Access authorization system, electronic control device, access authorization method, and storage medium storing program

An electronic control device having a function of relaying data transmitted from a plurality of other electronic control devices mounted on a vehicle, the electronic control device comprising:

• at least one of (i) a circuit and (ii) a processor with a memory storing computer program code executable by the processor, the at least one of the circuit and the processor configured to serve as:
• an acquisition section configured to acquire an authentication result of a user of the vehicle based on an authentication result obtained by at least one authentication method of a plurality of authentication methods;
• a management data storage section configured to store, for each seat of the vehicle, management data indicating which user has been authenticated by which authentication method of the plurality of authentication methods and indicating whether each user of the vehicle has agreed to allow access to privacy information of the user;
• a determination section configured to i) generate seat estimation information indicating, for each seat of a plurality of seats of the vehicle, an estimated user seated in the seat based on the management data;
• (ii) receive a service request from a service application;
• and (iii) determine whether the service request requires access to privacy information of a particular user of the vehicle;
• an access section configured to, in response to the service request requiring access to privacy information, determine whether the particular user of the vehicle has agreed to allow access to privacy information of the particular user based on the estimated user seated in each seat of the plurality of seats of the vehicle and based on the management data;
• and
• a vehicle information providing section configured to provide the privacy information to the service application in response to the service request and in response to a determination that the particular user of the vehicle has agreed to allow access to the privacy information of the user.

An access authorization method that authorizes access to privacy information based on an authentication result of a user of a vehicle, the access authorization method comprising:

• authenticating, based on the authentication result of the user obtained by at least one authentication method of a plurality of authentication methods;
• managing, for each seat of the vehicle, management data indicating which user has been authenticated by which authentication method of the plurality of authentication methods and indicating whether each user of the vehicle has agreed to allow access to privacy information of the user;
• generating seat estimation information indicating, for each seat of a plurality of seats of the vehicle, an estimated user seated in the seat based on the management data;
• receiving a service request from a service application;
• determining whether the service request requires access to privacy information of a particular user of the vehicle;
• determining, in response to the service request requiring access to privacy information, whether the particular user of the vehicle has agreed to allow access to privacy information of the particular user based on the estimated user seated in each seat of the plurality of seats of the vehicle and based on the management data;
• and
• providing the privacy information to the service application in response to the service request and in response to a determination that the particular user of the vehicle has agreed to allow access to the privacy information of the user.

A non-transitory computer readable storage medium storing a program executed by an access authorization system that authorizes access to privacy information based on an authentication result of a user of a vehicle, the program comprising computer-executable instructions for:

• authenticating, based on the authentication result of the user obtained by at least one authentication method of a plurality of authentication methods;
• managing, for each seat of the vehicle, management data indicating which user has been authenticated by which authentication method of the plurality of authentication methods and indicating whether each user of the vehicle has agreed to allow access to privacy information of the user;
• generating seat estimation information indicating, for each seat of a plurality of seats of the vehicle, an estimated user seated in the seat based on the management data;
• receiving a service request from a service application;
• determining whether the service request requires access to privacy information of a particular user of the vehicle;
• determining, in response to the service request requiring access to privacy information, whether the particular user of the vehicle has agreed to allow access to privacy information of the particular user based on the estimated user seated in each seat of the plurality of seats of the vehicle and based on the management data;
• and
• providing the privacy information to the service application in response to the service request and in response to a determination that the particular user of the vehicle has agreed to allow access to the privacy information of the user.