JP2007034754A - Data management device, navigation apparatus with the data management device, and deletion method of personal information data - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a data management device capable of appropriately protecting personal information, and to provide a navigation apparatus with the data management device and a deletion method of personal information data. <P>SOLUTION: In the navigation apparatus 10 with the data management device 1 connected to a storage part 36 for storing personal information data including personal information as data contents and a GPS receiving part 14 capable of detecting a current position and outputting current position information, a vehicle lease place for deleting the personal information data by the data management device 1 in determination of matching with the current position information and a vehicle lease period for holding the personal information data without deletion by the data management device 1 are set, and after the lapse of the vehicle lease period (valid period of personal information) or after arrival at the vehicle lease place, the data management device 1 deletes the stored personal information data. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a data management device, a navigation device including the data management device, and a method for deleting personal information data.

  2. Description of the Related Art In recent years, navigation devices that receive position information where a vehicle is currently traveling from an artificial satellite, display the position information of the vehicle together with map information on a display unit, and guide a driver have been put into practical use. In navigation devices, a communication function that allows access to the Internet network via a mobile communication terminal by connecting a mobile communication terminal such as a mobile phone has been put into practical use. Furthermore, in a navigation device to which a mobile phone can be connected, a hands-free function for making a call through a speaker or a microphone while holding the steering wheel with both hands has been put into practical use. In a navigation apparatus having a voice recognition function as well as a connection function with a mobile phone, it is possible to make a call by reading out a registered name of a location or a telephone number, for example. Furthermore, if the memory dial of the connected mobile phone is registered in the navigation device, it is possible to make a hands-free call while driving with the contact partner based on the personal information of the user.

In order to protect personal information appropriately when a mobile communication terminal such as a cellular phone having personal information such as a memory dial is lost, Patent Document 1 proposes the following technique. The mobile communication terminal control method proposed by Patent Document 1 is a method in which a mobile communication terminal is remotely operated when the mobile communication terminal is lost, so that a call by an owner other than the right owner or an individual stored in the mobile communication terminal Disable viewing of information. Thereby, personal information can be appropriately protected.
JP 2003-319453 A

  As described above, personal information such as a memory dial and an e-mail address of a mobile phone is also registered in a navigation device having a hands-free function, for example. If the rental car has a navigation device that can register personal information, if the user forgets to delete the personal information when returning the rental car, the personal information remaining on the navigation device may be known to a third party other than the user. is there. However, the technique disclosed in Patent Document 1 for remotely operating a mobile phone cannot appropriately protect personal information registered in the navigation device.

  The present invention has been made in view of the above problems, and an object thereof is to provide a data management device capable of appropriately protecting personal information, a navigation device provided with the data management device, and a method for deleting personal information data. .

  In order to solve the above problems, the present invention is connected to a storage unit for storing personal information data containing personal information as data content, and a position detection unit capable of detecting the current position and outputting the current position information. A data management apparatus, wherein the personal information data is erased based on the current position information.

  For example, it is assumed that the data management device of the present invention is applied to an in-vehicle navigation device provided in a rental car. In this case, even if the user registers, for example, an e-mail address as personal information in the in-vehicle navigation device, the data management device according to the present invention stores the personal information data based on the current position information that the rental car has arrived at the return point. to erase. As a result, it is possible to prevent personal information from remaining in the storage unit and being known to a third party, and to protect personal information appropriately.

  In the present invention, it may be possible to set position information for deleting the personal information data when it is determined that the current position information matches the current position information. According to the present invention, when the set position information matches the current position information, the data management device erases the personal information data. When there are a plurality of pieces of position information to be set, the position information can be stored in a data table.

  In the present invention, a memory holding time for holding the personal information data without erasing may be set. According to the present invention, the personal information data is automatically deleted by the data management device after the set memory retention time has elapsed. Thereby, personal information can be appropriately protected.

  In the present invention, the personal information may include at least one of a telephone number and an e-mail address registered by the user. According to the present invention, the data management apparatus handles, for example, the telephone number registered by the user from the memory dial of the mobile phone as personal information, and thus the registered telephone number can be appropriately protected as personal information.

  Further, the present invention provides the navigation device having a data management device according to any one of claims 1 to 4, wherein the personal information includes predetermined information stored based on a user operation. May be. According to the present invention, the data management device also handles the predetermined information stored as a result of the user's operation of the navigation device as personal information, so the predetermined information stored based on the user's operation is also known to a third party. Can be adequately protected.

  The navigation apparatus according to claim 5, wherein the predetermined information includes at least one of a point registered by a user, a set destination, and a vehicle travel locus. . That is, the predetermined information includes a point registered by the user with the navigation device, a set destination, a vehicle travel locus, and the like, and the data management device treats such information as personal information and appropriately protects it. These pieces of information are examples of predetermined information stored in the navigation device. For example, when the navigation device stores search history information, the data management device treats the search history information as personal information and protects it. Is possible.

  The present invention also includes a step of determining whether or not a memory retention time for retaining personal information data without erasing has elapsed, and a step of determining whether or not the position information for erasing the personal information matches the current position. And a step of erasing personal information data when the memory holding time has elapsed, and a step of erasing personal information data when the position information matches the current position. This is a method for deleting personal information data.

  ADVANTAGE OF THE INVENTION According to this invention, the data management apparatus which can protect personal information appropriately, the navigation apparatus provided with the data management apparatus, and the deletion method of personal information data can be provided.

  Hereinafter, the best mode for carrying out the present invention will be described in detail with reference to the drawings.

  The configuration of the data management device 1 according to the present embodiment and the vehicle-mounted navigation device 10 including the data management device 1 (hereinafter simply referred to as the navigation device 10) will be described in detail with reference to FIG. When the navigation device 10 includes the data management device 1, the data management device 1 can be realized by the control unit 27 of the navigation device 10. That is, the control unit 27 has the configuration of the navigation device 10 and the configuration of the data management device 1 at the same time. In FIG. 1, a reading mechanism 11 reads a recording medium (map database) such as a CD (Compact Disc) -ROM (Read Only Memory) or a DVD (Digital Versatile Disc) -ROM storing map data and other guidance data. It is the structure for. However, the present invention is not limited to this, and a storage device such as a hard disk drive can also be applied.

  The operation unit 12 is configured for a user to input various operations and settings to the navigation device 10. This may be configured individually such as a remote controller device or a control panel, or may be configured as a touch panel type input device formed integrally with the display unit 16 described later. Furthermore, it may be constituted by a microphone for voice input. In addition, a part of the operation unit 12 related to the call function can be provided as an operation button on a steering (not shown) to realize a hands-free operation.

  The VICS (road traffic information communication system) receiving unit 13 is configured to receive VICS information transmitted from a radio wave beacon or an optical beacon. A GPS (Global Positioning System) receiving unit (position detecting unit) 14 is configured to receive a GPS signal transmitted from a GPS satellite and detect the latitude and longitude of the current position of the vehicle. The autonomous navigation sensor 15 includes an angle sensor 15a including a gyro for detecting the vehicle direction, and a distance sensor 15b that generates a pulse for every predetermined travel distance. Detect speed.

  The display unit 16 is configured by, for example, a liquid crystal display type display device or the like, and is configured to display various information such as a map, a guide route, a current position of a vehicle, a building, and other icons input from the navigation device 10. is there. The speaker 17 is similarly configured to output voice guidance information or the like input from the navigation device 10. In addition, the speaker 17 can also output music input from an audio device or the like.

  In the navigation device 10, the buffer memory 21 is configured to temporarily store map data and the like input from the reading mechanism 11 under the control of the control unit 27 described later. The I / Fs (interfaces) 22, 23, 24, 25, and 26 are an operation unit 12, a VICS receiving unit 13, a GPS receiving unit 14, an autonomous navigation sensor 15, a mobile phone 35 to be described later, and an internal bus in the navigation device 10, respectively. It is the structure for connecting.

  The control unit 27 includes an arithmetic processing device such as a microcomputer or a CPU (Central Processing Unit). The control unit 27 has a built-in navigation program, and a map to be detected or displayed based on signals output from the GPS receiving unit 14 and the autonomous navigation sensor 15 according to the program. And the like are read from the reading mechanism 11 to the buffer memory 21, the guide route is searched from the map data read to the buffer memory 21, and the guide route that matches the set search condition is read to the buffer memory 21. Various processes related to navigation such as searching for one or more using data or the like are executed. However, for example, the above program can be stored in a CD-ROM, a DVD-ROM, or the like. In this case, the control unit 27 reads and executes it as necessary.

  Furthermore, the control unit 27 incorporates a program for erasing personal information data as the data management device 1. However, it is also possible to store a program for erasing personal information data in a CD-ROM, DVD-ROM or the like. Further, position information for erasing personal information data and a memory retention period for retaining personal information data without erasing can be set for a program executed by the data management apparatus 1. The set position information and the memory holding period can be stored in the storage unit 36 described later.

  The map drawing unit 28 is configured to perform a map image drawing process using the map data read to the buffer memory 21. The display information generation unit 29 is configured to generate various menu screens (operation screens) and various marks such as a cursor in accordance with the operation status. The guide route storage unit 30 is configured to store data relating to all nodes of the guide route searched for by the control unit 27 based on the departure point, the destination, and other search conditions. The guide route drawing unit 31 is a configuration for reading the guide route data from the guide route storage unit 30 and drawing the guide route in a display mode (highlighted display using colors and line widths) different from other roads. . The icon drawing unit 32 has a configuration for drawing an icon such as a building or a spot to be drawn on a map image, a vehicle, or another vehicle. The audio output unit 33 includes, for example, a DSP (Digital Signal Processor) and the like, and outputs an audio signal to the speaker 17 based on a signal from the control unit 27.

  The image composition unit 34 includes a guide route drawn by the guide route drawing unit 31, an operation screen and various marks drawn by the display information generation unit 29, an icon drawing unit, and a map image drawn by the map drawing unit 28. In this configuration, various icons drawn in 32, images input from the control unit 27, and the like are appropriately overlapped and displayed on the display unit 16.

  The navigation device 10 connected to the mobile phone 35 listens to the other party through the speaker 17 and inputs a voice to the operation unit 12 composed of a microphone. Has a free function. Further, the user can register the memory dial of the connected mobile phone 35 in the navigation device 10.

  More specifically, the memory dial registered in the navigation device 10 is stored in the storage unit 36 connected to the navigation device 10. The storage unit 36 can be realized by a storage device such as a hard disk drive. However, for example, when the reading mechanism 11 is realized by a storage device such as a hard disk drive, a part of the storage area of the reading mechanism 11 can be used as the storage unit 36.

  The navigation device 10 has a communication modem (not shown) and has a communication function that allows access to the Internet network with the mobile phone 35 connected. In order to send and receive e-mails with the navigation device 10, the user can register the mail address of the connected mobile phone 35 in the navigation device 10. Similar to the memory dial described above, the mail address is also stored in the storage unit 36.

  Next, the process in which the data management apparatus 1 according to the present embodiment deletes the personal information data stored in the navigation apparatus 10 with the above-described configuration will be described in detail with a specific example. In this specific example, the rental car includes a navigation device 10. Therefore, the personal information stored in the navigation device 10 must be surely deleted when the rental car is returned so that it is not known to third parties other than the borrower. In response to such a request, the navigation device 10 according to this specific example includes the data management device 1, so that a vehicle rental period (memory retention period) and a vehicle return location for erasing personal information data at the time of rental car rental (Position information) can be set. For example, a password input may be requested or a special operation may be required at the time of setting so that the vehicle rental period and the vehicle return location can be set only by the business office that rents the rental car.

  FIG. 2 is a diagram showing an example of a display screen 40 for informing the personal information expiration date setting. As shown in FIG. 2, the personal information validity period is two days from 10:00 on April 4, 2005 to 9:59 on April 6, 2005. This personal information expiration date is the vehicle return period set by the sales office. When the vehicle return period is set, a display screen 40 is displayed on the display unit 16 to notify the expiration date of the personal information at the time of rental car rental. For example, after the vehicle rental period is set, the display screen 40 can be continuously displayed until a predetermined operation is input so that the display screen 40 is displayed at the time of rental car rental. By checking the display screen 40 when the vehicle is rented, the borrower can know that even if the personal information is registered in the navigation device 10, the data of the registered personal information is automatically deleted after the expiration date. it can. As a result, the borrower can register the personal information in the navigation device 10 with peace of mind. Further, according to the display content of the display screen 40, even when the rental car arrives at the return point, the borrower can know that the personal information data can be deleted by the user operation.

  The return point of the rental car mentioned above is the location of the business office where the rental car can be returned, and the storage unit 36 has the location of the returnable business office as a vehicle return location in the data table. A new sales office can be additionally registered or deleted in the data table. The sales office can set the locations of all sales offices included in the data table as vehicle return locations for deleting personal information data. In addition, the sales office can set a vehicle return place for deleting personal information data by designating a sales office where the rental car can be returned from all the sales offices included in the data table. The vehicle return place is set simultaneously with the vehicle rental period described above.

  During rental car rental, the borrower can input the following operations using the navigation device 10 provided with the data management device 1. First, the borrower can input operations such as destination setting and point registration in the same manner as a general navigation device. Further, it is possible to connect the mobile phone 35 and register the memory dial of the mobile phone 35 in the navigation device 10. By registering the memory dial from the mobile phone 35 to the navigation device 10, the borrower can talk hands-free with the other party of the memory dial while driving. In addition, the e-mail address using the Internet network can be registered in the navigation device 10 from the mobile phone 35. As a result, the user can send and receive mails in a hands-free manner during driving. In this specific example, the data management device 1 stores not only the registered memory dial and e-mail address, but also information stored in the navigation device 10 by a user operation such as a set destination, a registered point, and a vehicle traveling locus ( Memory contents) are also handled as personal information data.

  The set vehicle rental period can be extended during rental car rental. For example, when extending the rental period, it is inconvenient for the borrower if the personal information data is erased after the vehicle rental period before the extension has elapsed. Therefore, in this specific example, when the borrower makes an application for extension to the sales office, the sales office can extend the vehicle rental period set via the mobile phone 35 by remote control. An application for extension to a sales office can be realized by an operation described later.

  On the last day of rental car rental, the data management device 1 causes the display unit 16 to display a display screen 50 for notifying the expiration date of the personal information for a predetermined time such as 3 to 5 seconds every time the engine is started. FIG. 3 is a diagram showing an example of a display screen 50 that notifies the personal information expiration date. The borrower can know that the registered personal information is surely erased after the vehicle rental period has elapsed, by the display screen 50 displayed every time the engine is started on the last day of rental car rental. Further, while the display screen 50 is displayed, the borrower can extend the vehicle rental period one day. When extending one day, the borrower selects the “one day extension” portion of the display screen 50 using the operation unit 12. When “one day extension” is selected, the navigation device 10 notifies the sales office of the extension application via the mobile phone 35 by e-mail, for example. Upon receipt of the extension application notification, the sales office extends the vehicle rental period set via the mobile phone 35 by remote control. It is also possible for the data management device 1 to extend the vehicle rental period one day without notifying the sales office of an extension application when “one day extension” is selected.

  When the personal information expiration date is further approached without extending the vehicle lending period for one day, the data management device 1 displays the above-described display screen 50 not only every time the engine is started but also every fixed time such as 2 hours. If the personal information expiration date expires before the rental car arrives at the vehicle return location, the data management device 1 erases the personal information data. The purpose of deleting personal information data even before arrival at the vehicle return place is to protect personal information. However, for example, the borrower can contact the sales office and take measures such as having a remote operation to cancel the deletion of the personal information data until reaching the vehicle return place. As a result, personal information data remains in the navigation device 10 and a situation where the personal information is known to a third party after returning the rental car can be prevented, and the personal information can be suitably protected.

  On the other hand, when the rental car arrives at the vehicle return place within the personal information expiration date, the data management device 1 displays the display screen 60 on the display unit 16. Whether the rental car has arrived at the vehicle return location can be determined based on the current location of the rental car detected by the GPS receiver 14 and the set vehicle return location. FIG. 4 is a diagram illustrating an example of a display screen 60 displayed when the rental car arrives at the vehicle return place. When the rental car arrives at the vehicle return location, the display screen 60 notifies the user that the personal information will be deleted. If the user does not select “CANCEL” while the display screen 60 is displayed, the personal information data is automatically deleted after a predetermined time. When the user selects “Cancel”, the deletion of the personal information data is once canceled. For example, when the display screen 60 is displayed when the rental car reaches another vehicle return place that is not scheduled to be returned, the deletion of the personal information data can be canceled by selecting “CANCEL”. In addition, if it is determined again that the rental car has arrived at the vehicle return place after a predetermined time has elapsed after selecting “CANCEL”, the data management device 1 displays the display screen 60 again. Even when the display screen 60 is displayed, it is possible to select the above-mentioned “day extension” of the vehicle lending period.

  When the rental car actually arrives at the vehicle return place and the display screen 60 is displayed, if the user does not input “stop” or “one day extension” operation, the data management device 1 will be displayed after a predetermined time has elapsed. The personal information data stored in the navigation device 10 is deleted. As a result, personal information data remains in the navigation device 10 and a situation where the personal information is known to a third party after returning the rental car can be prevented, and the personal information can be suitably protected.

  Next, an example of the personal information data erasing method executed by the data management device 1 included in the navigation device 10 according to this example will be described in detail with reference to a flowchart. FIG. 5 is a flowchart showing an example of the personal information data erasing method executed by the data management apparatus 1. As shown in FIG. 5, the data management device 1 determines whether or not the current date and time is during the vehicle lending period (step 11). If it is not during the vehicle lending period, the data management device 1 repeatedly executes step 11. That is, after the navigation device 10 is activated, the data management device 1 always determines whether or not it is in the vehicle rental period in the background. If it is during the vehicle lending period, the data management device 1 determines whether today is a vehicle return date (step 12). If it is not the return date of the vehicle, the data management device 1 does not erase the stored personal information data, so the borrower can input the normal operation of the navigation device 10 (step 13), and the data management device 1 again returns to step 11 Execute. If it is the return date of the vehicle, the data management device 1 determines whether the current location of the vehicle is a vehicle return location (step 14). If it is not a vehicle return place, the data management device 1 displays a display screen 50 informing the personal information expiration date before the engine is started (step 15). Further, when the data management device 1 approaches the deadline of the vehicle lending period, the data management device 1 displays a display screen 50 that notifies the personal information expiration date at regular intervals (step 16). Subsequently, the data management device 1 determines whether the expiration date has passed (step 17). If the expiration date has passed, the data management device 1 erases the stored personal information data (step 19). If the expiration date has not elapsed, the data management device 1 executes Step 14 again. In step 14, if it is a vehicle return place, the data management apparatus 1 displays the display screen 60 which notifies deletion of personal information data (step 18). Subsequently, after a predetermined time elapses, the data management device 1 erases the stored personal information data (step 19). As a result, a personal information data erasing method that can appropriately protect personal information can be realized.

  In the rental service, when the portable terminal or the like that includes the GPS receiver 14 and can detect the current position is lent, the data management device 1 can be applied to the portable terminal that is lent. As described above, the data management apparatus 1 that can appropriately protect personal information, the navigation apparatus 10 including the data management apparatus 1, and the personal information data erasing method can be realized.

  The embodiment described above is a preferred embodiment of the present invention. However, the present invention is not limited to this, and various modifications can be made without departing from the scope of the present invention.

It is a figure which shows the structure of the vehicle-mounted navigation apparatus 10 provided with the data management apparatus 1 and the data management apparatus 1. FIG. It is a figure which shows an example of the display screen 40 which notifies personal information expiration date setting. It is a figure which shows an example of the display screen 50 which notifies the personal information expiration date. It is a figure which shows an example of the display screen 60 displayed when a rental car arrives at a vehicle return place. It is a figure which shows an example of the deletion method of the personal information data which the data management apparatus 1 performs with a flowchart.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Data management apparatus 10 Navigation apparatus 11 Reading mechanism 12 Operation part 13 VICS receiving part 14 GPS receiving part 15 Autonomous navigation sensor 15a Angle sensor 15b Distance sensor 16 Display part 17 Speaker 21 Buffer memory 22, 23, 24, 25, 26 I / F
27 Control unit 28 Map drawing unit 29 Display information generating unit 30 Guide route storage unit 31 Guide route drawing unit 32 Icon drawing unit 33 Audio output unit 34 Image composition unit 35 Mobile phone 36 Storage unit 40, 50, 60 Display screen

Claims (7)

A data management device connected to a storage unit for storing personal information data having personal information as data content, and a position detection unit capable of detecting the current position and outputting the current position information,
A data management apparatus for erasing the personal information data based on the current position information. 2. The data management apparatus according to claim 1, wherein position information for deleting the personal information data can be set when it is determined that the current position information matches the current position information. 3. The data management apparatus according to claim 1, wherein a memory holding time for holding the personal information data without erasing the data can be set. 4. The data management apparatus according to claim 1, wherein the personal information includes at least one of a telephone number and an e-mail address registered by the user. 5. The navigation device provided with a data management device according to claim 1, wherein the personal information includes predetermined information stored based on a user operation. 6. The navigation apparatus according to claim 5, wherein the predetermined information includes at least one of a point registered by a user, a set destination, and a vehicle travel locus. Determining whether a memory retention time for retaining personal information data without erasing has elapsed;
Determining whether the position information for erasing the personal information matches the current position;
Erasing personal information data when the memory retention time has elapsed;
And deleting the personal information data when the position information matches the current position.

Images