JP2022023209A - Anonymization system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an anonymization system that improves anonymity when service is provided by a flying object.

SOLUTION: An anonymization system applicable when a service is provided by a flying object is provided. The system includes at least a flying object and a plurality of computer terminals connected to the flying object via a network. The flying object, which is given with a predetermined transaction for a predetermined object, requests a computer terminal capable of verifying validity of the transaction among the computer terminals to verify the validity of the transaction. And the computer terminal requested for verification transmits a result of the verification to the flying object. Then, the flying object executes the transaction on the basis of the verification result of the transaction.

SELECTED DRAWING: Figure 11

COPYRIGHT: (C)2022,JPO&INPIT

Description

The present invention relates to an anonymization system at the time of service provision of an air vehicle.

Patent Document 1 discloses a technique for accurately landing a small aircraft at a destination. The small flight system disclosed in the document has a landing guidance port device for guiding and landing a small aircraft. The landing guidance port device transmits a radio wave in which a port ID corresponding to its own identifier is superimposed as a guidance radio wave for landing.

Japanese Unexamined Patent Publication No. 2017-37369

The technique described in Patent Document 1 cannot guarantee anonymity.

Therefore, one object of the present invention is to improve anonymity when a service is provided by an air vehicle.

According to the present invention, it is an anonymization system when a service is provided by an air vehicle.
It includes at least the aircraft and a plurality of computer terminals connected to the aircraft via a network.
The flying object is given a predetermined transaction to a predetermined target, and requests the computer terminal among the computer terminals capable of verifying the validity of the transaction to verify the validity of the transaction.
The computer terminal requested to perform the verification transmits the result of the verification to the flying object, and the result of the verification is transmitted to the flying object.
The flying object executes the transaction based on the verification result of the transaction.
Anonymization system is obtained.

According to the present invention, it is possible to improve anonymity when a service is provided by an air vehicle.

It is a schematic diagram and the image diagram of the system by embodiment of this invention. It is a block diagram which shows the hardware composition of the unmanned moving body of FIG. It is a block diagram which shows the hardware configuration of the management server of FIG. FIG. 3 is an image diagram schematically showing the contents of data used in the system of FIG. 1. It is an image diagram of the route generation by the system of FIG. It is a flow of processing of the management server by the system of FIG. It is a figure which shows the flow of processing between a management server, an unmanned flying object, and a user terminal by the system of FIG. It is an image diagram which shows the example which applied the system of FIG. 1 to a delivery system. It is a figure showing the image of the client-server model composed of a management server and a plurality of unmanned aircraft, and the peer-to-peer model composed of only a plurality of unmanned aircraft. A transaction anonymization process by an unmanned aircraft. It is an image diagram of processing between an unmanned aircraft, a management server, and a user. The data structure used for the processing of FIG. 11 is schematically shown.

The contents of the embodiments of the present invention will be described in a list. The anonymization system according to the embodiment of the present invention has the following configuration.
[Item 1]
An anonymization system that includes an air vehicle and at least multiple computer terminals connected to the air vehicle via a network.
The flying object is given a predetermined transaction to a predetermined target, and requests the computer terminal among the computer terminals capable of verifying the validity of the transaction to verify the validity of the transaction.
The computer terminal requested to perform the verification transmits the result of the verification to the flying object, and the result of the verification is transmitted to the flying object.
The flying object executes the transaction based on the verification result of the transaction.
Anonymization system.
[Item 2]
The anonymization system according to claim 1.
The transaction is a delivery transaction for the aircraft to deliver the delivery object to the user.
The flying object is an anonymization system that enables the user to receive the delivery object based on the verification result.
[Item 3]
The anonymization system according to claim 2.
It also includes a management server that manages the service.
The flying object delivers the delivery object to the designated place of the user, and when it arrives at the designated place, sends an arrival approval to the management server.
The management server enables a receipt request for the delivery object that has arrived at the user's terminal, and when the receipt request is received from the terminal, the management server generates a Uso transaction.
Anonymization system.
[Item 4]
The anonymization system according to any one of claims 1 to 3.
The management server receives a route request from the flying object; reads node position information of a plurality of nodes arranged in real space; and based on the route request and the node position information, a start point node, a transit node, and an end point node. And generate a route; send the generated route to the flying object,
Anonymization system.
[Item 5]
The anonymization system described in item 4,
The route is generated on a route connecting the nodes with a straight line.
Anonymization system.
[Item 6]
The anonymization system described in item 5,
The node position information includes X-coordinates, Y-coordinates, and Z-coordinates relating to the positions of nodes in real space.
The generated route is generated at least above the Z coordinate.
Anonymization system [Item 7]
The anonymization system described in item 6
The node is a utility pole
The route includes an area above an electric wire connecting one utility pole to another.
Anonymization system.
[Item 8]
The anonymization system for an air vehicle according to any one of items 1 to 7.
The plurality of said aircraft can communicate with each other via a network.
Each of the flying objects generates its own route in consideration of the position of the flying object or the generated route.
Anonymization system.

<Details of the embodiment>
Hereinafter, the anonymization system according to the embodiment of the present invention will be described with reference to the drawings.

<Overview>
The anonymization system according to the embodiment of the present invention can be used when providing a service by an unmanned aircraft (described later). To give an example of a service, it is an application that makes an unmanned aircraft fly according to a predetermined flight route, and a flight route is set in advance such as home delivery, security / patrol, agriculture, surveying, investigation, and disaster support. It can be applied to any application that can be obtained. In the following, an example mainly applied to home delivery will be described.

As shown in FIG. 1A, in the system according to the present embodiment, the unmanned vehicle 1 flies over the utility pole 20 and the electric wire 30 provided between the utility poles as a flight route. As shown in FIG. 2B, the flight route can be expressed as a virtual network having utility poles a to j as nodes, and in route generation, the utility poles (start point nodes) as start points and end points are used. The utility pole (end point node), the utility pole (via node) passing through the start point node and the end point node, and the electric wire provided between them are considered (details will be described later).

<Structure>
As shown in FIG. 9A, the aircraft system according to the present embodiment is a so-called system including a plurality of unmanned aircraft 1 and a management server 2 connected to the unmanned aircraft 1 via a network. It is a client-server model.

<Hardware configuration>

The unmanned aerial vehicle 1 in the present embodiment includes a drone (Drone), a multicopter (Multicopter), an unmanned aerial vehicle (UAV), an RPS (remote piloted aircraft systems), or a UAS ( May be called.

In the following description, it will be referred to as an unmanned aircraft. The unmanned vehicle includes a battery, a plurality of motors, a position detection unit, a control unit, a driver, a storage device, a wireless communication device, a voltage sensor, a current sensor, and the like. These components are mounted on a frame having a predetermined shape. The hardware configuration of the information processing device mounted on the unmanned aircraft will be described later. As for the basic structure for these flights, known techniques can be appropriately adopted.
The hardware configurations of the unmanned aircraft 1 and the management server 20 will be described with reference to FIGS. 2 to 4, respectively.

<Unmanned flying object 1>
As shown in FIG. 2, the unmanned aircraft 1 is equipped with an information processing device 100. The information processing apparatus 100 constitutes a part of the information transmission system by executing information processing via communication with the server 1.

The information processing apparatus 100 includes at least a processor 10, a memory 11, a storage 12, a transmission / reception unit 13, an output unit 14, a positioning unit 16, a detection unit 17, and the like, and these are electrically connected to each other through a bus 15. The information processing apparatus 100 may be configured by, for example, a microcomputer or an ASIC (Application Specific Integrated Circuit), or may be logically realized by cloud computing.

The processor 10 is an arithmetic unit that controls the operation of the information processing device 100, controls the transmission and reception of data between each element, and performs processing necessary for executing an application. For example, the processor 10 is a CPU and / or a GPU (Graphical Processing Unit) or the like, and performs each necessary information processing by executing a program or the like stored in the storage 12 and expanded in the memory 11.

The memory 11 includes a main storage configured by a volatile storage device such as RAM and an auxiliary storage configured by a non-volatile storage device such as a flash memory or an HDD. The memory 11 is used as a work area of the processor 10, and also stores a BIOS executed when the information processing apparatus 100 is started, various setting information, and the like. An application program or the like is stored in the storage 12.

The transmission / reception unit 13 connects the information processing device 100 to the network 4 and communicates with the management server 1 via the LPEA network. The transmission / reception unit 13 may be provided with a short-range communication interface of Bluetooth (registered trademark) and BLE (Bluetooth Low Energy).

The input / output unit 14 is an information input device such as switches and an output device such as a display. Although the unmanned flying object 1 performs autonomous flight, it may be operated manually or automatically remotely from the outside. The unmanned flying object 1 according to the present embodiment is equipped with a camera as an input function, and is capable of aerial photography of still images and moving images. Further, various cameras such as an infrared thermo camera, an X-ray camera, a high-sensitivity camera, and a night-vision camera may be provided depending on the information to be collected.

The bus 15 is commonly connected to each of the above elements and transmits, for example, an address signal, a data signal, and various control signals.

The positioning unit 16 detects at least the position and altitude of the unmanned aircraft 1. The positioning unit 26 according to the present embodiment is, for example, a GPS (Global Positioning System) detector, which detects the latitude, longitude, and altitude of the current position of the unmanned vehicle 1.

The detection unit 17 is for sensing the external environment of the unmanned flight object 1 by various sensors such as voice, image, and infrared rays, and controls an auxiliary function for independent flight.

In addition to the information processing device 100, the unmanned flying object 1 according to the present embodiment includes a power supply, a motor connected to a rotor blade, an information processing device 100 and a motor for moving and flying the unmanned flying object 1. It has at least more relay drivers.

The information processing apparatus 100 controls a plurality of motors to control flight of a monitoring drone (control of ascent, descent, horizontal movement, etc.) and uses a gyro (not shown) mounted on the unmanned aerial vehicle 1. Attitude control is also performed by controlling multiple motors.

The driver drives the motor according to the control signal from the information processing device 100. For example, the motor is a DC motor, and the driver is a variable voltage power supply circuit that applies a voltage specified by a control signal to the motor. The unmanned aircraft 100 may have other elements (not shown).

<Management server 2>
As shown in FIG. 2, the management server 2 is an information processing device for providing services through an information transmission system, and may be a general-purpose computer such as a workstation or a personal computer, or cloud computing. It may be realized logically by.

As shown in FIG. 2, the server 2 includes a processor 20, a memory 21, a storage 22, a transmission / output unit 23, an input / output unit 24, and the like, which are electrically connected to each other through a bus 25.

The processor 20 is an arithmetic unit that controls the operation of the entire server 2, controls the transmission and reception of data between each element, and performs information processing and the like necessary for executing an application. For example, the processor 20 is a CPU (Central Processing Unit), and executes each information processing by executing a program or the like stored in the storage 22 and expanded in the memory 21.

The memory 21 includes a main storage configured by a volatile storage device such as a DRAM (Dynamic Random Access Memory) and an auxiliary storage configured by a non-volatile storage device such as a flash memory or an HDD (Hard Disk Drive). .. The memory 21 is used as a work area or the like of the processor 20, and also stores a BIOS (Basic Input / Output System) executed when the server 2 is started, various setting information, and the like.

The storage 22 stores various programs such as an application program and an authentication program for each unmanned aircraft 1. A database (location data, route data, etc., which will be described later) storing data used for each process may be built in the storage 22.

<Data>
The management server 2 according to the present embodiment has a node position information DB regarding the position of each utility pole. As shown in FIG. 4, the node position information DB includes at least a node identifier and position coordinates uniquely assigned to each utility pole. The position coordinates according to the present embodiment include at least three elements of latitude, longitude and height of the utility pole.

<Processing flow>
A method of route generation according to the present embodiment will be described with reference to FIG. The system according to this embodiment is in charge of a transaction related to delivery of a product purchased by a user using EC or the like (hereinafter referred to as "delivery transaction"). The delivery transaction itself is generated, for example, based on pre-registered user address information.

When the management server 2 starts a delivery transaction, the utility pole closest to the shipping source of the package (starting point node) and the utility pole closest to the delivery destination (user's address, etc.) are specified. In the illustrated example, the start point node is the utility pole a and the end point node is the utility pole j. The management server 2 calculates the shortest path connecting the utility pole a and the utility pole j. At this time, the position and route of the other unmanned flying object 1 are taken into consideration, and a route capable of avoiding a collision is generated.

It should be noted that collision avoidance may be performed by the unmanned flying objects 1. For example, the height of one unmanned vehicle and the height of the other unmanned vehicle may be changed to avoid a collision.

Returning to FIG. 5, the route according to the present embodiment proceeds in the order of utility pole a → utility pole b → utility pole d → utility pole f → utility pole h → utility pole j. It should be noted that some routes may be bypassed in order to avoid the collision described above. It flies in an area that is a predetermined distance away from the electric wire in the vertical direction (height direction).

The processing flow of the management server 2 will be described with reference to FIG. In the present embodiment, when the delivery transaction (route request) occurs (step S601), the node position information is read (step S603). The management server 2 identifies the start point node, the transit node, and the end point node based on the delivery transaction and the node position information, and generates a route (step S605). The generated route information is transmitted to the unmanned flying object 1, and delivery by flight of the unmanned flying object 1 is started (step S607).

A flow of delivery processing using the system according to the present embodiment will be described with reference to FIG. 7. As shown, the delivery process is performed by the management server 2, the unmanned aircraft 1, and the user terminal.

When the delivery transaction occurs (SQ701), the management server 2 reads the node position information from the node DB (SQ703) and generates a route (SQ705). The management server 2 transmits the generated route information to the unmanned aircraft (SQ707). The unmanned aircraft starts flight based on the received route information (SQ709).

When the unmanned aircraft arrives at the destination, the management server 2 is notified of the destination arrival notification (SQ711). The management server 2 notifies the user terminal of the arrival notification (SQ713). After confirming the destination of the arrived baggage, the user sends a notification of each place to the management server 2 (SQ715). Upon receiving the confirmation notification from the user regarding the luggage, the management server 2 unlocks the luggage loaded on the unmanned aircraft 1 (SQ717). Unlocked luggage can be picked up by the user. The management server 2 updates the status of the delivery transaction when the delivery is completed, if necessary (SQ719).

According to the above processing, as shown in FIG. 8, the unmanned aircraft 1 is placed on the utility pole 20 and the electric wire 30 from the cargo storage location 100 (for example, a warehouse or the like) according to the route generated by loading the cargo P. It is possible to fly and deliver the luggage P to the user's home 200 and deliver it to the user.

As shown in FIG. 9A, the above-described embodiment utilizes a so-called client-server model including the unmanned aircraft 1 and a management server 2 connected via a network. However, as shown in FIG. 9B, a peer-to-peer system may be adopted, which is composed of a plurality of unmanned aircraft 1s.

<Service anonymization>
At the time of service provision by the above-mentioned unmanned aircraft, for example, at the time of delivery of luggage, it becomes necessary to verify whether the recipient is a legitimate recipient. In the present embodiment, by applying the blockchain technology to the verification, it is possible to perform appropriate delivery while enhancing anonymity.

Hereinafter, a transaction in which an unmanned aircraft (limited to those that can be identified by a unique identifier) delivers a predetermined package to a user having a unique user ID will be described as an example.

As shown in FIG. 10, in the authentication according to the present embodiment, when a transaction occurs (step S1001), the transaction is broadcast in the network (step S1003), and the transaction is verified (step S1005). When a block related to the verified transaction is generated (S1007), the block is added to the chain.

As shown in FIG. 11, the interaction between the unmanned vehicle 1 and the management server 2 (for example, acquisition of delivery destination information, locking of luggage to the unmanned aircraft, etc.) and the interaction between the management server 2 and the user 202. At the time of (authentication at the time of receiving the baggage, request for unlocking the baggage, etc.), the management server 2 requests the blockchain network to verify the validity of the transactions related to these, and also for these transactions. Leave the history as a log in the block.

<Preparation>
More specifically, the recipient user 202 creates his or her public / private key pair. Next, the hash value of the public key is created and provided to the management server 2. The hash value of this public key serves as the address (destination) of the user as the delivery destination. For example, the QR code (registered trademark) information including the hash value of the public key may be displayed on the user's terminal. In this state, the user has his / her public key and private key, and the management server 2 has the public key hash of user 202.

<Outline of transaction method>
When the unmanned aircraft 1 delivers a package to a user, information declaring the legitimacy of the package being delivered to the user is shared within the network. More specifically, only those who have the private key corresponding to the destination public key hash can receive luggage from the unmanned aircraft. Since only the person has the private key, it is a mechanism that can only be used by the person who is the destination.

Normally, it is recommended to renew the public key pair in units of one transaction (delivery, payment, etc.).

The specific data structure is as follows. First, FIG. 12 shows the structure of the baggage information delivered by the management server 2 to the user 202 by the unmanned flying object 1. As shown, the transaction ID (TX_ID), the public key of the sender of the luggage (for example, the unmanned aircraft 1), and the electronic signature information (Signature Script) are input information. Impu information is information for identifying who (from where) the package to be delivered is. Then, as the Output information, there is an ID (Del_ID) that identifies the delivery item and public key hash information (Pubkey Script) of the delivery destination (user 202).

The person who can receive the package related to the delivery is only the person who has the private key corresponding to the public key of the user 202 (that is, the user 202). Further, once the user 202 authenticates using the private key, the Outpu information regarding the baggage cannot be used, so that it cannot be received twice.

As described above, in the present embodiment, by including the public key hash information of the destination (person) who wants to deliver the package in the information related to the transaction, only the destination can surely receive the package.

Although the embodiment described above has been used for delivery, it may be applied to, for example, a patrol use such as security. In this case, the management server 2 may generate a patrol route based on the patrol route and the node position information specified by the user. Further, when the patrol is completed, the patrol transaction may be terminated after sending the completed patrol to the user and receiving approval from the user.

The embodiments described above are merely examples for facilitating the understanding of the present invention, and are not intended to limit the interpretation of the present invention. It goes without saying that the present invention can be modified and improved without departing from the spirit thereof, and the present invention includes its equivalents.

1 Unmanned aircraft 2 Management server 20 Utility pole 30 Electric wire

Claims (4)

It is an anonymization system when the service is provided by the aircraft.
It includes at least the aircraft and a plurality of computer terminals connected to the aircraft via a network.
The flying object is given a predetermined transaction to a predetermined target, and requests the computer terminal among the computer terminals capable of verifying the validity of the transaction to verify the validity of the transaction.
The computer terminal requested to perform the verification transmits the result of the verification to the flying object, and the result of the verification is transmitted to the flying object.
The flying object executes the transaction based on the verification result of the transaction.
Anonymization system. The anonymization system according to claim 1.
The transaction is a delivery transaction for the aircraft to deliver the delivery object to the user.
The flying object is an anonymization system that enables the user to receive the delivery object based on the verification result. The anonymization system according to claim 2.
It also includes a management server that manages the service.
The flying object delivers the delivery object to the designated place of the user, and when it arrives at the designated place, sends an arrival approval to the management server.
The management server enables a receipt request for the delivery object that has arrived at the user's terminal, and when the receipt request is received from the terminal, the management server generates a Uso transaction.
Anonymization system. The anonymization system according to any one of claims 1 to 3.
The management server receives a route request from the flying object; reads node position information of a plurality of nodes arranged in real space; and based on the route request and the node position information, a start point node, a transit node, and an end point node. And generate a route; send the generated route to the flying object,
Anonymization system.

Images