JP2017114235A - Vehicle control device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a vehicle control device which can prevent a vehicle from being stolen when a user gets off a vehicle with a key while a travelling drive source of the vehicle is still in operation and enables a registered user without the key to drive the vehicle.SOLUTION: A control section 11 disables accelerator operation with respect to an engine while keeping an engine in operation when identifying that, after a user gets off a vehicle while keeping the engine in operation, a shift lever is in a position other than a parking position, a parking brake is released and a key cannot be found in the vehicle. That is, the control section does not allow fuel to be injected into the engine even the accelerator is operated. Then, the control section outputs warning sound along with disablement of the accelerator operation. After detecting that the user inside the vehicle performs plural types of operation in accordance with a predetermined operation pattern, the control section identifies that the user is a registered user of the vehicle and releases the disablement of the accelerator operation and output of the warning sound.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a vehicle control device.

  In recent years, there are various vehicle security systems. For example, the user of the vehicle may leave the vehicle while the engine is in operation with the intention that the engine does not have to be stopped because it returns to the vehicle immediately, and the crime prevention performance for the vehicle in this case is improved. There exists patent document 1 as a technique, for example. In the technique of Patent Document 1, when the shift position is changed from the parking position after the user gets off while the engine is operating and the key is not in the vehicle, the ignition switch is turned off so that the vehicle cannot travel.

Japanese Patent Laid-Open No. 2015-140062

  However, in the technique of Patent Document 1, when a user who has a key while the engine is operating gets off the vehicle, for example, when another user who does not realize that he does not have the key tries to start the vehicle. Has a problem that the ignition switch is turned off and the vehicle cannot be started.

  The present invention has been made in view of the above problems, and when a user who has a key gets off while the traveling drive source of the vehicle is activated, the vehicle can be prevented from being stolen. It is an object to provide a vehicle control device that can start a vehicle for a user.

In order to solve the above-described problem, the vehicle control device (1) of the present invention includes:
An activation state identification unit (S1, 11) for identifying a state in which the travel drive source (30) of the vehicle is activated;
A getting-off specifying unit (S2, 11) for specifying getting off of the user in the vehicle;
A start intention determination unit (S3, S5, 11) for determining whether a start intention operation that is an in-vehicle operation performed by a user in the vehicle indicating the intention to start the vehicle;
A key determination unit (S4, S6, 11, 5) that determines the presence or absence of the key in the vehicle by attempting wireless communication in the vehicle with the key (50) having a wireless communication function capable of performing a predetermined operation on the vehicle. )When,
In the state in which the driving state of the travel drive source is specified, it is determined that the start intention operation is performed by the start intention determination unit after the user getting off the vehicle is specified, and the key determination unit determines that the start intention operation is performed in the vehicle. An invalidation unit (S7, 11) for invalidating an accelerator operation on the travel drive source while maintaining the travel drive source activated when it is determined that there is no key;
An authentication unit (S9, 11) for authenticating that a user in the vehicle is a regular user of the vehicle;
An invalidity canceling unit (S10, 11) for canceling the invalidation of the accelerator operation when the authentication is successful by the authentication unit in a state where the accelerator operation is invalid;
Is provided.

  According to the present invention, when the start intention operation is performed after the user gets off the vehicle with the travel drive source activated, and the key is not in the vehicle, the travel drive source is maintained in the activated state. Since the accelerator operation with respect to the drive source is invalidated, even if a third person who is not a regular user accesses the vehicle, the vehicle cannot be started, and theft of the vehicle can be suppressed. In addition, since the running state of the driving source is maintained, for authorized users who do not have the key, the vehicle can be started by successfully authenticating that the user is authorized and canceling the invalidation of the accelerator operation. Can do.

  The starting state of the travel drive source in the present invention means that the engine is in an operating state when the travel drive source is an engine, and the travel drive source is a motor such as a hybrid vehicle or an electric vehicle. Means that the main power supply is in the ready state. In addition, in a vehicle having an idle stop function that automatically stops and restarts the engine even when there is no engine on / off operation by the vehicle driver when the predetermined condition is satisfied, the engine is stopped by the operation of the idle stop function. Is also included in the activated state of the present invention.

It is the block diagram which showed the structure of the vehicle antitheft system. It is the flowchart which showed the flow of the vehicle antitheft process performed in a vehicle antitheft system. It is a 1st example of the timing chart which showed the process of FIG. It is a 2nd example of the timing chart which showed the process of FIG. It is a 3rd example of the timing chart which showed the process of FIG. FIG. 3 is a state transition diagram regarding the processing of FIG. 2.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 shows a vehicle antitheft system to which the present invention is applied. The vehicle antitheft system 1 in FIG. 1 is mounted on a vehicle. The vehicle antitheft system 1 is mainly composed of an ECU (Electronic Control Unit) 8, and the ECU 8 includes a known microcomputer 10. The control unit 11 of the microcomputer 10 functions as a main control unit of the system 1. The electric power of the in-vehicle battery 7 is supplied to an ECU internal power generation unit 9 provided in the ECU 8, and the generated internal power supply voltage is applied to the microcomputer 10.

  The vehicle antitheft system 1 includes a vehicle power supply device 2, an engine control unit 3, an alarm device 4, and a door lock drive unit 6. These devices 2, 3, 4, 6 are connected to the control unit 11. The vehicle power supply device 2 is a power switch for switching the power receiving state from the in-vehicle battery 7 for the vehicle engine electrical system load (cell motor, spark plug, etc.) and accessory system load (car audio device, car navigation device, power window, etc.) Is provided. The power of the in-vehicle battery 7 is supplied to the vehicle power supply device 2, and the vehicle power supply device 2 is also in the off state (OFF) in which the power is not supplied to either the accessory system load or the engine electrical system load. It is possible to switch between an accessory on state (ACC-ON) supplied only to the engine and an ignition on state (IG-ON) supplied to both the accessory system load and the engine electrical system load.

  The engine control unit 3 controls the engine 30 that is a driving source of the vehicle. Specifically, the engine control unit 3, for example, based on the detection value of the accelerator sensor 16 that detects the operation amount (depression amount) of the accelerator pedal 35 for notifying the vehicle side of the required torque of the vehicle driver, based on the detected value of the accelerator sensor 16. Acceleration control, that is, fuel injection (injection amount, injection timing) by the fuel injection device 31 provided in the engine 30, ignition timing by the addition plug, and the like are controlled. The fuel injection device 31 is a device that injects fuel into the intake port of the engine 30 or injects fuel directly into the cylinder. The accelerator pedal 35 is provided at a position where a user (driver) seated in the driver's seat of the vehicle can operate, and more specifically, provided at a foot position of the driver's seat.

  The alarm device 4 is, for example, a vehicle meter device, and outputs an alarm sound using a sounding part of the meter device. The door lock drive unit 6 is provided for each door of the vehicle and switches between locking and unlocking of each door.

  In addition, the vehicle antitheft system 1 is an electronic key system 40 (smart entry system) that permits predetermined operations on the vehicle such as locking and unlocking of the vehicle door and starting of the engine based on wireless communication between the vehicle and a key possessed by the user. There is also that). The electronic key system 40 includes an in-vehicle device 41 mounted on a vehicle and a key 50 carried by the user.

  The in-vehicle device 41 includes an in-vehicle LF transmitting unit 17, an out-of-vehicle LF transmitting unit 18, an RF receiving unit 19, an engine switch 20, and a matching control device 5 to which these are connected. The in-vehicle LF transmitter 17 transmits a signal for searching for the key 50 as an LF band (for example, 125 kHz) radio wave (hereinafter referred to as LF radio wave). The LF transmission unit 18 outside the vehicle transmits LF radio waves around the vehicle (for example, in a range of about 1 m to 2 m from the vehicle). The RF receiver 19 receives an RF band radio wave (for example, a radio wave of 300 to 400 MHz) (hereinafter referred to as an RF radio wave) transmitted from the key 50. The engine switch 20 is a switch (for example, a push switch) that is provided in an instrument panel near the driver's seat in the vehicle and that is operated by the user to instruct the start of the engine 30.

  The verification control device 5 executes various processes related to the electronic key system. Specifically, the collation control device 5 causes the out-of-vehicle LF transmitter 18 to transmit LF radio waves around the vehicle when the user gets on the vehicle. When the RF receiver 19 receives the RF radio wave transmitted from the key 50 in response to the LF radio wave, the verification control device 5 has the ID code included in the RF radio wave and the verification control device 5. The master ID code is verified, and the door is unlocked when the verification is successful. Thereafter, the collation control device 5 causes the door lock driving unit 6 to unlock the door based on the fact that a sensor (not shown) detects that the door handle of the vehicle has been touched.

  In addition, in the scene where the engine 30 is started, the verification control device 5 causes the in-vehicle LF transmission unit 17 to transmit LF radio waves based on the operation of the engine switch 20. The collation control device 5 performs collation in the same manner as described above when the RF reception unit 19 receives the RF radio wave that responds to the LF radio wave, and instructs the engine control unit 3 to start the engine when the collation is successful.

  In addition, when the user gets off the vehicle, the collation control device 5 causes the LF transmitters 17 and 18 to detect the vehicle on the basis of the operation of a lock switch (not shown) provided outside the vehicle door. LF radio waves are transmitted around and in the car. And the collation control apparatus 5 makes the door lock drive part 6 lock a door, when the said collation is successful based on the LF radio wave transmitted outside the vehicle. On the other hand, when the verification based on the LF radio wave transmitted outside the vehicle fails and the verification based on the LF radio wave transmitted into the vehicle is successful, the verification control device 5 can leave the key 50 in the vehicle. Since there is a possibility, stop the door locking and warn with a buzzer.

  The key 50 includes a receiving unit that receives LF radio waves, a transmission unit that transmits RF radio waves, and a control unit. The control unit of the key 50 causes the transmission unit to transmit the RF radio wave when the reception unit receives the LF radio wave from the in-vehicle device 41. At this time, an ID code held by the control unit is included in the RF radio wave.

  The vehicle anti-theft system 1 includes a door lock switch (door lock SW) 12 that forms a detection unit that detects a locked state and an unlock state of a vehicle door, and a door switch that forms a detection unit that detects the open / closed state of the vehicle door. (Door SW) 13, parking brake switch (parking brake SW) 14 serving as a detection unit for detecting the operation state of the parking brake 140 of the vehicle, and detection unit for detecting the shift position of the transmission switched by the shift lever device 150. The shift sensor 15 and the accelerator sensor 16 described above are provided. The detection values of the sensors 12 to 16 are input to the control unit 11.

  Here, in the electronic key system 40, the key 50 can be taken out of the vehicle while the engine 30 is operating. Therefore, for example, the driver who has the key 50 leaves the vehicle while the engine 30 is operated from the intention that the engine 30 does not need to be stopped because it returns to the vehicle immediately such as shopping at a convenience store. There is. In this case, it is necessary to prevent the vehicle from being stolen while the driver is absent. Therefore, the control unit 11 executes the process of FIG. 2 as a vehicle antitheft process. Hereinafter, the process of FIG. 2 will be described (see also FIGS. 3 to 6). In the timing charts of FIG. 3 to FIG. 5, reference numerals of the respective processes are shown in portions corresponding to the respective processes of FIG. 2. In the timing charts of FIGS. 3 to 5, the control unit 11 is indicated as “main control device”.

  Note that the process of FIG. 2 is executed while the shift position can be changed at any time. That is, the process of FIG. 2 is a process in which no control (shift lock) prohibiting the change of the shift position occurs. The process of FIG. 2 is started at the same time as the engine 30 is started, for example, and thereafter repeatedly executed at a predetermined cycle.

  When the processing of FIG. 2 is started, the control unit 11 determines whether or not the engine 30 is operating (S1). Specifically, the rotational speed information of the engine 30 is acquired from the engine control unit 3, and when the rotational speed information is information indicating that the engine 30 is rotating, it is determined that the engine 30 is operating. As shown in * 1 of FIG. 6, in an eco-run vehicle having an idle stop function (eco-run system), engine stop during the start of the eco-run system, that is, engine stop based on the idle stop function is also processed in S1. It is determined that the engine 30 is operating. This is because the engine stop based on the idle stop function is based on the premise that the engine 30 is automatically restarted when the accelerator is turned on. On the other hand, when the ignition switch is off, it is determined that the engine 30 is stopped in the process of S1. In addition, the control part 11 which performs the process of S1 is equivalent to a starting state specific | specification part.

  When the engine 30 is not in an operating state, that is, when the engine is stopped (S1: NO), this process ends. On the other hand, when the engine 30 is operating (in the activated state) (S1: YES), the control unit 11 specifies whether or not the user in the vehicle has left (get off) the vehicle (S2). The specification here includes the meaning of estimation.

  The purpose of the process of S2 is to estimate whether or not a regular user (a user who has the key 50) of the vehicle in the vehicle is absent. Since the transition to the start of the engine 30 executed before the start of this processing is based on the assumption that the authorized user of the vehicle (the user who has the key 50) is in the vehicle, the user in the vehicle leaves the vehicle. As long as (alighting) does not newly occur, the regular user remains in the vehicle, and the possibility of the vehicle being stolen in this state is low. However, when a new user leaves the vehicle, it is necessary to be wary of the suspicious person. In other words, in the present embodiment, whether or not to execute a process for warning of theft (after S3) is determined by the process in S2.

  In the process of S2, specifically, when the opening or closing operation of the vehicle door is detected based on the detection information of the door switch 13, the user inside the vehicle leaves the vehicle when the opening or closing operation is detected. Shall be identified. If it is determined that the vehicle has left, it can be determined that there is a possibility that the authorized user of the vehicle is absent. If the key is not verified by the subsequent key verification process, the absence of the authorized user can be specified. In this embodiment, since the user who gets off with the key 50 has a high possibility of being a driver, it is specified whether or not the user (driver) in the driver's seat has left the vehicle. Specifically, the opening operation or closing operation of the driver's seat door is detected, and when the opening operation or closing operation is detected, it is specified that the user of the driver seat has left the vehicle. In addition, opening / closing of doors of other seats may also be detected to identify the departure of the user inside the vehicle from the vehicle. In addition, the control part 11 which performs the process of S2 is equivalent to an alighting specific part.

  Returning to FIG. If the in-vehicle user (here, the user at the driver's seat) has not been identified as leaving the vehicle (S2: NO), the vehicle travel permission state (“idle” state in FIG. 6) is continued, and the process is S1. Return to. On the other hand, when it is determined that the user in the vehicle (here, the user at the driver's seat) has left the vehicle (S2: YES), as shown in the state transition diagram of FIG. Transition to a warning state that prohibits driving.

  In this alert state, the shift position of the shift lever device 150 is changed from the parking position as a first start intention operation that is an in-vehicle operation performed by a user in the vehicle and indicates the intention to start the stopped vehicle. It is determined whether or not it has been changed to another shift position (S3). In other words, it is determined whether or not the shift position detected by the shift sensor 15 is a shift position other than the parking position. When the shift position is the parking position, the vehicle cannot travel.

  If the shift position is the parking position (S3: NO), the process returns to S1. On the other hand, in the case of a shift position other than the parking position (S3: YES), the control unit 11 causes the collation control device 5 to start collation processing for searching for and collating the key 50 in the vehicle (S4). ). In response to this, the verification control device 5 causes the in-vehicle LF transmitter 17 to transmit the LF radio wave, and when the RF receiver 19 receives the RF radio wave thereafter, the collation control device 5 holds the ID code contained in the RF radio wave and itself. Check the master ID code.

  When the collation process (S4) is started, the LF radio wave is transmitted from the in-vehicle LF transmission unit 17 at a predetermined period until a timeout occurs, and the collation process with the above contents is repeated. If the time-out occurs, the verification fails (verification NG).

  Next, the control unit 11 determines whether or not the parking brake 140 is changed from a state in which the brake is applied to a state in which the brake is not applied based on the detected value of the parking brake switch 14 as the second start intention operation. (S5). If the parking brake 140 is not released (S5: NO), the process returns to S1.

  If it is determined that the start intention operation is not performed in the process of S3 or S5 (S3: NO, S5: NO), the processes of S1 and S2 are repeated until there is a start intention operation. When it is determined at S2 that the user has got off at least once, it is determined that the user has got off at the subsequent processing of S2. The control unit 11 that executes the processes of S3 and S5 corresponds to a start intention determination unit. Moreover, the control part 11 which performs the process of S3 is corresponded to a shift position determination part. The control unit 11 that executes the process of S5 corresponds to a parking brake determination unit.

  When the parking brake 140 is released in S5 (S5: YES), the result of the collation process started in S4 is referred to (S6). In addition, the control part 11 and the collation control apparatus 5 which perform the process of S4 and S6 are equivalent to a key determination part. As a result of referring to the verification result, when the in-vehicle verification is successful (S6: YES), the process returns to S1. In this case, the driver gets off without having the key 50, and there are the key 50 and a passenger (regular user) in the vehicle, or the driver gets on the key 50 and then gets off the vehicle again. I am assuming that I have returned. In this case, since the possibility of vehicle theft is low, as shown in FIG. 6, the state is changed from being in a warning state (travel prohibited) to being in an idle state (travel permission state). Even when the ignition switch is turned off during warning, the possibility of vehicle theft is low, so the state is shifted to the idle state.

  On the other hand, if the collation fails in S6 (S6: NO), it is likely that a third party other than the authorized user is going to drive the vehicle because there is no key 50 in the vehicle, and the engine 30 is operated. , The accelerator operation for the engine 30 is invalidated (S7). That is, the control unit 11 instructs the engine control unit 3 to prohibit fuel injection by the fuel injection device 31 even if the accelerator sensor 16 determines that the accelerator pedal 35 has been operated. As a result, the vehicle cannot travel. Further, the ignition switch is maintained in the on state by the vehicle power supply device 2 and the operation of the engine 30 is continued. In addition, the control part 11 which performs the process of S7 corresponds to the invalidation part.

  Further, the control unit 11 causes the alarm device 4 (for example, the sounding unit of the meter device) to output an alarm sound outside the vehicle (S8). As a result, it is possible to make the surrounding people aware that the vehicle is trying to run illegally, and to suppress vehicle theft. In addition, the control part 11 and the warning device 4 which perform the process of S8 correspond to a warning part.

  Next, it is determined whether or not the authentication that the user in the vehicle is a regular user of the vehicle has been established (S9). Specifically, a predetermined regular user authentication operation by a user in the vehicle is detected. The regular user authentication operation is defined as an operation pattern formed by combining a plurality of types of in-vehicle operations that can be performed by a user in the vehicle. Further, the regular user authentication operation here is determined by a combination of in-vehicle operations that can be operated by a user seated in the driver's seat. Specifically, as shown in * 2 in Fig. 6, for the door of the driver's seat, the door open, door close, door open, door close, door lock, door unlock in this order, and within the time limit (here The operation performed within 3 seconds) is defined as the regular user authentication operation (operation pattern). The control unit 11 acquires detection information from the in-vehicle operation detection units 12 and 13, detects presence / absence of various in-vehicle operations based on the acquired detection information, and a plurality of types of in-vehicle operations to be detected are determined in advance. When the detected operation pattern is detected, it is determined that the pattern operation for performing the regular user authentication operation has been performed. The in-vehicle operation detection units 12 and 13 are a door switch 13 that detects opening and closing of the door and a door lock switch 12 that detects locking and unlocking of the door.

  In addition, about the combination and order of several in-vehicle operation which comprise regular user authentication operation, and time limit, a user may be comprised so that customization setting is possible. For example, the control unit 11 receives from the predetermined operation unit in the vehicle a user operation for selecting two or more types of predetermined in-vehicle operations and creating a pattern including the selected in-vehicle operation. Then, the pattern created by the accepted user operation is set as an operation pattern for performing a regular user authentication operation (customizing means). For example, a customized screen is displayed on the screen display in the car, and the in-vehicle operations to be incorporated into the pattern are selected from a plurality of predetermined in-vehicle operations, and their order and time limit are determined by the user operation on the screen. The regular user authentication operation may be determined in a form. In addition, the control part 11 which performs the process of S9 corresponds to an authentication part. The door switch 13 and the door lock switch 12 correspond to an operation detection unit.

  If the authentication of the authorized user is not established (S9: NO), the process waits until it is established. In this case, invalidation of the accelerator operation and alarm output are continued. When the authentication is established (S9: YES), the invalidation of the accelerator operation for the engine 30 is canceled, that is, the accelerator operation is validated (S10). Specifically, the control unit 11 instructs the engine control unit 3 to cancel the invalidation of the accelerator operation. In response to the invalidation cancellation instruction, the engine control unit 3 subsequently performs acceleration control on the engine 30 (vehicle) by causing the fuel injection device 31 to inject an amount of fuel corresponding to the detection value of the accelerator sensor 16. To do. FIG. 6 shows a transition to a state in which the vehicle can be driven while being alerted based on the fact that the authentication of the authorized user has been established in the state of being alert (running prohibited). In addition, the control part 11 which performs the process of S10 is equivalent to an invalid cancellation | release part.

  Furthermore, the output of the alarm sound output in the process of S8 is canceled (S11). As a result, it is possible to make a person around know that the vehicle is not stolen. The control unit 11 and the alarm device 4 that execute the process of S11 correspond to an alarm release unit. After S11, the process of FIG.

  Here, FIG. 3 shows the process of each component related to the process of FIG. 2 when a third person who does not have the key 50 tries to start the vehicle after the user who has the key 50 gets off. The timing chart which showed is shown. In the case of FIG. 3, even if an accelerator operation is performed by a third party, fuel injection by the fuel injection device is not performed, and a warning is further output.

  FIG. 4 shows the process of each component related to the process of FIG. 2 when the user who has the key 50 gets off and then the user returns and tries to start the vehicle. A timing chart is shown. In the case of FIG. 4, when the user who has the key 50 gets off the vehicle and temporarily shifts to a state of being alert (travel prohibited), when the user returns and tries to start the vehicle, the key 50 is Based on having confirmed that it exists, it changes to the state which can drive | work. The vehicle can be started by fuel injection by the fuel injection device by the accelerator operation.

  FIG. 5 shows the processes of the respective components related to the process of FIG. 2 when an authorized user (such as a family member) who does not have the key 50 tries to start the vehicle after the user who has the key 50 gets off the vehicle. The timing chart which showed the mode of is shown. In the case of FIG. 5, an authorized user who is not aware that he does not have the key 50 tries to start the vehicle but does not have the key 50, so the accelerator operation is invalidated and the vehicle is started. I can't let you. However, the invalidation of the accelerator operation is canceled based on the fact that authentication of the authorized user is established thereafter, and the vehicle can be started.

  As described above, according to the present embodiment, the accelerator operation is invalidated even if a third person who does not have the key starts the vehicle after the user who has the key while the engine is operating gets off the vehicle. , Vehicle theft can be suppressed. In addition, when a child remains in the vehicle, it is possible to suppress erroneous start of the vehicle by the child. Suppressing vehicle theft and accidental vehicle start-up, it is not necessary to stop the engine when the user who has the key gets off the vehicle so that he can return immediately. . In addition, when the accelerator operation is disabled, the engine operation state is maintained, so that the vehicle can be started on the condition that the authorized user authentication is established for the authorized user who does not have the key. , Improve user convenience. In addition, since the shift operation is not prohibited, even if the accelerator operation becomes invalid, the vehicle can be moved by hand in an emergency.

  In addition, when the engine is in an operating state, the accelerator operation is invalidated with all of the following conditions: getting off the vehicle, changing the shift position from the parking position, releasing the parking brake, and failing key verification. . In other words, when the vehicle is in the engine operating state, it is determined whether there is a situation where a user other than the authorized user can get in, and whether the operation is shown by the operation to drive the vehicle without being authenticated as the authorized user. Since the shift to the invalidation of the operation is determined, the shift to the invalidation of the accelerator operation under an easy condition does not occur. A security function that easily shifts to disabling of the accelerator operation will deviate significantly from the intention of a legitimate user who has left the vehicle who wants to keep the engine running because it will return immediately.

  Further, in the processing of FIG. 2, two types of intentional start operations (change of the shift position from the parking position and release of the parking brake) are indispensable conditions for shifting to invalidation of the accelerator operation. For this reason, the shift to invalidation of the accelerator operation under easy conditions is less likely to occur.

  Although one embodiment of the present invention has been described above, this is merely an example, and the present invention is not limited to this, and the knowledge of those skilled in the art can be used without departing from the spirit of the claims. Various modifications such as addition and omission can be made based on this.

  Hereinafter, other embodiments and modifications of the present invention will be described. Note that detailed descriptions of functional units common to the above-described embodiment and similar functional units are omitted. In addition, the above-described embodiment and a plurality of modifications described below can be implemented in appropriate combination within a range that does not cause technical contradiction.

  For example, in the process of FIG. 2, when the control unit 11 specifies that the travel drive source of the vehicle is in the activated state, the process from S2 is performed, but the vehicle stopped state is detected together with the activated state. And when a stop state is specified, you may make it implement the process after S2. As a result, a so-called idling state in which the vehicle is stopped and the traveling drive source is in an activated state is specified, and when the idling state is specified, the processes after S2 can be performed. The stop state of the vehicle may be detected based on the detection information of the vehicle speed sensor. In addition, when the parking brake 140 is in a brake state or when the shift position of the shift lever device 150 is the parking position. It may be detected as a stop state of the vehicle.

  In the process of FIG. 2, when the shift position is other than the parking position, the collation process is started in S4. Instead, the parking brake is released or both the shift position other than the parking position and the parking brake are released. The matching process may be started based on the detection.

  In the process of FIG. 2, a warning is output as the accelerator operation of the vehicle is invalidated. Instead of this warning output or together with the warning output, a process of confining the user in the vehicle at that time in the car is performed. You may make it perform. In this confinement process, the lock driving units 6 of all the doors of the vehicle are driven to forcibly lock all the doors, and an unlocking prohibition state in which the forced locking state is continuously maintained is set. The forced lock is released when the authorized user is authenticated in the process of S9.

  In the above embodiment, an engine vehicle is assumed as the vehicle, but the present invention can be applied to other vehicles such as a hybrid vehicle (HV vehicle) and an electric vehicle (EV vehicle). The present invention can also be applied to a vehicle equipped with an eco-driving system (idle stop function) in which the engine is stopped when the vehicle stops and the engine is started again when the accelerator is turned on. As shown in FIG. 6, the starting state of the travel drive source of the HV vehicle or EV vehicle is a state where the HV system or EV system is started.

  Further, in the process of FIG. 2, after invalidating the accelerator operation and outputting the warning in the processes of S7 and S8, it is determined in S9 that the authentication of the authorized user is established. Before the invalidation of the operation and the alarm output (before the processing of S7), it is determined that the authorization of the authorized user is established, and when the authentication is established, the invalidation of the accelerator operation and the execution of the alarm output are stopped. good. Thus, it is possible to avoid invalidation of the accelerator operation and alarm output by establishing authentication in advance.

  In addition, although the regular user authentication operation indicated by * 2 in FIG. 6 is exemplified as the regular user authentication, the regular user authentication may be performed by other methods. For example, a wireless communication device (such as a mobile phone) carried by an authorized user and a vehicle are connected so as to be communicable with Bluetooth (registered trademark) or the like, and the wireless communication device is connected to the vehicle. You may authenticate a regular user by transmitting the data which authenticate that it is a thing to carry. In addition, a sensor that detects the user's biometric information (fingerprint information, face information, voice information, etc.) may be provided in the vehicle, and the authorized user may be authenticated based on the biometric information detected by the sensor. good.

  Further, in the above embodiment, when the accelerator operation is invalidated, the operation of the accelerator pedal is allowed, but the fuel injection is not performed even if the accelerator pedal is operated. The accelerator pedal may be forcibly locked in the non-operating position so that it is not possible.

1 Vehicle anti-theft system (vehicle control device)
5 collation control device 11 control unit 30 engine (traveling drive source)
50 keys

Claims (5)

An activation state identification unit (S1, 11) for identifying a state in which the travel drive source (30) of the vehicle is activated;
A getting-off specifying unit (S2, 11) for specifying getting off of the user in the vehicle;
A start intention determination unit (S3, S5, 11) for determining whether a start intention operation that is an in-vehicle operation performed by a user in the vehicle indicating the intention to start the vehicle;
A key determination unit (S4, S6, 11, 5) that determines the presence or absence of the key in the vehicle by attempting wireless communication in the vehicle with the key (50) having a wireless communication function capable of performing a predetermined operation on the vehicle. )When,
In the state in which the driving state of the travel drive source is specified, it is determined that the start intention operation is performed by the start intention determination unit after the user getting off the vehicle is specified, and the key determination unit determines that the start intention operation is performed in the vehicle. An invalidation unit (S7, 11) for invalidating an accelerator operation on the travel drive source while maintaining the travel drive source activated when it is determined that there is no key;
An authentication unit (S9, 11) for authenticating that a user in the vehicle is a regular user of the vehicle;
An invalidity canceling unit (S10, 11) for canceling the invalidation of the accelerator operation when the authentication is successful by the authentication unit in a state where the accelerator operation is invalid;
A vehicle control device (1) comprising: A shift position detector (15) for detecting the shift position of the vehicle;
The said start intention determination part is provided with the shift position determination part (S3, 11) which determines whether the said shift position detection part detected shift positions other than a parking position as said start intention operation was performed. Vehicle control device. In addition to the shift position determination unit, the start intention determination unit includes a parking brake determination unit (S5, 11) that detects whether the parking brake of the vehicle is released as the start intention operation.
The disabling unit detects the shift position other than the parking position without the key in the vehicle after the user's getting off in the vehicle is specified in the state in which the activation state of the travel drive source is specified, and The vehicle control device according to claim 2, wherein the accelerator operation is invalidated when the parking brake is released. An operation detection unit (12, 13) that detects a plurality of types of in-vehicle operations by a user in the vehicle,
The vehicle according to any one of claims 1 to 3, wherein the authentication unit performs the authentication based on whether a plurality of types of in-vehicle operations detected by the operation detection unit are detected according to a predetermined operation pattern. Control device. An alarm unit (S8, 11, 4) that outputs an alarm when the accelerator operation is disabled;
The vehicle control device according to any one of claims 1 to 4, further comprising an alarm canceling unit (S11, 11, 4) that cancels the alarm when invalidity of the accelerator operation is cancelled.

Images