JP6993186B2 - Car sharing system - Google Patents

Description

The present invention relates to a car sharing system in which one vehicle is shared by a plurality of people.

Conventionally, a car sharing system in which one vehicle is shared by a plurality of people is well known (see Patent Documents 1, 2, etc.). In this type of car sharing system, for example, the use of car sharing is registered in advance, the vehicle is reserved on a mobile terminal (high-performance mobile phone, etc.), and then the use of the vehicle is permitted within the reserved time. ..

Japanese Unexamined Patent Publication No. 2016-115077 Japanese Unexamined Patent Publication No. 2016-71834

By the way, when using the valet parking service with a shared vehicle, it is necessary to give the key of the shared vehicle to a third party such as a valet clerk, but it is not realistic to lend the mobile terminal to a third party at this time. .. Therefore, if the use of the valet parking service is taken into consideration and a valet key is always kept in the vehicle, a dedicated key for the valet is required, which causes a problem of cost.

An object of the present invention is to provide a car sharing system that enables rental of a shared vehicle without using a dedicated bullet key.

A car-sharing system that solves the above problems wirelessly communicates between a mobile terminal that acquires key information from a key information generator via network communication when operating as a vehicle key of a shared vehicle and an in-vehicle car-sharing device. When the vehicle-mounted device is operated on the mobile terminal by executing the authentication of the key information, the car-sharing device in the authentication completed state operates the vehicle-mounted device through the vehicle-mounted electronic key system. In a car-sharing system to be used, when the shared vehicle is used by another user, the operation mode of the shared vehicle is switched between valid and invalid of the operation terminal of the shared vehicle by the mobile terminal of the user. The mode switching unit is provided with a mode switching unit that changes the mode to a possible mode, and the mode switching unit is operated by the user's mobile terminal when a mode change request for the shared vehicle to be used by another user is operated. The operation terminal of the shared vehicle is switched from invalid to valid, and the in-vehicle device is operated by the operation terminal .

According to this configuration, when a user of a shared vehicle uses the valet parking service, the operation terminal of the shared vehicle is effectively switched by the user's mobile terminal, and this operation terminal is lent to a third party such as a valet clerk. To. As described above, in the case of this configuration, when the user of the shared vehicle uses the valet parking service, it is sufficient to effectively switch the operation terminal originally existing in the shared vehicle and lend it to a third party. Therefore, it is possible to rent a shared vehicle without using a dedicated bullet key.

In the car-sharing system, when the mode switching unit obtains permission to operate the car-sharing device through communication between the first mobile terminal used by the owner of the shared vehicle and the car-sharing device, the mode switching unit sets the operating mode of the shared vehicle. It is preferable to change to a mode in which the operation terminal can be enabled or disabled by the user's second mobile terminal. According to this configuration, the operation mode of the shared vehicle can be switched between valid and invalid of the operation terminal by the user's second mobile terminal without obtaining permission from the owner's first mobile terminal of the shared vehicle. Cannot be changed. Therefore, it is possible to ensure the security of mode change.

In the car sharing system, the mode switching unit sets the operation terminal to be invalid as an initial state when the share vehicle is used by another user, and operates the mobile terminal of the user. It is preferable to switch the operation terminal from invalid to valid through communication. According to this configuration, when the operation mode of the shared vehicle is changed to a mode in which the operation terminal can be enabled / disabled by the user's mobile terminal, it is possible to remember to disable the operation terminal. Become.

In the car sharing system, it is preferable that the mode switching unit sets a device capable of operating the shared vehicle in a one-to-one correspondence in each operation mode of the shared vehicle. According to this configuration, since only one device needs to be operated in each operation mode of the shared vehicle, it is advantageous to keep the power consumption of each device low.

According to the present invention, a shared vehicle can be rented without using a dedicated bullet key.

The block diagram of the car sharing system of 1st Embodiment. Communication sequence diagram of key information authentication. Communication sequence diagram when operating a mobile terminal to operate an in-vehicle device. Phase diagram of each operating mode of the shared vehicle. Phase diagram of each operating mode of the shared vehicle. Sequence diagram of valid / invalid switching of car sharing mode. Sequence diagram of enabling / disabling valet parking mode. The state diagram of each operation mode of the share vehicle of 2nd Embodiment. Communication sequence diagram of smart collation. A specification diagram that summarizes the vehicle radio output command and whether or not there is a device reply.

(First Embodiment)
Hereinafter, the first embodiment of the car sharing system will be described with reference to FIGS. 1 to 7.
As shown in FIG. 1, the vehicle 1 includes an electronic key system 4 that performs ID verification wirelessly with the electronic key 2 to execute or permit the operation of the in-vehicle device 3. The electronic key system 4 is a key operation-free system that executes ID collation (smart collation) by narrow-range radio in the wake of communication from the vehicle 1. In the key operation free system, ID verification is automatically performed without directly operating the electronic key 2. The in-vehicle device 3 includes, for example, a door lock device 5 and an engine 6. In the case of this example, the electronic key 2 is positioned as an operation terminal 2a originally prepared in the vehicle 1 as a dedicated key for the vehicle 1.

The vehicle 1 includes a collation ECU (Electronic Control Unit) 9 for ID collation, a body ECU 10 for managing the power supply of the vehicle-mounted electrical components, and an engine ECU 11 for controlling the engine 6. These ECUs are electrically connected via a communication line 12 in the vehicle. The communication line 12 is, for example, CAN (Controller Area Network) or LIN (Local Interconnect Network). In each memory (not shown) of the collation ECU 9 and the electronic key 2, the electronic key ID of the electronic key 2 registered in the vehicle 1 and the key unique key used at the time of ID verification authentication are registered. The body ECU 10 controls a door lock device 5 that switches the lock / unlock of the vehicle door 13.

The vehicle 1 includes a radio wave transmitter 16 that transmits radio waves in the vehicle 1 and a radio wave receiver 17 that receives radio waves in the vehicle 1. The radio wave transmitter 16 includes, for example, an outdoor use for transmitting radio waves outdoors and an indoor use for transmitting radio waves indoors. The radio wave transmitter 16 transmits radio waves in the LF (Low Frequency) band. The radio wave receiver 17 receives radio waves in the UHF (Ultra High Frequency) band. The electronic key system 4 communicates with the electronic key 2 by bidirectional communication of LF-UHF.

When the wake signal for activating the electronic key 2 is LF transmitted from the radio wave transmitter 16, when the electronic key 2 enters the communication area of the wake signal and receives it, it is activated from the standby state and collates with the collation ECU 9 (ID collation). Perform smart collation). Smart verification includes, for example, electronic key ID verification for confirming the correctness of an electronic key ID, challenge response authentication using a key-specific key (encryption key), and the like. When the collation ECU 9 confirms that the ID collation (outdoor smart collation) is established with the outdoor electronic key 2, the collation ECU 9 permits or executes the locking / unlocking of the vehicle door 13 by the body ECU 10.

When the collation ECU 9 confirms that the ID collation (indoor smart collation) is established with the electronic key 2 in the room, the collation ECU 9 permits the power supply transition operation by the engine switch 18. As a result, for example, when the engine switch 18 is operated with the brake pedal depressed, the engine 6 is started.

The vehicle 1 includes a car sharing system 21 in which one vehicle 1 is shared by a plurality of people. In the car sharing system 21 of this example, the car sharing device 23 has an encrypted key information Dk registered in the mobile terminal 22 from the server 20 and has an encryption key (car sharing device unique key) capable of decrypting the key information Dk. The key information Dk is transmitted from the mobile terminal 22 to the mounted vehicle 1 and authenticated by the car sharing device 23, and if the authentication is established, the operation of the in-vehicle device 3 is permitted. The mobile terminal 22 is preferably, for example, a high-performance mobile phone. The key information Dk is preferably a one-time key (one-time password) that is permitted to be used only once, for example.

The car sharing device 23 is independent of the hardware configuration of the electronic key system 4 of the vehicle 1 and is retrofitted to the vehicle 1. The car sharing device 23 is positioned as an electronic key that is valid only during the reserved time, and is treated in the same manner as the spare key. In this way, the car sharing device 23 operates so that the electronic key appears or disappears in the vehicle by switching the enable / disable of the key function. The car sharing device 23 is supplied with power from the battery + B of the vehicle 1.

The mobile terminal 22 includes a terminal control unit 26 that controls the operation of the mobile terminal 22, a network communication module 27 that performs network communication in the mobile terminal 22, and a short-range wireless communication module 28 that performs short-range wireless communication in the mobile terminal 22. , A memory 29 capable of rewriting data is provided. The mobile terminal 22 acquires the key information Dk from the server 20 by the network communication module 27, and writes and stores the key information Dk in the memory 29. The short-range wireless communication is preferably, for example, Bluetooth (Bluetooth: registered trademark).

The mobile terminal 22 includes a user interface application 30 that manages the operation of the car sharing system 21 in the mobile terminal 22. The user interface application 30 is provided in the terminal control unit 26, for example, by being downloaded from the server 20. In the memory 29 of the mobile terminal 22, a user authentication key required for communication when operating the vehicle 1 with the mobile terminal 22 is registered. The user authentication key is, for example, a random number whose value changes each time it is generated, and may be registered in the car sharing system 21 in advance, or may be generated and registered when the vehicle is used.

The car-sharing device 23 includes a controller 33 that controls the operation of the car-sharing device 23, a smart communication block 34 that performs smart communication in the car-sharing device 23, and a short-range wireless module 35 that performs short-range wireless communication in the car-sharing device 23. A memory 36 capable of rewriting data, and a timer unit 37 for managing the date and time in the car sharing device 23 are provided. The memory 36 has a car sharing device ID which is a unique ID of each car sharing device 23, a car sharing device unique key used for encrypted communication with the mobile terminal 22, and ID verification (smart) through the communication network of the electronic key system 4. The electronic key ID and key-specific key used when performing collation) are written and saved. The timer unit 37 includes, for example, a soft timer. The car sharing device 23 has a one-to-one correspondence with the vehicle 1 by associating the car sharing device ID with the vehicle ID (vehicle body number).

The car-sharing device 23 includes a key function unit 38 that executes ID collation (in this example, smart collation) via the communication network of the car-sharing device 23 through the smart communication block 34. The key function unit 38 is provided in the controller 33. The key function unit 38 enables the in-vehicle device 3 of the vehicle 1 shared by a plurality of people to be operated through ID collation (in this example, smart collation) that undergoes the same processing as the electronic key 2. When the key information Dk is acquired from the mobile terminal 22, the key function unit 38 authenticates the key information Dk, and if this authentication is normally established, the key function unit 38 switches from invalid to valid, and ID collation with the collation ECU 9 can be executed. Become.

Subsequently, using FIGS. 2 and 3, a procedure for reserving the use of the vehicle using the mobile terminal 22 and operating the vehicle 1 with the mobile terminal 22 functioning as a vehicle key will be described.
In step 101, the mobile terminal 22 (user interface application 30) and the server 20 execute user authentication for confirming the user who reserves the vehicle 1. In the user authentication of this example, the authentication of the user ID and the password and the usage reservation procedure for registering the vehicle 1 to be reserved are carried out. In the usage reservation procedure, for example, the vehicle 1 to be used, the date and time, and the like are input. The user ID and password are input to the mobile terminal 22 and transmitted to the server 20 via network communication. When the user ID and password are input from the mobile terminal 22, the server 20 authenticates them, continues the process if the authentication is established, and forcibly terminates the process if the authentication is not established.

If the user authentication is established in step 102, the server 20 generates the key information Dk. The server 20 generates the key information Dk by using, for example, the car sharing device unique key of the car sharing device 23 mounted on the vehicle 1 used by the user. In the case of this example, the server 20 uses, for example, a "reservation date and time", a "terminal ID", a "user authentication key", etc. as plain text, and a predetermined encryption key (for example, a car sharing device unique key, etc.) as an encryption key. A cryptographic text is generated by passing these through a cryptographic formula (cryptographic algorithm), and this cryptographic text is used as key information Dk. The terminal ID is a unique ID of the mobile terminal 22. The user authentication key is, for example, a type of key used in encrypted communication between the mobile terminal 22 and the car sharing device 23.

In step 103, the server 20 transmits the generated key information Dk to the mobile terminal 22 via the network.
In step 104, the mobile terminal 22 (user interface application 30) and the car sharing device 23 execute short-range wireless communication (BLE: Bluetooth Low Energy) connection. Here, the car sharing device 23 periodically transmits advertisements. When the mobile terminal 22 receives the advertisement during the reserved time for renting the vehicle 1, the mobile terminal 22 transmits a communication connection request to the car sharing device 23. When the car sharing device 23 receives the communication connection request from the mobile terminal 22, the car sharing device 23 transmits to the mobile terminal 22 a communication connection confirmation notifying the other party that the communication has been established. As a result, BLE communication between the mobile terminal 22 and the car sharing device 23 is established.

In step 105, when the communication connection (BLE connection) is completed, the car sharing device 23 transmits a key information request requesting notification of the key information Dk registered in the mobile terminal 22.
In step 106, when the mobile terminal 22 (user interface application 30) receives the key information request from the car sharing device 23, the mobile terminal 22 transmits the key information notification notifying the car sharing device 23 of the key information Dk registered in itself.

In step 107, when the car sharing device 23 receives the key information Dk from the mobile terminal 22, the car sharing device 23 executes the authentication work of the key information Dk. In the case of this example, the car sharing device 23 decrypts the key information Dk using a predetermined encryption key (for example, a car sharing device unique key or the like), and confirms whether or not this decryption is successful. At this time, if the decryption of the key information Dk is successful, it is assumed that the key information Dk received from the mobile terminal 22 is correct, and the authentication is successful. Then, if the authentication is successful, the "reservation date / time, terminal ID, user authentication key" included in the key information Dk can be acquired. On the other hand, if the authentication is not established, the key information Dk is regarded as incorrect, the authentication fails, and the BLE communication connection is disconnected.

In step 108, the car sharing device 23 executes the user authentication key notification for notifying the mobile terminal 22 of the user authentication key when the authentication work of the key information Dk is completed correctly.
In step 109, when the mobile terminal 22 (user interface application 30) acquires the user authentication key, the mobile terminal 22 sends a key function on request to the car sharing device 23. The key function on request is a request for switching the key function (key function unit 38) of the car sharing device 23 to the on state.

In step 110, when the car sharing device 23 receives the key function on request from the mobile terminal 22, the car sharing device 23 switches the key function unit 38 to the key function on state (valid state). As a result, the car-sharing device 23 is in a state where bidirectional communication of LF-UHF is possible with the collation ECU 9 mounted on the vehicle.

In step 111, the car sharing device 23 stores the key information Dk and the user authentication key in the memory 36 of the car sharing device 23 after the key function unit 38 is switched to the ON state. Then, the mobile terminal 22 and the car sharing device 23 shift to the "authentication completed state". As a result, the car sharing device 23 is in a state where the vehicle door can be locked / unlocked and the engine can be started.

As shown in FIG. 3, in step 201, it is assumed that the user turns on the operation request button on the mobile terminal 22 that has transitioned to the authentication completion state. The operation request buttons include, for example, an unlock request button operated when unlocking the vehicle door 13 from outside the vehicle, a lock request button operated when locking the vehicle door 13 from outside the vehicle, and permitting the vehicle 1 to start the engine 6. There are various buttons according to the operation function, such as the engine start request button to be operated at the time of operation.

In step 202, when the mobile terminal 22 (user interface application 30) detects that the operation request button has been operated on the mobile terminal 22, the operation request signal corresponding to the operation request button is encrypted with the user authentication key. The operation request signal is a signal including a command corresponding to the operated operation request button.

In step 203, the mobile terminal 22 (user interface application 30) transmits an encrypted operation request signal to the car sharing device 23 via short-range wireless communication.

In step 204, when the car sharing device 23 receives the operation request signal from the mobile terminal 22, the car sharing device 23 transmits the request acceptance response to the mobile terminal 22 and executes the operation based on the received operation request signal. Therefore, when the car sharing device 23 receives the unlock request signal of the vehicle door 13 from the mobile terminal 22, it notifies the collation ECU 9 to that effect through the electronic key system 4 and unlocks the vehicle door 13. When the car sharing device 23 receives the lock request signal of the vehicle door 13 from the mobile terminal 22, it notifies the collation ECU 9 to that effect through the electronic key system 4 and locks the vehicle door 13.

Further, when the car sharing device 23 receives the engine start permission signal from the mobile terminal 22, the car sharing device 23 notifies the collation ECU 9 to that effect through the electronic key system 4. Therefore, when the authentication is completed between the mobile terminal 22 and the car sharing device 23, the engine 6 is started when the engine switch 18 is operated with the brake pedal depressed.

As shown in FIG. 4, the collation ECU 9 and the car sharing device 23 may be connected by wire instead of wirelessly. In this case, when the car sharing device 23 receives an operation request signal (locking request signal, unlocking request signal, engine start permission signal, etc.) from the mobile terminal 22, the car sharing device 23 outputs the operation request signal to the collation ECU 9 through the wiring 40. The collation ECU 9 executes an operation according to the operation request signal based on the operation request signal acquired from the car sharing device 23 through the wiring 40.

As shown in FIG. 5, the car sharing system 21 of this example has a "normal mode" when the vehicle owner uses the vehicle 1 and a car sharing user who makes a reservation for vehicle use and operates the vehicle 1. It is possible to switch between three modes, the "car sharing mode" and the "bullet parking mode" in which the car sharing user shifts when renting the vehicle 1 to a third party. In this way, in the car sharing system 21, the operation mode is switched between the three modes.

The normal mode is a mode in which not only the first mobile terminal (owner mobile terminal) 22a possessed by the vehicle owner but also the operation terminal 2a is enabled and the vehicle 1 can be operated by the operation terminal 2a. The operation terminal 2a is a key positioned as a standard key equipped as standard with respect to the vehicle 1, and is a so-called smart key (registered trademark). In the normal mode, the operation terminal 2a may be left in the vehicle (for example, in the glove box) or possessed by the vehicle owner.

In the car sharing mode, the vehicle 1 can be operated on the second mobile terminal 22b during the reservation period for using the vehicle on the second mobile terminal (car sharing user mobile terminal) 22b possessed by the car sharing user. However, this is a mode in which the operation terminal 2a is invalidated and the vehicle 1 cannot be operated by the operation terminal 2a. The reason why the operation terminal 2a cannot be used in the car sharing mode is that the operation terminal 2a cannot be used while the vehicle 1 is being shared, so it is better to disable the operation terminal 2a just in case. This is because it seems to be safe.

The valet parking mode is a mode in which not only the second mobile terminal 22b but also the operation terminal 2a is enabled and the operation terminal 2a can operate the vehicle 1. By the way, it is assumed that a car-sharing user will use the valet parking service, but in this case, when renting the vehicle 1 to a third party such as a valet clerk, the second mobile terminal 22b is handed over to the third party. Not realistic. Therefore, when the car-sharing user uses the valet parking service, the vehicle 1 is switched to the valet parking mode to enable the operation terminal 2a from invalid, and the operation terminal 2a is handed over to a hotel man or the like.

Returning to FIG. 1, the car sharing system 21 includes a mode switching unit 41 for setting the operation mode of the shared vehicle 1 (verification ECU 9). The mode switching unit 41 is provided in the collation ECU 9. When the shared vehicle 1 is used by a user other than the owner, the mode switching unit 41 sets the operation mode of the shared vehicle 1 (verification ECU 9) to the user's mobile terminal (in this example, the second mobile terminal 22b). ) To switch between valid and invalid of the operation terminal 2a of the share vehicle 1 (in this example, the car share mode).

Next, the operation and effect of the car sharing system 21 of this embodiment will be described with reference to FIGS. 6 and 7. Here, it is assumed that the first mobile terminal 22a is registered in the car sharing device 23 according to the processes of steps 101 to 111 described above.

[Car share mode enable / disable sequence]
In step 301 shown in FIG. 6, when the car sharing mode is turned on from the first mobile terminal 22a, the first mobile terminal 22a (user interface application 30) and the car sharing device 23 are car-sharing by operating the first mobile terminal 22a. By switching the device 23 to the state in which the key function is on (the key function unit 38 is enabled), the state shifts to the authentication completed state (connection completed state).

In step 302, when the car sharing mode on operation is executed in the first mobile terminal 22a, the first mobile terminal 22a (user interface application 30) inputs the operation. The car-sharing mode on operation is preferably an operation of displaying a "car-sharing mode on" button on the screen of the first mobile terminal 22a and touching the button, for example.

In step 303, when the first mobile terminal 22a (user interface application 30) inputs the car sharing mode on operation, the car sharing mode on request (smart function invalidation request) is wirelessly transmitted to the car sharing device 23.

In step 304, when the car sharing device 23 receives the car sharing mode on request (smart function invalidation request) from the first mobile terminal 22a, the car sharing mode on request (smart function invalidation request) is output to the collation ECU 9. The car-sharing mode on request (smart function invalidation request) is sent to the matching ECU 9 through the electronic key system 4 in the case of wireless connection, and is sent to the matching ECU 9 through the wiring 40 in the case of wired connection.

In step 305, when the collation ECU 9 (mode switching unit 41) inputs a car share mode on request (smart function invalid request) from the car share device 23, the collation ECU 9 switches the operation mode of the share vehicle 1 to the car share mode and performs a smart function. To disable. Here, when the collation ECU 9 and the car sharing device 23 are wirelessly connected, the smart function is invalidated, for example, when the collation ECU 9 cannot transmit a wake signal. Further, when the collation ECU 9 and the car sharing device 23 are connected by wire, the vehicle 1 was in a state where it could output the LF radio wave and receive the UHF radio wave of the operation terminal 2a before this, but after that, the vehicle 1 is in the LF. The smart function is disabled when the UHF radio wave cannot be received without outputting the radio wave.

In step 306, the collation ECU 9 (mode switching unit 41) outputs a car share mode on response (smart function invalid response) to the car share device 23 after the operation mode of the share vehicle 1 is switched to the car share mode. The car-sharing mode on response (smart function invalid response) is sent to the car-sharing device 23 through the electronic key system 4 in the case of a wireless connection, and is sent to the car-sharing device 23 through the wiring 40 in the case of a wired connection.

In step 307, when the car sharing mode on response (smart function invalid response) is input from the collation ECU 9, the car sharing device 23 wirelessly transmits the car sharing mode on response (smart function invalid response) to the first mobile terminal 22a. .. Then, when the first mobile terminal 22a (user interface application 30) receives the car sharing mode on response (smart function invalid response) from the car sharing device 23, the first mobile terminal 22a displays that fact on the screen of the first mobile terminal 22a, for example. The owner of the shared vehicle 1 is notified by such means.

When the car sharing mode is turned off from the first mobile terminal 22a, the car sharing mode is operated according to the procedure shown in steps 308 to 314 of the figure. The car-sharing mode off operation is the same as the car-sharing mode on operation, except that "on" changes to "off" and "smart function disabled" changes to "smart function enabled". Is. Therefore, the description of the car-sharing mode off operation will be omitted by explaining the car-sharing mode on operation.

[Valet parking mode enable / disable sequence]
In step 401 shown in FIG. 7, when the valet parking mode is turned on from the second mobile terminal 22b, the second mobile terminal 22b (user interface application 30) and the car sharing device 23 carry out car sharing by operating the second mobile terminal 22b. By switching the device 23 to the state in which the key function is on (the key function unit 38 is enabled), the state shifts to the authentication completed state (connection completed state).

In step 402, the second mobile terminal 22b (user interface application 30) inputs the operation when the valet parking mode on operation is executed in the second mobile terminal 22b. The valet parking mode on operation is preferably an operation of displaying a "valet parking mode on" button on the screen of the second mobile terminal 22b and touching the button, for example.

In step 403, when the second mobile terminal 22b (user interface application 30) inputs the valet parking mode on operation, the valet parking mode on request (smart function valid request) is wirelessly transmitted to the car sharing device 23.

In step 404, when the car sharing device 23 receives the valet parking mode on request (smart function valid request) from the second mobile terminal 22b, the car sharing device 23 outputs the valet parking mode on request (smart function valid request) to the collation ECU 9. The valet parking mode on request (smart function valid request) is sent to the collation ECU 9 through the electronic key system 4 in the case of wireless connection, and is sent to the collation ECU 9 through the wiring 40 in the case of wire connection.

In step 405, when the collation ECU 9 (mode switching unit 41) inputs a valet parking mode on request (smart function valid request) from the car sharing device 23, the collation ECU 9 switches the operation mode of the shared vehicle 1 to the valet parking mode and performs a smart function. To enable. Here, when the collation ECU 9 and the car sharing device 23 are wirelessly connected, the smart function is enabled by returning the collation ECU 9 to a state in which a wake signal can be transmitted, for example. Further, when the collation ECU 9 and the car sharing device 23 are connected by wire, the vehicle 1 outputs the LF radio wave and returns to the state where the UHF radio wave of the operation terminal 2a can be received, so that the smart function is enabled.

Further, when the smart function is enabled in the valet parking mode, the use of the shared vehicle 1 may be restricted. Examples of this function limitation include setting the expiration date by date and time, disabling the unlocking of the trunk, disabling the unlocking of the glove box, and disabling the additional registration of the key (mobile terminal 22). Can be mentioned.

In step 406, the collation ECU 9 (mode switching unit 41) outputs a valet parking mode on response (smart function valid response) to the car sharing device 23 after the operation mode of the shared vehicle 1 is switched to the valet parking mode. The valet parking mode on response (smart function valid response) is sent to the car sharing device 23 through the electronic key system 4 in the case of a wireless connection, and is sent to the car sharing device 23 through the wiring 40 in the case of a wired connection.

In step 407, when the car sharing device 23 inputs a valet parking mode on response (smart function valid response) from the collation ECU 9, the car sharing device 23 wirelessly transmits the valet parking mode on response (smart function valid response) to the second mobile terminal 22b. .. Then, when the second mobile terminal 22b (user interface application 30) receives the valet parking mode on response (smart function valid response) from the car sharing device 23, the second mobile terminal 22b displays that fact on the screen of the second mobile terminal 22b, for example. The user of the shared vehicle 1 is notified by such means.

When the valet parking mode is turned off from the second mobile terminal 22b, the operation is performed according to the procedure shown in steps 408 to 414 of the figure. The off operation of the valet parking mode is the same as the on operation of the valet parking mode, except that "on" changes to "off" and "smart function enabled" changes to "smart function disabled". Is. Therefore, the off operation of the valet parking mode will be omitted by explaining the on operation of the valet parking mode.

By the way, in the case of this example, when the user of the shared vehicle 1 uses the valet parking service, the operation terminal 2a of the shared vehicle 1 is effectively switched by the user's second mobile terminal 22b, and this operation terminal 2a is used as a valet clerk. Lend it to a third party such as. In the case of this example, when the user of the shared vehicle 1 uses the valet parking service, it is sufficient to effectively switch the operation terminal 2a originally existing in the shared vehicle 1 and lend it to a third party. Therefore, the shared vehicle 1 can be rented without using a dedicated bullet key.

When the mode switching unit 41 obtains operation permission through communication between the first mobile terminal 22a used by the owner of the share vehicle 1 and the car sharing device 23, the mode switching unit 41 sets the operation mode of the share vehicle 1 to the second user. The mode is changed to a mode (car sharing mode) in which the operation terminal 2a can be enabled or disabled by the mobile terminal 22b. As a result, the operation mode of the share vehicle 1 is changed to a mode (car share mode) in which the operation terminal 2a can be enabled or disabled by the second mobile terminal 22b without obtaining permission from the first mobile terminal 22a. Can't. Therefore, the security of mode change can be ensured.

When the shared vehicle 1 is used by a user other than the owner (in the normal mode), the mode switching unit 41 sets the operation terminal 2a to be disabled as an initial state, and operates the second mobile terminal 22b. The operation terminal 2a is switched from invalid to valid through communication by. Therefore, when the operation mode of the share vehicle 1 is changed to a mode (car share mode) in which the validity / invalidity of the operation terminal 2a can be switched by the second mobile terminal 22b, the operation terminal 2a is always disabled. be able to.

(Second Embodiment)
Next, the second embodiment will be described with reference to FIGS. 8 to 10. In this example, the state taken by the car sharing system 21 is changed in each operation mode. Therefore, the same parts as those in the first embodiment are designated by the same reference numerals, the description thereof will be omitted, and only the different parts will be described in detail.

As shown in FIG. 8, in the case of the car sharing system 21 of this example, in each operation mode (normal mode, car sharing mode, valet parking mode), the device 45 (the second) that reacts to the communication from the vehicle 1 (verification ECU 9). 1 operation terminal 2s, 2nd operation terminal 2t, car sharing device 23) has only one one-to-one correspondence. The first operation terminal 2s is preferably an owner key (smart key) that is positioned as the main key of the shared vehicle 1. The second operation terminal 2t is a subkey (smart key) of the shared vehicle 1, and is preferably stored in the vehicle.

In the case of this example, in the normal mode, the vehicle door 13 can be locked / unlocked and the engine can be started only by the first operation terminal 2s. In the car sharing mode, the vehicle door 13 can be locked / unlocked and the engine can be started only by the second mobile terminal 22b (car sharing device 23) of the car sharing user. In the valet parking mode, the vehicle door 13 can be locked / unlocked and the engine can be started only by the second operation terminal 2t. Switching from the normal mode to the car sharing mode can be performed by the first operation terminal 2s or the first mobile terminal 22a. Switching from the car sharing mode to the valet parking mode can be performed only on the second mobile terminal 22b.

Next, the operation and effect of the car sharing system 21 of this embodiment will be described with reference to FIGS. 9 and 10.
As shown in FIG. 9, the collation ECU 9 transmits a wake signal from the radio wave transmitter 16 periodically or irregularly, and the device 45 located in the vicinity (first operation terminal 2s, second operation terminal 2t, car sharing device). Wait for the response of Ack from 23). Upon receiving the wake signal, the collation ECU 9 executes challenge-response authentication. At this time, a challenge is sent from the collation ECU 9 to the device 45 (first operation terminal 2s, second operation terminal 2t, car sharing device 23) to calculate a response, and this response is sent to the collation ECU 9 for confirmation.

As shown in FIG. 10, in the normal mode, the collation ECU 9 enables ID collation (smart collation or wireless collation) communication only with the first operation terminal 2s positioned as the main key, and uses "wake signal 1" as a wake signal. Send. The wake signal 1 is a signal that responds only to the first operation terminal 2s. When the first operation terminal 2s receives the wake signal 1 transmitted from the radio wave transmitter 16, the first operation terminal 2s returns the ac to the collation ECU 9. The wireless collation refers to a mode in which ID collation is executed triggered by communication from the device 45 (first operation terminal 2s, second operation terminal 2t, car sharing device 23).

When the collation ECU 9 can receive the response of the ac to the wake signal 1, it transmits "challenge 1" as a challenge. Challenge 1 is a signal for performing challenge response authentication only with the first operation terminal 2s. When the first operation terminal 2s receives the challenge 1, it calculates a response based on its own encryption key and transmits this to the collation ECU 9. When the collation ECU 9 receives the response from the first operation terminal 2s, it compares it with the response obtained by itself and authenticates the response. When the collation ECU 9 confirms that the challenge response authentication is established and the electronic key ID is also correct, the collation ECU 9 processes the smart collation with the first operation terminal 2s as established. As described above, in the normal mode, the vehicle door 13 can be locked / unlocked and the engine can be started only by the first operation terminal 2s.

In the car-sharing mode, the collation ECU 9 enables ID collation (smart collation or wireless collation) communication only with the car-sharing device 23, transmits "wake signal 2" as a wake signal, and transmits "challenge 2" as a challenge. do. The wake signal 2 is a signal that responds only to the car sharing device 23, and the challenge 2 is a challenge that performs a response calculation only to the car sharing device 23. Since the specific communication is the same as in the normal mode, the description thereof will be omitted.

Further, the collation ECU 9 enables ID collation (smart collation or wireless collation) communication only with the second operation terminal 2t positioned as a subkey in the valet parking mode, and transmits "wake signal 3" as a wake signal as a challenge. Send "Challenge 3". The wake signal 3 is a signal that responds only to the second operation terminal 2t, and the challenge 3 is a challenge that performs a response calculation only to the second operation terminal 2t. Since the specific communication is the same as in the normal mode, the description thereof will be omitted.

By the way, in the case of this example, the mode switching unit 41 sets the device 45 capable of operating the shared vehicle 1 in a one-to-one correspondence in each operation mode of the shared vehicle 1. Therefore, in each operation mode of the shared vehicle 1, only one device 45 needs to be operated, which is advantageous in keeping the power consumption of each device 45 low.

The embodiment is not limited to the configuration described so far, and may be changed to the following aspects.
-In each embodiment, the operation mode that can be set in the share vehicle 1 is not limited to the normal mode, the car share mode, and the valet parking mode, and other modes can also be adopted.

-In each embodiment, the mode in which the validity / invalidity of the operation terminal 2a can be switched is not limited to the car sharing mode, and may be another mode.
-In each embodiment, the change to the car sharing mode is not limited to that performed by the first mobile terminal 22a owned by the owner of the sharing vehicle 1. For example, the share vehicle 1 may be switched to the car share mode by an instruction from the server 20 or another communication device owned by the owner.

-In each embodiment, the operation terminal 2a is not limited to the electronic key, and may be a vehicle key.
-In each embodiment, when the car sharing mode is switched to, the mode for setting the validity / invalidity of the operation terminal 2a is entered, and the validity / invalidity of the operation terminal 2a is set at the timing when the user rents the share vehicle 1. May be.

-In each embodiment, the mode switching unit 41 may be provided in another device instead of the collation ECU 9.
-In each embodiment, the updated encryption key may be changed to a key other than the user authentication key.

-In each embodiment, the mobile terminal 22 or the car sharing device 23 may acquire the user authentication key by any procedure or method.
-In each embodiment, the key information Dk is not limited to the information encrypted by the car sharing device unique key, and may be the information encrypted by another key.

-In each embodiment, the content included in the key information Dk can be changed to an embodiment other than the embodiment.
-In each embodiment, the key information Dk is not limited to being generated by the server 20, and may be any place as long as it is external.

-In each embodiment, the switching of the key function unit 38 to the effective (on state) may be conditional on anything.
-In each embodiment, the engine start may be started by displaying an "engine start" button on the screen of the mobile terminal 22, for example, and operating this button.

-In each embodiment, the operation-free electronic key system 4 is not limited to a system in which transmitters are arranged inside and outside the vehicle to determine the positions inside and outside the vehicle of the electronic key 2 and perform smart collation. For example, a system may be used in which antennas (LF antennas) are arranged on the left and right sides of the vehicle body, and the combination of the responses of the electronic key 2 to the radio waves transmitted from these antennas is confirmed to determine the position inside and outside the vehicle of the electronic key 2.

-In each embodiment, the ID collation imposed on the electronic key system 4 is not limited to the collation including the challenge response authentication, and at least any authentication or collation may be included as long as the electronic key ID collation is performed. May be good.

-In each embodiment, the electronic key system 4 may be a wireless key system in which ID collation is executed, for example, triggered by communication from the electronic key 2.
-In each embodiment, the electronic key 2 is not limited to the smart key (registered trademark) and may be a wireless key.

-In each embodiment, the short-range wireless communication is not limited to Bluetooth communication, and can be changed to another communication method.
-In each embodiment, the key information Dk is not limited to the one-time key, and may be any information whose use is restricted.

-In each embodiment, the encryption key used for encrypted communication may be any of, for example, a car sharing device unique key, a user authentication unique key, and a key unique key. For example, switching the encryption key used in the middle of processing is advantageous for ensuring the security of communication. Further, the encryption key to be used is not limited to the above-mentioned key, and may be changed to various keys.

-In each embodiment, the mounting location of the car sharing device 23 is not particularly limited.
-In each embodiment, the mobile terminal 22 is not limited to a high-performance mobile phone and can be changed to various terminals.

Next, the technical ideas that can be grasped from the above-described embodiment and other examples will be added below together with their effects.
(B) When the operation permission is obtained through the communication between the first mobile terminal and the car sharing device, the operation mode of the shared vehicle is changed from the normal mode in which the shared vehicle can be operated only by the first mobile terminal. The second mobile terminal is also shifted to the car sharing mode in which the shared vehicle can be operated. According to this configuration, it is possible to appropriately change to a desired state through the operation of mode switching.

(B) The key information is authenticated wirelessly between the mobile terminal that can operate as the vehicle key of the shared vehicle by registering the key information and the in-vehicle car sharing device, and the mobile terminal is used. When the in-vehicle device is operated, the car-sharing device in the authentication completed state is a car-sharing method in which the in-vehicle device is operated through the in-vehicle electronic key system, and the shared vehicle is another vehicle. A car-sharing method that changes the operating mode of the shared vehicle to a mode in which the operation terminal of the shared vehicle can be enabled or disabled by the user's mobile terminal when used by the user.

1 ... Vehicle (shared vehicle), 2 ... Electronic key, 2a ... Operation terminal, 3 ... In-vehicle device, 4 ... Electronic key system, 21 ... Car sharing system, 22 ... Mobile terminal, 22a ... First mobile terminal, 22b ... No. 2 mobile terminal, 23 ... car sharing device, 41 ... mode switching unit, Dk ... key information.

Claims (4)

When operating as a vehicle key of a shared vehicle, the key information is authenticated wirelessly between a mobile terminal that acquires key information from a key information generator by network communication and a car-sharing device mounted on the vehicle. When the in-vehicle device is operated by the mobile terminal, the car-sharing device in the authentication completed state is a car-sharing system that operates the in-vehicle device through the in-vehicle electronic key system.
A mode in which when the shared vehicle is used by another user, the operation mode of the shared vehicle is changed to a mode in which the operation terminal of the shared vehicle can be enabled or disabled by the user's mobile terminal. Equipped with a switching part ,
The mode switching unit switches the operation terminal of the shared vehicle from invalid to valid when the mode change request for the shared vehicle to be used by another user is operated by the user's mobile terminal. A car-sharing system in which the in-vehicle device is operated by the operation terminal . When the mode switching unit obtains the operation permission through the communication between the first mobile terminal used by the owner of the shared vehicle and the car sharing device, the operation mode of the shared vehicle is set to the second user. The car sharing system according to claim 1, wherein the mode is changed so that the operation terminal can be enabled or disabled depending on the mobile terminal. When the shared vehicle is used by another user, the mode switching unit sets the operation terminal to be invalid as an initial state, and the operation terminal is communicated by the operation of the user's mobile terminal. The car sharing system according to claim 1 or 2, wherein the car sharing system is switched from invalid to valid. The car sharing system according to any one of claims 1 to 3, wherein the mode switching unit sets a device capable of operating the shared vehicle in a one-to-one correspondence in each operation mode of the shared vehicle.

Images