Patent Description:
A dashboard camera that is installed in a vehicle and that captures an image of the surroundings of the vehicle is often installed in the vicinity of a front window or a rear window of the vehicle, so that some dashboard camera does not include a display screen in terms of acquiring visibility of a passenger of the vehicle. Furthermore, some dashboard camera that does not include the display screen allows a mobile terminal to refer to information acquired by the dashboard camera by performing communication between the dashboard camera and the mobile terminal that has been registered in advance by a user. For example, in <CIT>, in the case where an event, such as a collision, has been detected by an on-vehicle detecting device, information on the event is able to be transmitted to the mobile terminal by using wireless communication and checked by the mobile terminal.

<CIT> discloses a drive recorder which includes a capture unit and an access controller. The capture unit captures an outside of a vehicle. The access controller sets access limitation, which limits an access from a person other than an occupant of the vehicle, for traveling images of the vehicle. The traveling images are captured by the capture unit and stored in a storage medium. When an event arising from the vehicle meets a predetermined condition that indicates at least level of urgency, the access controller removes the access limitation.

<CIT> discloses a recording device which includes: a photographic data acquisition device which acquires photographic data including at least video data; an event detection unit which detects occurrence of an event; and a recording control unit which, when recording the photographic data to a recording unit as instigated by the event which the event detection unit has detected, records to the recording unit first photographic data in which privacy measures are not carried out with regard to the video data, and which, when recording the photographic data to the recording unit without being instigated by the event, records to the recording unit second photographic data in which the privacy measures have been carried out with regard to the video data.

<CIT> discloses an on-vehicle recorder having storage means for recording information on a vehicle accident such as actions of a vehicle and operation of a driver before/after the vehicle accident which includes: registration means for registering an authentication code; collation means for collating an authentication code held by a remote control key <NUM> to be used for permitting driving of a drive source of the vehicle or permitting lock/unlock of doors of the vehicle with the authentication code registered by the registration means; and information reading means for reading information on the vehicle accident recorded by the storage means when the two authentication codes are coincident as the result of collation by the collation means in a case where reading of the information on the vehicle accident is requested from the outside of the vehicle.

However, in some cases, in the case where an event, such as a collision of the vehicle has occurred, the mobile terminal that performs communication with the dashboard camera is a mobile terminal owned by a driver of the vehicle, it may be difficult to check the state of the event by using the mobile terminal owned by the driver depending on a condition of the driver due to the occurred event.

However, in the case where communication between the dashboard camera and a device, such as a mobile terminal, that has been registered in advance is allowed to be performed without limitation, information other than information on the event is also able to be checked by an external device, so that there may be a case in which privacy of the user may be invaded.

Accordingly, one aspect of an embodiment of the present invention has been conceived in light of the circumstances described above and an object thereof is to allow information on an event to be checked while ensuring protection of privacy.

In accordance with the present invention, an on-vehicle recording apparatus, on-vehicle recording control method, and a program set forth in the appended claims is provided.

According to the on-vehicle recording apparatus, the on-vehicle recording control method, and the program according to the present embodiment, an advantage is provided in that it is possible to check information on an event while ensuring protection of privacy.

Preferred embodiments of an on-vehicle recording apparatus, an on-vehicle recording control method, and a program according to the present disclosure will be described in detail below with reference to the accompanying drawings. Furthermore, the present invention is not limited to the embodiments described below. In addition, the components described in the embodiments below include one that can be replaced and easily conceived by those skilled in the art or one that is substantially identical.

<FIG> is a block diagram illustrating an example of a configuration of an on-vehicle recording apparatus <NUM> according to a first embodiment. The on-vehicle recording apparatus <NUM> is what is called a dashboard camera, is installed in the vicinity of a front window or a rear window in a room of a vehicle, and is, in normal cases, driven by electrical power supplied from the vehicle. Furthermore, the on-vehicle recording apparatus <NUM> has a built-in battery (not illustrated), and is able to be driven by the built-in battery in the case where a supply of electrical power from the vehicle is stopped caused by an accident occurred in the vehicle. The on-vehicle recording apparatus <NUM> may also be a portable type apparatus that can be used in a vehicle, in addition to a type that is mounted on a vehicle.

The on-vehicle recording apparatus <NUM> includes an image capturing unit <NUM>, a recording unit <NUM>, an operating unit <NUM>, a sensor <NUM>, a communication unit <NUM>, a global navigation satellite system (GNSS) receiving unit <NUM>, and an on-vehicle recording control device (hereinafter, referred to as a "control device") <NUM>.

The image capturing unit <NUM> is a camera that captures an images of the surroundings of the vehicle in which the on-vehicle recording apparatus <NUM> is installed and that is able to output data as an electrical signal. In the first embodiment, the image capturing unit <NUM> is arranged in the vicinity of the front window in the room of the vehicle so as to face the front of the vehicle, and mainly captures an image of the surroundings in front of the vehicle. The image capturing unit <NUM> captures an image of a wide angle, for example, in an image capturing range of about <NUM>° in a horizontal direction. The image capturing unit <NUM> outputs the obtained image of captured image data <NUM> (see <FIG>) to a captured image data acquiring unit <NUM> that is included in the control device <NUM>.

The recording unit <NUM> is used to temporarily store data of the on-vehicle recording apparatus <NUM> or the like. The recording unit <NUM> is, for example, a semiconductor memory device, such as a random access memory (RAM) or a flash memory, or a recording unit, such as a memory card. Alternatively, the recording unit <NUM> may be an external recording unit that is wirelessly connected via a communication device (not illustrated). The recording unit <NUM> records therein the captured image data <NUM> acquired by the captured image data acquiring unit <NUM> on the basis of a control signal output from a recording control unit <NUM> that is included in the control device <NUM>.

The operating unit <NUM> is an input unit that is able to receive various kinds of operation performed with respect to the on-vehicle recording apparatus <NUM>. For example, the operating unit <NUM> is able to receive setting of time associated with a single piece of moving image data, i.e., setting of intervals of time for generating the moving image data, at the time when the captured image data <NUM> is recorded in the recording unit <NUM> as moving image data. Furthermore, the operating unit <NUM> is able to receive an operation for manually recording an event. The operating unit <NUM> outputs the input operation information to an operation control unit <NUM> that is included in the control device <NUM>.

The sensor <NUM> functions as an event detecting unit that is able to detect an event occurred with respect to the vehicle in which the on-vehicle recording apparatus <NUM> is installed, and outputs a detection result to an event detecting unit <NUM> that is included in the control device <NUM>. The sensor <NUM> is what is called an acceleration sensor that detects acceleration and detects acceleration in, for example, <NUM>-axis directions. The <NUM>-axis directions are a front-back direction, a left-right direction, and a vertical direction of the vehicle. The sensor <NUM> is able to detect an impact shock exerted on the vehicle caused by the acceleration in the <NUM>-axis directions.

The communication unit <NUM> is a communication unit that is able to perform communication with an external communication terminal <NUM>. The communication unit <NUM> is able to perform wireless communication with the communication terminal <NUM> that is located outside the on-vehicle recording apparatus <NUM> by using a method of Wi-Fi (registered trademark), Bluetooth (registered trademark), or the like. The communication terminal <NUM> that is used at this time may be, for example, a portable information terminal device, such as a smartphone, a tablet personal computer, or a notebook personal computer.

The GNSS receiving unit <NUM> receives radio waves emitted from a plurality of positioning satellite included in the GNSS. The GNSS receiving unit <NUM> outputs signals of the received radio waves to a positional information acquiring unit <NUM> that is included in the control device <NUM>.

The control device <NUM> is an arithmetic processing device (control device) that is constituted of, for example, a central processing unit (CPU) or the like. The control device <NUM> loads a stored program into a memory and executes a command included in the program. The control device <NUM> includes an internal memory (not illustrated), and the internal memory is used to temporarily store data of the control device <NUM>. The control device <NUM> includes the captured image data acquiring unit <NUM>, a buffer memory <NUM>, a captured image data processing unit <NUM>, the recording control unit <NUM>, the operation control unit <NUM>, the event detecting unit <NUM>, a communication control unit <NUM>, an access control unit <NUM>, and the positional information acquiring unit <NUM>, all of which are connected to a bus <NUM>.

The captured image data acquiring unit <NUM> acquires the captured image data <NUM> on an image obtained by capturing the surroundings of the vehicle. More specifically, the captured image data acquiring unit <NUM> acquires the captured image data <NUM> that is output by the image capturing unit <NUM> that captures an image of the surroundings of the vehicle.

The buffer memory <NUM> is a memory that temporarily stores therein captured image data. The buffer memory <NUM> is a memory that temporarily stores therein, for example, the captured image data <NUM>, which has been captured for a certain period of time by the captured image data acquiring unit <NUM>, while updating the captured image data <NUM>.

The captured image data processing unit <NUM> converts the captured image data <NUM> (hereinafter, referred to as "temporary captured image data") that is temporarily stored in the buffer memory <NUM> into an arbitrary file format, such as the MP4 format, which is encoded by an arbitrary method, such as H. <NUM> or Moving Picture Experts Group (MPEG)-<NUM>. The captured image data processing unit <NUM> generates, from the temporary captured image data, the captured image data <NUM> in which moving image data for a certain period of time is defined as a single file. As a specific example, the captured image data processing unit <NUM> generates the captured image data <NUM> obtained in a predetermined period of time as a single file in the order in which the pieces of temporary captured image data are recorded, and generates a plurality of files constituted of the captured image data <NUM> obtained in the predetermined period of time in accordance with the capturing time of the image captured by the image capturing unit <NUM>. The predetermined period of time used in this case is a period of time (for example, <NUM> seconds) that has been set by an input operation performed onto the operating unit <NUM>. The captured image data processing unit <NUM> outputs the captured image data <NUM> that has been generated in this way to the recording control unit <NUM>. Furthermore, the period of time related to the captured image data <NUM> that is generated as a single file is set to <NUM> seconds as one example; however, the example is not limited to this. In addition, the captured image data <NUM> mentioned here may be data including a sound in addition to video images captured by the image capturing unit <NUM>.

<FIG> is a conceptual diagram illustrating loop recording of the captured image data <NUM>. The recording control unit <NUM> performs control of causing the recording unit <NUM> to record the captured image data <NUM> that has been converted to the file format by the captured image data processing unit <NUM>. In the case where an operation of loop recording is set, the recording control unit <NUM> performs a loop recording process, and records, in the recording unit <NUM>, the captured image data <NUM> that has been converted to the file format by the captured image data processing unit <NUM> as the captured image data <NUM> that can be overwritten. More specifically, in a period of time for which the loop recording process is being performed, the recording control unit <NUM> continuously records the captured image data <NUM> generated by the captured image data processing unit <NUM> into the recording unit <NUM>, and, if the capacity of the recording unit <NUM> becomes full, the recording control unit <NUM> records the new captured image data <NUM> by overwriting the oldest captured image data <NUM>.

The operation control unit <NUM> acquires operation information on an operation received by the operating unit <NUM>. The operation control unit <NUM> acquires, for example, configuration information on a time interval that is used when the captured image data <NUM> is sored as a file of the moving image data at intervals of a predetermined period of time, operation information indicating whether or not event recording is manually performed, and the like, and then, outputs control signals on these pieces of information.

The event detecting unit <NUM> detects an event occurred with respect to the vehicle. An arbitrary method may be used by the event detecting unit <NUM> to detect an event occurred with respect to the vehicle, but, as one example, the event detecting unit <NUM> detects an event on the basis of a detection result obtained by the sensor <NUM>. In this case, if acceleration that is equal to or larger than a threshold of the acceleration detected by the sensor <NUM> is detected, the event detecting unit <NUM> detects this state as an event. A threshold at which an impact exerted on the vehicle is detected is set in advance to the acceleration that is detected by the event detecting unit <NUM> as an event.

<FIG> is a conceptual diagram at the time when the captured image data <NUM> is stored as normal recording data <NUM> or event recording data <NUM>. When the event detecting unit <NUM> detects an event, the recording control unit <NUM> described above stores, in the recording unit <NUM> as the event recording data <NUM> for which overwrite is prohibited, the captured image data <NUM> obtained in a predetermined time period that includes at least a time point at which an event has been detected from among the pieces of captured image data <NUM> generated by the captured image data processing unit <NUM>.

In other words, the recording control unit <NUM> stores, in the recording unit <NUM>, the pieces of captured image data <NUM> acquired by the captured image data acquiring unit <NUM> as the normal recording data <NUM> that is not based on an event and the event recording data <NUM> that is based on an event. Namely, from among the pieces of captured image data <NUM> acquired by the captured image data acquiring unit <NUM>, the recording control unit <NUM> stores the captured image data <NUM> that is not based on an event as the normal recording data <NUM> for which overwrite is allowed, and stores the captured image data <NUM> that is on the basis of the event as the event recording data <NUM> for which overwrite is prohibited.

A predetermined time period caused by detection of the event that is a criterion for determination whether the captured image data <NUM> is the captured image data <NUM> that is not based on an event or the captured image data <NUM> that is based on an event is, for example, a predetermined time period from an event detection time point or a time period before and after the event detection time point including the event detection time point. If the captured image data <NUM> is captured in the predetermined time period from the event detection time point or captured in the time period before and after the event detection time point including the event detection time point, the recording control unit <NUM> stores the captured image data <NUM> as the event recording data <NUM> that is based on the event, and, if the captured image data <NUM> is captured in a time period other than these time periods, the recording control unit <NUM> stores the captured image data <NUM> as the normal recording data <NUM> that is not based on the event.

Determination of whether the captured image data <NUM> is not based on the event or the captured image data <NUM> is based on the event may be determined on the basis of a recording area that is recorded in the recording unit <NUM>. For example, the captured image data <NUM> that is based on the event is stored in an overwrite-prohibited area that is different from the area for storing the captured image data <NUM> that is not based on the event.

The communication control unit <NUM> establishes a connection with the external communication terminal <NUM> that performs communication with the communication unit <NUM>, and performs control of communication to be performed with the communication terminal <NUM> via the communication unit <NUM>. Namely, by setting a state in which communication is able to be performed with the external communication terminal <NUM> via the communication unit <NUM>, the communication control unit <NUM> establishes a connection with the communication terminal <NUM> and performs control of communication at the time when a signal or data is transmitted or received to or from the communication terminal <NUM>.

Establishment of the connection with the communication terminal <NUM> may be performed by allowing, for example, the communication unit <NUM> to include a device that is able to perform communication with the communication terminal <NUM> using near field communication (NFC) and perform NFC authentication of the communication terminal <NUM>, so as to enable communication between the authenticated communication terminal <NUM> and the communication unit <NUM> using Wi-Fi. In addition, for example, it may be possible to easily establish subsequent connections with the same communication terminal <NUM> by configuring the communication unit <NUM> so as to be able to perform communication using Bluetooth and perform pairing with the communication terminal <NUM> using a Bluetooth connection.

The access control unit <NUM> performs control whether or not the communication terminal <NUM> is able to access the captured image data <NUM> that is stored in the recording unit <NUM> according to whether or not the communication terminal <NUM> in which the connection has been established by the communication control unit <NUM> is the communication terminal <NUM> that has been registered in advance. In other words, the on-vehicle recording apparatus <NUM> is able to register the communication terminal <NUM>, and the access control unit <NUM> uses a different mode in terms of an access to the captured image data <NUM> stored in the recording unit <NUM> according to whether or not the communication terminal <NUM> has been registered.

Specifically, if the communication terminal <NUM> in which a connection has been established by the communication control unit <NUM> is a registered terminal <NUM> that is the communication terminal <NUM> that has been registered in advance, the access control unit <NUM> performs control such that the registered terminal <NUM> is allowed to access the normal recording data <NUM> and the event recording data <NUM>. In contrast, if the communication terminal <NUM> in which a connection has been established by the communication control unit <NUM> is an unregistered terminal <NUM> that is the communication terminal <NUM> that has not been registered in advance, the access control unit <NUM> performs control such that the unregistered terminal <NUM> is not allowed to access the normal recording data <NUM> but is allowed to access the event recording data <NUM>.

The communication terminal <NUM> is registered by performing an input operation related to the registration of the communication terminal <NUM> with respect to the operating unit <NUM>. For example, by performing an input operation related to the registration with respect to the operating unit <NUM> in a state in which a connection of the communication terminal <NUM> has been established by the communication control unit <NUM>, the communication terminal <NUM> in which a connection is currently established is registered as the registered terminal <NUM>. Alternatively, by performing an input operation related to registration to the operating unit <NUM> and establishing a connection of the communication terminal <NUM> in a registration mode with respect to the communication terminal <NUM>, the communication terminal <NUM> in which a connection has been established is accordingly registered as the registered terminal <NUM>.

The information on the communication terminal <NUM> that is registered as the registered terminal <NUM> in this way is stored in the internal memory included in the control device <NUM>. Regarding the information on the communication terminal <NUM>, for example, information that is uniquely assigned to the communication terminal <NUM> and that is able to specify the communication terminal <NUM> is registered. The access control unit <NUM> determines whether or not the communication terminal <NUM> in which a connection has been established is the registered terminal <NUM> by checking the information on the communication terminal <NUM> in which the connection has been established by the communication control unit <NUM> against the information on the registered terminal <NUM> stored in the internal memory.

The positional information acquiring unit <NUM> calculates positional information on the current position of the vehicle, on the basis of the radio waves received by the GNSS receiving unit <NUM>, by using a known method. In the case where the event detecting unit <NUM> detects an event, the positional information calculated by the positional information acquiring unit <NUM> is stored together with the event recording data <NUM>.

In the following, the flow of a process performed in the control device <NUM> will be described with reference to <FIG> is a flowchart illustrating the flow of the process performed in the on-vehicle recording control device <NUM> according to the first embodiment. Here, a case in which a loop recording process is performed will be described.

If an operation of the on-vehicle recording apparatus <NUM> is started, the control device <NUM> starts normal recording (Step S101). That is, the captured image data <NUM> captured by the image capturing unit <NUM> that captures an image of the surroundings of the vehicle is acquired by the captured image data acquiring unit <NUM>, and is stored in the recording unit <NUM> as the normal recording data <NUM>. Specifically, the control device <NUM> generates, by using the captured image data processing unit <NUM>, a file obtained for each predetermined time interval from the captured image data <NUM> that has been acquired by the captured image data acquiring unit <NUM> and recorded in the buffer memory <NUM>, and then, performs, by using the recording control unit <NUM>, loop recording into the recording unit <NUM> as the normal recording data <NUM>.

Then, the control device <NUM> determines, by using the event detecting unit <NUM>, whether or not an event occurred with respect to the vehicle has been detected (Step S102). Specifically, the event detecting unit <NUM> detects an occurrence of an event based on whether or not the acceleration detected by the sensor <NUM> is equal to or larger than the threshold that has been set in advance. That is, if the acceleration detected by the sensor <NUM> is less than the threshold, the event detecting unit <NUM> does not detect an event occurred with respect to the vehicle. In contrast, if the acceleration detected by the sensor <NUM> is equal to or larger than the threshold, the event detecting unit <NUM> detects that a large impact has occurred with respect to the vehicle and an event has occurred with respect to the vehicle.

If the event detecting unit <NUM>, which detects an event on the basis of the acceleration that has been detected by the sensor <NUM> in this way, detects that an event has occurred with respect to the vehicle (Yes at Step S102), the control device <NUM> stores the event recording data <NUM> (Step S103). Specifically, if the event detecting unit <NUM> detects that the event has occurred with respect to the vehicle, the control device <NUM> stores, by using the recording control unit <NUM>, the captured image data <NUM> obtained in a predetermined time period including at least an occurrence time point of the event in the recording unit <NUM> as the event recording data <NUM> for which overwrite is prohibited.

After the control device <NUM> has stored the event recording data <NUM>, the control device <NUM> determines whether or not the recording process performed, by using the on-vehicle recording apparatus <NUM>, on the captured image data <NUM> it to be completed (Step S104). Furthermore, in the case where the event detecting unit <NUM> does not detect an event occurred with respect to the vehicle (No at Step S102), the control device <NUM> similarly determines whether or not the recording process performed on the captured image data <NUM> is to be completed (Step S104).

Specifically, the control device <NUM> determines whether or not the recording process performed on the captured image data <NUM> by the on-vehicle recording apparatus <NUM> is to be completed based on whether or not information indicating that an exit operation has been performed is output from the operation control unit <NUM> that acquires operation information on an operation received by the operating unit <NUM>. Alternatively, as a result of a supply of electrical power from the vehicle being stopped due to completion of the use of the vehicle, the recording process performed on the captured image data <NUM> by the on-vehicle recording apparatus <NUM> is completed. If the information indicating that the exit operation has been performed is not output from the operation control unit <NUM> (No at Step S104), the control device <NUM> returns to Step S102 and continues the recording process to be performed on the captured image data <NUM> by the on-vehicle recording apparatus <NUM>. That is, the loop recording process on the captured image data <NUM> by the control device <NUM> is continued.

In contrast, if it is determined that the recording process on the captured image data <NUM> is to be completed (Yes at Step S104), the recording process on the captured image data <NUM> performed by the on-vehicle recording apparatus <NUM> is completed.

Furthermore, in normal time, the on-vehicle recording apparatus <NUM> is driven by the electrical power supplied from the vehicle, so that, even if a supply of electrical power to the on-vehicle recording apparatus <NUM> is stopped due to an end of driving of the vehicle, the recording process performed on the captured image data <NUM> by the on-vehicle recording apparatus <NUM> is virtually completed. In contrast, if a supply of electrical power from the vehicle is stopped caused by an accident occurred in the vehicle, the on-vehicle recording apparatus <NUM> continues to drive by using a built-in battery and perform the recording process on the captured image data <NUM>.

As described above, the on-vehicle recording apparatus <NUM> that stores the captured image data <NUM> captured by the image capturing unit <NUM> in the recording unit <NUM> is able to perform communication with the communication terminal <NUM>, and the communication terminal <NUM> in which a connection has been established by the communication control unit <NUM> is able to access the captured image data <NUM>. As a result, it is possible to check the captured image data <NUM>, which is stored in the recording unit <NUM> included in the on-vehicle recording apparatus <NUM>, by the communication terminal <NUM> in which the connection has been established. For example, in the case where the captured image data <NUM> stored in the recording unit <NUM> is moving image data, the captured image data <NUM> is able to be visually checked as the moving image by the communication terminal <NUM> in which the connection has been established.

Here, the captured image data <NUM> is stored as the normal recording data <NUM> or the event recording data <NUM>; however, the communication terminal <NUM> in which the connection has been established has a different access mode with respect to the captured image data <NUM> depending on whether or not the communication terminal <NUM> has been registered in the on-vehicle recording apparatus <NUM> in advance.

In other words, in the case where the communication terminal <NUM> in which the connection has been established is the registered terminal <NUM> that has been registered in advance, the registered terminal <NUM> is able to access the normal recording data <NUM> and the event recording data <NUM>. As a result, the registered terminal <NUM> is able to check the normal recording data <NUM> and the event recording data <NUM> that are stored in the recording unit <NUM>.

In contrast, in the case where the communication terminal <NUM> in which the connection has been established is the unregistered terminal <NUM> that has not been registered in advance, the unregistered terminal <NUM> is not allowed to access the normal recording data <NUM> and is allowed to access the event recording data <NUM>. As a result, the unregistered terminal <NUM> is able to check the event recording data <NUM>, even though the unregistered terminal <NUM> is not able to check the normal recording data <NUM> stored in the recording unit <NUM>.

In the following, the flow of the process of accessing the captured image data <NUM> performed by the communication terminal <NUM> that performs communication with the on-vehicle recording apparatus <NUM> will be described with reference to <FIG> is a flowchart illustrating the flow of the process related to an access to the captured image data <NUM> performed in the communication terminal <NUM>. In a period of time for which the on-vehicle recording apparatus <NUM> is being used, the control device <NUM> continuously receives a connection request from the communication terminal <NUM> and establishes a connection in the case where a connection request from the communication terminal <NUM> is received. Accordingly, in a period of time for which the on-vehicle recording apparatus <NUM> is being used, the control device <NUM> continuously calls a subroutine or a program related to a connection with the communication terminal <NUM>, and performs a process related to a connection with the communication terminal <NUM>.

In the process related to the connection with the communication terminal <NUM>, first, it is determined whether or not a connection request has been received from the communication terminal <NUM> (Step S201). Specifically, the control device <NUM> determines whether or not a connection request has been received from the communication terminal <NUM> to the communication control unit <NUM> that controls communication with the communication terminal <NUM> via the communication unit <NUM>. That is, it is determined whether or not the communication unit <NUM> has received a signal of the connection request from the communication terminal <NUM>.

As a result of this determination, if it is determined that the connection request from the communication terminal <NUM> to the communication control unit <NUM> or the communication unit <NUM> has not been received (No at Step S201), the process related to the connection with the communication terminal <NUM> is completed, and, the process is started again from Step S201 when the process related to this connection is again called.

In contrast, if it is determined that the connection request from the communication terminal <NUM> to the communication control unit <NUM> or the communication unit <NUM> has been received (Yes at Step S201), the communication control unit <NUM> establishes a connection with the communication terminal <NUM> via the communication unit <NUM>.

If the connection with the communication terminal <NUM> has been established by the communication control unit <NUM>, then, the control device <NUM> determines whether or not the communication terminal <NUM> in which the connection has been established is the communication terminal <NUM> that has been registered in advance (Step S202). Specifically, the control device <NUM> determines whether or not the communication terminal <NUM> in which the connection has been established by the communication control unit <NUM> is the registered terminal <NUM> that has been registered in advance or the unregistered terminal <NUM> that has not been registered in advance.

As a result of this determination, if it is determined that the communication terminal <NUM> in which the connection has been established is the registered terminal <NUM> that is the communication terminal <NUM> that has been registered in advance (Yes at Step S202), an access to the normal recording data <NUM> and the event recording data <NUM> is permitted (Step S203). That is, in the case where the communication terminal <NUM> in which the connection has been established is the registered terminal <NUM> that is the communication terminal <NUM> that has been registered in advance, regarding an access to the captured image data <NUM> stored in the recording unit <NUM> performed by the registered terminal <NUM>, the access control unit <NUM> permits the access to all of the pieces of captured image data <NUM>. As a result, the registered terminal <NUM> in which the connection has been established is allowed to access the normal recording data <NUM> and the event recording data <NUM>, so that the registered terminal <NUM> is able to check the normal recording data <NUM> and the event recording data <NUM>.

In the case where the communication terminal <NUM> in which the connection has been established is the registered terminal <NUM>, for example, a list of the normal recording data <NUM> and the event recording data <NUM>, setting menus of the on-vehicle recording apparatus <NUM>, or the like is displayed on the registered terminal <NUM> side. The registered terminal <NUM> is able to select and replay one of the pieces of captured image data <NUM> or acquire (download) the captured image data <NUM> from the list of the normal recording data <NUM> and the event recording data <NUM>. As a result, the registered terminal <NUM> is able to check the normal recording data <NUM> and the event recording data <NUM>.

In contrast, in the case where it is determined that the communication terminal <NUM> in which the connection has been established is not the registered terminal <NUM> that has not been registered in advance (No at Step S202), an access to the event recording data <NUM> is permitted (Step S204). That is, in the case where the communication terminal <NUM> in which the connection has been established is the unregistered terminal <NUM> that is the communication terminal <NUM> that has not been registered in advance, regarding an access from the unregistered terminal <NUM> to the captured image data <NUM> that is stored in the recording unit <NUM>, an access to the normal recording data <NUM> is not allowed and an access to the event recording data <NUM> is permitted by the access control unit <NUM>. As a result, the unregistered terminal <NUM> in which the connection has been established is not able to access the normal recording data <NUM> but is able to access the event recording data <NUM>, so that the unregistered terminal <NUM> is able to check only the event recording data <NUM>.

In the case where the communication terminal <NUM> in which the connection has been established is the unregistered terminal <NUM>, for example, by allowing only the list of the event recording data <NUM> to be displayed and allowing the selected event recording data <NUM> to be replayed on the unregistered terminal <NUM> side, the unregistered terminal <NUM> is able to check only the event recording data <NUM>. Furthermore, in the case where the communication terminal <NUM> in which the connection has been established is the unregistered terminal <NUM>, it is preferable that download of the captured image data <NUM> is not allowed in the unregistered terminal <NUM>.

As described above, if an access to the captured image data <NUM> is limited in accordance with the communication terminal <NUM> in which the connection has been established, then, it is determined whether or not the connection of the communication terminal <NUM> has been completed (Step S205). Specifically, the control device <NUM> determines whether or not establishment of the connection between the communication terminal <NUM> and the communication control unit <NUM> via the communication unit <NUM> is continued.

As a result of this determination, in the case where it is determined that the establishment of the connection between the communication terminal <NUM> and the communication control unit <NUM> is continued and it is determined that the connection of the communication terminal <NUM> has not been completed (No at Step S205), the state in which the access is permitted at Step S203 or Step S204 is maintained, and determination whether or not the connection of the communication terminal <NUM> has been completed is repeated.

In contrast, in the case where it is determined that the connection between the communication terminal <NUM> and the communication control unit <NUM> has been completed and it is determined that the connection of the communication terminal <NUM> has been completed (Yes at Step S205), the process related to the connection with the communication terminal <NUM> is completed, and, the process is started again from Step S201 when the process related to this connection is again called.

As described above, in the first embodiment, in the case where the communication terminal <NUM> in which the connection with the on-vehicle recording apparatus <NUM> has been established is the registered terminal <NUM>, the registered terminal <NUM> is allowed to access the normal recording data <NUM> and the event recording data <NUM>. Accordingly, for example, as a result of the communication terminal <NUM> in which the connection with the on-vehicle recording apparatus <NUM> has been established registering, as the registered terminal <NUM>, the communication terminal <NUM>, such as a smartphone owned by a user, that is used by a driver, the registered terminal <NUM> is able to easily check the captured image data <NUM>.

Furthermore, in the case where the communication terminal <NUM> in which the connection with the on-vehicle recording apparatus <NUM> has been established is the unregistered terminal <NUM>, the unregistered terminal <NUM> is not allowed to the normal recording data <NUM>. Accordingly, in the case where the communication terminal <NUM> in which the connection with the on-vehicle recording apparatus <NUM> has been established is the communication terminal <NUM> that has not been registered in the on-vehicle recording apparatus <NUM>, the communication terminal <NUM> is not able to check the normal recording data <NUM>, so that it is possible to prevent the normal recording data <NUM> from being able to be checked by a third party by using the unregistered terminal <NUM>. As a result, it is possible to prevent the normal recording data <NUM> from being checked and prevent information on locations or the like visited by the vehicle from being unintentionally found out by the third party, and it is possible to protect privacy of the user.

In contrast, even in the case where the communication terminal <NUM> in which the connection with the on-vehicle recording apparatus <NUM> has been established is the communication terminal <NUM> that has not been registered in the on-vehicle recording apparatus <NUM>, an access from the unregistered terminal <NUM> to the event recording data <NUM> is allowed. Accordingly, it is possible to easily check the event recording data <NUM> recorded at the time of an occurrence of an event, such as an accident occurred in the vehicle, by a third party by using the unregistered terminal <NUM>. As a result, even in the case where the event recording data <NUM> is not able to be checked by using the registered terminal <NUM> owned by the driver of the vehicle due to the occurrence of the event, such as the accident, it is possible to easily check the event recording data <NUM> by using the unregistered terminal <NUM> owned by the third party, and it is possible to easily check the circumstances of the event by using the unregistered terminal <NUM>. As a result, it is possible to check the information on the event while ensuring protection of the privacy.

The on-vehicle recording apparatus <NUM> according to a second embodiment has substantially the same configuration as that of the on-vehicle recording apparatus <NUM> according to the first embodiment, but one feature of the second embodiment is that the unregistered terminal <NUM> is allowed to access most recent event recording data 320a. The other configurations are the same as those described in the first embodiment; therefore, descriptions thereof will be omitted and the same reference numerals are assigned.

<FIG> is a conceptual diagram in a case in which a plurality of pieces of the event recording data <NUM> are stored. In some cases, the on-vehicle recording apparatus <NUM> detects an event and stores the captured image data <NUM> as the event recording data <NUM>, and then, again stores the captured image data <NUM> as the event recording data <NUM> by detecting an event as a result of an accident occurring in a vehicle in which the on-vehicle recording apparatus <NUM> is installed. Furthermore, the event recording data <NUM> is stored in the recording unit <NUM> in an overwrite-prohibited manner, so that, even in the case where the normal recording data <NUM> is overwritten by a loop recording process, the event recording data <NUM> is continuously stored in the recording unit <NUM>. Accordingly, in the case where the on-vehicle recording apparatus <NUM> detects an event more than once, a plurality of pieces of the event recording data <NUM> are consequently stored in the recording unit <NUM>.

In the on-vehicle recording apparatus <NUM> according to the second embodiment, in the case where the access control unit <NUM> included in the control device <NUM> receives a connection request from the unregistered terminal <NUM>, the access control unit <NUM> permits the unregistered terminal <NUM> to access the most recent event recording data 320a. Accordingly, in the case where the event recording data <NUM> is stored in the recording unit <NUM>, the unregistered terminal <NUM> in which the connection has been established is not able to access the old event recording data <NUM> but is able to access only the most recent event recording data 320a.

For example, in the case where a connection between the on-vehicle recording apparatus <NUM> and the unregistered terminal <NUM> has been established, presence or absence of the most recent event recording data 320a is displayed on the unregistered terminal <NUM> side, and the most recent event recording data 320a is allowed to be replayed in the unregistered terminal <NUM>. As a result, the unregistered terminal <NUM> in which the connection with the on-vehicle recording apparatus <NUM> has been established is able to check only the most recent event recording data 320a. Furthermore, it is preferable to set the unregistered terminal <NUM> such that only a replay of the most recent event recording data 320a is allowed and download of the most recent event recording data 320a is not allowed.

<FIG> is a flowchart illustrating the flow of a process, performed in the on-vehicle recording apparatus <NUM> according to the second embodiment, related to an access to the captured image data <NUM> performed by the communication terminal <NUM>. In also the on-vehicle recording apparatus <NUM> according to the second embodiment, in the process related to the connection with the communication terminal <NUM>, first, it is determined whether or not a connection request has been received from the communication terminal <NUM> (Step S201). As a result of this determination, if the connection request is not received from the communication terminal <NUM> (No at Step S201), the process related to the connection with the communication terminal <NUM> is completed, and, the process is started again from Step S201 when the process related to this connection is again called.

In contrast, if it is determined that the connection request has been received from the communication terminal <NUM> (Yes at Step S201), a connection with the communication terminal <NUM> via the communication unit <NUM> is established, and it is determined whether or not the communication terminal <NUM> in which the connection has been established is the communication terminal <NUM> that has been registered in advance (Step S202).

As a result of this determination, if it is determined that the communication terminal <NUM> in which the connection has been established is the registered terminal <NUM> that is the communication terminal <NUM> that has been registered in advance (Yes at Step S202), an access to each of the normal recording data <NUM> and the event recording data <NUM> is permitted (Step S203).

In contrast, if it is determined that the communication terminal <NUM> in which the connection has been established is not the registered terminal <NUM> that has been registered in advance (No at Step S202), an access to the most recent event recording data 320a is permitted (Step S211). That is, in the case where the communication terminal <NUM> in which the connection has been established is the unregistered terminal <NUM> that is the communication terminal <NUM> that has not been registered in advance, regarding an access from the unregistered terminal <NUM> to the captured image data <NUM> that is stored in the recording unit <NUM>, the access control unit <NUM> does not permit an access to the normal recording data <NUM> and the event recording data <NUM> that is not the most recent event recording data, and permits an access to the most recent event recording data 320a.

An example of a case in which a plurality of the event recording data <NUM> are stored includes a case in which, in addition to an event caused by an accident, the event detecting unit <NUM> sometimes detects acceleration that has occurred caused by a sudden braking as an event even if the acceleration is not caused by an accident. Furthermore, an example of a case in which a third party needs to check the event recording data <NUM> by using the unregistered terminal <NUM> includes a case in which the third party checks the event recording data immediately after an occurred accident on the basis of the accident. Accordingly, for example, in the case where the plurality of pieces of event recording data <NUM> are stored in the recording unit <NUM>, the access control unit <NUM> does not permit the unregistered terminal <NUM> to access the event recording data <NUM> other than the most recent event recording data 320a, and permits the unregistered terminal <NUM> to access only the most recent event recording data 320a. As a result, the unregistered terminal <NUM> in which the connection has been established is not able to access, in addition to the normal recording data <NUM>, the event recording data <NUM> that is not the most recent event recording data 320a but is able to access the most recent event recording data 320a. Accordingly, in the case where a connection between the on-vehicle recording apparatus <NUM> and the unregistered terminal <NUM> has been established, it is possible for the unregistered terminal <NUM> in which the connection has been established to check only the most recent event recording data 320a.

In this way, after the access to the captured image data <NUM> is limited in accordance with the communication terminal <NUM> in which the connection has been established, it is determined whether or not the connection of the communication terminal <NUM> has been completed (Step S205). As a result of this determination, if it is determined the connection of the communication terminal <NUM> has not been completed (No at Step S205), the state in which the access is permitted at Step S203 or Step S211 is maintained, and the determination whether or not the connection of the communication terminal <NUM> has been completed is repeated. In contrast, if it is determined that the connection of the communication terminal <NUM> has been completed (Yes at Step S205), the process related to a connection with the communication terminal <NUM> is completed, and, the process is started again from Step S201 when the process related to this connection is again called.

As described above, in the second embodiment, in the case where the access control unit <NUM> receives a connection request from the unregistered terminal <NUM>, the access control unit <NUM> does not permit the unregistered terminal <NUM> to access, in addition to the normal recording data <NUM>, the event recording data <NUM> that is not the most recent event recording data 320a, and permits the unregistered terminal <NUM> to access the most recent event recording data 320a. As a result, even in the case where the plurality of pieces of event recording data <NUM> are stored in the recording unit <NUM>, it is possible to prevent the event recording data <NUM> other than the most recent event recording data 320a from being able to be checked by a third party by using the unregistered terminal <NUM>. Therefore, it is possible to prevent an event occurred in the vehicle in the past from being unintentionally found out by the third party, and it is thus possible to more reliably protect privacy of the user.

In contrast, an access from the unregistered terminal <NUM> to the most recent event recording data 320a is allowed, so that it is possible for a third party to easily check, by using the unregistered terminal <NUM>, the most recent event recording data 320a that has been recorded at the time of the occurrence of an event, such as an accident occurred in the vehicle. As a result, it is possible to easily check the cause of the occurrence of the event, such as the most recent accident, by using the unregistered terminal <NUM>. As a result, it is possible to check the information on the event while ensuring protection of the privacy.

The on-vehicle recording apparatus <NUM> according to a third embodiment has substantially the same configuration as that of the on-vehicle recording apparatus <NUM> according to the second embodiment, but one feature of the third embodiment is that an access to the most recent event recording data 320a is permitted to the unregistered terminal <NUM> only within a predetermined time period after an event has been detected. The other configurations are the same as those described in the second embodiment; therefore, descriptions thereof will be omitted and the same reference numerals are assigned.

In the on-vehicle recording apparatus <NUM> according to the third embodiment, in the case where the access control unit <NUM> included in the control device <NUM> receives a connection request from the unregistered terminal <NUM> within a predetermined time period after an event has been detected by the event detecting unit <NUM>, the access control unit <NUM> permits the unregistered terminal <NUM> to access the most recent event recording data 320a. Furthermore, in the case where the predetermined time period is exceeded after an event has been detected by the event detecting unit <NUM>, if the access control unit <NUM> receives a connection request from the unregistered terminal <NUM>, the access control unit <NUM> does not permit the unregistered terminal <NUM> to access the most recent event recording data 320a. The predetermined time period in this case is set in advance and stored in, for example, the internal memory included in the control device <NUM>.

That is, in the third embodiment, unlike the second embodiment, a period of time for which the unregistered terminal <NUM> is able to access the most recent event recording data 320a is limited. Accordingly, in the third embodiment, the unregistered terminal <NUM> is able to access the most recent event recording data 320a only within the predetermined time period after the event has been detected by the event detecting unit <NUM>. In other words, in the case where the predetermined time period is exceeded after the event has been detected by the event detecting unit <NUM>, the unregistered terminal <NUM> is not able to access all of the pieces of captured image data <NUM> including the most recent event recording data 320a that are stored in the recording unit <NUM>.

For example, in the case where a connection between the on-vehicle recording apparatus <NUM> and the unregistered terminal <NUM> has been established, if the connection between the on-vehicle recording apparatus <NUM> and the unregistered terminal <NUM> is within the predetermined time period after the event has been detected by the event detecting unit <NUM>, presence or absence of the most recent event recording data 320a is displayed, and the unregistered terminal <NUM> is allowed to replay the most recent event recording data 320a. In contrast, if the connection between the on-vehicle recording apparatus <NUM> and the unregistered terminal <NUM> exceeds the predetermined time period after the event has been detected by the event detecting unit <NUM>, the unregistered terminal <NUM> is not permitted to access the captured image data <NUM> including the most recent event recording data 320a.

In other words, in the case where the predetermined time period is set to, for example, five minutes, if an access is within five minutes after the event has been detected by the event detecting unit <NUM>, the access control unit <NUM> permits the unregistered terminal <NUM> to access the most recent event recording data 320a, and, if an access exceeds five minutes, the access control unit <NUM> does not allow the unregistered terminal <NUM> to access the captured image data <NUM>.

Furthermore, even if the access is within the predetermined time period after the event has been detected by the event detecting unit <NUM>, it is preferable to set the unregistered terminal <NUM> such that only replay of the most recent event recording data 320a is permitted and download of the most recent event recording data 320a is not allowed.

<FIG> is a flowchart illustrating the flow of the process, performed in the on-vehicle recording apparatus <NUM> according to the third embodiment, related to an access to the captured image data <NUM> performed in the communication terminal <NUM>. In the on-vehicle recording apparatus <NUM> according to the third embodiment, if it is determined that the communication terminal <NUM> in which the connection has been established is not the registered terminal <NUM> that has been registered in advance (No at Step S202), it is determined whether or not the predetermined time period is not exceeded after the event has been detected (Step S221). Specifically, in the case where the communication terminal <NUM> in which the connection has been established is the unregistered terminal <NUM> that is the communication terminal <NUM> that has not been registered in advance, first, the control device <NUM> determines whether or not the predetermined time period that is set in advance is not exceeded after the event has been detected by the event detecting unit <NUM>.

As a result of this determination, if it is determined that the predetermined time period is not exceeded after the detection of the event (Yes at Step S221), an access to the most recent event recording data 320a is permitted (Step S222). That is, if it is determined that the predetermined time period that is set in advance is not exceeded after the event has been detected by the event detecting unit <NUM>, the access control unit <NUM> permits the unregistered terminal <NUM> to access only the most recent event recording data 320a from among the pieces of captured image data <NUM> stored in the recording unit <NUM>.

In contrast, if it is determined that the predetermined time period exceeds after the event has been detected (No at Step S221), an access performed by the unregistered terminal <NUM> is not permitted (Step S223). That is, regarding an access to the captured image data <NUM> stored in the recording unit <NUM> performed by the unregistered terminal <NUM>, the access control unit <NUM> does not permit the unregistered terminal <NUM> to access all of the pieces of captured image data <NUM> including the most recent event recording data 320a.

As described above, if the access to the captured image data <NUM> is limited in accordance with the communication terminal <NUM> in which the connection has been established, the state in which the access is permitted at Step S203 or Step S222, or, the state in which the access is not permitted at Step S223 is maintained until it is determined that the connection of the communication terminal <NUM> has been completed (Yes at Step S205), the process of determining whether or not the connection of the communication terminal <NUM> has been completed (Step S205) is repeated.

As described above, in the third embodiment, in the case where the access control unit <NUM> receives a connection request from the unregistered terminal <NUM> within the predetermined time period after the event has been detected by the event detecting unit <NUM>, the access control unit <NUM> permits the unregistered terminal <NUM> to access the most recent event recording data 320a, and, if the predetermined time period is exceeded, the access control unit <NUM> does not permit the unregistered terminal <NUM> to access the most recent event recording data 320a. As a result, in the case where a long time has elapsed after the occurrence of the event, such as an accident occurred in the vehicle, it is also possible to prevent the most recent event recording data 320a from being able to be checked by a third party using the unregistered terminal <NUM>. Therefore, it is possible to prevent an event that occurred a long time ago from being unintentionally found out by the third party after the event, and it is possible to more reliably protect privacy of the user.

Furthermore, after the event has been detected by the event detecting unit <NUM>, and after a third party checks the most recent event recording data 320a by using the unregistered terminal <NUM> within the predetermined time period, it is possible to prevent the most recent event recording data 320a from being checked by a different third party by using the unregistered terminal <NUM>. That is, in the case where the predetermined time period is exceeded after the event has been detected, an access to the most recent event recording data 320a performed in the unregistered terminal <NUM> is not permitted, so that it is possible to prevent the most recent event recording data 320a from being able to be checked by a plurality of third parties by accessing the most recent event recording data 320a at different timings using the unregistered terminal <NUM>. As a result, it is possible to limit the number of third parties capable of checking the most recent event recording data 320a by using the unregistered terminal <NUM>, and it is possible to prevent an event, such as an accident occurred in the vehicle, from being found out by a lot of third parties, so that it is possible to more reliably protect privacy of the user.

In contrast, the access to the most recent event recording data 320a is allowed for the unregistered terminal <NUM> within the predetermined time period after the event has been detected, so that a third party is able to easily check, by using the unregistered terminal <NUM>, the most recent event recording data 320a recorded at the time of the occurrence of the event as long as the predetermined time period is not exceeded. As a result, is it possible to easily check the cause of the occurred event within the predetermined time period after the occurrence of the event, such as an accident occurred in the vehicle, by using the unregistered terminal <NUM>. As a result, it is possible to check the information on the event while ensuring protection of the privacy.

The on-vehicle recording apparatus <NUM> according to a fourth embodiment has substantially the same configuration as that of the on-vehicle recording apparatus <NUM> according to the first embodiment, but one feature of the fourth embodiment is that the communication terminal <NUM> is permitted to access the captured image data <NUM> stored in the recording unit <NUM> in the case where a vehicle is stopped. The other configurations are the same as those described in the first embodiment; therefore, descriptions thereof will be omitted and the same reference numerals are assigned.

<FIG> is a block diagram illustrating an example of a configuration of the on-vehicle recording apparatus <NUM> according to the fourth embodiment. The control device <NUM> included in the on-vehicle recording apparatus <NUM> according to the fourth embodiment includes a vehicle state determining unit <NUM>, in addition to the captured image data acquiring unit <NUM>, the buffer memory <NUM>, the captured image data processing unit <NUM>, the recording control unit <NUM>, the operation control unit <NUM>, the event detecting unit <NUM>, the communication control unit <NUM>, the access control unit <NUM>, and the positional information acquiring unit <NUM>.

The vehicle state determining unit <NUM> is able to determine the state of the vehicle in which the on-vehicle recording apparatus <NUM> is installed, and, specifically, the vehicle state determining unit <NUM> is able to determine whether or not the vehicle is stopped. The vehicle state determining unit <NUM> determines whether or not the vehicle is stopped on the basis of a change in positional information on a vehicle output from the positional information acquiring unit <NUM> that acquires the positional information on the vehicle on the basis of an output from, for example, the GNSS receiving unit <NUM>. That is, the vehicle state determining unit <NUM> determines that the vehicle is running if the positional information on the vehicle output from the positional information acquiring unit <NUM> is continuously changed. In contrast, if the positional information on the vehicle output from the positional information acquiring unit <NUM> is not changed in a certain time period, the vehicle state determining unit <NUM> determines that the vehicle is stopped.

In this way, in the on-vehicle recording apparatus <NUM> according to the fourth embodiment that includes the vehicle state determining unit <NUM>, if the access control unit <NUM> determines, by using the vehicle state determining unit <NUM>, that the vehicle is stopped, the access control unit <NUM> permits the unregistered terminal <NUM> to access the event recording data <NUM> stored in the recording unit <NUM>. In contrast, if the vehicle state determining unit <NUM> determines that the vehicle is not stopped, the access control unit <NUM> does not permit the unregistered terminal <NUM> to access the event recording data <NUM>.

Furthermore, the determination performed by the vehicle state determining unit <NUM> whether or not the vehicle is stopped may be performed by using other than the positional information on the vehicle that is output from the positional information acquiring unit <NUM>. The vehicle state determining unit <NUM> may determine whether or not the vehicle is stopped on the basis of information on the running of the vehicle that is acquired from, for example, a Controller Area Network (CAN) included in the vehicle.

As described above, in the fourth embodiment, in the case where the vehicle state determining unit <NUM> determines that the vehicle is stopped, the access control unit <NUM> permits the unregistered terminal <NUM> to access the event recording data <NUM>, so that it is possible to allow the unregistered terminal <NUM> to access the event recording data <NUM> only at the time of the occurrence of a big event.

In other words, the event detecting unit <NUM> detects an event on the basis of acceleration that is detected by the sensor <NUM>, so that the event detecting unit <NUM> may also detect, as the event, an event other than an accident, such as a sudden braking applied while the vehicle is running. In this case, the vehicle is continuously running without stopping, but, in the case where the unregistered terminal <NUM> is able to access the event recording data <NUM> while the vehicle is running, a passenger other than the driver of the vehicle is able to check the event recording data <NUM> related to such an event other than the accident by using the unregistered terminal <NUM>. As a result, it is possible for a third party to check the event recording data <NUM> other than the big event, such as an accident occurred in the vehicle, by using the unregistered terminal <NUM>, so that it may be difficult to protect the privacy of the user.

In contrast, in the case where the vehicle state determining unit <NUM> determines that the vehicle is stopped, if the vehicle state determining unit <NUM> permits the unregistered terminal <NUM> to access the event recording data <NUM>, the unregistered terminal <NUM> is able to check the event recording data <NUM> only when it is difficult to travel due to an accident or only at the time of an occurrence of a big event that requires the vehicle to be stopped. As a result, a third party is not able to check the event recording data <NUM> at the time of detection of a small event, but is able to check the event recording data <NUM> by using the unregistered terminal <NUM> only at the time of an occurrence of a big event, such as a vehicle accident, so that the third party is able to check the cause of the occurrence of the event by using the unregistered terminal <NUM>. As a result, it is possible to check the information on the event while more reliably ensuring protection of the privacy.

The on-vehicle recording apparatus <NUM> according to a fifth embodiment has substantially the same configuration as that of the on-vehicle recording apparatus <NUM> according to the first embodiment, but one feature of the fifth embodiment is that the communication unit <NUM> is able to perform communication with the communication terminal <NUM> by using a plurality of communication methods, and control is changed in accordance with the communication methods. The other configurations are the same as those described in the first embodiment; therefore, descriptions thereof will be omitted and the same reference numerals are assigned.

<FIG> is a block diagram illustrating an example of a configuration of the on-vehicle recording apparatus <NUM> according to the fifth embodiment. In the on-vehicle recording apparatus <NUM> according to the fifth embodiment, the communication unit <NUM> includes a first communication unit <NUM> and a second communication unit <NUM> each of which performs communication with the external communication terminal <NUM> by using a different communication method. The first communication unit <NUM> is able to perform communication with the communication terminal <NUM> by using a first communication method, and the second communication unit <NUM> is able to perform communication with the communication terminal <NUM> by using a second communication method that is different from the first communication method.

The first communication method that is the communication method used in the first communication unit <NUM> is able to establish a connection for communication with the communication terminal <NUM> in which an authentication check on communication has been performed. The authentication check on the communication is performed by using, for example, a password or the like, and, in the fifth embodiment, the first communication method is performed by using authenticated Wi-Fi (registered trademark), and Wi-Fi in an ad hoc mode is used for the communication. In contrast, the second communication method is able to establish a connection for communication as long as the communication terminal <NUM> performs communication using the second communication method. In the fifth embodiment, the second communication method is configured to use Bluetooth (registered trademark) and performs pairing by using, for example, near field communication (NFC). Furthermore, it may be possible to use a communication method other than Wi-Fi for the first communication method, and use a communication method other than Bluetooth for the second communication method.

The first communication method is the communication method for performing communication with only the communication terminal <NUM> in which an authentication check on communication has been performed; therefore, in order to perform communication between the communication terminal <NUM> and the on-vehicle recording apparatus <NUM> by using the first communication method, any of the communication terminal <NUM> needs to perform an operation for authentication to establish a connection by using the first communication method. In the fifth embodiment, once any of the communication terminal <NUM> has performed the operation for authentication to establish the connection by using the first communication method, the subsequent authentication for the corresponding communication terminal <NUM> to establish the connection using the first communication method is automatically performed.

Here, the registered terminal <NUM> is the communication terminal <NUM> that has been registered by performing an input operation related to the registration with respect to the operating unit <NUM>. Accordingly, in the case where the communication terminal <NUM> that is used by a driver of a vehicle is registered as the registered terminal <NUM>, it is conceivable that the registered terminal <NUM> performs an operation for authentication to establish the connection using the first communication method. That is, it is conceivable that the registered terminal <NUM> is used as the communication terminal <NUM> that is able to perform communication by using the first communication method. Accordingly, in the following, a description will be made under the assumption that the registered terminal <NUM> is also the communication terminal <NUM> that is able to perform communication by using the first communication method. In other words, the registered terminal <NUM> is a terminal that is held by an owner or a user of the on-vehicle recording apparatus <NUM> or the vehicle in which the on-vehicle recording apparatus <NUM> is installed.

In contrast, the second communication method that is the communication method used in the second communication unit <NUM> is able to establish a connection for communication as long as the communication terminal <NUM> performs communication by using the second communication method, so that, in the case where the unregistered terminal <NUM> is the communication terminal <NUM> that performs communication by using the second communication method, the unregistered terminal <NUM> is able to establish the connection for the communication by using the second communication method. Furthermore, in the case where the registered terminal <NUM> is the communication terminal <NUM> that performs communication by using the second communication method, the registered terminal <NUM> is also able to establish a connection for the communication by using the second communication method. In other words, the unregistered terminal <NUM> is a terminal held by an arbitrary third party and is a terminal other than the registered terminal <NUM>.

For these reason described above, the communication control unit <NUM> that establishes the connection with the communication terminal <NUM> that performs communication with the communication unit <NUM> establishes the connection with the registered terminal <NUM> to be performed by using the first communication method used in the first communication unit <NUM> and the connection with at least the unregistered terminal <NUM> to be performed by using the second communication method used in the second communication unit <NUM>.

<FIG> is a flowchart illustrating the flow of a process, performed in the on-vehicle recording apparatus <NUM> according to the fifth embodiment, related to the access to the captured image data <NUM> performed in the communication terminal <NUM>. In the on-vehicle recording apparatus <NUM> according to the fifth embodiment, first, it is determined whether or not a connection request for a connection using the first communication method has been received from the communication terminal <NUM> (Step S301). Specifically, the control device <NUM> determines whether or not the communication control unit <NUM> that performs control of communication with the communication terminal <NUM> via the first communication unit <NUM> has received a connection request for a connection using the first communication method from the communication terminal <NUM>. That is, it is determined whether or not the first communication unit <NUM> has received a signal for the connection request from the communication terminal <NUM>.

As a result of this determination, if it is determined that the connection request for the connection using the first communication method has been sent from the communication terminal <NUM> to the communication control unit <NUM> or the first communication unit <NUM> (Yes at Step S301), the communication control unit <NUM> establishes the connection with the communication terminal <NUM> to be performed by using the first communication method. Furthermore, in this case, the access control unit <NUM> permits the communication terminal <NUM> in which the connection using the first communication method has been established to access the normal recording data <NUM> and the event recording data <NUM> (Step S302). That is, the access control unit <NUM> assumes that the communication terminal <NUM> in which the connection using the first communication method has been established is the registered terminal <NUM>, and permits the subject communication terminal <NUM> to access all of the pieces of captured image data <NUM> stored in the recording unit <NUM>. As a result, the communication terminal <NUM> in which the connection using the first communication method has been established is able to check the normal recording data <NUM> and the event recording data <NUM>.

In contrast, if it is determined that the connection request for the connection using the first communication method is not sent from the communication terminal <NUM> to the communication control unit <NUM> or the first communication unit <NUM> (No at Step S301), it is determined whether or not a connection request for a connection using the second communication method is received from the communication terminal <NUM> (Step S303). Specifically, the control device <NUM> determines whether or not the connection request for the connection using the second communication method has been sent from the communication terminal <NUM> to the communication control unit <NUM> that performs control of communication with the communication terminal <NUM> via the second communication unit <NUM>. In other words, it is determined whether or not the second communication unit <NUM> has received a signal for the connection request from the communication terminal <NUM>.

As a result of this determination, if it is determined that the connection request for the connection using the second communication method has been sent from the communication terminal <NUM> to the communication control unit <NUM> or the second communication unit <NUM> (Yes at Step S303), the communication control unit <NUM> establishes a connection with the communication terminal <NUM> to be performed by using the second communication method. Furthermore, in this case, the access control unit <NUM> permits the communication terminal <NUM> in which the connection using the second communication method has been established to access the event recording data <NUM> (Step S304). That is, the access control unit <NUM> assumes that the communication terminal <NUM> in which the connection using the second communication method has been established is the unregistered terminal <NUM>, and does not permit the communication terminal <NUM> to access the normal recording data <NUM> from among the pieces of captured image data <NUM> stored in the recording unit <NUM>, and permits the communication terminal <NUM> to access the event recording data <NUM>. As a result, the communication terminal <NUM> in which the connection using the second communication method has been established is able to check only the event recording data <NUM>.

As described above, after the access to the captured image data <NUM> performed by the communication terminal <NUM> is limited in accordance with the communication method used at the time of establishment of a connection, then, it is determined whether or not the connection of the communication terminal <NUM> has been completed (Step S305). Specifically, the control device <NUM> determines whether or not the establishment of the connection between the communication terminal <NUM> and the communication control unit <NUM> via the communication unit <NUM> is continued.

As a result of this determination, if it is determined that establishment of the connection between the communication terminal <NUM> and the communication control unit <NUM> is continued and the connection of the communication terminal <NUM> is not completed (No at Step S305), the state in which the access is permitted at Step S302 or Step S304 is maintained, and the determination whether or not the connection of the communication terminal <NUM> has been completed is repeated.

In contrast, if it is determined that the connection between the communication terminal <NUM> and the communication control unit <NUM> has been completed and the connection of the communication terminal <NUM> has been completed (Yes at Step S305), the process related to the connection with the communication terminal <NUM> is completed, and, the process at Step S301 is again started when the process related to this connection is again called,.

Furthermore, regarding these, if is determined that a connection request for a connection using the second communication method is not sent from the communication terminal <NUM> to the communication control unit <NUM> or the second communication unit <NUM> (No at Step S303), it is determined whether or not the process is to be completed (Step S306). That is, it is determined whether or not the operation of the on-vehicle recording apparatus <NUM> or control of communication with the communication terminal <NUM> is to be completed. As a result of this determination, if it is determined that the operation of the on-vehicle recording apparatus <NUM> or control of communication with the communication terminal <NUM> is not to be completed (No at Step S306), the process returns to Step S301, and again, it is determined whether or not a connection request for a connection using the first communication method is received.

In contrast, if it is determined that the operation of the on-vehicle recording apparatus <NUM> or control of communication with the communication terminal <NUM> is to be completed (Yes at Step S306), at least the process related to the connection with the communication terminal <NUM> is completed, and, the process at Step S301 is again started when the process related to this connection is again called.

As described above, in the fifth embodiment, control of the access to the captured image data <NUM> performed by the communication terminal <NUM> is limited in accordance with the communication method used at the time of establishment of the connection with the communication terminal <NUM>, so that it is possible to more reliably perform access control. That is, as a result of the communication control unit <NUM> establishing the connection with the registered terminal <NUM> using the first communication method and the connection with at least the unregistered terminal <NUM> using the second communication method and performing access control in accordance with the communication methods, the unregistered terminal <NUM> is not allowed to access the normal recording data <NUM> is allowed to access to the event recording data <NUM> in a more reliable manner. As a result, it is possible to check the information on the event while more reliably ensuring protection of the privacy.

In addition, in the fifth embodiment, the registered terminal <NUM> is able to establish a connection using not only the first communication method but also the second communication method; therefore, it is conceivable to unintentionally establish a connection using the second communication method. Accordingly, it may be determined whether the communication terminal <NUM> connected using the second communication method is the registered terminal <NUM> or the unregistered terminal <NUM>.

<FIG> is a flowchart illustrating the flow of a process, performed in the on-vehicle recording apparatus <NUM> according to a modification of the fifth embodiment, related to an access to the captured image data <NUM> performed by the communication terminal <NUM>. In the modification of the fifth embodiment, if it is determined that a connection request for a connection using the second communication method has been sent from the communication terminal <NUM> to the communication control unit <NUM> or the second communication unit <NUM> (Yes at Step S303), the communication control unit <NUM> establishes a connection with the communication terminal <NUM> to be performed by using the second communication method. Furthermore, the control device <NUM> determines whether or not the communication terminal <NUM> in which the connection using the second communication method has been established is the communication terminal <NUM> that has been registered in advance (Step S311). Specifically, the control device <NUM> determines, by using the communication control unit <NUM>, whether or not the communication terminal <NUM> in which the connection using the second communication method has been established is the registered terminal <NUM> that has been registered in advance or is the unregistered terminal <NUM> that has not been registered in advance.

As a result of this determination, if it is determined that the communication terminal <NUM> in which the connection using the second communication method has been established is the registered terminal <NUM> that has been registered in advance (Yes at Step S311), an access to the normal recording data <NUM> and the event recording data <NUM> performed by the registered terminal <NUM> is permitted (Step S302). That is, if it is determined, by using the communication control unit <NUM>, that the communication terminal <NUM> in which the connection using the second communication method has been established is the registered terminal <NUM>, the access control unit <NUM> allows the registered terminal <NUM> to access the normal recording data <NUM> and the event recording data <NUM>.

In contrast, if it is determined that the communication terminal <NUM> in which the connection using the second communication method has been established is not the registered terminal <NUM> that has been registered in advance (No at Step S311), the access control unit <NUM> controls the communication terminal <NUM> in which the connection using the second communication method has been established such that an access to the normal recording data <NUM> is not permitted and an access to the event recording data <NUM> is permitted (Step S304).

As described above, in the modification of the fifth embodiment, in the case where the communication terminal <NUM> in which the connection using the second communication method has been established is the registered terminal <NUM>, the registered terminal <NUM> is allowed to access each of the normal recording data <NUM> and the event recording data <NUM>, so that it is possible to improve usability. That is, the registered terminal <NUM> is able to connect the communication unit <NUM> using not only the first communication method but also the second communication method, so that the connection may possibly be established using the second communication method. Even in this case, by determining whether or not the communication terminal <NUM> in which the connection using the second communication method has been established is the registered terminal <NUM>, it is possible to avoid a situation in which the registered terminal <NUM> is not able to access the normal recording data <NUM>. As a result, it is possible to improve reliability at the time of a check of the information on the event while more reliably ensuring protection of the privacy.

The on-vehicle recording apparatus <NUM> according to a sixth embodiment has substantially the same configuration as that of the on-vehicle recording apparatus <NUM> according to the fifth embodiment, but one feature of the sixth embodiment is that, after a connection request for a connection using the second communication method has been received, an access to the event recording data <NUM> is permitted only within a predetermined time period after detection of an event. The other configurations are the same as those described in the fifth embodiment; therefore, descriptions thereof will be omitted and the same reference numerals are assigned.

In the on-vehicle recording apparatus <NUM> according to the sixth embodiment, the access control unit <NUM> included in the control device <NUM> permits the communication terminal <NUM> in which the connection using the second communication method has been established to access the event recording data <NUM> within a predetermined time period after the event detecting unit <NUM> has detected an event. In the case where a predetermined time period is exceeded after the event detecting unit <NUM> has detected the event, the access control unit <NUM> does not permit the communication terminal <NUM> in which the connection using the second communication method has been established to access the event recording data <NUM>. The predetermined time period in this case is set in advance and is stored in, for example, the internal memory included in the control device <NUM>.

Namely, in the sixth embodiment, unlike the fifth embodiment, an accessible time period is limited for the access to the event recording data <NUM> performed by the communication terminal <NUM> in which the connection using the second communication method has been established. Accordingly, in the sixth embodiment, the communication terminal <NUM> in which the connection using the second communication method has been established is able to access the event recording data <NUM> only within the predetermined time period after the event detecting unit <NUM> has detected the event. In other words, after the event has been detected by the event detecting unit <NUM>, if the predetermined time period is exceeded, the communication terminal <NUM> in which the connection using the second communication method has been established is not able to access all of the pieces of captured image data <NUM> stored in the recording unit <NUM> including the event recording data <NUM>.

<FIG> is a flowchart illustrating the flow of a process, performed in the on-vehicle recording apparatus <NUM> according to the sixth embodiment, related to the access to the captured image data <NUM> performed by the communication terminal <NUM>. In the sixth embodiment, if it is determined that a connection request for a connection using the second communication method is sent from the communication terminal <NUM> to the communication control unit <NUM> or the second communication unit <NUM> (Yes Step S303), it is determined whether or not the time period is within the predetermined time period after the detection of the event (Step S321). Specifically, in the case where a connection between the second communication unit <NUM> and the communication terminal <NUM> has been established by using the second communication method, first, the control device <NUM> determines whether or not the predetermined time period is not exceeded after the event has been detected by the event detecting unit <NUM>.

As a result of this determination, if it is determined that the predetermined time period is not exceeded after the detection of the event (Yes at Step S321), the access control unit <NUM> permits the communication terminal <NUM> in which the connection using the second communication method has been established to access the event recording data <NUM> (Step S304). That is, if it is determined that the predetermined time period is not exceeded after the detection of the event, the access control unit <NUM> assumes that the communication terminal <NUM> in which the connection using the second communication method has been established is the unregistered terminal <NUM>, and allows the subject communication terminal <NUM> not to access the normal recording data <NUM> and to access the event recording data <NUM>.

In contrast, if it is determined that the predetermined time period is exceeded after the detection of the event (No at Step S321), it is determined whether or not the process is to be completed (Step S306). That is, it is determined whether or not the operation of the on-vehicle recording apparatus <NUM> or control of communication with the communication terminal <NUM> is to be completed.

As described above, in the sixth embodiment, after the connection with the communication terminal <NUM> to be performed by using the second communication method has been established, the access control unit <NUM> permits an access to the event recording data <NUM> only within the predetermined time period after the event has been detected by the event detecting unit <NUM>, and if the predetermined time period is exceeded, the access control unit <NUM> does not permit the access to the event recording data <NUM>. As a result, in the case where a long time has elapsed after the occurrence of the event, such as an accident occurred in the vehicle, it is possible to prevent a third party from accessing the event recording data <NUM> by using the communication terminal <NUM> in which the connection using the second communication method has been established, that is, the unregistered terminal <NUM>. Therefore, it is possible to prevent an event that occurred a long time ago from being unintentionally found out by the third party after the event, and it is possible to more reliably protect privacy of the user.

In contrast, the unregistered terminal <NUM> in which the connection using the second communication method has been established is able to access the event recording data <NUM> within the predetermined time period after the detection of the event, so that the third party is able to easily check, by using the unregistered terminal <NUM>, the event recording data <NUM> that has been recorded at the time of the occurrence of the event as long as the predetermined time period is not exceeded. As a result, it is possible to easily check the cause of the occurrence of the event by using the unregistered terminal <NUM> in which the connection using the second communication method has been established as long as the predetermined time period is not exceeded after the occurrence of the event, such as an accident occurred in a vehicle. As a result, it is possible to check the information on the event while ensuring protection of the privacy.

In addition, in the sixth embodiment, the communication terminal <NUM> in which the connection using the second communication method has been established is permitted to access the event recording data <NUM> only within the predetermined time period after the event detecting unit <NUM> has detected the event, but, in this case, the event recording data <NUM> that is permitted to be accessed may be the most recent event recording data 320a. That is, the communication terminal <NUM> in which the connection using the second communication method has been established is not permitted to access the event recording data <NUM> that is not the most recent event recording data 320a even within the predetermined time period after the event detecting unit <NUM> has detected the event, and an access to only the most recent event recording data 320a may be permitted. As a result, even in a case in which a plurality of pieces of the event recording data <NUM> are stored in the recording unit <NUM>, it is possible to prevent the event recording data <NUM> other than the most recent event recording data 320a from being able to be checked by a third party by using the communication terminal <NUM> in which the connection using the second communication method has been established. Therefore, it is possible to prevent an event occurred in the vehicle in the past from being unintentionally found out by the third party, and it is thus possible to more reliably protect privacy of the user.

The on-vehicle recording apparatus <NUM> according to a seventh embodiment has substantially the same configuration as that of the on-vehicle recording apparatus <NUM> according to the sixth embodiment, but one feature of the seventh embodiment is that a connection using the second communication method is approved only within a predetermined time period after detection of an event. The other configurations are the same as those described in the sixth embodiment; therefore, descriptions thereof will be omitted and the same reference numerals are assigned.

In the on-vehicle recording apparatus <NUM> according to the seventh embodiment, in a period of time for which the event detecting unit <NUM> does not detect an event, the communication control unit <NUM> does not establish a connection with the communication terminal <NUM> to be performed by using the second communication method, and enables establishment of a connection with the communication terminal <NUM> using the second communication method in a predetermined time period after the event detecting unit <NUM> has detected an event. In this case, the predetermined time period used in this case is set in advance and is stored in, for example, the internal memory included in the control device <NUM>.

In other words, in a period of time for which the event detecting unit <NUM> does not detect an event, the communication control unit <NUM> approves the connection of the communication terminal <NUM> to be performed using only the first communication method. Accordingly, in the period of time for which the event detecting unit <NUM> does not detect an event, the communication control unit <NUM> practically approves only the connection of the registered terminal <NUM> and does not approve the connection of the unregistered terminal <NUM>.

<FIG> is a flowchart illustrating a process, performed in the on-vehicle recording apparatus <NUM> according to the seventh embodiment, related to an access to the captured image data <NUM> performed by the communication terminal <NUM>. In the on-vehicle recording apparatus <NUM> according to the seventh embodiment, first, the connection using the first communication method is approved (Step S401). As a result, practically, a connection of the unregistered terminal <NUM> is not approved, and only a connection of the registered terminal <NUM> that has been registered in advance is approved.

Then, it is determined whether or not an event occurred in a vehicle has been detected by the event detecting unit <NUM> (Step S402). That is, the event detecting unit <NUM> detects an occurrence of an event based on whether or not acceleration detected by the sensor <NUM> is equal to or larger than the threshold that is set in advance.

If the event detecting unit <NUM>, which detects an event on the basis of the acceleration detected by the sensor <NUM> in this way, detects an occurrence of an event in the vehicle (Yes at Step S402), the control device <NUM> approves a connection using the second communication method in a predetermined time period after the detection of the event (Step S403). As a result, the communication terminal <NUM> including the unregistered terminal <NUM> that are able to establish a connection using the second communication method are allowed to be able to establish a connection using the second communication method.

Then, it is determined whether or not a connection request for a connection using the second communication method has been received from the communication terminal <NUM> (Step S404). That is, it is determined whether or not the second communication unit <NUM> that performs communication with the communication terminal <NUM> using the second communication method has received a signal for the connection request from the communication terminal <NUM>.

As a result of this determination, if it is determined that the connection request for the connection using the second communication method has been received from the communication terminal <NUM> (Yes at Step S404), the communication control unit <NUM> establishes the connection with the communication terminal <NUM> using the second communication method. Furthermore, the control device <NUM> determines whether or not the communication terminal <NUM> in which the connection using the second communication method has been established is the communication terminal <NUM> that has been registered in advance (Step S405). That is, the control device <NUM> determines whether the communication terminal <NUM> in which the connection using the second communication method has been established is the registered terminal <NUM> that has been registered in advance or the unregistered terminal <NUM> that has not been registered in advance.

As a result of this determination, if it is determined that the communication terminal <NUM> in which the connection using the second communication method has been established is the registered terminal <NUM> that has been registered in advance (Yes at Step S405), the access control unit <NUM> permits the registered terminal <NUM> to access the normal recording data <NUM> and the event recording data <NUM> (Step S406).

In contrast, if it is determined that the communication terminal <NUM> in which the connection using the second communication method has been established is not the registered terminal <NUM> that has not been registered in advance (No at Step S405), the access control unit <NUM> does not permit the communication terminal <NUM> in which the connection using the second communication method to access the normal recording data <NUM>, and permits the communication terminal <NUM> to access the event recording data <NUM> (Step S407).

As described above, if an access to the captured image data <NUM> to be performed by the communication terminal <NUM> is limited depending on whether or not the communication terminal <NUM> in which the connection using the second communication method has been established is the registered terminal <NUM> that has been registered in advance, then, it is determined whether or not the connection of the communication terminal <NUM> has been completed (Step S408). Specifically, the control device <NUM> determines whether or not the establishment of the connection between the communication terminal <NUM> and the communication control unit <NUM> via the communication unit <NUM> is continued.

As a result of this determination, if it is determined that the establishment of the connection between the communication terminal <NUM> and the communication control unit <NUM> is continued and if it is determined that the connection of the communication terminal <NUM> has not been completed (No at Step S408), the state in which the access is permitted at Step S406 or Step S407 is maintained, and determination whether or not the connection of the communication terminal <NUM> has been completed is repeated.

In contrast, if it is determined that the connection between the communication terminal <NUM> and the communication control unit <NUM> has been completed and if it is determined that the connection of the communication terminal <NUM> has been completed (Yes at Step S408), the process related to the connection with the communication terminal <NUM> is completed, and, the process is again started from Step S401 when the process related to this connection is again called.

Furthermore, in contrast, in the case where the event detecting unit <NUM> does not detect an occurrence of an event with respect to the vehicle (No at Step S402) or in the case where it is determined that a connection request for a connection using the second communication method has not been received from the communication terminal <NUM> (No at Step S404), it is determined whether or not the process is to be completed (Step S409). That is, it is determined whether or not the operation of the on-vehicle recording apparatus <NUM> or control of communication with the communication terminal <NUM> is to be completed. As a result of this determination, if it is determined that the operation of the on-vehicle recording apparatus <NUM> or control of communication with the communication terminal <NUM> is not to be completed (No at Step S409), the process returns to Step S402, and it is determined whether or not an event with respect to the vehicle has been detected.

In contrast, if it is determined that the operation of the on-vehicle recording apparatus <NUM> or control of the communication with the communication terminal <NUM> is to be completed (Yes at Step S409), at least the process related to the connection with the communication terminal <NUM> is completed, and, the process is again started from Step S401 when the process related to this connection is again called.

As described above, in the seventh embodiment, the establishment of the connection with the communication terminal <NUM> using the second communication method is enabled only within the predetermined time period after the event detecting unit <NUM> has detected the event, so that, in the case where an event is not detected, it is possible to prevent establishment of the connection with the communication terminal <NUM> using the second communication method. In other words, in the case where the event detecting unit <NUM> does not detect an event, practically, it is possible to enable only the establishment of the connection with the registered terminal <NUM> using the first communication method, and prohibit establishment of the connection with the unregistered terminal <NUM> using the second communication method. As a result, in a situation in which an event, such as an accident occurred in a vehicle, does not occur, it is possible to prevent the connection of the unregistered terminal <NUM> using the second communication method from being established, and prevent a third party from accessing the event recording data <NUM> by using the unregistered terminal <NUM>. Therefore, in a situation in which an event does not occur, it is possible to prevent the event recording data <NUM> from being unintentionally checked by the third party, and it is thus possible to more reliably protect privacy of the user.

In contrast, the establishment of the connection with the communication terminal <NUM> using the second communication method is enabled within the predetermined time period after the detection of the event, so that it is possible to establish the connection of the unregistered terminal <NUM> using the second communication method as long as the predetermined time period is not exceeded after the detection of the event, and it is possible for the third party to check the event recording data <NUM> that has been recorded at the time of occurrence of the event by using the unregistered terminal <NUM>. As a result, it is possible to easily check the cause of the occurrence of the event by using the unregistered terminal <NUM> as long as the predetermined time period is not exceeded after the occurrence of the event, such as a vehicle accident. As a result, it is possible to check the information on the event while ensuring protection of the privacy.

Furthermore, in the first to the seventh embodiments described above, a case has been illustrated in the drawings as an example in which, regarding the captured image data <NUM> that is stored as the event recording data <NUM> at the time of detection of the event, a single piece of the captured image data <NUM> is stored as the event recording data <NUM> at the time of single detection of an event; however, a plurality of pieces of the captured image data <NUM> may be stored as the event recording data <NUM> at the time of single detection of an event.

In addition to the embodiments described above, the on-vehicle recording apparatus <NUM> according to the present embodiment may be performed with various kinds of embodiments. For example, in the case where a connection with the unregistered terminal <NUM> has been established, the access control unit <NUM> included in the control device <NUM> may allow an access to the event recording data indicating that acceleration at the time of detection of an event is equal to or larger than a predetermined value from among the most recent event recording data, such as the event recording data that is stored five minutes before, for example, the establishment of the connection. The predetermined value that is set in this case is a value that indicates a level apparently generated in a vehicle caused by a collision or the like. In the case where the connection with the unregistered terminal <NUM> has been established, the access control unit <NUM> included in the control device <NUM> may allow an access to the event recording data indicating that acceleration at the time of detection of an event is the maximum from among the most recent event recording data, such as the event recording data that is stored five minutes before, for example, the establishment of the connection. By performing the process in this way, it is possible for a third party to check the event recording data related to an accident by using the unregistered terminal <NUM> even if the event recording data has been stored as a result of acceleration being applied to the vehicle before and after the accident.

In the above, the on-vehicle recording apparatus <NUM> according to the present embodiment has been described; however, an embodiment may also be implemented with various kinds of embodiments other than the first to the seventh embodiments described above.

Each of the components included in the on-vehicle recording apparatus <NUM> illustrated in the drawings are only for conceptually illustrating the functions thereof and are not always physically configured as illustrated in the drawings. In other words, the specific shape of a separate or integrated device is not limited to the drawings. Specifically, all or part of the device can be configured by functionally or physically separating or integrating any of the units depending on various loads or use conditions.

The configuration of the on-vehicle recording apparatus <NUM> is implemented as, for example, software, programs, or the like loaded in a memory. In the embodiments described above, the description has been given as the functional blocks that are implemented in cooperation with these pieces of hardware or software. In other words, the functional blocks can be implemented in various forms by using only hardware, using only software, or using a combination of hardware and software.

The components described above include one that can easily be thought of by a person skilled in the art and one that is practically identical. Further, the configurations described above may be combined appropriately. Furthermore, various omissions, replacements, and modifications of the components may be made within the scope of the present embodiments.

In the above description, a case in which a loop recording process is performed has been described; however, the same applies to a case in which image capturing is started after detection of an event.

In the above description, a case has been described as an example in which the image capturing unit <NUM> is arranged in the vicinity of the front window in the room of the vehicle and mainly captures an image of the surroundings in front of the vehicle; however, the image capturing unit <NUM> is not limited to this example, and may be arranged in the vicinity of the rear window of the vehicle facing rearward, and mainly capture an image of the surroundings in rear of the vehicle. Alternatively, image capturing unit <NUM> may be a camera capable of capturing a <NUM>-degree image, or may be a group constituted from a plurality of cameras each capturing an image in a different direction.

Claim 1:
An on-vehicle recording apparatus (<NUM>) comprising:
a captured image data acquiring unit (<NUM>) configured to acquire captured image data (<NUM>) captured by an image capturing unit (<NUM>) configured to capture an image of surroundings of a vehicle;
an event detecting unit (<NUM>) configured to detect an event occurred with respect to the vehicle;
a recording control unit (<NUM>) configured to store the captured image data acquired by the captured image data acquiring unit (<NUM>) as normal recording data that is not based on the event and as event recording data that is based on the event;
a communication control unit (<NUM>) configured to establish a connection with a communication terminal (<NUM>); and
an access control unit (<NUM>), wherein
when the communication terminal (<NUM>) in which the connection has been established by the communication control unit (<NUM>) is a registered terminal (<NUM>) that is the communication terminal (<NUM>) that has been registered in advance, the access control unit (<NUM>) is configured to allow the registered terminal (<NUM>) to access the normal recording data and the event recording data, and
when the communication terminal (<NUM>) in which the connection has been established by the communication control unit (<NUM>) is an unregistered terminal (<NUM>) that is a communication terminal (<NUM>) that has not been registered in advance, the access control unit (<NUM>) is configured not to allow the unregistered terminal (<NUM>) to access the normal recording data, wherein,
when a connection request is received from the unregistered terminal (<NUM>) within a predetermined time period after the event has been detected by the event detecting unit (<NUM>), the access control unit (<NUM>) is configured to allow the unregistered terminal (<NUM>) to access the event recording data that is most recent data and configured not to allow the unregistered terminal (<NUM>) to access the event recording data that is not the most recent data, and
wherein when the predetermined time period is exceeded, the access control unit (<NUM>) is configured not to allow the unregistered terminal (<NUM>) to access all of the pieces of captured image data including the most recent event recording data.