JP2005273264A - Operation control device and electronic key system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an operation control device and an electronic key system by which the utility value as an electronic key is imparted flexibly to a communication terminal. <P>SOLUTION: The system is structured in a manner that operation of a controlled object is permitted by main contents of operation permission (sub contents of operation permission) related to a main ID code (a sub ID code) of a cellular phone 2 (a cellular phone 3) when the corresponding cellular phone 2 (the cellular phone 3) is used as the electronic key, so that the utility value as the electronic key may be imparted to each individual cellular phone. Thus, the utility value as the electronic key is flexibly imparted to the cellular phone 2 (the cellular phone 3). <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an operation control device that permits operation of a controlled object, and an electronic key system that permits operation of the controlled object by the operation control device.

  Conventionally, in an automobile, an electronic key system having a door unlock automatic permission function and an engine start automatic permission function has been proposed for the purpose of achieving both improvement in security level and convenience (for example, (See Patent Document 1). Here, the door unlock automatic permission function means that when a driver who has a corresponding electronic key enters a predetermined area outside the vehicle, the door unlock control device on the vehicle side unlocks the vehicle-mounted door. This is an automatic permission function. In addition, when the door outside handle is touched in such a state where unlocking of the vehicle-mounted door is permitted, the vehicle-mounted door is unlocked. On the other hand, the engine start automatic permission function is a function for automatically permitting the engine start by the engine start control device on the vehicle side when the corresponding electronic key is brought into the vehicle. When the engine start switch (for example, a rotary switch or a push switch) is operated in such a state that the engine is permitted to start, the engine is started.

  For this reason, if these automatic permission functions are used, there is no need to perform any complicated key operation at the time of getting on or starting the engine. Therefore, convenience can be improved. In addition, unlocking the vehicle-mounted door and starting the engine are not permitted unless an electronic key that is significantly more difficult to duplicate than conventional mechanical keys is possessed. Therefore, the security level can be improved.

By the way, in recent years, mobile phones (hereinafter simply referred to as mobile phones) have been rapidly developed and spread, and it is common for people who ride in automobiles to have mobile phones, and the functions of mobile phones have also advanced. ing. Therefore, a technical idea of using a mobile phone as an electronic key in the above-described electronic key system for automobiles has also been proposed (see, for example, Patent Document 2 and Patent Document 3).
JP 2002-029385 A JP 2003-120097 A JP 2003-137070 A

  In the automobile electronic key system as described above, when an automobile is lent to a person other than the owner of the automobile, the electronic key is naturally lent. In other words, in the case of an electronic key system that uses a mobile phone (loaner's mobile phone) owned by the car owner (loaner) as an electronic key, the mobile phone of the loaner to the person (loaner) who lent the car Need to lend.

  However, while the mobile phone is used for the electronic key system in this way, it is primarily used for applications other than the electronic key system. For this reason, when lending a mobile phone together with lending a car as described above, there is a disadvantage that the lending source cannot use the mobile phone even temporarily. .

  The present invention has been made paying attention to such problems, and its object is to provide an operation control device and an electronic key that can flexibly provide a utility value as an electronic key to a communication terminal. To provide a system.

  In order to achieve the above object, according to the first aspect of the present invention, in the operation control device including the control unit that permits the operation of the control object based on the use of the corresponding communication terminal, each communication terminal The ID code that is the same as the ID code set individually is associated with the operation permission content that is an index of how the operation of the controlled object is permitted under the condition that both ID codes match. Storage means for storing is provided, and the control means permits the operation of the controlled object with the operation permission contents associated with the matched ID code on condition that both ID codes match.

  Therefore, according to the first aspect of the present invention, when the corresponding communication terminal is used as an electronic key, the operation of the controlled object is permitted with the operation permission content associated with the ID code of the communication terminal. That is, the utility value as an electronic key is individually assigned to each communication terminal.

  According to a second aspect of the present invention, in the operation control device according to the first aspect, the storage means uses a main ID code that is the same as the main ID code individually set for the main communication terminal. And the same sub ID code as the sub ID code individually set in the auxiliary communication terminal different from the main communication terminal is stored in association with the sub operation permission content. The sub operation permission content is limited to the main operation permission content as a limit.

  Therefore, according to the invention described in claim 2, in addition to the main communication terminal, an auxiliary communication terminal (for example, a communication terminal owned by a person other than the owner of the main communication terminal) is used as the electronic key. The operation of the controlled object is permitted based on the usage. Here, unlike the configuration of claim 2, when the auxiliary communication terminal is used as an electronic key, the operation of the controlled object is performed with the same operation permission content (main operation permission content) as the main communication terminal. Adopting such a permitted configuration is not preferable because the operation of the controlled object may be permitted in a manner against the will of the owner of the main communication terminal. On the other hand, according to the configuration of claim 2, the operation permission content (sub operation permission content) determined in advance under the will of the owner of the main communication terminal is associated with the sub ID code. When the auxiliary communication terminal is used as an electronic key, the will of the owner of the main communication terminal is reflected. Therefore, a high security level can be maintained without sacrificing flexibility.

  According to a third aspect of the present invention, in the operation control device according to the second aspect, the sub operation permission content is limited to the main operation permission content, and the operation permission when the operation of the controlled object is permitted. It is characterized in that at least one of the effective number for each type and the effective period for each type of operation permission when the operation of the controlled object is permitted is limited.

  Therefore, according to the invention described in claim 3, by associating at least one of the number of effective times and the effective period with the sub ID code, the operation and effect of the invention described in claim 2 are preferably achieved. Can be obtained.

  In the invention described in claim 4, the electronic device whose operation is permitted by the operation control device described in any one of claims 1 to 3 based on the use of the corresponding communication terminal. The key system, the main communication terminal operates on the condition that the sub ID codes individually set in the auxiliary communication terminal different from the main communication terminal are matched with each other. First transmission means for transmitting to the auxiliary communication terminal in association with the sub-operation permission content that is an operation permission content that is an index of how the control target operation is permitted by the control device. It is characterized by that.

Therefore, according to the invention described in claim 4, it is possible to obtain the same operation and effect as the operation and effect of the invention described in any one of claims 1 to 3.
According to a fifth aspect of the present invention, in the electronic key system according to the fourth aspect, the main communication terminal is information transmitted to the auxiliary communication terminal by the first transmission means, and has a sub ID. The apparatus further comprises second transmission means for transmitting information associated with the code and the sub-operation permission content to the operation control device.

  Therefore, according to the invention described in claim 5, it is possible to obtain the same operation and effect as the operation and effect of the invention described in any one of claims 1 to 3.

Since this invention is comprised as mentioned above, there exist the following effects.
According to the invention of any one of claims 1 to 5, the utility value as an electronic key can be flexibly provided to the communication terminal.

Hereinafter, an embodiment in which the present invention is embodied in an electronic key system of an automobile will be described.
As shown in FIG. 1, the electronic key system 1 includes a main mobile phone 2 and an operation control device 4. The main mobile phone 2 is owned by a driver (car owner). On the other hand, the operation control device 4 is provided on the automobile side. The electronic key system 1 is configured such that bidirectional communication between the main mobile phone 2 and the operation control device 4 is possible.

  The mobile phone 2 has a reception function and a transmission function. That is, the mobile phone 2 includes a mobile phone function unit 21, an application control unit 22, and a short-range wireless communication unit 23. The mobile phone function unit 21 has functions (including an e-mail transmission function and a reception function) necessary for using the mobile phone 2 as a telephone. The application control unit 22 has a function necessary for downloading application software from the server 5 via the communication network 6 using the mobile phone 2. The short-range wireless communication unit 23 includes a communication circuit 24 and a microcomputer 25. Although not specifically shown, the mobile phone 2 has a display unit for displaying various information, and an operation unit having a button that can be pressed by the owner of the main mobile phone 2 (driver = owner of the car). Etc.

  The communication circuit 24 is for receiving a request signal transmitted from the operation control device 4. When receiving the request signal from the operation control device 4, the communication circuit 24 demodulates the request signal to generate a reception signal, and outputs the reception signal to the microcomputer 25.

  The microcomputer 25 is a CPU unit including a CPU, a ROM, a RAM, and the like (not shown), and includes a nonvolatile memory 25a. Here, as shown in FIG. 2A, a plurality of memory areas (in the present embodiment, the first memory area to the Nth memory area) are allocated to the memory 25 a of the mobile phone 2. Each of the memory areas is for storing application software downloaded by the application control unit 22. In addition, each of the memory areas is also for storing data attached to an electronic mail transmitted from the outside. FIG. 2A shows a state (initial state) in which no application software is downloaded at all and any electronic mail is not received.

  When the main mobile phone 2 is used as an electronic key, the driver uses the mobile phone 2 from the initial state and uses the predetermined application software from the server 5 via the communication network 6 prior to the use. Will be downloaded. In the present embodiment, application software necessary for using the main mobile phone 2 as an electronic key is downloaded. Specifically, the driver accesses the car manufacturer's site owned by the driver himself, and from among a plurality of application software stored on the site, the type of car owned by the driver himself ( Application software corresponding to the vehicle type), manufacturing year, etc. is selected and downloaded.

  The application software includes an application ID code, a mobile phone unique ID code, a communication encryption algorithm, and operation permission contents as shown in FIG. Here, the application ID code is an ID code for specifying a predetermined memory area among a plurality of memory areas allocated to the memory 25a of the mobile phone 2. The application ID code of the present embodiment is an ID code for specifying a memory area allocated for storing application software necessary for using the mobile phone 2 as an electronic key. In the present embodiment, as a result of associating such an application ID code with the second memory area, as shown in FIG. 2B, it is necessary to use the mobile phone 2 as an electronic key. Application software is stored in the second memory area.

  On the other hand, the mobile phone unique ID code stored in the memory 25a of the mobile phone 2 is an ID code individually set for the main mobile phone 2 (ID code of the main mobile phone 2 = main ID code). is there.

  On the other hand, the communication encryption algorithm is to demodulate the request signal transmitted from the operation control device 4 to the mobile phone 2 in order to establish bidirectional communication between the mobile phone 2 and the operation control device 4. The algorithm is used to allow the mobile phone 2 to receive the request signal suitably. The communication encryption algorithm refers to the signal transmitted to the operation control device 4 when the mobile phone 2 transmits a signal (main ID code signal) including the mobile phone unique ID code in response to the request signal. It is also an algorithm that is used to allow the operation control device 4 to suitably receive the signal by modulating in an adaptive manner. That is, it can be said that the communication encryption algorithm is an algorithm for facilitating two-way communication between the mobile phone 2 and the operation control device 4.

  Finally, the operation permission content stored in the memory 25a of the mobile phone 2 is the manner in which the operation of the controlled object is permitted when the main mobile phone 2 is used as an electronic key. It is an indicator. In this embodiment, the operation permission content (main operation permission content) stored in the memory 25a of the mobile phone 2 is the number of effective times for each type of operation permission when the operation of the control target is permitted, and the control target The valid period for each type of the operation permission when the operation is permitted is set to unlimited regardless of the type of the operation permission.

  When the reception signal is input from the communication circuit 24 as described above, the microcomputer 25 responds to the request signal by using the mobile phone unique ID code (of the main mobile phone 2) stored in the memory 25a. A signal including ID code = main ID code), that is, a main ID code signal is output to the communication circuit 24. The communication circuit 24 is also for modulating the main ID code signal input from the microcomputer 25 into a radio wave having a predetermined frequency (2.45 GHz in the present embodiment) and transmitting it.

  On the other hand, the operation control device 4 has a transmission function and a reception function in relation to bidirectional communication with the main mobile phone 2. That is, the operation control device 4 includes an out-vehicle communication unit 41, an in-vehicle communication unit 42, and a verification ECU 43.

  The vehicle exterior communication unit 41 is provided for a door unlock automatic permission function. And the vehicle exterior communication unit 41 modulates and transmits the request signal input from collation ECU43 to the radio wave of a predetermined frequency (2.45 GHz in this embodiment). It should be noted that the request signal transmitted from the vehicle exterior communication unit 41 as described above is arranged outside the vehicle so as to be within a range from 0.7 m to 1.0 m from the door outside handle, and the transmission antenna is arranged and the transmission antenna is directed. And request signal output are set. As a result, in the present embodiment, it is assumed that the request signal is transmitted within the outside communication area A41 indicated by a two-dot chain line in FIG. Incidentally, the request signal transmitted from the outside communication unit 41 in this way establishes two-way communication between the mobile phone 2 and the operation control device 4 in the outside communication area A41 formed around the door outside handle. It is for making it happen.

  Further, when the vehicle outside communication unit 41 receives the main ID code signal transmitted from the mobile phone 2 in response to the request signal, the vehicle outside communication unit 41 demodulates the main ID code signal to generate a reception signal. Is output to the verification ECU 43.

The verification ECU 43 is a CPU unit including a CPU, a ROM, a RAM, and the like (not shown), and includes a nonvolatile memory 43a.
Here, in the memory 43a of the verification ECU 43, as shown in FIG. 4A, the same ID code (automobile ID code) as the ID code individually set for each mobile phone, It is stored in association with the operation permission content that is an index of how the operation of the controlled object is permitted under the condition that they match. In the present embodiment, the same ID code (main ID code on the automobile side) as the ID code (main ID code) individually set for the main mobile phone 2 is stored in association with the main operation permission content. Yes. This main operation permission content is the same as that stored in the memory 25a of the main mobile phone 2 (see FIG. 2B). That is, the main operation permission content is the number of effective times for each type of operation permission when the operation of the controlled object is permitted, and the effective period for each type of operation permission when the operation of the controlled object is permitted. All of these are set to be unlimited regardless of the type of the operation permission.

  When the main mobile phone 2 is used as an electronic key, a registration work for associating the mobile phone 2 with the operation control device 4 is required prior to the use. I will omit it because it is not the main part. In the present embodiment, the main ID code is changed to the main operation permission content as shown in FIG. 4A through a suitable registration operation performed while maintaining a high security level without impairing convenience. Assume that the data is stored in the memory 43 a of the verification ECU 43.

  Here, the verification ECU 43 outputs a request signal to the vehicle exterior communication unit 41 in order to transmit a request signal to the vehicle exterior communication area A41. In other words, in this case, the verification ECU 43 executes vehicle exterior communication control.

  When the reception signal is input from the external communication unit 41 based on the external communication control, the collation ECU 43 stores the ID code (main ID code) of the mobile phone 2 included in the reception signal and the memory. It is determined whether or not the main ID code on the automobile side stored in 43a matches. In other words, in this case, the verification ECU 43 executes the vehicle main ID code verification.

  When the collation ECU 43 determines that both main ID codes are matched by the above-mentioned main ID code collation outside the vehicle, the operation permission content (main operation permission content) associated with the matched main ID code is added to the in-vehicle door. It is determined whether or not unlock permission is included. Here, in the present embodiment, the main operation permission content associated with the main ID code is set such that the number of effective times and the effective period are set to unlimited for all types of operation permission including unlock permission of the vehicle-mounted door. Therefore, the collation ECU 43 makes an affirmative determination at the time of the determination.

  A door ECU 50 is electrically connected to the verification ECU 43. Then, the verification ECU 43 includes the permission for unlocking the in-vehicle door in the operation permission content (main operation permission content) associated with the main ID code when both main ID codes match by the vehicle main ID code verification. A door unlock permission signal is output to the door ECU 50 on the condition that it is determined that the That is, in this case, the verification ECU 43 performs door unlock permission control.

The door ECU 50 is for unlocking the in-vehicle door. A touch sensor 55 is electrically connected to the door ECU 50.
When the touch sensor 55 is touched on the door outside handle, the touch sensor 55 outputs a detection signal to that effect to the door ECU 50 over a period during which the door outside handle is touched. The door ECU 50 detects that the door outside handle is being touched based on the detection signal input from the touch sensor 55.

  When the door ECU 50 detects that the door outside handle is touched in the state where the door unlock permission signal is input from the verification ECU 43 as described above, the door ECU 50 controls the actuator (not shown) to control the vehicle-mounted door. To unlock.

  As described above, in the electronic key system 1 according to the present embodiment, the driver who has the corresponding mobile phone 2 (electronic key) is in the vehicle outside communication area A41 by the cooperation between the vehicle outside communication unit 41 and the verification ECU 43. When entering, it has a function of automatically permitting unlocking of the vehicle-mounted door, that is, a door unlocking automatic permission function. Although the behavior of the driver entering the vehicle outside communication area A41 is indefinite, every time there is such behavior, it is necessary to enable the door unlock automatic permission function as described above. For this reason, the verification ECU 43 intermittently outputs a request signal to the out-of-vehicle communication unit 41 in a state in which the vehicle-mounted door is locked in order to monitor the approach of the driver carrying the corresponding mobile phone 2.

  On the other hand, the in-vehicle communication unit 42 is provided for an engine start automatic permission function. The in-vehicle communication unit 42 modulates a request signal input from the verification ECU 43 into a radio wave having a predetermined frequency (2.45 GHz in the present embodiment) and transmits the modulated signal. It should be noted that the request signal transmitted from the in-vehicle communication unit 42 as described above extends over substantially the entire interior of the vehicle and prevents leakage outside the vehicle as much as possible, so that the number of transmission antennas, the arrangement of the transmission antennas, and the directivity of the transmission antennas , Request signal output is set. As a result, in the present embodiment, it is assumed that the request signal is transmitted within the in-vehicle communication area A42 indicated by a two-dot chain line in FIG. Incidentally, the request signal transmitted from the in-vehicle communication unit 42 in this way establishes two-way communication between the mobile phone 2 and the operation control device 4 in the in-vehicle communication area A42 formed over substantially the entire area in the vehicle. It is for making it happen.

  When the in-vehicle communication unit 42 receives the main ID code signal transmitted from the mobile phone 2 in response to the request signal, the in-vehicle communication unit 42 demodulates the main ID code signal to generate a reception signal, and the received signal Is output to the verification ECU 43.

  Here, the verification ECU 43 outputs a request signal to the in-vehicle communication unit 42 in order to transmit the request signal to the in-vehicle communication area A42. That is, in this case, the verification ECU 43 performs in-vehicle communication control.

  When the reception signal is input from the in-vehicle communication unit 42 based on the in-vehicle communication control, the collation ECU 43 stores the ID code (main ID code) of the mobile phone 2 included in the received signal and the memory. It is determined whether or not the main ID code on the automobile side stored in 43a matches. In other words, in this case, the verification ECU 43 executes in-vehicle main ID code verification.

  When the collation ECU 43 determines that the two main ID codes coincide with each other by collating the in-vehicle main ID code, the engine is started to the operation permission content (main operation permission content) associated with the matched main ID code. Determine if permission is included. Here, in the present embodiment, the main operation permission content associated with the main ID code is that the number of effective times and the effective period are set to unlimited for all types of operation permission including engine start permission. Therefore, the verification ECU 43 makes an affirmative determination in the determination.

  The verification ECU 43 is electrically connected to the EFI ECU 60. Then, the verification ECU 43 matches both main ID codes by the in-vehicle main ID code verification, and the operation permission content (main operation permission content) associated with the main ID code includes the engine start permission. The engine start permission signal is output to the EFIECU 60 on the condition that the determination is made. That is, in this case, the verification ECU 43 executes engine start permission control.

The EFIECU 60 is for starting the engine. A brake switch 70 and an engine start switch 80 are electrically connected to the EFIECU 60.
The brake switch 70 is for detecting that the brake operation is being performed. When a brake pedal (not shown) is depressed, the brake switch 70 outputs a detection signal to that effect to the EFIECU 60 over a period during which the brake pedal is depressed. The EFIECU 60 detects that the brake operation is being performed based on the detection signal input from the brake switch 70.

  The engine start switch 80 is configured by a push switch having a button that can be pressed by a driver. When the button is pressed, the engine start switch 80 outputs a detection signal to that effect to the EFIECU 60 over a period during which the button is pressed. The EFIECU 60 detects that the engine start switch 80 is operated based on the detection signal input from the engine start switch 80.

  The EFIECU 60 detects that the brake operation is being performed and the engine start switch 80 is being operated in a state where the engine start permission signal is input from the verification ECU 43 as described above. Then, the engine is started by controlling a cell motor (not shown).

  A door courtesy switch 90 is electrically connected to the verification ECU 43. The door courtesy switch 90 is for detecting the open / closed state of the in-vehicle door. When the vehicle door is opened, the door courtesy switch 90 outputs a detection signal to that effect to the verification ECU 43 over the period when the vehicle door is open. Further, when the vehicle door is closed, the door courtesy switch 90 outputs a detection signal to that effect to the verification ECU 43 over the period when the vehicle door is closed. And collation ECU43 detects the opening-and-closing state of a vehicle-mounted door based on the detection signal input from the door courtesy switch 90. FIG.

  As described above, the electronic key system 1 of the present embodiment cooperates with the in-vehicle communication unit 42 and the verification ECU 43 to start the engine when the corresponding mobile phone 2 (electronic key) is brought into the vehicle. It has a function of automatically permitting, that is, an engine start automatic permission function. The verification ECU 43 intermittently outputs a request signal to the in-vehicle communication unit 42 with the opening of the in-vehicle door as a trigger in order to validate such an engine start automatic permission function.

Next, a characteristic configuration of the electronic key system 1 will be described.
As shown in FIG. 1, the electronic key system 1 of this embodiment further includes an auxiliary mobile phone 3. The auxiliary mobile phone 3 is owned by a person other than the driver (the owner of the main mobile phone 2). The electronic key system 1 is also configured to allow bidirectional communication between the auxiliary mobile phone 3 and the operation control device 4.

  The mobile phone 3 has a reception function and a transmission function. That is, the mobile phone 3 includes a mobile phone function unit 31, an application control unit 32, and a short-range wireless communication unit 33. The mobile phone function unit 31 has functions (including an e-mail transmission function and a reception function) necessary for using the mobile phone 3 as a telephone. The application control unit 32 has a function necessary for downloading application software from the server 5 via the communication network 6 using the mobile phone 3. The short-range wireless communication unit 33 includes a communication circuit 34 and a microcomputer 35. Although not particularly shown, the mobile phone 3 includes a display unit for displaying various information, an operation unit having a button that can be pressed by the owner of the auxiliary mobile phone 3, and the like.

  The communication circuit 34 is for receiving a request signal transmitted from the operation control device 4. When the communication circuit 34 receives the request signal from the operation control device 4, the communication circuit 34 demodulates the request signal to generate a reception signal, and outputs the reception signal to the microcomputer 35.

  The microcomputer 35 is a CPU unit including a CPU, a ROM, a RAM, and the like (not shown), and includes a nonvolatile memory 35a. Here, as shown in FIG. 5A, a plurality of memory areas (in the present embodiment, the first memory area to the Mth memory area) are allocated to the memory 35 a of the mobile phone 3. Each of the memory areas is for storing application software downloaded by the application control unit 32. In addition, each of the memory areas is also for storing data attached to an electronic mail transmitted from the outside. FIG. 5A shows a state (initial state) in which no application software is downloaded at all and any electronic mail is not received.

  When the auxiliary mobile phone 3 is used as an electronic key, an e-mail attached with predetermined data is sent from the mobile phone function unit 21 of the main mobile phone 2 before the use. It is transmitted to the mobile phone 3. In the present embodiment, as predetermined data, an e-mail attached with application software necessary for using the auxiliary mobile phone 3 as an electronic key is transferred from the main mobile phone 2 to the auxiliary mobile phone 3. Will be sent.

  Here, in the present embodiment, when the automobile is lent to a person other than the owner of the automobile, the greatest characteristic point is that the electronic key (main mobile phone 2) is not borrowed. That is, in the present embodiment, it is assumed that the automobile provided with the main mobile phone 2 and the automobile provided with the auxiliary mobile phone 3 are the same. For this reason, at least a part of the application software necessary for using the main mobile phone 2 as an electronic key is also used as application software necessary for using the auxiliary mobile phone 3 as an electronic key. Is possible. As a result, it is not necessary for the owner of the auxiliary mobile phone 3 to download the application software.

  Therefore, when the e-mail is received from the initial state shown in FIG. 5A, as shown in FIG. 5B, the memory 35a of the mobile phone 3, more specifically, the second memory area contains the application. An ID code, a mobile phone unique ID code, a communication encryption algorithm, and operation permission contents are stored. Here, the application ID code is an ID code for specifying a predetermined memory area among a plurality of memory areas allocated to the memory 35 a of the mobile phone 3. The application ID code of the present embodiment is an ID code for specifying a memory area allocated for storing data attached to an e-mail transmitted from the main mobile phone 2. In the present embodiment, as a result of associating such an application ID code with the second memory area, as shown in FIG. 5B, an e-mail transmitted from the main mobile phone 2 The data attached to is stored in the second memory area.

  On the other hand, the mobile phone unique ID code stored in the memory 35a of the mobile phone 3 is an ID code individually set for the auxiliary mobile phone 3 (ID code of the auxiliary mobile phone 3 = sub ID code). is there. This sub ID code is generated on the main mobile phone 2 side based on the ID code (main ID code) of the main mobile phone 2 using a predetermined calculation formula.

  On the other hand, the communication encryption algorithm is to demodulate the request signal transmitted from the operation control device 4 to the mobile phone 3 in order to establish bidirectional communication between the mobile phone 3 and the operation control device 4. Thus, the algorithm is used to enable the mobile phone 3 to suitably receive the request signal. The communication encryption algorithm is a method of transmitting a signal (sub ID code signal) including the mobile phone unique ID code from the mobile phone 3 in response to the request signal. It is also an algorithm that is used to allow the operation control device 4 to suitably receive the signal by modulating in an adaptive manner. That is, it can be said that the communication encryption algorithm is an algorithm for smoothly performing two-way communication between the mobile phone 3 and the operation control device 4. Note that, as described above, in the present embodiment, it is assumed that the automobile provided with the main mobile phone 2 and the automobile provided with the auxiliary mobile phone 3 are the same. The same communication encryption algorithm stored in the memory 25a of the main mobile phone 2 (see FIG. 2B) is stored in the memory 35a of the mobile phone 3.

  Finally, the operation permission content stored in the memory 35a of the mobile phone 3 is the manner in which the operation of the controlled object is permitted when the auxiliary mobile phone 3 is used as an electronic key. It is an indicator. In the present embodiment, the operation permission content (sub-operation permission content) stored in the memory 35a of the mobile phone 3 is the memory 25a (see FIG. 2B) of the main mobile phone 2. Restrictions have been imposed on the main operation permission content. Specifically, it is assumed that the number of effective times of unlocking permission of the vehicle-mounted door is set to 5 times, the effective period is also set to 1 day, the effective number of engine start permission is set to 0, and the effective period is also set to 0 seconds. . In short, when the auxiliary mobile phone 3 is used as an electronic key, the vehicle door is allowed to unlock up to 5 times for a limited period of one day, while the engine is not allowed to start at all. I mean. This sub operation permission content is determined in advance on the main mobile phone 2 side under the will of the owner of the main mobile phone 2.

  When the reception signal is input from the communication circuit 34 as described above, the microcomputer 35 responds to the request signal by using the mobile phone unique ID code (of the auxiliary mobile phone 3) stored in the memory 35a. A signal including (ID code = sub ID code), that is, a sub ID code signal is output to the communication circuit 34. The communication circuit 34 is also for modulating the sub ID code signal input from the microcomputer 35 into a radio wave having a predetermined frequency (2.45 GHz in the present embodiment) and transmitting it.

  By the way, when the auxiliary mobile phone 3 is used as an electronic key, an e-mail attached with predetermined data is sent from the main mobile phone 2 as described above before the use. In addition to being transmitted to the telephone 3, in the present embodiment, a predetermined electronic mail is transmitted from the main mobile phone 2 to the operation control device 4. That is, in this case, the information transmitted to the auxiliary mobile phone 3 by the mobile phone function unit 21 of the main mobile phone 2 is the sub ID code (see FIG. 5B) and the sub operation permission. An e-mail including information associated with the contents (see FIG. 5B) is transmitted from the mobile phone function unit 21 of the main mobile phone 2 to the operation control device 4.

  On the other hand, the operation control device 4 has a reception function in relation to the electronic mail communication with the main mobile phone 2. That is, the operation control device 4 further includes an electronic mail function unit 44.

  When the e-mail function unit 44 receives an e-mail transmitted from the main mobile phone 2, the e-mail function unit 44 converts the e-mail into a method adapted to the verification ECU 43 to generate reception data, and the received data is converted into the verification ECU 43. Output to.

  When the reception data is input from the e-mail function unit 44 in this way, the verification ECU 43 displays the information included in the reception data, that is, the information in which the sub ID code and the sub operation permission content are associated with each other. It memorize | stores in the memory 43a (refer FIG.4 (b)).

  In addition, the operation control device 4 has a transmission function and a reception function in connection with the bidirectional communication with the auxiliary mobile phone 3. Note that these functions are the same as the transmission function and the reception function related to the bidirectional communication with the main mobile phone 2, and a part of the description is overlapped. However, different parts will be mainly described below.

  That is, the verification ECU 43 outputs a request signal to the outside communication unit 41 (outside vehicle communication control) in order to transmit a request signal to the outside vehicle communication area A41 (see FIG. 3). The vehicle exterior communication unit 41 modulates the request signal input from the verification ECU 43 into a radio wave having a predetermined frequency (2.45 GHz) and transmits the modulated signal to the vehicle exterior communication area A41. Incidentally, the request signal transmitted in this way is also for establishing two-way communication between the mobile phone 3 and the operation control device 4 in the outside-vehicle communication area A41.

  When the vehicle outside communication unit 41 receives the sub ID code signal transmitted from the mobile phone 3 in response to the request signal, the vehicle outside communication unit 41 demodulates the sub ID code to generate a reception signal, Output to the verification ECU 43.

  When the reception signal is input from the external communication unit 41 based on the external communication control, the verification ECU 43 stores the ID code (sub ID code) of the mobile phone 3 included in the reception signal and the memory 43a. It is determined whether or not the sub ID code on the automobile side that is being matched. In other words, in this case, the verification ECU 43 executes the vehicle outside sub ID code verification.

  When the collation ECU 43 determines that the two sub ID codes are matched by the sub-vehicle ID code collation, the operation permission content (sub operation permission content) associated with the matched sub ID code is added to the in-vehicle door. It is determined whether or not unlock permission is included. Here, in this embodiment, the sub-operation permission content associated with the sub-ID code is set to include that the unlocking of the vehicle-mounted door is performed for a maximum of five times for one day only. Therefore, the verification ECU 43 makes an affirmative determination at the time of the determination.

  Then, the verification ECU 43 includes a permission for unlocking the vehicle-mounted door in the operation permission content (sub operation permission content) associated with the sub ID code when both the sub ID codes match by the vehicle sub ID code verification. A door unlock permission signal is output to the door ECU 50 on the condition that it is determined that the That is, also in this case, the verification ECU 43 executes door unlock permission control. As a result, when the door ECU 50 detects that the door outside handle is touched in the state where the door unlock permission signal is input from the verification ECU 43 as described above, the door ECU 50 controls the actuator (not shown) to control the vehicle-mounted door. To unlock.

  As described above, in the electronic key system 1 of the present embodiment, the person holding the corresponding mobile phone 3 (electronic key) enters the vehicle outside communication area A41 by the cooperation of the vehicle communication unit 41 and the verification ECU 43. In this case, it has a function of automatically permitting unlocking of the vehicle-mounted door, that is, a door unlocking automatic permission function. It should be noted that the behavior of such a person entering the vehicle outside communication area A41 is indefinite, but it is necessary to enable the door unlock automatic permission function as described above each time there is such behavior. For this reason, the verification ECU 43 intermittently outputs a request signal to the out-of-vehicle communication unit 41 in a state where the vehicle-mounted door is locked in order to monitor the approach of the person who has the corresponding mobile phone 3.

  On the other hand, the verification ECU 43 outputs a request signal to the in-vehicle communication unit 42 (in-vehicle communication control) in order to transmit a request signal to the in-vehicle communication area A42 (see FIG. 3). The in-vehicle communication unit 42 modulates the request signal input from the verification ECU 43 into a radio wave having a predetermined frequency (2.45 GHz) and transmits the modulated signal to the in-vehicle communication area A42. Incidentally, the request signal transmitted in this way is also for establishing bidirectional communication between the mobile phone 3 and the operation control device 4 in the in-vehicle communication area A42.

  When the in-vehicle communication unit 42 receives the sub ID code signal transmitted from the mobile phone 3 in response to the request signal, the in-vehicle communication unit 42 demodulates the sub ID code to generate a reception signal, Output to the verification ECU 43.

  When the received signal is input from the in-vehicle communication unit 42 based on the in-vehicle communication control, the verification ECU 43 stores the ID code (sub ID code) of the mobile phone 3 included in the received signal in the memory 43a. It is determined whether or not the sub ID code on the automobile side that is being matched. That is, in this case, the verification ECU 43 executes in-vehicle sub ID code verification.

  When the collation ECU 43 determines that the two sub ID codes match by the in-vehicle sub ID code collation, the engine start is performed to the operation permission content (sub operation permission content) associated with the matched sub ID code. Determine if permission is included. Here, in the present embodiment, since the sub operation permission content associated with the sub ID code is set to include that no engine start permission is performed, the verification ECU 43 denies the determination. Will be judged.

  And even if both sub ID codes correspond by the said in-vehicle sub ID code collation, collation ECU43 does not include the engine start permission in the operation permission content (sub operation permission content) linked | related with the sub ID code. If it is determined, the engine start permission signal is not output to the EFIECU 60. As a result, the engine is not started by the EFIECU 60.

  Incidentally, when the sub operation permission content associated with the sub ID code is set to include that the engine start permission is performed unlike the present embodiment, the engine start permission is included in the sub operation permission content. Is determined by the verification ECU 43 when it is determined whether or not.

  Then, the verification ECU 43 includes the engine start permission in the operation permission content (sub operation permission content) associated with the sub ID code by matching both sub ID codes by the in-vehicle sub ID code verification. The engine start permission signal is output to the EFIECU 60 on the condition that the determination is made. That is, also in this case, the verification ECU 43 executes engine start permission control. As a result, the EFIECU 60 detects that the brake operation is being performed in the state where the engine start permission signal is input from the verification ECU 43 as described above, and detects that the engine start switch 80 is operated. Then, the engine is started by controlling a cell motor (not shown).

  As described above, the electronic key system 1 of the present embodiment cooperates with the in-vehicle communication unit 42 and the verification ECU 43 to start the engine when the corresponding mobile phone 3 (electronic key) is brought into the vehicle. It has a function of automatically permitting, that is, an engine start automatic permission function. The verification ECU 43 intermittently outputs a request signal to the in-vehicle communication unit 42 with the opening of the in-vehicle door as a trigger in order to validate such an engine start automatic permission function.

As described above, according to the present embodiment, the following operations and effects can be obtained.
(1) When the corresponding mobile phone 2 (mobile phone 3) is used as an electronic key, the main operation permission content associated with the main ID code (sub ID code) of the mobile phone 2 (mobile phone 3) ( The operation of the controlled object is permitted in the sub operation permission content. That is, the utility value as an electronic key is individually assigned to each mobile phone. Accordingly, the utility value as an electronic key can be flexibly given to the mobile phone 2 (mobile phone 3).

  (2) Since the utility value as an electronic key can be given to the auxiliary mobile phone 3 as described in (1) above, in the case of lending a car to a person other than the car owner, It is possible to prevent the borrowing of the key (main mobile phone 2).

  (3) In addition to the main mobile phone 2, the operation of the controlled object is permitted based on the use of the auxiliary mobile phone 3 as an electronic key. Here, unlike the configuration of the present embodiment, when the auxiliary mobile phone 3 is used as an electronic key, the same operation permission content (main operation permission content) as that of the main mobile phone 2 is used. If a configuration that allows the operation is adopted, it is not preferable because the operation of the controlled object may be permitted in a manner contrary to the will of the owner of the main mobile phone 2. On the other hand, according to the configuration of the present embodiment, the operation permission content (sub operation permission content) determined in advance under the will of the owner of the main mobile phone 2 is associated with the sub ID code. Thus, when the auxiliary mobile phone 3 is used as an electronic key, the will of the owner of the main mobile phone 2 is reflected. Therefore, a high security level can be maintained without sacrificing flexibility.

  (4) By associating the effective number for each type of operation permission and the effective period for each type of operation permission with the sub-ID code, the operations and effects described in (3) above can be suitably obtained. .

  (5) E-mail is used when transmitting information in which the sub ID code and the sub operation permission content are associated from the main mobile phone 2 to the operation control device 4. For this reason, since the owner of the main mobile phone 2 does not need to go to the vicinity of the vehicle when transmitting information associated with the sub ID code and the sub-operation permission content from the mobile phone 2, it is simple. is there.

In addition, the said embodiment can also be changed and actualized as follows.
In addition to associating the main ID code with the main operation permission content (see FIG. 4A) in the registration work for making the main mobile phone 2 and the operation control device 4 correspond to each other, the sub ID code And the sub-operation permission content may be associated with each other and stored in the memory 43a of the verification ECU 43 in advance. In this case, when the auxiliary mobile phone 3 is used as an electronic key, such as when a car owned by the owner of the main mobile phone 2 is lent, the sub ID code and the sub An electronic mail including information associated with the operation permission content is transmitted from the mobile phone function unit 21 of the main mobile phone 2 to the auxiliary mobile phone 3. However, in this case, unlike the above embodiment, an e-mail including information in which the sub ID code and the sub operation permission content are associated is sent from the mobile phone function unit 21 of the main mobile phone 2 to the operation control device 4. It can be omitted.

  Prior to the use of the auxiliary mobile phone 3 as an electronic key, application software necessary for using the auxiliary mobile phone 3 as an electronic key is acquired by the owner of the auxiliary mobile phone 3. It is good also as a structure which self downloads.

  In the embodiment, the e-mail transmission process from the main mobile phone 2 to the auxiliary mobile phone 3 and the e-mail transmission process from the main mobile phone 2 to the operation control device 4 are May be performed first.

  The method of transmitting information in which the sub ID code and the sub operation permission content are associated from the main mobile phone 2 to the operation control device 4 is not limited to e-mail. For example, by installing a short-range wireless communication unit in an automobile, short-range wireless communication can be performed between the short-range wireless communication unit 23 of the main mobile phone 2 and the short-range wireless communication unit on the automobile side. The information in which the sub ID code and the sub operation permission content are associated may be transmitted from the short-range wireless communication unit 23 of the main mobile phone 2 to the operation control device 4.

  An electronic key that can be used as an electronic key for each of a plurality of mobile phones (for example, a maximum of 8 in total including the main mobile phone 2 and the auxiliary mobile phone 3) for one car It may be embodied in a system. That is, of course, there may be a plurality of auxiliary mobile phones. In this case, the same ID code as the ID code individually set for each mobile phone is used as an indicator of how the operation of the controlled object is permitted under the condition that both ID codes match. The data is stored in the memory 43a of the verification ECU 43 in association with the permission content.

  The main operation permission content associated with the ID code (main ID code) of the main mobile phone 2 is the same as the sub operation permission content associated with the ID code (sub ID code) of the auxiliary mobile phone 3 It may be. In this case, the utility values as electronic keys assigned to the main mobile phone 2 and the auxiliary mobile phone 3 are the same.

  Although it is a very rare example, the ID code (sub-cell) of the auxiliary mobile phone 3 exceeds the limit of the main operation permission content associated with the ID code (main ID code) of the main mobile phone 2 The sub operation permission content associated with the (ID code) may be set.

  ・ Sub operation permission content is limited to the main operation permission content, the number of effective times for each type of operation permission when the operation of the control target is permitted, and the operation permission when the operation of the control target is permitted It can be changed as appropriate under the will of the owner of the main mobile phone 2 so that at least one of the valid periods for each type is limited.

  -Regardless of the main operation permission content or the sub operation permission content, when the limit of the operation permission content is reached, the ID code identical to the ID code individually set for each mobile phone and the operation associated with the ID code The permitted content may be deleted from the memory 43a of the verification ECU 43.

  -Utilizing information (sub ID code and sub operation permission content) transmitted from the main mobile phone 2 to the auxiliary mobile phone 3, a message about the sub operation permission content is displayed on the display unit of the auxiliary mobile phone 3 It is good also as a structure which alert | reports the authority given to the auxiliary | assistant mobile phone 3 to the owner of the auxiliary | assistant mobile phone 3 by displaying. In this case, for example, “This mobile phone can open the door of Mr. A's car up to 5 times during the period from 8 am tomorrow to 8 am tomorrow.” It is good also as a structure displayed on the display part of the auxiliary | assistant mobile phone 3. FIG.

  In the configuration in which the message regarding the sub-operation permission content is displayed on the display unit of the auxiliary mobile phone 3 as described above, each time the auxiliary mobile phone 3 is used as an electronic key, the auxiliary mobile phone 3 A configuration may be adopted in which the authority given thereafter is counted down. For example, in the above example, when the auxiliary mobile phone 3 is used once as an electronic key, “can be opened four times by 8 am tomorrow” is displayed on the display unit of the auxiliary mobile phone 3. It is good also as a structure.

  Of the sub ID code and the sub operation permission content, the sub operation permission content may be omitted, and only the sub ID code may be transmitted from the main mobile phone 2 to the auxiliary mobile phone 3. However, even in this case, both the sub ID code and the sub operation permission content are transmitted from the main mobile phone 2 to the operation control device 4.

  If the ID code identical to the ID code individually set for each mobile phone and the operation permission contents associated with the ID code are stored in the memory 43a of the verification ECU 43, the mobile phone 2 (mobile phone 3 The main operation permission content (sub-permission content) may not be stored in the memory 25a (memory 35a).

  -The type of operation permission may include at least one of permission for use of in-vehicle accessories and permission for use of in-vehicle air conditioners in addition to or instead of at least one of permission for unlocking the in-vehicle door and permission to start the engine. Needless to say, it is good.

The communication terminal is not limited to a mobile phone as long as bidirectional communication with the operation control device 4 is possible.
・ When a person who has the corresponding mobile phone 2 (mobile phone 3) enters the outside-vehicle communication area A41, the vehicle-mounted door is not actually allowed to be unlocked automatically. You may embody in the electronic key system which has even the function to unlock.

  -Not only the electronic key system of a vehicle (for example, an automobile) but also may be embodied in an electronic key system of a building (for example, a house).

The block diagram which shows the structure of an electronic key system. (A) The conceptual diagram which shows the memory content in an initial state in memory of the main mobile telephone.

(B) The conceptual diagram which shows the memory content in the state after application software was downloaded similarly.
Explanatory drawing which shows a vehicle exterior communication area | region and a vehicle interior communication area | region. (A) The conceptual diagram which shows the memory content after initial registration in memory of collation ECU.

(B) The conceptual diagram which shows the memory content in the state after the same e-mail was received.
(A) The conceptual diagram which shows the memory content in an initial state in memory of an auxiliary | assistant mobile phone.

            (B) The conceptual diagram which shows the memory content in the state after the same e-mail was received.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Electronic key system, 2 ... Main mobile phone as main communication terminal, 3 ... Auxiliary mobile phone as auxiliary communication terminal, 4 ... Operation control apparatus, 21 ... First transmission means and first 2 Cellular phone function unit as transmission means, 43... Verification ECU as control means, 43 a... Memory as storage means.

Claims (5)

In an operation control device comprising a control means for permitting the operation of a control object based on the use of a corresponding communication terminal,
An operation permission content that serves as an index of how the operation of the controlled object is permitted under the condition that the ID code identical to the ID code set individually for each communication terminal matches both ID codes, and A storage means for storing in association with each other;
The operation control device, wherein the control means permits the operation of the controlled object with the operation permission content associated with the matched ID code on condition that both ID codes match. The operation control device according to claim 1,
The storage means stores the same main ID code as the main ID code individually set for the main communication terminal in association with the main operation permission content, and is different from the main communication terminal. The sub ID code identical to the sub ID code set individually for the auxiliary communication terminal is stored in association with the sub operation permission content,
The operation control device according to claim 1, wherein the sub operation permission content is limited to the main operation permission content as a limit. The operation control device according to claim 2,
The sub operation permission content is limited to the main operation permission content, and the number of effective times for each type of the operation permission when the operation of the control object is permitted, and the operation permission when the operation of the control object is permitted An operation control device characterized in that at least one of the effective periods for each type is limited. An electronic key system in which operation of a controlled object is permitted by the operation control device according to any one of claims 1 to 3 based on use of a corresponding communication terminal,
The main communication terminal uses a sub-ID code individually set for an auxiliary communication terminal different from the main communication terminal, depending on the condition that both sub-ID codes are matched, by the operation control device. An electronic device comprising: a first transmission means for transmitting to the auxiliary communication terminal in association with a sub-operation permission content that is an operation permission content indicating whether the operation of the controlled object is permitted in the aspect Key system. The electronic key system according to claim 4.
The main communication terminal is information transmitted to the auxiliary communication terminal by the first transmission means, and transmits information in which the sub ID code and the sub operation permission content are associated to the operation control device. An electronic key system further comprising two transmission means.

Images