JP7407031B2 - Management systems, methods and programs - Google Patents

Description

The present invention relates to a management system, a management method, and a program.

As a service that uses a vehicle, an invention related to a pick-up service using an automatic driving vehicle without a driver is disclosed (Patent Document 1).

JP2019-79462A

In this type of service, in addition to transporting users by vehicle, it is also possible for the user to use the space inside the vehicle without driving the vehicle, but vehicle control for the purpose of space utilization was not considered.

Aspects of the present invention have been made in consideration of such circumstances, and it is possible to perform more appropriate vehicle control even when the user uses the space inside the vehicle without driving the vehicle. One of the objectives is to provide management systems, management methods, and programs that can

A management system, a management method, and a program according to the present invention employ the following configuration.
(1): A management system according to one aspect of the present invention is a management system that manages a service that provides a user with a vehicle that can run autonomously without a driver in the vehicle, and is a reception unit that accepts an application for use, and a security level of the vehicle that is set to allow the vehicle to run when the reception unit accepts a first application to use the space inside the vehicle without causing the vehicle to run; The management system includes a security level determination unit that raises the security level compared to when the second application is accepted.

(2): In the aspect of (1) above, further comprising a vehicle interior usage control unit that controls usage of the interior of the vehicle by the user based on the security level determined by the security level determination unit, The vehicle interior use control unit controls the illuminance in the vehicle interior to be equal to or higher than a threshold value when the user uses the space inside the vehicle interior without driving the vehicle according to the first application. It is something to do.

(3): In the aspect of (2) above, when the user uses the space inside the vehicle without driving the vehicle according to the first application, the vehicle interior usage control unit The degree of monitoring of the user by the in-vehicle monitoring device that monitors the vehicle interior is set higher than the degree of monitoring when the vehicle is used to run according to the second application to run the vehicle.

(4): In the aspect of (2) or (3) above, the vehicle interior usage control unit controls the user who uses the space inside the vehicle interior without driving the vehicle according to the first application. If there are multiple users and each user approves another user, the user is allowed to use the space inside the vehicle.

(5): In any one of the above (1) to (4), the usage status acquisition unit further includes a usage status acquisition unit that acquires the usage status of the vehicle interior of the user, and the usage status acquisition unit When it is determined that the usage state of the user's vehicle interior is inappropriate, information regarding the user is notified to the management device.

(6): In any one of the aspects (1) to (5) above, if the usage time of the service that uses the space inside the vehicle without causing the vehicle to run is longer than a predetermined time, the vehicle The vehicle further includes a usage adjustment unit that causes the transportation vehicle to be used for a service aimed at transporting the user based on the second application.

(7): In any one of the aspects (1) to (6) above, the security level determining unit changes the security level of the vehicle when the vehicle is present in a predetermined area. .

(8): In the aspect of (6) above, the usage adjustment unit does not accept the first application when the vehicle is present in a predetermined area.

(9): In a management method according to another aspect of the present invention, a computer receives an application from a user to use a vehicle, and a first application to use a space inside the vehicle without running the vehicle is accepted. When the second application for driving the vehicle is accepted, the security level of the vehicle is made higher than when the second application for driving the vehicle is accepted.

(10): A program according to another aspect of the present invention causes a computer to accept an application to use a vehicle from a user, and accepts a first application to use a space inside the vehicle without running the vehicle. The program is a program that increases the security level of the vehicle when a second application for driving the vehicle is accepted, compared to when a second application to run the vehicle is accepted.

According to the aspects (1) to (10) above, even when the user uses the space inside the vehicle without driving the vehicle, more appropriate vehicle control can be performed.

1 is a configuration diagram of a management system 1 including a management device 300. FIG. FIG. 2 is a configuration diagram of a vehicle 200. 3 is a diagram showing an example of the contents of security information 298. FIG. 3 is a configuration diagram of a management device 300. FIG. FIG. 3 is a diagram showing an example of the contents of user information 372. FIG. 7 is a diagram illustrating an example of the contents of usage request list information 374. FIG. 3 is a diagram showing an example of the contents of vehicle information 376. 3 is a diagram illustrating an example of the contents of a vehicle status management table 378. FIG. FIG. 3 is a diagram showing an example of the contents of usage schedule information 380. It is a figure which shows an example of the image which prompts|enters authentication information. It is a figure which shows an example of image IM2 which allows mutual recognition to be performed. It is a sequence diagram which shows the flow of a series of processes by management system 1 of an embodiment.

DESCRIPTION OF THE PREFERRED EMBODIMENTS Embodiments of a management system, a management method, and a program according to the present invention will be described below with reference to the drawings. The management system includes a management device that manages a service (hereinafter referred to as a transportation service) in which a vehicle capable of autonomous driving is driven without a driver in the vehicle to transport users in a specified section. The designated section is a section designated by a user riding a vehicle or another user. Further, the section is, for example, a section from the boarding point to the alighting point (destination). Further, the management device may manage a service (hereinafter referred to as a space utilization service) that allows a user to use the space inside the vehicle without driving the vehicle. The space utilization service is, for example, a service that provides a space inside a vehicle to a user as a private room. The space utilization services may include services used before transporting the user and services used after transporting the user to the destination. In addition, in the following description, it will be assumed that the use of the vehicle interior by the user during the transportation service is not included in the space utilization service. Further, services including transportation services and space utilization services are referred to as vehicle utilization services.

[overall structure]
FIG. 1 is a configuration diagram of a management system 1 including a management device 300. The management system 1 includes one or more terminal devices 100 used by users, one or more vehicles 200, and a management device 300. These components can communicate with each other via the network NW. The network NW includes the Internet, a WAN (Wide Area Network), a LAN (Local Area Network), a public line, a provider device, a private line, a wireless base station, and the like.

[Terminal device]
The terminal device 100 is, for example, a mobile terminal that a user can carry, such as a smartphone or a tablet terminal. On the terminal device 100, an application program, a browser, or the like for using the above-mentioned vehicle use service is activated, and supports the vehicle use service described below. The following description assumes that the terminal device 100 is a smartphone and that an application program (vehicle usage application) for receiving vehicle usage services is running. The vehicle usage application communicates with the management device 300 according to the user's operations, transmits a vehicle usage request from the user to the management device 300, and provides information based on information received from the management device 300. .

The vehicle usage request includes, for example, application type, which is identification information that distinguishes between a space usage request (first application) and a transportation request (second application), boarding point, drop-off point, desired boarding time, number of users, etc. is included. A space usage request is electronic information requesting that the space inside the vehicle be used as a private room without driving the vehicle. The transportation request is electronic information requesting that the vehicle 200 transport the user over a designated section. Further, the vehicle usage request may include location information of the terminal device 100. Further, the vehicle usage request may include information on the in-vehicle equipment to be used and vehicle interior information. In the example of FIG. 1, three users U1, U2, and U3 are illustrated. The user U1 is a person who causes the terminal device 100 to send a vehicle usage request for the users U1 and U2 to receive services. The user U3 is a person who causes the terminal device 100 to send a vehicle usage request for the user to receive a service. In this way, there may be various types of users.

[vehicle]
Vehicle 200 is a vehicle that includes at least a passenger compartment. FIG. 2 is a configuration diagram of vehicle 200. The vehicle 200 includes, for example, a monitoring unit 210, a communication device 220, a navigation device 230, a vehicle sensor 237, an HMI (Human Machine Interface) 238, an interior monitoring device 240, an authentication device 242, and interior lighting. It includes a device 244, a driving force output device 260, a brake device 262, a steering device 264, a door lock device 266, and an automatic operation control unit 270.

The monitoring unit 210 includes, for example, a camera that images the space outside the vehicle 200, a radar or LIDAR (Light Detection and Ranging) whose detection range is outside the vehicle 200, and an object recognition system that performs sensor fusion processing based on the outputs of these cameras. Including equipment etc. Monitoring unit 210 estimates the types of objects (particularly vehicles, pedestrians, and bicycles) existing around vehicle 200, and outputs the information to automatic driving control unit 270 along with information on their positions and speeds.

The communication device 220 is, for example, a wireless communication module for connecting to the network NW and directly communicating with other vehicles, the user's terminal device 100, and the like. The communication device 220 performs wireless communication based on Wi-Fi, DSRC (Dedicated Short Range Communications), Bluetooth (registered trademark), and other communication standards. A plurality of communication devices 220 may be prepared depending on the purpose.

The navigation device 230 includes, for example, an HMI 232, a GNSS (Global Navigation Satellite System) receiver 234, and a navigation control device 236. The HMI 232 includes, for example, a touch panel display device, a speaker, a microphone, and the like. The GNSS receiver 234 measures its own position (the position of the vehicle 200) based on radio waves arriving from GNSS satellites. The navigation control device 236 includes, for example, a CPU (Central Processing Unit) and various storage devices, and controls the entire navigation device 230. Map information (navigation map) is stored in the storage device. A navigation map is a map that expresses roads using nodes and links. The navigation device 230 uses the communication device 220 to upload position information indicating the measured position to the management device 300. Uploading of location information is performed periodically, for example, in units of milliseconds to seconds.

Vehicle sensor 237 includes a vehicle speed sensor that detects the speed of vehicle 200, an acceleration sensor that detects acceleration, a yaw rate sensor that detects angular velocity around a vertical axis, a direction sensor that detects the direction of vehicle 200, and the like. Further, vehicle sensor 237 may include a position sensor that detects the position of vehicle 200. The position sensor may be, for example, the GNSS receiver 234 or other GPS (Global Positioning System) device. Further, the vehicle sensor 237 may include an illuminance sensor that detects illuminance inside the vehicle interior. Further, the vehicle sensor 237 may include an odor sensor that detects odor inside the vehicle interior. The vehicle sensor 237 also detects the state of charge (SOC), which is the charging rate of an on-board battery (not shown) mounted on the vehicle 200, the remaining amount of power, and whether or not it is being charged. It may also include a battery sensor that detects. For example, the battery sensor determines that charging is in progress when a charging plug of an external charging facility that supplies power to the vehicle battery is connected to vehicle 200, and determines that charging is not in progress when the charging plug is not connected. It is determined that Alternatively, it may be determined that the vehicle battery is being charged when the rate of increase in the SOC of the vehicle battery over a predetermined time is greater than or equal to a threshold value, and may be determined that the vehicle battery is not being charged when it is less than the threshold value. The detection result by vehicle sensor 237 is output to automatic driving control unit 270.

The HMI 238 is an interface device that exchanges information with a user inside or outside the vehicle. The HMI 238 includes input/output interfaces such as a display device, a speaker, a touch panel, buttons, a mouse, and a keyboard. For example, the HMI 238 may be provided on an instrument panel, or may be provided for each seat near the front of each seat in the vehicle interior.

The vehicle interior monitoring device 240 includes, for example, a vehicle interior camera, an infrared sensor, etc. that captures an image of the space inside the vehicle interior. The image captured by the camera and the detection result by the infrared sensor may be output to the automatic operation control unit 270, or may be uploaded to the management device 300 by the communication device 220.

Authentication device 242 is a device for confirming that a user who wants to board vehicle 200 is an authorized user (authenticating the user). An authorized user is a user who has made an arrangement with the management device 300 to board the vehicle. The authentication device 242 may be any device that has an authentication function, such as a short-range wireless communication device, a biometric authentication device, or a password input device. Authentication device 242 outputs the authentication result to automatic operation control unit 270.

The vehicle interior lighting device 244 is a lighting device (for example, an interior light) that illuminates the interior of the vehicle 200 by causing a light source such as an LED (Light Emitting Diode) to emit light. The vehicle interior illumination device 244 adjusts the illuminance of the entire vehicle interior by adjusting the illuminance of the light source according to the user's operation and control by a vehicle interior use control unit, which will be described later.

The driving force output device 260 outputs driving force (torque) for driving the vehicle to the driving wheels. The driving force output device 260 includes, for example, a combination of an internal combustion engine, an electric motor, a transmission, and the like, and a power ECU (Electronic Control Unit) that controls these. The power ECU controls the above configuration according to information input from the automatic operation control unit 270 or information input from a driving operator (not shown).

The brake device 262 includes, for example, a brake caliper, a cylinder that transmits hydraulic pressure to the brake caliper, an electric motor that generates hydraulic pressure in the cylinder, and a brake ECU. The brake ECU controls the electric motor according to information input from the automatic driving control unit 270 or information input from the driving operator, so that brake torque corresponding to the braking operation is output to each wheel. The brake device 262 may include, as a backup mechanism, a mechanism that transmits hydraulic pressure generated by operating a brake pedal included in a driving operator to a cylinder via a master cylinder. Note that the brake device 262 is not limited to the configuration described above, and may be an electronically controlled hydraulic brake device that controls an actuator according to information input from the automatic operation control unit 270 and transmits the hydraulic pressure of the master cylinder to the cylinder. Good too.

The steering device 264 includes, for example, a steering ECU and an electric motor. For example, the electric motor applies force to a rack and pinion mechanism to change the direction of the steered wheels. The steering ECU drives the electric motor to change the direction of the steered wheels according to information input from the automatic driving control unit 270 or information input from the driving operator.

Door lock device 266 locks or unlocks a door provided in vehicle 200. Door lock device 266 may include a mechanism that automatically opens and closes the door.

The automatic driving control unit 270 includes, for example, a route travel control section 272, a boarding and alighting position search section 274, a user recognition section 276, a boarding and alighting control section 280, an HMI control section 290, a vehicle interior usage control section 292, and a usage status acquisition unit 294. The boarding/exiting control section 280 includes, for example, a stop/start control section 282 and a door lock control section 284. These components are realized, for example, by a hardware processor such as a CPU (Central Processing Unit) executing a program (software). Some or all of these components are hardware (circuit parts) such as LSI (Large Scale Integration), ASIC (Application Specific Integrated Circuit), FPGA (Field-Programmable Gate Array), and GPU (Graphics Processing Unit); (including circuitry), or may be realized by collaboration between software and hardware. The program may be stored in advance in a storage device (a storage device equipped with a non-transitory storage medium) such as an HDD (Hard Disk Drive) or flash memory, or may be stored in a removable storage device such as a DVD or CD-ROM. It may be stored in a medium (non-transitory storage medium), and installed in the storage device by loading the storage medium into a drive device. The automatic operation control unit 270 may include a storage section 296. The storage unit 296 is realized by an HDD, a DVD, a RAM (Random Access Memory), a flash memory, or the like. The storage unit 296 stores information such as security information 298 and programs.

FIG. 3 is a diagram showing an example of the contents of the security information 298. The security information 298 includes, with respect to the security level, usage permission conditions for allowing the user to use the vehicle, vehicle interior illuminance limits indicating the restrictions on the illumination inside the vehicle interior at the time of use, and period for monitoring the user inside the vehicle interior. Monitoring restrictions that indicate the conditions and conditions, etc., and in-vehicle device restrictions that indicate the usage conditions of the in-vehicle device at the time of use are associated with each other. Each item of security information 298 is acquired from management device 300. The security information 298 is referred to when the vehicle interior use control unit 292 controls the use of the vehicle interior. Hereinafter, information such as usage permission conditions, interior illuminance limits, monitoring limits, and in-vehicle device limits that are associated with security levels may be collectively referred to as "restriction information."

Route travel control unit 272 controls driving force output device 260, brake device 262, and steering device 264 so that vehicle 200 travels on a designated route. Route information is received from the management device 300 by the communication device 220. The route information includes information on the boarding position and alighting position for each user. For example, the route travel control unit 272 applies the route acquired from the management device 300 to high-precision map information and determines a recommended lane in which the vehicle 200 should travel on the route. The high-precision map information is more precise than the map information held by the navigation device 230, and includes information such as road width, slope, curvature, and position of traffic lights for each lane, for example. The recommended lane is a lane determined for efficient travel on a route based on criteria such as, for example, staying in the left lane before turning left at an intersection or the like. The high-precision map information is stored in the storage unit 296, for example.

The route travel control unit 272 automatically causes the vehicle 200 to travel on the recommended lane while avoiding contact with objects whose positions and speeds have been input from the monitoring unit 210. Route travel control unit 272 generates a target trajectory on which vehicle 200 will travel in the future. The target trajectory includes, for example, a velocity element. For example, the target trajectory is expressed as a sequence of points (trajectory points) that the vehicle 200 should reach. The trajectory point is a point that the vehicle 200 should reach after every predetermined travel distance, and apart from that, the target speed and target acceleration for every predetermined sampling time (for example, about 0 tenths [sec]) are determined according to the target trajectory. generated as a part. Alternatively, the trajectory point may be a position to be reached by vehicle 200 at each predetermined sampling time. In this case, information on target speed and target acceleration is expressed by intervals between trajectory points. The boarding/exiting control section 280 also has the same function.

The boarding and alighting position search unit 274 refers to the input information from the monitoring unit 210, high-precision map information, etc., and stops the vehicle 200 at the boarding position and the alighting position included in the route information acquired from the management device 300. Search for a stopping position (boarding/alighting position) where the user can get on or off the vehicle. The boarding and alighting position search unit 274 searches for a boarding and alighting position based on recognizable white lines and yellow lines on the road, road signs, road width, presence or absence of sidewalks and guardrails, etc. based on input information from the monitoring unit 210. decide.

User recognition unit 276 recognizes a user who is about to board vehicle 200 based on input information from monitoring unit 210. For example, the user recognition unit 276 inputs images from a camera included in the monitoring unit 210 into a model that is learned by machine learning and can identify "a user who is about to board the vehicle". Recognize users who are present.

The stop/start control unit 282 of the boarding/disembarking control unit 280 performs deceleration control and steering control to stop the vehicle 200 at the boarding/disembarking position searched and determined by the boarding/disembarking position search unit 274, or performs steering control to stop the vehicle 200 from the boarding/disembarking position toward the roadway. It performs deceleration control and steering control for starting the vehicle 200.

For example, when the vehicle 200 is stopped at the boarding/exiting position and information indicating that user authentication has been successful is obtained from the authentication device 242, the door lock control unit 284 locks the door of a predetermined door of the door lock device 266. Unlock the lock. Furthermore, after the user gets on the vehicle 200 and before the vehicle 200 is started by the stop/start control section 282, the door lock control section 284 locks the door lock of a predetermined door of the door lock device 266. do. Further, the door lock control unit 284 may perform control to lock a predetermined door of the door lock device 266 when the user gets in the vehicle and starts using the space utilization service. Further, the door lock control unit 284 controls the door lock device when a user approaching the stopped vehicle 200 is a user who is about to board the vehicle, or when the use of the space utilization service for a predetermined period of time has ended. The door lock of a predetermined door of H.266 may be controlled to be unlocked.

The HMI control unit 290 controls the HMI 238 to output various information to the user, and controls the HMI 238 and other devices to reflect instructions received by the HMI 238 from the user.

The vehicle interior use control unit 292 controls the user's use of the vehicle interior of the vehicle 200 based on the user's security level transmitted from the management device 300. For example, the vehicle interior use control unit 292 refers to the security level of the security information 298 stored in the storage unit 296 based on the security level included in the information acquired from the management device 300, and associates the security information with the matching security level. Retrieve limit information. Then, based on the acquired restriction information, the vehicle interior use control unit 292 executes vehicle control regarding the use of the vehicle interior by the user according to the security level. The details of the function of the vehicle interior use control section 292 will be described later.

The usage status acquisition unit 294 acquires the usage status of the vehicle interior of the user based on the monitoring result by the vehicle interior monitoring device 240 and the detection result by the vehicle sensor 237. The usage status acquisition unit 294 may acquire the status of the user while riding the vehicle, or may acquire the usage status of the user from the state inside the vehicle after boarding the vehicle. The details of the function of the usage status acquisition unit 294 will be described later.

[Management device]
FIG. 4 is a configuration diagram of the management device 300. The management device 300 includes, for example, a communication section 310, a front processing section 320, an authentication section 326, a usage vehicle determination section 330, a route determination section 340, a security level determination section 342, a usage adjustment section 344, and a payment system. and a processing section 350. The front processing section 320 includes, for example, a reception section 322 and an information provision section 324. These components are realized by, for example, a hardware processor such as a CPU executing a program (software). Some or all of these components may be realized by hardware (including circuitry) such as LSI, ASIC, FPGA, or GPU, or may be realized by collaboration between software and hardware. Good too. The program may be stored in advance in a storage device such as an HDD or flash memory (a storage device equipped with a non-transitory storage medium), or a removable storage medium such as a DVD or CD-ROM (a non-transitory storage medium). The software may be installed in the storage device by attaching the storage medium to the drive device. The management device 300 may include a storage unit 370. The storage unit 370 is realized by a DVD, RAM (Random Access Memory), flash memory, or the like. The storage unit 370 stores information such as user information 372, usage request list information 374, vehicle information 376, vehicle status management table 378, usage schedule information 380, and map information 382.

FIG. 5 is a diagram showing an example of the contents of the user information 372. The user information 372 is, for example, information in which name, gender, age, address, occupation, emergency contact information, etc. are associated with authentication information that identifies the user. The authentication information includes, for example, a user ID, a password, etc., which are identification information for identifying a user. Further, the authentication information may include biometric information such as fingerprint information and iris information. Each item of the user information 372 is registered at the time of subscribing to a service managed by the management device 300, etc. Each part of the management device 300 refers to the user information 372 and performs various processes.

FIG. 6 is a diagram showing an example of the contents of the usage request list information 374. The usage request list information 374 includes, for example, the user ID, the application type, the boarding point, the alighting point, the desired boarding time, the number of users, and the vehicle usage determination unit 330 that has determined that the user is allowed to use the vehicle 200. This information is associated with information such as a determined flag indicating whether or not a decision has been made. The application type, boarding point, alighting point, desired boarding time, and number of users are information included in the vehicle usage request. For example, when a space usage request is applied, since the vehicle 200 does not travel, information on the alighting point is not stored, or a point similar to the boarding point is stored as the alighting point. In addition, in the case of a transportation request, the boarding point and the alighting point are the starting point and ending point of the section related to transportation. In the example of FIG. 6, "1" is stored in the determined flag when the user is allowed to use the vehicle 200, and "0" is stored in the determined flag when the user is not allowed to use the vehicle. May be used. A set of applicant ID, user ID, pick-up point, drop-off point, desired boarding time, and determined flag related to one request is referred to as a record. A request is information in any format that contains the content necessary for one record to be generated.

FIG. 7 is a diagram showing an example of the contents of the vehicle information 376. The vehicle information 376 is information in which in-vehicle equipment information, vehicle interior information, maximum number of passengers who can ride at the same time, etc. are associated with a vehicle ID, which is identification information for identifying the vehicle 200 managed by the management device 300. . The in-vehicle equipment information includes, for example, information regarding equipment different from normal equipment (for example, high-performance audio equipment, a DVD playback device, and a videophone function). The vehicle interior information includes, for example, information regarding the environment inside the vehicle interior (for example, whether or not the seat can be rotated, whether there is a table, the material of the seat, and the details of lighting equipment). The in-vehicle device information, the in-vehicle information, and the maximum number of occupants are examples of information that serves as a reference when determining the vehicle 200 to be used by the user.

FIG. 8 is a diagram showing an example of the contents of the vehicle status management table 378. The vehicle status management table 378 shows the current usage status, usage history, continuous usage time, current location, and the vehicle 200 is being charged for the vehicle ID, which is identification information for identifying the vehicle 200 managed by the management device 300. This information is associated with a charging state flag, which is identification information indicating whether or not the battery is charged, and the charging rate of the on-vehicle battery mounted on the vehicle 200. The vehicle status management table 378 may store the remaining charge amount instead of the charging rate. The usage status includes, for example, information that identifies transportation usage and space usage. Further, the usage status may include usage time and user ID information. In the usage history, past usage patterns of the vehicle (types of transportation, space usage, etc.) are stored in chronological order. The continuous usage time is the time used in the same usage mode. For example, if the current, previous, and two previous usage modes are the same usage mode (for example, space usage), the sum of the respective usage times is stored as the continuous usage time. In the example of FIG. 8, the charging status flag stores "1" when charging is in progress, and "0" when charging is not in progress, but the flag information is not limited to this. . Further, the vehicle status management table 378 may include reservation information.

FIG. 9 is a diagram showing an example of the contents of the usage schedule information 380. Usage schedule information 380 is generated for each vehicle ID and usage date, for example. The usage schedule information 380 is information in which, for example, information such as the boarding and alighting point, the scheduled arrival time, information indicating whether to board or alight, and the user ID of the user who is boarding and alighting is arranged in chronological order. In the example of FIG. 9, a schedule for transportation usage on the usage date "2020/04/30" of vehicle ID "V001" is shown, but a schedule may be similarly stored for space usage.

The map information 382 is, for example, information in which a road shape is expressed by links indicating roads and nodes connected by the links. Further, the map information 382 includes, for example, information on the center of the lane or information on the boundary between the lanes. Further, the map information 382 may include road information, traffic regulation information, address information (address/zip code), facility information, telephone number information, and the like. The map information 382 may be updated at any time by the communication unit 310 communicating with other devices. The map information 382 includes, for example, high-precision map information.

The communication unit 310 is, for example, a network card for connecting to the network NW. The communication unit 310 communicates with the terminal device 100, the vehicle 200, and other external devices via the network NW.

The reception unit 322 acquires a vehicle usage request issued from the user's terminal device 100 via the communication unit 310, and registers it in the storage unit 370 as one record of the usage request list information 374 described above.

The information providing unit 324 causes the terminal device 100 to provide information to the user in cooperation with the application program of the terminal device 100 by transmitting information to the user's terminal device 100. The form of information provision is not limited to this, and may be provided by e-mail or web page.

The authentication unit 326 performs authentication processing for the user of the vehicle 200 at the time of applying for vehicle use and at the time of starting use. For example, when the management device 300 is accessed from the terminal device 100, the authentication unit 326 generates an authentication image for inputting authentication information such as a user ID and password, and displays the generated image on the terminal device 100. At the same time, based on the authentication information input using the image, the user information 372 stored in the storage unit 370 is referred to, and the vehicle usage service is determined depending on whether information matching the authentication information is stored. Determine whether or not use is permitted. For example, the authentication unit 326 permits use when the user information 372 includes information that matches the authentication information, and rejects use when the information that matches the authentication information is not included.

Further, the authentication unit 326 may cooperate with the authentication device 242 mounted on the vehicle 200 and the user recognition unit 276 to receive authentication information from a user riding in the vehicle 200 and perform authentication. Furthermore, when a plurality of users use the vehicle 200, the authentication unit 326 may perform processing for each user to approve the use of other users.

Based on the records registered in the usage request list information 374, the usage vehicle determination unit 330 refers to the vehicle information 376 and the vehicle status management table 378, and determines the vehicle 200 that matches the user's request. For example, the usage vehicle determining unit 330 refers to the current location of the vehicle status management table 378 based on the boarding point included in the vehicle usage request or the location information of the terminal device 100, and determines which vehicles are within a predetermined distance. Extract vehicles whose usage status is empty. In addition, the usage vehicle determining unit 330 acquires information regarding the extracted vehicle from the vehicle information 376, and determines that the vehicle can accommodate more than the number of users included in the vehicle usage request, and the requested vehicle equipment information and A vehicle that satisfies the conditions of the vehicle interior information or a vehicle whose degree of agreement with each condition is equal to or higher than a threshold value is extracted.

If there are multiple vehicles that match the user's request, the usage vehicle determining unit 330 transmits information regarding the multiple matching vehicles to the user's terminal device 100 by the information providing unit 324, and selects the available vehicle from among the multiple vehicles. The vehicle selected by the user is determined as the vehicle to be used by the user.

Further, the usage vehicle determining unit 330 determines the usage schedule of the user for the determined vehicle 200, and registers the determined usage schedule in the usage schedule information 380. For example, when determining a usage schedule for a transportation request, the usage vehicle determining unit 330 determines the scheduled arrival time for boarding based on the desired boarding time in the record of the usage request list information 374, and In addition, the scheduled arrival time in the case of getting off the vehicle is determined by taking into consideration information such as legal speed. Furthermore, when the vehicle to be used has been determined, the vehicle to be used determining unit 330 stores “1” in the determined flag of the usage request list information 374. Furthermore, when there is no vehicle 200 that matches the request, "0" is stored in the determined flag of the usage request list information 374. The vehicle-in-use determining unit 330 may search for the vehicle in use again after a predetermined period of time has elapsed for records whose determined flag is "0."

When the mode of use of the vehicle 200 by the user is transportation, the route determining unit 340 determines a route to be instructed to the vehicle 200 based on the usage schedule information 380 and the map information 382, and uses the communication unit 310 to determine the route to be instructed to the vehicle 200. Route information is transmitted to vehicle 200. The function of the route determination unit 340 is similar to existing navigation systems.

The security level determining unit 342 determines the security level when the user uses the vehicle 200. The security level is, for example, the degree of restriction regarding the environment inside the vehicle or the use of in-vehicle equipment. The security level determination unit 342 determines the security level based on, for example, the content of the vehicle use request received by the reception unit 322, the current location of the vehicle 200, and the like. The details of the function of the security level determining section 342 will be described later.

The usage adjustment unit 344 adjusts the manner in which the vehicle 200 is used by the user. For example, the usage adjustment unit 344 refers to the vehicle status management table 378, and if the continuous usage time of the space usage service is longer than a predetermined time, the usage adjustment unit 344 determines the next usage mode of the vehicle 200 for the purpose of transportation according to the second application. change to the service provided. If the space continues to be used for a long time, there are concerns about dirt and odors inside the car, so by using the space at designated times for transportation destinations, other users can monitor the inside of the car and detect dirt and odors at an early stage. Can be done.

Further, the usage adjustment unit 344 refers to the charging state flag in the vehicle status management table 378, and when the vehicle 200 is in a charging state, suppresses its usage for transportation services and allows it to be used for space usage services that do not run. May be adjusted. Further, the usage adjustment unit 344 refers to the charging rate in the vehicle status management table 378, and executes the usage in the transportation service when the charging rate is equal to or higher than a predetermined value, and executes the usage in the space usage service when the charging rate is less than the predetermined value. Adjustments may be made so that the use of Further, the usage adjustment unit 344 may restrict the use of in-vehicle devices related to the use of the in-vehicle battery according to the charging rate. For example, if the charging rate is below a first predetermined value, use of the videophone function is prohibited, and if the charging rate is below a second predetermined amount, which is smaller than the first predetermined amount, use of the DVD playback device is prohibited. do.

The payment processing unit 350 performs processing for collecting fees from users. For example, the payment processing unit 350 collects fees from users in cooperation with an external device that manages electronic money and credit card payments. For example, when a space usage service is used, the payment processing unit 350 calculates the billed amount based on at least one of the usage time, the in-vehicle equipment used, the amount of power consumed, and the number of users. Furthermore, when a transportation service is used, the payment processing unit 350 calculates the billed amount based on at least one of the transportation distance, transportation time, and number of users. Further, the payment processing unit 350 may, for example, apply a discount or an extra charge to the normally calculated amount depending on the time period of use. For example, the payment processing unit 350 provides a discount on the usage fee when using the space usage service during a time when there are many vacant vehicles or when using a space utilization service for a vehicle that is charging the in-vehicle battery. Additional fees will be charged for use when there are few vacant vehicles. Thereby, it is possible to promote the use in situations where there are many empty vehicles and to suppress the use in situations where there are few empty vehicles. Further, the payment processing unit 350 may adjust the amount depending on the type of vehicle or the like.

[Determination of security level and control of vehicle interior use according to the level]
Next, the details of determining the security level and controlling the use of the vehicle interior according to the level will be explained. The security level determination unit 342 changes the security level of the vehicle 200 to a second application that allows the vehicle 200 to run when the reception unit 322 accepts a first application to use the space inside the vehicle without causing the vehicle 200 to run. The fee will be higher than if the application had been accepted. For example, the space utilization service is assumed to be mainly used by individuals or among friends, but it is less frequently seen from the outside than the moving vehicle 200, and is difficult for the public to see. Therefore, there is a risk that morale during use may deteriorate and the interior of the vehicle may be misused. Therefore, the security level determination unit 342 can allow users to use the vehicle interior space in a more appropriate environment by setting a higher security level when providing a space utilization service than when providing a transportation service. .

In the following, the security level when an application for a transportation service (second application) is accepted among vehicle usage requests accepted by the reception unit 322 is assumed to be "level 1", and an application for a space usage service (first application) is assumed to be "level 1". ) is accepted, the security level will be explained as "Level 2" which is higher than "Level 1". Security level determination unit 342 transmits information indicating the security level determined based on the vehicle usage request to vehicle 200.

The vehicle interior usage control unit 292 of the vehicle 200 acquires information indicating the security level from the management device 300, and based on the security level included in the acquired information, determines the security level based on the security information 298 stored in the storage unit 296. Get the attached restriction information. Furthermore, the vehicle interior use control unit 292 executes vehicle control regarding the user's use of the vehicle interior based on the acquired restriction information.

For example, when the user uses a transportation service (when the cabin control at level 1 is executed), the cabin usage control unit 292 allows unlimited adjustment of the illuminance inside the cabin of the vehicle 200. do. In addition, when the user uses the space utilization service (when the cabin control at level 2 is executed), the cabin usage control unit 292 sets the illuminance inside the cabin of the vehicle 200 to a threshold value included in the restriction information. (In the example of FIG. 3, it is controlled to be equal to or higher than Th1.) This threshold value is, for example, a value associated with the illuminance at which it is estimated that the interior of the vehicle can be seen to some extent from outside the vehicle. For example, the vehicle interior use control unit 292 acquires the illuminance of the vehicle interior using the illuminance sensor included in the vehicle sensor 237, and when the acquired illuminance is less than the threshold value Th1, the vehicle interior usage control unit 292 uses the vehicle interior lighting device 244 to set the interior light (light source). is turned on and the illuminance is controlled to be equal to or higher than the threshold value Th1. Moreover, when the vehicle interior use control unit 292 receives an instruction to adjust the illuminance of the vehicle interior lighting device 244 by the user's operation of the HMI 238, the vehicle interior usage control unit 292 controls the vehicle interior so that the illuminance does not become less than the threshold value Th1. In this case, the vehicle interior usage control unit 292 may cause the vehicle 200 or the terminal device 100 to output a message such as “At the current security level, it is not possible to make it any darker than this.” via the information providing unit 324. . In this way, in the case of a space utilization service, by making the interior of the vehicle bright enough to be visible from the outside, for example, it is possible to prevent a decline in the morale of the users regarding the use of the space of the vehicle 200 or to prevent users from exploiting the space. Can be suppressed.

Further, the vehicle interior usage control unit 292 may set the degree of monitoring of the user by the vehicle interior monitoring device 240 to be higher when the user uses the space usage service than when the user uses the transportation service. . Increasing the degree of monitoring means, for example, increasing the imaging time with the in-vehicle camera compared to when using transportation services, widening the imaging range, and detecting objects with an infrared sensor in addition to imaging with the in-vehicle camera. This includes things such as.

For example, when a user uses a transportation service, the vehicle interior usage control unit 292 controls the vehicle interior usage control unit 292 when an internal combustion engine such as an engine that runs on fuel is in operation, or when the vehicle 200 is traveling at a predetermined speed or higher. In this case, when the behavior of the vehicle 200 satisfies a predetermined condition, such as when the amount of speed change in a predetermined period of time is greater than or equal to a predetermined amount, such as during sudden acceleration or sudden stop, the vehicle interior monitoring device 240 monitors the interior of the vehicle. Have users monitored. Furthermore, when the user uses the space utilization service, the vehicle interior usage control unit 292 continuously monitors the user inside the vehicle interior using the vehicle interior monitoring device 240 while the user is present in the vehicle interior. let In this way, in the case of a space utilization service, the user monitoring period is made longer than in the case of a transportation service, so that morale of the users deteriorates when using the space of the vehicle 200, and the inside of the vehicle is misused. This can be suppressed.

In addition, the vehicle interior use control unit 292 performs control to permit or deny the user's use based on the use permission conditions according to the security level from the management device 300. In this case, the authentication unit 326 of the management device 300 may perform mutual recognition among the users when a plurality of users use the space, in addition to personal authentication of the users, depending on the level. In the example in Figure 3, when the security level is level 1, personal authentication is performed for each of one or more users, and when the security level is level 2, personal authentication is performed for one user. , is set to perform personal authentication and mutual recognition in the case of two or more people. When performing personal authentication, the authentication unit 326 displays an image for inputting authentication information on the terminal device 100 of the user performing the authentication or the display device included in the HMI 238 of the vehicle 200 in which the user rides, and displays the authentication information. accepts input.

FIG. 10 is a diagram showing an example of an image for inputting authentication information. Note that the display mode such as the layout and display contents of the image IM1 is not limited to the following example. The same applies to the description of subsequent images. The image IM1 shown in FIG. 10 includes, for example, an authentication information input area A11 and a switch display area A12 as an authentication screen. In the authentication information input area A11, for example, an area where the user is required to input a user ID and password as authentication information for identifying the user is displayed. The switch display area A12 includes, for example, an icon IC11 and an icon IC12. The icon IC11 is a GUI (Graphical User Interface) switch (OK button shown in FIG. 10) that accepts an instruction to cause the management device 300 to perform user authentication processing based on the information input in the authentication information input area A11. Icon IC12 is a GUI switch (CANCEL button shown in FIG. 10) that accepts termination of display of image IM1 without performing authentication. In the example of FIG. 10, when the selection of the icon IC11 is accepted, the authentication unit 326 of the management device 300 identifies the user of the user information 372 based on the contents of the user ID and password input in the authentication information input area A11. Refer to the ID and password and decide whether to permit or deny service use depending on whether they match or not.

Further, when the vehicle usage request is for a space usage service and the number of users is plural, the authentication unit 326 is configured to authenticate the display device included in the HMI 238 of the vehicle 200 in which a plurality of users board or the plurality of users using the vehicle usage request. An image for mutual recognition is displayed on each terminal device 100 of the terminal device 100, and the final approval or disapproval of the use is determined based on the contents input by the users thereafter.

FIG. 11 is a diagram showing an example of an image IM2 for performing mutual recognition. Image IM2 includes, for example, a character display area A21 and a switch display area A22 as a mutual recognition screen. In the character display area A21, characters are displayed for each user to select whether or not to approve the use of other users. In the example of FIG. 11, characters such as "Are the other users using the service at the same time your acquaintances?" are displayed in the character display area A21.

The switch display area A22 includes, for example, an icon IC21 and an icon IC22. The icon IC21 is a GUI switch (YES button shown in FIG. 11) that accepts permission for use by other users. The icon IC22 is a GUI switch (NO button shown in FIG. 12) that accepts refusal of use by other users. In the example of FIG. 11, when the selection of the icon IC21 is accepted, the authentication unit 326 permits simultaneous use by a plurality of users riding in the vehicle 200. When the selection of the icon IC 22 is accepted, the authentication unit 326 of the management device 300 refuses the use of the vehicle 200 until all users or other users (for example, the rejected user) get off the vehicle. The vehicle interior usage control unit 292 is controlled so as not to allow the vehicle to be used. In this case, the authentication unit 326 may cause the terminal device 100 or the HMI 238 of the vehicle 200 to output information indicating that usage is refused, or may cause the door of the vehicle 200 to remain open until another user gets off the vehicle. control. Thereby, it is possible to prevent other people from using the space of the vehicle 200 at the same time. Therefore, it is possible to prevent crimes from occurring within the vehicle space.

In addition, when multiple users board the vehicle at different times rather than at the same time, the authentication unit 326 recognizes the number of users from images captured by the interior camera of the vehicle interior monitoring device 240 of the vehicle 200. When the number of users increases, mutual recognition may be performed by transmitting the image IM2 described above to each user's terminal device 100 or the display device of the vehicle 200. In addition, if there are multiple users, such as a parent and a child, and one user (e.g., child) does not own the terminal device 100, only the other user (e.g., parent) can give approval. You may go.

In addition, when permitting use that includes users who are not acquaintances, such as in a ride-sharing service, the authentication unit 326 displays "Allow sharing of space with other users on board" in character display area A21. Mutual recognition may be performed by displaying a message such as "?". As a result, it is possible to permit the use of combinations that are less likely to cause trouble between users, such as between children or between students, and to deny use by suspicious persons. Therefore, the service can be used more widely, and a safer and more comfortable service can be provided.

Note that the personal authentication using images shown in FIG. 10 and the mutual recognition authentication shown in FIG. 11 described above may be performed by the vehicle 200 side (for example, the user recognition unit 276 or the vehicle interior use control unit 292). In this case, the user information 372 may be stored in the storage unit 296.

In addition, when the user uses the space utilization service and the vehicle 200 is located within a predetermined area, the vehicle interior usage control unit 292 selects "Level 2," which has a higher security level than "Level 2." Level 3" and vehicle control may be performed based on the level 3 restriction information. In this case, the vehicle interior use control unit 292 sets the "Level 3" restriction information, such as permitting use by only one user through personal authentication (use by multiple users is not allowed), or setting the level of illumination inside the vehicle. Control is performed such that it is adjusted to be equal to or greater than a threshold value Th2, which is larger than the threshold value Th1. The predetermined area is, for example, a previously set unsafe area. As a result, for example, when providing a space utilization service in an area with poor security, it is possible to provide a more appropriate space utilization service by only allowing use in an environment where the interior of the vehicle cannot be misused.

In addition, when the above-mentioned predetermined area is a predetermined safe area or an area where the occurrence of crime is expected to be low, the vehicle interior usage control unit 292 has a security level lower than "level 2". It may be changed to "Level 1". Areas that are expected to be safe or have a low incidence of crime include, for example, the parking lot of a management company (such as a maintenance shop) that cleans and maintains the vehicle 200, or an area that is a certain distance from a police station or police box (for example, parking lot, etc. within several tens of meters). This allows the user to utilize the interior of the vehicle under restrictions appropriate to the area where the vehicle 200 is located.

[Processing based on the usage status of the vehicle by the user]
Processing based on the state of use of vehicle 200 by the user will be described below. The usage state acquisition unit 294 of the vehicle 200 acquires the usage state of each user based on the monitoring result by the vehicle interior monitoring device 240 and the detection result by the vehicle sensor 237. For example, the usage status acquisition unit 294 acquires the user's behavior from an image captured by a vehicle interior camera, and estimates the user's usage status from the acquired behavior. Specifically, the usage state acquisition unit 294 analyzes a camera image to obtain feature information (e.g., facial and posture features), and performs state estimation to estimate a predetermined state using the obtained feature information. Perform pattern matching with the information to obtain the user's status. The state estimation information is stored in the storage unit 296, for example. The user's status includes, for example, ``the user is operating the terminal device 100 or in-vehicle equipment'', ``sleeping'', ``the user has dropped something'', and ``the user has spilled food and drink''. , ``a state where users are fighting with each other,'' and ``a state where users are smoking.'' Further, as the state of the user, for example, the odor intensity obtained by the odor sensor during or after use may be obtained. The usage status acquisition unit 294 acquires the user's status every time the user's status changes.

Further, the usage status acquisition unit 294 acquires information such as the usage time for each user and the type of in-vehicle equipment used. The usage status acquisition unit 294 transmits the acquired information to the management device 300 via the communication device 220. Note that when the usage status acquisition unit 294 determines that the user's status is inappropriate, the usage status acquisition unit 294 may notify the management device 300 of information regarding the user. For example, the usage state acquisition unit 294 may detect that the user's state is "spilled food or drink," "fighting," or "smoking even though smoking is prohibited inside the vehicle." If the odor level detected by the odor sensor is equal to or higher than the threshold value, the usage state is determined to be inappropriate.

The usage adjustment unit 344 of the management device 300 adjusts the next usage of the vehicle 200 based on the user information acquired by the usage status acquisition unit 294. For example, the usage adjustment unit 344 refers to the usage history and continuous usage time included in the vehicle status management table 378, and if there is a vehicle that has been used for a space usage service for a predetermined period of time or more, the usage adjustment unit 344 selects the vehicle 200 from the transportation service. Adjust it so that it can be used in If the space is used for a long time, there are concerns about dirt and odors inside the vehicle. Therefore, by switching the vehicle 200 that has been used for more than a predetermined period of time to use for transportation services, transportation users can be free from dirt and odors. You can check the situation. Further, it is possible to suppress a decline in morale caused by individuals or friends using the space for a long time.

Further, the usage adjustment unit 344 may control the vehicle 200 to be cleaned or maintained at a repair shop or the like when the vehicle 200 is inappropriately used. Thereby, the vehicle 200 can be brought into a clean state quickly.

Further, the usage adjustment unit 344 performs control such as refusing usage until a certain period of time has elapsed if the user has made inappropriate usage. Further, the usage adjustment unit 344 may perform control to request a fine depending on the type of inappropriate act and deny usage until the requested fine is paid.

Further, the usage adjustment unit 344 may not accept an application for the space usage service (first application) when the position of the vehicle 200 is within a predetermined area. This makes it possible, for example, to prohibit the use of a designated area in a unsafe area, thereby preventing situations such as the interior of the vehicle being misused or being approached by a suspicious person outside the vehicle. can do.

[Processing sequence]
The flow of a series of processes by the management system 1 of the embodiment will be described below. In addition, below, as a process by the management system 1 of embodiment, the process using the terminal device 100, the vehicle 200, and the management apparatus 300 used by a user is demonstrated.

FIG. 12 is a sequence diagram showing the flow of a series of processes by the management system 1 of the embodiment. In the example of FIG. 12, the user performs user information registration processing from the terminal device 100 to the management device 300 (step S100). Furthermore, the vehicle 200 transmits information indicating the usage status and current location of the vehicle 200 to the management device 300 (step S102). The management device 300 receives the user information transmitted from the terminal device 100, stores the received information in the user information 372, and stores the information transmitted from the vehicle 200 in the vehicle status management table 378 (step S104). Note that the process of step S102 is continuously executed at a predetermined period in subsequent processes, and the vehicle status management table 378 is updated each time.

Next, the user accesses the management device 300 from the terminal device 100 in order to use the vehicle usage service (step S110). The management device 300 receives authentication information from the accessed terminal device 100, and performs authentication processing based on the received authentication information (step S112). In the following description, it is assumed that the user is permitted to use the service. Next, the management device 300 receives the user's vehicle usage request from the terminal device 100 (step S114), determines a vehicle to be used that matches or is similar to the conditions of the received vehicle usage request (step S116), and Information indicating the vehicle is transmitted to the terminal device 100 (step S118). Furthermore, the management device 300 determines the security level when the user uses the vehicle based on the vehicle usage request (step S120), and transmits information on the determined security level to the vehicle 200 (step S122).

Next, when the user gets into the vehicle, the vehicle 200 displays the image IM1 as shown in FIG. 10 on the display device included in the HMI 238, and acquires the authentication information input by the image IM1 (step S124 ), and transmits the acquired authentication information to the management device 300 (step S126). The management device 300 receives the authentication information transmitted from the vehicle 200, performs authentication processing (step S128), and transmits the authentication result to the vehicle 200 (step S130). Here, it is assumed that riding and service use are permitted through authentication. The vehicle 200 executes vehicle interior usage control according to the security level (step S132). Next, the vehicle 200 acquires the usage status of the user (step S134), and transmits information including the acquired usage status to the management device 300 (step S136).

When the user finishes using the service, the management device 300 receives information including the usage status transmitted from the vehicle 200, and performs payment processing based on the received information (step S138). Specifically, the management device 300 calculates the billing amount regarding the usage status, and transmits the calculated billing amount to the terminal device 100 (step S140). The terminal device 100 pays the billed amount using electronic money or the like, and sends a notification that the payment has been completed to the management device 300 (step S142). Thereby, the series of processing by the management system 1 of the embodiment ends.

Note that among the above-described processes, instead of the processes in steps S124 to S128, when the vehicle interior monitoring device 240 detects that a user has boarded the vehicle 200, the vehicle 200 detects that a user has boarded the vehicle. The information may be transmitted to the management device 300, and the management device 300 may cause the terminal device 100 to display an image IM1 as shown in FIG. 10, and perform authentication processing based on the authentication information input from the terminal device 100.

According to the embodiment described above, there is provided a management system 1 that manages a service that provides a user with a vehicle 200 that can run autonomously without a driver in the vehicle, and that accepts applications from users to use the vehicle 200. When the reception unit 322 accepts the first application to use the space inside the vehicle without running the vehicle 200, the security level of the vehicle 200 is changed to the second application to run the vehicle 200. By providing a vehicle interior usage control unit 292 that increases the height of the vehicle compared to when the vehicle is accepted, a more appropriate vehicle can be used even when the user uses the space inside the vehicle without driving the vehicle. can be controlled. Further, according to the embodiment, a more comfortable private room space can be provided in addition to normal transportation services, even in services that use the vehicle 200 as a private room space.

The embodiment described above can be expressed as follows.
A management system that manages a service that provides users with vehicles that can run autonomously without a driver on board,
a storage device that stores the program;
comprising a hardware processor;
By the hardware processor executing the program,
Accepting applications from users for the use of vehicles,
When a first application to use the space inside the vehicle without running the vehicle is accepted, the security level of the vehicle is set to be higher than when a second application to run the vehicle is accepted. make it higher,
management system.

Although the mode for implementing the present invention has been described above using embodiments, the present invention is not limited to these embodiments in any way, and various modifications and substitutions can be made without departing from the gist of the present invention. can be added.

For example, some or all of the components of management device 300 may be mounted on vehicle 200, and some or all of the components of vehicle 200 may be mounted on management device 300. In this case, for example, the function of the authentication section 326 of the management device 300 may be included in the user recognition section 276 of the vehicle 200. Furthermore, for example, part of the functions of the vehicle interior use control unit 292 of the vehicle 200 may be installed in the management device 300, and the management device 300 may generate restriction information based on the security level and transmit it to the vehicle 200, and Vehicle control may be executed based on the restriction information. Furthermore, input of information in the authentication and mutual recognition of the embodiment may be performed by voice input instead of (or in addition to) screen input. Furthermore, vehicle 200 may be a remotely operated vehicle that is remotely operated from a remote location. In this case, vehicle 200 transmits various information acquired by monitoring unit 210 to an external device using communication device 220. The external device generates (or reproduces) an image showing the surrounding situation of the vehicle 200 based on the received various information and presents it to the remote operator. At this time, images and the like may be corrected by pre-reading processing in order to compensate for delays due to communication. The remote operator operates the driving controls based on the presented image. The operation performed on the driving operator is transmitted to the vehicle 200, and the vehicle 200 runs based on the received operation.

1... Management system, 100... Terminal device, 200... Vehicle, 210... Monitoring unit, 220... Communication device, 230... Navigation device, 237... Vehicle sensor, 238... HMI, 240... Vehicle interior monitoring device, 242... Authentication device, 244... Vehicle interior lighting device, 260... Driving force output device, 262... Brake device, 264... Steering device, 266... Door lock device, 270... Automatic driving control unit, 272... Route traveling control unit, 274... Getting on/off position searching unit , 276...User recognition unit, 280...Getting on/off control unit, 290...HMI control unit, 292...In-vehicle usage control unit, 294...Usage status acquisition unit, 296, 370...Storage unit, 300...Management device, 310...Communication 320...Front processing unit, 322...Reception unit, 324...Information providing unit, 326...Authentication unit, 330...Used vehicle determining unit, 340...Route determining unit, 342...Security level determining unit, 344...Usage adjustment unit, 350...Payment processing section

Claims (10)

A management system that manages a service that provides users with vehicles that can run autonomously without a driver on board,
a reception department that receives an application for use of the vehicle by the user;
When the reception unit accepts a first application to use the space inside the vehicle without running the vehicle, a security level indicating the degree of restriction regarding the environment inside the vehicle or the use of in-vehicle equipment is determined. , a security level determining unit that increases the security level compared to when a second application for driving the vehicle is accepted;
A management system equipped with. further comprising a vehicle interior usage control unit that controls usage of the vehicle interior by the user based on the security level determined by the security level determination unit;
The vehicle interior use control unit controls the illuminance in the vehicle interior to be equal to or higher than a threshold value when the user uses the space inside the vehicle interior without driving the vehicle according to the first application. do,
The management system according to claim 1. When the user uses the space inside the vehicle without driving the vehicle according to the first application, the vehicle interior usage control unit controls the user by using a vehicle interior monitoring device that monitors the interior of the vehicle. setting the degree of monitoring to be higher than the degree of monitoring when the use of causing the vehicle to travel is executed according to the second application to cause the vehicle to travel;
The management system according to claim 2. The vehicle interior usage control unit is configured to control the vehicle interior usage control unit, when there are multiple users who use the vehicle interior space without running the vehicle according to the first application, each user If the user is approved, the user is allowed to use the space inside the vehicle;
The management system according to claim 2 or 3. further comprising a usage status acquisition unit that acquires the usage status of the vehicle interior of the user,
The usage status acquisition unit notifies a management device of information regarding the user when determining that the usage status of the vehicle interior of the user is inappropriate.
A management system according to any one of claims 1 to 4. Use of the vehicle for the purpose of transporting the user according to the second application, if the usage time of the service that uses the space inside the vehicle without running the vehicle is longer than a predetermined time; further comprising an adjustment section;
A management system according to any one of claims 1 to 5. The security level determining unit changes the security level of the vehicle when the vehicle is present in a predetermined area.
A management system according to any one of claims 1 to 6. The usage adjustment unit does not accept the first application when the vehicle is present in a predetermined area.
The management system according to claim 6. The computer is
Accepting applications from users for the use of vehicles,
When a first application to use the space inside the vehicle without running the vehicle is accepted, a security level indicating the degree of restriction regarding the environment inside the vehicle or the use of in-vehicle equipment is set for the vehicle. higher than if the second application for running was accepted;
Management method. to the computer,
accept applications from users for the use of vehicles;
When a first application to use the space inside the vehicle without running the vehicle is accepted, a security level indicating the degree of restriction regarding the environment inside the vehicle or the use of in-vehicle equipment is set for the vehicle. make it more expensive than if the second application for running was accepted;
program.

Images