Safe driving support system of vehicle
US11673558B1 (en) Apparatuses, systems and methods for improving operation of autonomous vehicles
US20210099849A1 (en) Emergency system for a vehicle
JP6996969B2 (en) Driving support device and driving support method
US20200000166A1 (en) Helmet communication and safety system
US10165429B1 (en) Systems and methods for facilitating vehicle incident communications
WO2020188691A1 (en) In-vehicle device and communication method
US10471965B2 (en) Securing guest access to vehicle
CN110712606B (en) In-vehicle life recognition method, device, equipment and storage medium
US10981574B2 (en) Biological information storage system and in-vehicle biological information storage device
JPWO2019156015A1 (en) Vehicle anti-theft devices and anti-theft methods, as well as computer programs
JP2016085730A (en) Vehicle data recording device and vehicle accident notification device
US20210034049A1 (en) Remote driving system and remote driving method
WO2021019875A1 (en) Information processing device
JP2020107173A (en) System for dealing with driver abnormality and method for dealing with driver abnormality
SE540029C2 (en) Method and system for wirelessly connecting at least one external device for communication with a vehicle
JP2019196071A (en) On-vehicle machine and control method

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 19920004

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 19920004

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: JP