JP6093514B2 - Electronic key registration method - Google Patents

Description

The present invention relates to an electronic key registration method for registering an electronic key as a communication target.

  As is conventionally known, many vehicles are equipped with an electronic key system that performs key verification using an electronic key ID that is wirelessly transmitted from the electronic key. In this type of electronic key system, it is necessary to register the electronic key to be used in the vehicle. In this case, the key ID of the electronic key and the encryption key are used to control the operation of the electronic key system in the vehicle (ECU (Electronic Control Unit) etc.) must be registered in advance. Specific examples of the electronic key registration system are disclosed in Patent Documents 1 to 3, for example.

JP-A-7-61328 JP 2003-148018 A JP 2004-107959 A

  By the way, when a control device mounted on a vehicle breaks down, it is necessary to replace the control device with another control device. At this time, if there is no restriction on key registration, another key that has not been registered in the control device before the replacement can be registered in the control device after the replacement. In addition, since an electronic key registered in another vehicle can be registered in the control device after replacement, a problem of double key registration also occurs.

An object of the present invention is to provide an electronic key registration method capable of permitting only a regular key to be registered in a replaced control device when the control device is replaced.

In order to solve the above problems, in the present invention, the electronic key is registered in the communication target by associating and writing the key ID and the encryption key of the electronic key to the communication target control device, and the communication target In the electronic key registration method that enables communication with the electronic key by encrypted communication, an ID notification step in which the center acquires the identification ID of the control device before the exchange, and the center controls the exchange before the exchange based on the identification ID. indexing the encryption key corresponding to the key ID which has been registered in the device, the indexing and the encryption key, and encrypted by the associated control device private-key between the center and the control device, the center encryption An encryption key extracting step for generating a code; an encryption key notifying step for acquiring the encryption code by the control device after the exchange; and the control device after the exchange Decoding the cipher code by the control device only key that is because the write store, so by the encryption key Motoma', the control device after the replacement and a cryptographic key registration step of registering in its memory The gist.

  According to the configuration of the present invention, when the control device is replaced with another control device due to a failure, for example, only the electronic key registered in the control device before replacement is registered in the control device after replacement. It becomes possible. Therefore, registration restrictions are imposed on the key registration with the control device after replacement, so that the security of key registration is ensured. For this reason, a situation in which another key is registered in the control device or a key already registered in another control device is double-registered in the control device after replacement does not occur.

According to the configuration of this, it becomes possible to generate the encryption code as highly confidential code, the effect is high in security ensuring key registration.

In the present invention, after the previous SL electronic key is registered in the control device, that is the registered contents the center, with a database reflecting step of reflecting the database to manage the details of the electronic key and the control device The gist. According to this configuration, when the key registration is completed in the replaced control device, the contents are reflected in the center database, so that the database managed by the center can be optimized.

  The gist of the present invention is to perform registration of the electronic key in the control device after the replacement using a registration tool. According to this configuration, since key registration cannot be performed unless the user has a registration tool, the effect of ensuring the security of key registration is enhanced.

In the present invention, the center includes a database for managing details of the electronic key and the control device, and the control device after the replacement includes the identification ID of the control device before the replacement in the ID notification step , the identification ID of the control device after the replacement, and the key ID of the electronic key that is about to be registered now notifies the center, the center is Oite the encryption key extraction steps, as will be registered now Is confirmed by referring to the database, and if this can be confirmed, the encryption key is determined by the dedicated key for the control device related to the control device after the replacement. The gist is to encrypt and create the encryption code. According to this configuration, for the key registration to the control device after replacement, the identification ID of the control device before replacement, the identification ID of the control device after replacement, and the key ID of the electronic key that is about to be registered Is required. Therefore, the electronic key can be registered in the control device after replacement with high security.

  According to the present invention, when the control device is replaced, only the regular key can be permitted to be registered in the replaced control device.

The block diagram of the electronic key registration system of one Embodiment. The timing chart which shows the sequence of smart collation. Explanatory drawing which shows the outline | summary of the initial registration of an electronic key registration system. Explanatory drawing which shows the outline | summary of the additional registration (online) of an electronic key registration system. Explanatory drawing which shows the outline | summary of the additional registration (offline) of an electronic key registration system. The block diagram of the key registration restriction function of an electronic key registration system. The flowchart which shows the flow which registers an electronic key in ECU for exchange. Explanatory drawing which shows the process at the time of performing key registration to exchange ECU. Explanatory drawing which shows the process at the time of performing key registration to exchange ECU. Explanatory drawing which shows the process at the time of performing key registration to exchange ECU. Explanatory drawing which shows the process at the time of performing key registration to exchange ECU. Explanatory drawing which shows the process at the time of performing key registration to exchange ECU. Explanatory drawing which shows the process at the time of performing key registration to exchange ECU.

Hereinafter, an embodiment of an electronic key registration method embodying the present invention will be described with reference to FIGS.
[Electronic key system]
As shown in FIG. 1, the vehicle 1 is provided with an electronic key system 3 that authenticates the validity of the electronic key 2 by bidirectional communication with the electronic key 2 triggered by communication from the vehicle 1. The electronic key 2 is a key capable of wirelessly transmitting an ID (electronic key ID) registered therein to the vehicle 1. Examples of the two-way communication electronic key system 3 include a key operation free system and an immobilizer system. Note that the vehicle 1 corresponds to a communication target.

  The vehicle 1 is provided with a verification ECU 4 that performs ID verification with the electronic key 2, a body ECU 5 that manages the power supply of the on-vehicle electrical components, and an engine ECU 6 that controls the engine, which are connected via a bus 7 in the vehicle. Has been. In the memory 4 a of the verification ECU 4, an electronic key ID, an encryption key Kcr (key-1, key-2...) Used at challenge response authentication with the electronic key 2, an in-vehicle device ID (vehicle ID) that is a unique ID of the vehicle 1. ) Etc. are registered. When a plurality of electronic keys 2 are registered in the vehicle 1, a plurality of sets of the electronic key ID and the encryption key Kcr are stored in accordance with this. The verification ECU 4 includes an LF transmitter 8 capable of transmitting LF (Low Frequency) band radio waves, a UHF receiver 9 capable of receiving UHF (Ultra High Frequency) band radio waves, and an LF receiver capable of receiving LF radio waves. Machine 10 is connected. The vehicle-mounted device ID corresponds to the identification ID of the control device, and the verification ECU 4 corresponds to the control device.

  The electronic key 2 is provided with a key control unit 11 that manages the communication operation of the electronic key 2. Similarly to the verification ECU 4, an electronic key ID, an in-vehicle device ID, an encryption key Kcr, and the like are also registered in the memory 11a of the key control unit 11. Connected to the key control unit 11 are an LF receiving unit 12 capable of receiving LF radio waves, a UHF transmitting unit 13 capable of transmitting UHF radio waves, and an LF transmitting unit 14 capable of transmitting LF radio waves.

  As shown in FIG. 2, when the vehicle is parked (vehicle door locking, engine stop), the LF transmitter 8 outside the vehicle intermittently forms an outside communication area of the LF wake signal Swk within a range of several meters outside the vehicle. Execute smart communication outside the vehicle. The electronic key 2 is activated when it receives the wake signal Swk, and transmits the ACK signal Sack1 to the vehicle 1 by UHF. When the verification ECU 4 receives the ACK signal Sack1 by the UHF receiver 9, the verification unit 4 transmits the OBE ID signal Svi by LF, and causes the electronic key 2 to execute the OBE ID verification. The electronic key 2 transmits an ACK signal Sack2 to the vehicle 1 by UHF if the vehicle-mounted device ID verification is established.

  Subsequently, the verification ECU 4 LF-transmits the challenge Sch to the electronic key 2 to execute challenge response authentication. The challenge Sch includes a challenge code whose code is different each time it is transmitted, and a key number representing the registration key number of the vehicle 1. When the electronic key 2 receives the challenge Sch, it first performs key number verification, and if the key number verification is established, it passes the challenge code through its encryption key Kcr and generates a response code. The electronic key 2 transmits a response Srs including this response code and its own electronic key ID to the vehicle 1 by UHF. When the verification ECU 4 receives the response Srs from the electronic key 2, the verification ECU 4 performs response verification using the response code calculated by itself and the response code calculated by the electronic key 2. The verification ECU 4 also performs electronic key ID verification to confirm whether the electronic key ID acquired from the electronic key 2 is correct. When the verification ECU 4 confirms that both verifications have been established, the verification ECU 4 processes smart verification (external vehicle smart verification) as established, and permits or executes door lock locking / unlocking by the body ECU 5.

  Further, when it is detected by a courtesy switch (not shown) that the driver has boarded, for example, instead of the LF transmitter 8 outside the vehicle, the LF transmitter 8 inside the vehicle now communicates the wake signal Swk throughout the vehicle. Form an area and start in-car smart communication. At this time, when the electronic key 2 receives the wake signal Swk in the vehicle, the vehicle smart verification is executed. When the in-vehicle smart verification is established, the power supply transition operation and the engine start operation by the engine switch 15 are permitted.

  In the immobilizer system, the vehicle 1 and the electronic key 2 perform authentication without any short distance (communication distance: about 10 cm) by LF radio waves. Since the immobilizer system is a system that uses power radio waves transmitted from the vehicle 1 as the power source of the electronic key 2, the electronic key 2 can be operated without a power source. Standards such as NFC (Near Field Communication) are used for short-range radio.

[Electronic key registration system]
As shown in FIGS. 1 and 3 to 5, the electronic key 2 can be registered in the vehicle 1 by the electronic key registration system 16. In this case, each of the verification ECU 4 and the key control unit 11 is provided with registration function units 17 and 18 for performing a key registration operation. In the electronic key registration system 16 of this example, the registration tool 19 is wired to the vehicle 1, and the service person operates the registration tool 19 to register the electronic key 2 to the vehicle 1. For the registration of the electronic key 2, the initial registration for registering the electronic key (direct delivery key or master key) 2a in the vehicle 1 before shipment of the vehicle and the electronic key (addition key or subkey) 2b in the vehicle 1 after shipment of the vehicle. There is additional registration to register (supplement).

  As shown in FIG. 1, the registration tool 19 can wirelessly communicate with a center 20 that manages registration of the electronic key 2 through communication via a network. This network communication is so-called Internet communication, for example, IP (Internet Protocol) communication. The registration tool 19 performs wired communication with the vehicle 1 connected by wire such as a cable. Short-distance LF bidirectional communication is used for communication between the vehicle 1 and the electronic key 2 when the electronic key 2 is registered.

  As shown in FIG. 3, the initial registration is factory registration performed at a manufacturing factory of the vehicle 1, and a seed registration method is adopted in which key registration is completed between the vehicle 1 and the electronic key 2a. ing. Note that the initial registration is a situation where the registration tool 19 and the center 20 are not connected in real time. In the case of the seed registration method, the electronic key 2a has an encryption key “key-1” generated by passing “SC-1” as the SEED code SC written in the memory 11a through the key generation logic f. Previously written and saved. The key generation logic f similar to that registered in the electronic key 2 is written and stored in the memory 4a of the verification ECU 4.

  The center 20 is provided with a vehicle-mounted device database 21 for managing which vehicle-mounted device ID and electronic key 2 are registered in which vehicle 1 (reference ECU 4). The center 20 is provided with an electronic key database 22 for managing which electronic key ID and encryption key are registered in which electronic key 2.

  In the seed registration method, the encryption key Kcr → “key-1” of the electronic key 2a to be registered for the first time is sent from the electronic key 2 to the vehicle 1 instead of the key itself, rather than the key itself. Thus, the encryption key “key-1” is registered. In the case of the seed registration method, the verification ECU 4 acquires the electronic key ID “ID-1” from the electronic key 2 and registers it in the memory 4a, and also acquires the SEED code “SC-1” from the electronic key 2. Is passed through the key generation logic f in the vehicle 1 to generate an encryption key “key-1” and register it in the vehicle 1. The SEED code “SC-1” registered in the electronic key 2 is deleted from the memory 11 a after being transmitted to the vehicle 1. In the electronic key 2, the vehicle-mounted device ID “ID-A” notified from the vehicle 1 during the initial registration process is written in the memory 11 a. Further, when the initial registration of the electronic key 2 is completed, the initial registration flag is changed from “accepted” to “rejected”, and the initial registration becomes impossible.

  After the initial registration of the electronic key 2a to the vehicle 1 is completed, the vehicle-mounted device database 21 and the electronic key database 22 managed by the center 20 need to be updated. In the case of initial registration, since the registration tool 19 is not connected to the center 20 in real time, the registration tool 19 is connected to the center 20 at a certain timing after the initial registration is completed, and the in-vehicle device database 21 and the electronic key database 22 are updated. To do.

  As shown in FIGS. 4 and 5, the additional registration is a registration operation performed by a dealer or the like, and includes an online registration method shown in FIG. 4 and an offline registration method shown in FIG. Normally, an online registration method is used in an online situation where the registration tool 19 can be connected to the center 20 via a network, and an offline registration method is used in an offline situation where the registration tool 19 cannot be connected to the center 20 via a network.

  The online registration method is a method of registering the electronic key 2b to the vehicle 1 by connecting the registration tool 19 to the center 20 and acquiring various data necessary for key registration from the center 20 with the registration tool 19. . In this case, the in-vehicle device center key Kvc used in the additional registration of the electronic key 2b is registered in the memory 4a of the verification ECU 4. The vehicle-mounted device center key Kvc is an encryption key for key registration associated with the vehicle 1 and the center 20, and is assigned to each verification ECU 4 (vehicle 1). The in-vehicle device center key Kvc is an encryption key compliant with, for example, AES (Advanced Encryption Standard) encryption, and the in-vehicle device center key Kvc corresponds to a controller dedicated key.

  In the vehicle-mounted device database 21, what vehicle-mounted device center key Kvc is registered in which vehicle 1 (verification ECU 4) is also registered. In the electronic key database 22, what kind of SEED code SC is registered in which electronic key 2b is also written and registered. The SEED code SC of the electronic key database 22 is created by passing the encryption key Kcr at the center 20 through the corresponding on-vehicle device center key Kvc.

  In the case of online registration, when an additional registration command for the electronic key 2b is input from the registration tool 19, the verification ECU 4 acquires the electronic key ID “ID-2” from the electronic key 2b, and writes and stores it in the memory 4a. In addition, the verification ECU 4 outputs a SEED creation request to the center 20 via the registration tool 19, and creates a SEED code SC for the electronic key 2b to be registered. At this time, the center 20 refers to the in-vehicle device database 21 to determine the in-vehicle device center key Kvc → “key-A” to be used, and the encryption key “key-2” of the electronic key 2b that is now registered. "Is passed through" key-A "to create a SEED code" SC-A2 ". The center 20 outputs the created SEED code “SC-A2” to the verification ECU 4 via the registration tool 19. The verification ECU 4 generates the encryption key “key-2” by decrypting the SEED code “SC-A2” acquired from the center 20 through its own vehicle-mounted device center key “key-A”, and stores this in the memory Write to 4a and save. In the electronic key 2, the vehicle-mounted device ID “ID-A” notified from the vehicle 1 during the additional registration process is written in the memory 11 a.

  When the center 20 obtains the SEED creation request from the registration tool 19, the center 20 knows the electronic key ID of the electronic key 2b that is about to be additionally registered, so the electronic key ID “ID-2” of the electronic key 2b that is additionally registered is obtained. This is reflected in the in-vehicle device database 21. In addition, after sending the SEED code “SC-A2” to the registration tool 19, the center 20 reflects the encryption key “key-2” of the electronic key 2 b additionally registered in the in-vehicle device database 21.

  The offline registration method is a method for registering the electronic key 2b to the vehicle 1 using only the registration tool 19 in a situation where the registration tool 19 cannot be connected to the center 20 via a network. In the offline registration method, the SEED code “SC-A3” encrypted with the in-vehicle device center key Kvc is written and stored in advance in the additionally registered electronic key 2b, unlike the case of the online registration method. Further, the service person issues a purchase order (vehicle equipment ID) to the center 20 in advance, and receives an electronic key 2b that can be additionally registered in the verification ECU 4 from the center 20 by delivery or the like.

  In the case of the offline registration method, the verification ECU 4 receives the electronic key 2b additional registration command from the registration tool 19, and acquires the electronic key ID “ID-3” and the SEED code “SC-A3” from the electronic key 2b. The verification ECU 4 writes the electronic key 2b acquired from the electronic key 2b in its own memory 11a and stores it. Further, the verification ECU 4 generates the encryption key “key-3” by decrypting the SEED code “SC-A3” acquired from the electronic key 2 b through the on-vehicle device center key “key-A” that it has. This is written and stored in the memory 4a.

[Key registration restriction function of electronic key registration system]
As shown in FIG. 6, in the electronic key registration system 16, a new verification ECU (hereinafter referred to as “replacement ECU 24”) is replaced, and then registered in a verification ECU before replacement (hereinafter referred to as “pre-replacement ECU 23”). A key registration restriction function for restricting registration of the electronic key 2 (2a, 2b) by using the vehicle-mounted device ID is provided. If the registration of the electronic key 2 to the replacement ECU 24 is not restricted, it becomes possible to register an electronic key 2 other than the key registered in the ECU 23 before replacement, or to the verification ECU 4 of another vehicle. This is because the registered electronic key 2 can be registered. The pre-replacement ECU 23 corresponds to the control device before replacement, and the replacement ECU 24 corresponds to the control device after replacement.

  The memory 11 a of the electronic key 2 is provided with an in-vehicle device ID writing field 25, a key ID writing field 26, a SEED code writing field 27, and an encryption key writing field 28. In the vehicle-mounted device ID writing field 25, the vehicle-mounted device ID acquired from the vehicle 1 at the time of key registration is written. In the key ID writing field 26, an electronic key ID unique to the key is written and stored. In the SEED code writing field 27, the SEED code SC can be written, and after the key registration, the SEED code SC is deleted. In the encryption key writing field 28, the encryption key Kcr generated by passing the SEED code SC through the key generation logic f is written and stored.

  In the memory 24a of the replacement ECU 24, an initial registration flag writing field 29, an additional registration flag writing field 30, an on-vehicle device ID writing field 31, an on-vehicle device center key writing field 32, an electronic key ID writing field 33, An encryption key writing field 34 is provided. The electronic key ID writing field 33 and the encryption key writing field 34 are provided for each direct delivery or additional electronic key 2 registered in the replacement ECU 24. For example, eight electronic keys 2 can be registered in one replacement ECU 24.

  If the initial registration flag writing field 29 is “accepted”, the replacement ECU 24 can perform the initial registration of the electronic key 2a, and if the initial registration flag writing field 29 is “rejected”, Initial registration of the key 2a is prohibited. Further, the replacement ECU 24 can additionally register the electronic key 2b if the additional registration flag writing field 30 is “accepted”, and if the additional registration flag writing field 30 is “rejected”, Additional registration of the electronic key 2b is possible. The “acceptance” and “rejection” settings may be set by a predetermined operation of the vehicle 1 or may be set by sending a command from the registration tool 19.

In the vehicle-mounted device ID writing field 31, a unique vehicle-mounted device ID possessed by the replacement ECU 24 is written. Therefore, each verification ECU 4 is assigned a unique vehicle-mounted device ID.
In the in-vehicle device center key writing column 32, the in-vehicle device center key Kvc inherent to each verification ECU 4 is written and stored. The in-vehicle device center key Kvc is written and stored in the verification ECU 4 by being injected from the writing device (not shown) into the memory 24a of the replacement ECU 24 (verification ECU 4) in the production line of the verification ECU 4.

  In the electronic key ID writing column 33, the electronic key ID of the electronic key 2 registered in the replacement ECU 24 is written. Also, in the encryption key writing field 34, the encryption key Kcr used in the encryption communication performed at the time of ID collation with the paired electronic key 2, that is, the challenge response authentication is written. 6 is in a state before the electronic key 2 is registered, the electronic key ID writing column 33 and the encryption key writing column 34 are “blank” in which no data is written. It has become.

  The registration tool 19 is provided with a tool control unit 35 that controls the operation of the registration tool 19, an operation unit 36 including various buttons and switches, and a display unit 37 that can display various screens. The registration tool 19 is provided with a communication unit 38 capable of network communication with the center 20. The tool control unit 35 is provided with an additional registration command unit 39 that outputs an additional registration command R1 to the verification ECU 4. The additional registration command R1 is a command for instructing the verification ECU 4 to start the registration operation (additional registration) of the electronic key 2.

  The replacement ECU 24 is provided with a key ID acquisition unit 40 that acquires an electronic key ID from the electronic key 2. Further, the electronic key 2 is provided with a key ID notification unit 41 for notifying the replacement ECU 24 of the electronic key ID registered in itself. When receiving the additional registration command R1 from the registration tool 19, the key ID acquisition unit 40 wirelessly transmits a key ID acquisition request R2 to the electronic key 2. When receiving the key ID acquisition request R2 from the replacement ECU 24, the key ID notification unit 41 wirelessly transmits the electronic key ID written in the memory 11a to the vehicle 1. When receiving the electronic key ID from the electronic key 2, the key ID acquisition unit 40 writes and stores it in the memory 24 a. The electronic key ID writing field 33 and the encryption key writing field 34 are written in order from the top each time a key is registered.

  The replacement ECU 24 is provided with an ID information sending unit 42 that sends ID information to the center 20 after obtaining the electronic key ID, and a SEED code creation requesting unit 43 that requests the center 20 to create the SEED code SC. Yes. The ID information includes, for example, the vehicle-mounted device ID “ID-A” input by the registration tool 19, the vehicle-mounted device ID “ID-B” of the replacement ECU 24, and the electronic key ID “ID-1” acquired from the electronic key 2. And are included. The SEED code creation request unit 43 outputs a SEED creation request R3 to the center 20 as a request for causing the center 20 to start creating the SEED code SC.

  In the vehicle-mounted device database 21 of the center 20, the vehicle-mounted device ID writing column 44, the vehicle-mounted device center key writing column 45, the electronic key ID writing column 46, and the encryption key writing column are stored for each vehicle 1 (verification ECU 4). 47 is provided. A plurality of electronic key ID writing fields 46 and encryption key writing fields 47 are provided for each direct delivery or additional electronic key 2 registered in the verification ECU 4.

  The electronic key database 22 of the center 20 is provided with an electronic key ID writing field 48, an encryption key writing field 49, and a SEED code writing field 50 for each electronic key 2. In the SEED code writing column 50, the SEED code SC created by passing the encryption key Kcr of each electronic key 2 through the onboard unit center key Kvc of the corresponding verification ECU 4 is written and registered. In the electronic key database 22, since the electronic key ID, the encryption key Kcr, and the SEED code SC are registered in association with each other, it can be understood which SEED code SC is used for which electronic key 2.

  In the center 20, when the verification ECU 4 is exchanged, the SEED code creation unit 51 for re-creating the SEED code SC of the electronic key 2 to be registered, and the SEED code SC created by the SEED code creation unit 51, A SEED code notification unit 52 that is transmitted to the replacement ECU 24 via the registration tool 19 is provided. The SEED code creation unit 51 refers to the vehicle-mounted device database 21 based on the ID information received from the replacement ECU 24 to confirm whether or not the electronic key 2 to be registered has been registered in the pre-exchange ECU 23. . The SEED code creation unit 51 creates the SEED code SC → “SC-B1” by passing the encryption key Kcr of the electronic key 2 that is about to be registered through the vehicle-mounted device center key Kvc registered in the replacement ECU 24. To do. The SEED code notification unit 52 outputs the re-created SEED code SC to the replacement ECU 24 via the registration tool 19. The SEED code “SC-B1” corresponds to the encryption code.

  The replacement ECU 24 is provided with a SEED code decrypting unit 53 that decrypts the SEED code SC acquired from the center 20 to generate the encryption key Kcr. The SEED code decryption unit 53 decrypts the encryption key Kcr by passing the SEED code SC acquired from the center 20 through the vehicle-mounted device center key Kvc written in the memory 24a. Then, the SEED code decryption unit 53 writes and stores the decrypted encryption key Kcr in the encryption key write field 34.

  The replacement ECU 24 is provided with a database reflecting unit 54 that registers the electronic key ID and the encryption key in the replacement ECU 24 and then reflects them on the vehicle-mounted device database 21 of the center 20. When the writing of the electronic key ID and the encryption key to the replacement ECU 24 is completed, the database reflection unit 54 transmits a database reflection request R4 to the center 20 via the registration tool 19. When the center 20 inputs the database reflection request R4 from the replacement ECU 24, the center 20 writes the electronic key ID and the encryption key Kcr that have been registered in the corresponding electronic key ID writing field 46 and the encryption key writing field 47, The in-vehicle device database 21 is updated.

Next, the operation of the electronic key registration system 16 of this example will be described along the flowchart shown in FIG.
First, as a premise, as shown in the in-vehicle device database 21 in FIG. 6, the on-vehicle device ID of the pre-replacement ECU 23 mounted on the vehicle 1 is “ID-A”, and the on-vehicle device center key is “key-A”. To do. “ID-1” and “key-1” are registered in the electronic key ID writing field 33 and the encryption key writing field 34 of the direct delivery electronic key of the ECU 23 before replacement, respectively, and the electronic key ID writing field 33 of the additional electronic key and It is assumed that “ID-2” and “key-2” are written first in the encryption key writing field 34, and “ID-3” and “key-3” are written second.

  Further, the vehicle-mounted device ID of the replacement ECU 24 is “ID-B”, and the vehicle-mounted device center key is “key-B”. In the replacement ECU 24 before key registration, the electronic key ID writing field 33 and the encryption key writing field 34 are all “blank”. Similarly, in the vehicle-mounted device database 21 of the center 20, the electronic key ID writing column 46 and the encryption key writing column 47 whose vehicle-mounted device ID is “ID-B” are all “blank”.

In step 101 shown in FIG. 7, the service person inputs the vehicle-mounted device ID (ID-1) of the pre-replacement ECU 23 to the registration tool 19 (see FIG. 8).
In step 102, the additional registration command unit 39 outputs an additional registration command R1 to the replacement ECU 24 by wired communication (see FIG. 8). The additional registration command R1 is a command for switching the operation state of the replacement ECU 24 to a key addition process execution state in which the additional operation of the electronic key 2 is executed.

  In step 103, the key ID acquisition unit 40 transmits a key ID acquisition request R2 to the electronic key 2 by LF communication (see FIG. 9). The key ID acquisition request R2 is a request for returning the electronic key ID registered in the electronic key 2 to the vehicle 1 through LF communication. In this example, in this communication process, the vehicle-mounted device ID of the electronic key 2 overwrites the vehicle-mounted device ID “ID-B” of the replacement ECU 24 from the vehicle-mounted device ID “ID-A” of the pre-replacement ECU 23. Is done.

In step 104, the key ID notification unit 41 transmits the electronic key ID “ID-1” registered in the memory 11a to the vehicle 1 via LF communication (see FIG. 9).
In step 105, the key ID acquisition unit 40 writes and stores the electronic key ID “ID-1” received from the electronic key 2 in the electronic key ID writing field 33 of the direct payment electronic key (see FIG. 9).

  In step 106, the ID information sending unit 42 sends ID information necessary for registering the electronic key 2 to the replacement ECU 24 to the center 20 via the registration tool 19 (see FIG. 10). In this ID information, the vehicle-mounted device ID “ID-A” of the pre-replacement ECU 23 and the vehicle-mounted device ID “ID-B” of the replacement ECU 24 input to the registration tool 19 by the serviceman, and the electronic that is about to be registered. The electronic key ID “ID-1” of key 2 is included. Steps 101 to 106 correspond to an ID notification step.

  In step 107, the SEED code creation unit 51 confirms the ID information received from the registration tool 19 (see FIG. 10). That is, the SEED code creation unit 51 refers to the vehicle-mounted device database 21 and confirms whether or not the ID-1 electronic key 2 is registered in the ID-A verification ECU 4. At this time, if the registration relationship can be confirmed, the process proceeds to the next step, and if the registration relationship cannot be confirmed, the process ends.

  In step 108, the SEED code creation request unit 43 transmits a SEED creation request R3 to the center 20 via the registration tool 19 (see FIG. 11). The SEED creation request R3 is a request for the center 20 to create the SEED code “SC-B1” necessary for registering the encryption key “key-1” of the electronic key 2 that is the registration target registration target in the vehicle 1. It is.

  In step 109, when receiving the SEED creation request R3 from the replacement ECU 24, the SEED code creating unit 51 creates the SEED code “SC-B1” necessary for registering the encryption key “key-1” (see FIG. 11). . At this time, the SEED code creation unit 51 refers to the electronic key database 22 to determine that the encryption key of ID-1 currently registered is “key-1”, and the “key-1” ”Is passed through“ key-B ”which is the vehicle-mounted device center key Kvc of the replacement ECU 24, and“ SC-B1 ”is created as the SEED code SC. Steps 107 to 109 correspond to an encryption key extraction step.

  In step 110, the SEED code notifying unit 52 notifies the replacement ECU 24 of the SEED code “SC-B1” created in the center 20 through the registration tool 19 (see FIG. 12). Step 110 corresponds to an encryption key notification step.

  In step 111, the SEED code decrypting unit 53 decrypts the SEED code “SC-B 1” acquired from the center 20 with the vehicle-mounted device center key “key-B” registered in the replacement ECU 24, thereby obtaining the encryption key “ Key-1 "is generated (see FIG. 12).

  In step 112, the SEED code decryption unit 53 writes and saves the encryption key “key-1” generated by the decryption as the encryption key for the electronic key ID “ID-1” in the encryption key writing field 34 of the direct delivery electronic key. (See FIG. 12). Thus, the operation for registering the electronic key ID and the encryption key of the direct delivery electronic key in the replacement ECU 24 is completed. Steps 111 and 112 correspond to an encryption key registration step.

  In step 113, the database reflection unit 54 transmits a database reflection request R4 to the center 20 via the registration tool 19 in order to update the vehicle-mounted device database 21 (see FIG. 13).

  In step 114, when the center 20 inputs the database reflection request R 4 from the registration tool 19, the electronic key that has just been registered in the electronic key ID writing field 46 and the encryption key writing field 47 of the replacement ECU 24 in the in-vehicle device database 21. The electronic key ID “ID-1” of 2 and the encryption key “key-1” are written, and the in-vehicle device database 21 is updated (see FIG. 13). Steps 113 and 114 correspond to the database reflection step.

According to the configuration of the present embodiment, the following effects can be obtained.
(1) At the time of key registration of the replacement ECU 24, the vehicle-mounted device ID of the ECU 23 before replacement is notified to the center 20 via the registration tool 19, and only the electronic key 2 registered in the vehicle-mounted device ID is allowed to be registered. . Therefore, registration restrictions are imposed on the key registration in the replacement ECU 24, so that the security of key registration can be ensured. For this reason, a situation in which another arbitrary key is registered in the replacement ECU 24 or a key registered in another ECU is not registered in the replacement ECU 24 does not occur.

  (2) When the key is registered in the replacement ECU 24, the SEED code “SC-B1” notified from the center 20 to the replacement ECU 24 via the registration tool 19 is encrypted with the vehicle-mounted device center key Kvc. Therefore, since the SEED code “SC-B1” can be generated as a highly confidential code, the effect of ensuring the security of key registration is enhanced.

  (3) When the key registration is completed in the replacement ECU 24, the contents are reflected in the vehicle-mounted device database 21 of the center 20, so that the vehicle-mounted device database 21 managed by the center 20 can be optimized.

  (4) Registration of the electronic key 2 to the verification ECU 4 (pre-replacement ECU 23, replacement ECU 24) cannot be performed without the registration tool 19 at hand. Therefore, since key registration can only be performed by a regular worker who possesses the registration tool 19, it is highly effective in ensuring the security of key registration.

  (5) At the time of key registration to the replacement ECU 24, the center 20 obtains the vehicle-mounted device ID of the pre-replacement ECU 23, the vehicle-mounted device ID of the replacement ECU 24, and the electronic key ID of the electronic key 2 currently registered. I need. Therefore, since these three IDs are required when registering the key in the replacement ECU 24, the key registration can be performed with high security.

Note that the embodiment is not limited to the configuration described so far, and may be modified as follows.
When a plurality of electronic keys 2 are registered in the pre-replacement ECU 23, all keys registered in the pre-replacement ECU 23 may be registered in the replacement ECU 24 at a time in the key registration operation of the replacement ECU 24.

In step 101, when the vehicle-mounted device ID of the pre-replacement ECU 23 is input to the registration tool 19, this vehicle-mounted device ID may be immediately sent to the center 20.
-Notification of onboard equipment ID of ECU23 before exchange is not limited to the format notified to the center 20 using the registration tool 19. FIG. For example, the worker may notify the center 20 of the vehicle-mounted device ID of the ECU 23 before replacement by telephone or FAX.

  The SEED code SC notified from the center 20 to the replacement ECU 24 is not limited to a code encrypted with the vehicle-mounted device center key Kvc. In short, it is only necessary to ensure confidentiality, and other encryption methods can be adopted as appropriate.

-Encryption communication used for ID verification is not limited to challenge-response authentication, and other encryption authentication can be employed.
-Identification ID of a control apparatus is not limited to onboard equipment ID, What is necessary is just information which can distinguish collation ECU4.

The communication between the vehicle 1 and the registration tool 19 is not limited to wired communication but may be wireless.
The vehicle 1 and the electronic key 2 are not limited to performing all communication with the center 20 via the registration tool 19. For example, a network communication function may be provided in the vehicle 1 or the electronic key 2 so that these can communicate directly with the center 20.

  The registration method of the electronic key registration system 16 is not limited to the method described in the embodiment (a method using the SEED code SC). If the electronic key 2 can be registered in the verification ECU 4 (vehicle 1), other contents are appropriately set. It can be changed.

The electronic key registration system 16 may be constructed from, for example, the vehicle 1, the electronic key 2, and the center 20 without using the registration tool 19.
The key registration is not limited to the operation of registering both the electronic key ID and the encryption key Kcr, and may be a format in which only one of them is registered.

The electronic key registration system 16 is not limited to having both initial registration and additional registration, and may be a system having only one.
The electronic key registration system 16 is not limited to being employed in the vehicle 1 and can be applied to other devices and apparatuses.

The electronic key 2 may be a key capable of only immobilizer verification as electronic verification.
The electronic key 2 may be a key in which the vehicle-mounted device ID is not written. That is, a key to which no vehicle-mounted device ID verification is imposed in key verification with the vehicle 1 may be used.

  It is not limited to storing the encryption key Kcr in the electronic key 2 in advance. For example, an electronic key center key associated with the electronic key 2 and the center 20 may be registered in both, and the encryption key Kcr may be encrypted with the electronic key center key and sent.

  DESCRIPTION OF SYMBOLS 1 ... Vehicle as communication object, 2 (2a, 2b) ... Electronic key, 4 ... Verification ECU as control apparatus, 16 ... Electronic key registration system, 19 ... Registration tool, 20 ... Center, 21 ... Car-mounted which comprises a database Database, 22... Electronic key database constituting database, 23... Pre-replacement ECU as control device before replacement, 24... Replacement ECU as control device after replacement, Kcr... Encryption key, SC (SC-B1) ... SEED code as encryption code, Kvc ... OBE center key as a key for the control device.

Claims (4)

An electronic device that registers the electronic key in the communication target by writing the key ID and the encryption key of the electronic key in association with each other in the communication target control device so that the communication target and the electronic key can communicate with each other by encrypted communication. In the key registration method ,
An ID notification step in which the center acquires the identification ID of the control device before replacement;
Wherein said center identification ID on the basis of indexing the encryption key corresponding to the key ID which has been registered in the control unit before the replacement, the indexing and the encryption key, associated between said center and said control device An encryption key extracting step in which the center generates an encryption code by encrypting with the control device dedicated key;
An encryption key notification step acquired by the control device after exchanging the encryption code;
The control device after the exchange decrypts the encryption code with the key dedicated to the control device written and stored in advance, and the control device after the exchange registers it in its own memory. electronic key registration method characterized by comprising the encryption key registration step. After the pre-Symbol electronic key registered in the controller, is the registered contents the center, that <br/> having a database reflecting step of reflecting the database to manage the details of the electronic key and the control device The electronic key registration method according to claim 1, wherein: 3. The electronic key registration method according to claim 1, wherein registration of the electronic key to the control device after the replacement is performed using a registration tool. The center includes a database for managing details of the electronic key and the control device,
In the ID notification step, the control device after the replacement includes an identification ID of the control device before the replacement, an identification ID of the control device after the replacement, and a key ID of the electronic key that is about to be registered. , Notify the center,
In the encryption key extraction step, the center confirms by referring to the database whether the electronic key to be registered is registered in the control device before the exchange, and if this can be confirmed, 4. The electronic key registration method according to claim 1, wherein the encryption key is encrypted by using the control device dedicated key related to the control device to create the encryption code. 5.