JP2006213183A - Vehicle movement admission/prohibition system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a vehicle movement admission/prohibition system capable of enhancing the security level. <P>SOLUTION: An electronic key system 1 is equipped with a portable unit 2 and an engine start control device 3. The engine start control device 3 is equipped with a collation ECU 35. A memory 35a of this ECU 35 stores the reference running admissible distance as the upper limit of the running admissible distance to serve as an index for how much the vehicle running is admitted. The collation ECU 35 prohibits the vehicle from running when the running distance started measuring at the start of the engine attains the reference running admissible distance. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to a movement approval / disapproval system that permits movement of a moving body and prohibits movement of the moving body.

Patent Document 1 discloses a technique related to an immobilizer system for the purpose of preventing theft of a vehicle. The immobilizer system refers to the ID code sent by the transponder (IC chip) built in the engine start key, and the microcomputer on the vehicle side checks the ID code while allowing the engine to start when the ID code is correct. This is a system that prohibits starting of the engine when is not correct. In a vehicle equipped with an immobilizer system, the engine will not be started even if a key that is merely mechanically duplicated or a stolen trick that directly connects wiring is encountered. Therefore, the immobilizer system is very effective in preventing theft of the vehicle.
JP 2004-025936 A (paragraph number 0004)

  However, if the correct key is available, the engine can be started. And after starting an engine, it is possible to drive a vehicle until fuel runs out. Then, when the fuel runs out, the vehicle can be run again by replenishing the fuel. In short, the current travel allowance of the vehicle is determined by the degree of fuel supply.

  The present invention has been made paying attention to such problems, and an object thereof is to provide a mobile approval / disapproval system capable of improving the security level.

  In order to achieve the above object, according to the first aspect of the present invention, storage means for storing a reference movement allowable amount that is an upper limit value of a movement allowable amount that serves as an index of how much the moving body is allowed to move. And a control means for prohibiting the movement of the moving body when the moving amount starting from the starting time of the moving body reaches a reference movement allowable amount.

  According to a second aspect of the present invention, in the movement approval / disapproval system according to the first aspect, an allowable movement distance that serves as an index of how much movement of the moving body is allowed as the reference movement allowable amount in the storage means. Is stored, and the control means prohibits the movement of the moving body when the moving distance from the starting time of the moving body reaches the reference moving allowable distance. Features.

  According to a third aspect of the present invention, in the movement approval / disapproval system according to the first or second aspect, the storage means includes, as a reference movement allowable amount, an index indicating how much the moving body is allowed to move. The reference movement allowable time, which is the upper limit value of the movement allowable time, is stored, and the control means is configured to store the time that has elapsed without stopping the operation of the moving body after the moving body is started. It is characterized in that the movement of the moving body is prohibited when reaching the above.

  According to a fourth aspect of the present invention, in the movement approval / disapproval system according to any one of the first to third aspects, how much the moving body is allowed to move as the reference movement allowable amount in the storage means. A reference start allowable number that is an upper limit value of the allowable start number serving as an index is stored, and the control means is configured so that the start number of the moving body within a predetermined period reaches a reference start allowable number. In this case, the movement of the moving body is prohibited.

  According to a fifth aspect of the present invention, in the movement approval / disapproval system according to any one of the first to fourth aspects of the present invention, the mobile approval / disapproval system includes an acquisition unit that acquires information specific to a regular driver, and the control unit includes: When the moving body is started, a predetermined first reference movement allowable amount is stored in the storage means as a reference movement allowable amount, and the moving body is moved from the first reference movement allowable amount during operation of the moving body. When the subtraction result is subtracted and the subtraction result becomes zero, it is recognized that the movement amount of the moving body has reached the first reference movement allowable amount, and the movement of the moving body is prohibited. When the acquisition means acquires information specific to a regular driver during driving of the moving body, a second reference movement allowable amount larger than the first reference movement allowable amount as the reference movement allowable amount is stored in the storage means. And when the moving body is in operation, When the moving amount of the moving object is subtracted from the reference movement allowable amount and the subtraction result becomes zero, it is recognized that the moving amount of the moving object has reached the second reference moving allowable amount, and the moving object is prohibited from moving. It is characterized by doing.

  According to a sixth aspect of the present invention, in the movement approval / disapproval system according to the fifth aspect, the control means is configured such that the moving amount of the moving body is a first reference without obtaining information specific to a regular driver by the obtaining means. Thereafter, when the movement allowable amount is reached, the movement of the moving body is prohibited until the acquisition means acquires information specific to the authorized driver.

  In the invention described in claim 7, in the movement approval / disapproval system described in any one of claims 1 to 6, the mobile approval / disapproval system includes a reception unit that receives a reference movement allowable amount transmitted from the outside of the mobile body, When the reference movement allowable amount is received by the receiving means, the control means stores the reference movement allowable amount as a new reference movement allowable amount in the storage means, and during operation of the moving body, Subtracting the moving amount of the moving body from the reference moving allowable amount, and when the subtraction result becomes zero, recognizing that the moving amount of the moving body has reached the reference moving allowable amount and prohibiting the moving of the moving body It is characterized by.

The “action” of the present invention will be described below.
According to the first aspect of the present invention, the movement of the moving body is prohibited when the movement amount starting from the starting time of the moving body reaches the reference movement allowable amount. In other words, the movement allowable amount of the moving body is not determined by the degree of fuel supply that can be replenished by any person.

  According to the second aspect of the present invention, when the moving distance from the starting time of the moving body reaches the reference movement allowable distance, the moving body is prohibited from moving. In other words, the movement allowable distance of the moving body is not determined by the degree of fuel supply that can be replenished by any person. Therefore, the security level can be improved.

  According to the third aspect of the present invention, the movement of the moving body is prohibited when the elapsed time has reached the reference movement allowable time after the moving body is started without stopping the operation of the moving body. In other words, the allowable movement time of the moving body is not determined by the degree of fuel supply that can be replenished by any person. Therefore, the security level can be improved.

  According to the fourth aspect of the present invention, when the number of times the moving body starts within a predetermined period reaches the reference start allowable number, the movement of the moving body is prohibited. That is, the allowable number of times that the moving body can be started is not determined by the degree of fuel supply that can be refilled by any person. Therefore, the security level can be improved.

  According to the fifth aspect of the present invention, when the moving body is moved by a third party, the movement of the moving body is prohibited at an earlier stage than when the moving body is moved by an authorized driver. For this reason, it becomes possible to discover the moving body moved by the third party quickly. Therefore, the subsequent security level can be improved.

  According to the invention described in claim 6, when the moving body is moved by a third party and the moving amount of the moving body eventually reaches the first reference movement allowable amount, the moving body is operated by a regular driver thereafter. The moving object is prohibited from moving until it is done. In short, a third party cannot keep moving the moving body. Therefore, the subsequent security level can be improved.

  According to the seventh aspect of the present invention, even if the moving body is moved by a third party, the reference moving allowable amount is changed by transmitting a new reference moving allowable amount to the moving body from the outside of the moving body. It is possible. For example, if the new reference movement allowance is extremely small, the amount of movement of the moving body by a third party can be extremely suppressed. Therefore, the subsequent security level can be improved.

Since this invention is comprised as mentioned above, there exist the following effects.
According to the invention of any one of claims 1 to 7, the security level can be improved.

Hereinafter, an embodiment in which the present invention is embodied in an electronic key system of an automobile will be described.
As shown in FIG. 1, the electronic key system 1 includes a portable device 2 and an engine start control device 3. The portable device 2 is owned by the owner of the automobile. The engine start control device 3 is provided on the automobile side. The electronic key system 1 can perform two-way communication between the portable device 2 and the engine start control device 3. The electronic key system 1 permits the start of the vehicle-mounted engine by the engine start control device 3 when the corresponding portable device 2 is used.

  The portable device 2 has a reception function and a transmission function. The portable device 2 includes a reception antenna 21, a reception circuit 22, a microcomputer 23, a transmission circuit 24, and a transmission antenna 25. The receiving antenna 21 is a medium for receiving a request signal transmitted from the engine start control device 3. When the request signal is received by the reception antenna 21, the reception circuit 22 demodulates the request signal to generate a reception signal, and outputs the reception signal to the microcomputer 23.

  The microcomputer 23 is a CPU unit including a CPU, ROM, RAM, and the like (not shown). The microcomputer 23 includes a nonvolatile memory 23a. In the memory 23a, an ID code (ID code of the portable device 2) set individually for each portable device 2 is stored. When the reception signal is input from the reception circuit 22, the microcomputer 23 outputs a signal including the ID code of the portable device 2 (ID code signal) to the transmission circuit 24 in order to respond to the request signal. The transmission circuit 24 modulates the ID code signal input from the microcomputer 23 into a radio wave having a predetermined frequency (300 MHz in this embodiment). The transmission antenna 25 is a medium for transmitting the ID code signal modulated by the transmission circuit 24 to the outside.

  The engine start control device 3 includes a transmission circuit 31, a transmission antenna 32, a reception antenna 33, a reception circuit 34, and a verification electronic control unit (hereinafter referred to as a verification ECU) 35. The transmission circuit 31 modulates the request signal input from the verification ECU 35 into a radio wave having a predetermined frequency (134 KHz in this embodiment). The transmission antenna 32 is a medium for transmitting the request signal modulated by the transmission circuit 31 to the outside. The request signal is transmitted within a predetermined area A32 that extends over substantially the entire area inside the vehicle and hardly reaches outside the vehicle. As a result, bidirectional communication between the portable device 2 and the engine start control device 3 is possible within the predetermined area A32. That is, the request signal is a trigger signal for establishing bidirectional communication between the portable device 2 and the engine start control device 3.

  The receiving antenna 33 is a medium for receiving an ID code signal transmitted from the portable device 2. When an ID code signal is received by the receiving antenna 33, the receiving circuit 34 demodulates the ID code signal to generate a received signal, and outputs the received signal to the verification ECU 35.

  The verification ECU 35 is a CPU unit including a CPU, ROM, RAM, timer, counter, and the like (not shown). The verification ECU 35 includes a non-volatile memory 35a. The memory 35a stores the same ID code (vehicle-side ID code) as the ID code of the corresponding portable device 2.

  A door courtesy switch 40 is electrically connected to the verification ECU 35. The door courtesy switch 40 is for detecting the open / closed state of the in-vehicle door. When the vehicle door is open, the door courtesy switch 40 outputs a detection signal indicating that the vehicle door is open to the verification ECU 35 over the period when the vehicle door is open. Further, the door courtesy switch 40 outputs a detection signal indicating that the vehicle-mounted door is closed to the verification ECU 35 over the period when the vehicle-mounted door is closed when the vehicle-mounted door is closed.

  When the detection signal indicating that the in-vehicle door is open is input from the door courtesy switch 40 in a state where the detection signal indicating that the in-vehicle door is closed is input from the door courtesy switch 40, the verification ECU 35 Recognize that the door has been opened. Then, the verification ECU 35 outputs a request signal to the transmission circuit 31 when recognizing that the vehicle-mounted door has been opened. When the received signal is input from the receiving circuit 34 based on the output of the request signal, the verification ECU 35 determines whether the ID code included in the received signal matches the ID code on the automobile side. Judging. That is, in this case, the verification ECU 35 performs ID code verification.

  An engine electronic control unit (hereinafter referred to as engine ECU) 50 is electrically connected to the verification ECU 35. The collation ECU 35 outputs an engine start permission signal to the engine ECU 50 when both ID codes coincide with each other by the ID code collation.

  The engine ECU 50 starts the in-vehicle engine and also stops the rotation of the in-vehicle engine. A brake switch 51 and an engine switch 52 are electrically connected to the engine ECU 50.

  The brake switch 51 is for detecting a brake operation. When the brake pedal is depressed, the brake switch 51 outputs a detection signal indicating that the brake pedal is depressed to the engine ECU 50 over a period during which the brake pedal is depressed. When the detection signal indicating that the brake pedal is depressed is input from the brake switch 51, the engine ECU 50 recognizes that the brake operation is being performed.

  The engine switch 52 is operated when starting the in-vehicle engine, and is also operated when stopping the rotation of the in-vehicle engine. The engine switch 52 is a push switch provided with a button that can be pressed from the outside. When the button is pressed, the engine switch 52 outputs a detection signal indicating that the button is pressed to the engine ECU 50 over a period during which the button is pressed.

  The engine ECU 50 detects that a button is pressed from the engine switch 52 in a state where a detection signal indicating that the button is pressed from the engine switch 52 is not input while rotation of the vehicle-mounted engine is stopped. Is input, it recognizes that the start operation of the vehicle-mounted engine has been performed. When the engine ECU 50 recognizes that the brake operation is being performed in a state where the engine start permission signal is input from the verification ECU 35 and recognizes that the start operation of the in-vehicle engine has been performed, the in-vehicle engine Start.

  The engine ECU 50 receives a detection signal indicating that the button is pressed from the engine switch 52 in a state where a detection signal indicating that the button is pressed is not input from the engine switch 52 while the vehicle-mounted engine is rotating. When input, it recognizes that the rotation stop operation of the vehicle-mounted engine has been performed. When the engine ECU 50 recognizes that the rotation stop operation of the in-vehicle engine has been performed, the engine ECU 50 stops the rotation of the in-vehicle engine.

  The engine ECU 50 outputs an engine rotation state signal indicating the rotation speed of the in-vehicle engine to the verification ECU 35. And collation ECU35 recognizes that a vehicle-mounted engine has stopped rotation, when the engine rotation state signal which shows that the rotation speed of a vehicle-mounted engine is zero from engine ECU50. On the other hand, the collation ECU 35 recognizes that the in-vehicle engine is rotating when an engine rotation state signal indicating that the rotational speed of the in-vehicle engine is other than zero is input from the engine ECU 50.

  Further, the verification ECU 35 indicates that the engine speed of the in-vehicle engine is other than zero from the engine ECU 50 in a state in which an engine rotation state signal indicating that the engine speed of the in-vehicle engine is zero is input from the engine ECU 50. When the engine rotation state signal is input, it recognizes that the vehicle-mounted engine has been started. On the other hand, the engine ECU 50 indicates that the engine speed of the in-vehicle engine is zero from the engine ECU 50 in a state where an engine speed state signal indicating that the engine speed of the in-vehicle engine is other than zero is input from the engine ECU 50. When the engine rotation state signal is input, it is recognized that the on-vehicle engine has stopped rotating.

  As described above, the electronic key system 1 according to the present embodiment has a function (engine start) that allows the engine start control device 3 to start the in-vehicle engine when the corresponding portable device 2 (regular portable device 2) is brought into the vehicle. Automatic permission function).

Next, features of the electronic key system 1 will be described.
As shown in FIG. 1, the engine start control device 3 of the electronic key system 1 can perform bidirectional communication with various in-vehicle devices in addition to the portable device 2. That is, the communication device 70 and the display device 80 are electrically connected to the verification ECU 35 of the engine start control device 3 through the in-vehicle communication network 60. In addition, a fingerprint sensor 90 and a travel distance sensor 95 are electrically connected to the verification ECU 35.

  The communication device 70 communicates with an external communication terminal 72 represented by a mobile phone (hereinafter simply referred to as a mobile phone) or a personal computer (hereinafter simply referred to as a personal computer) via an external communication network 71. Is possible. The out-of-vehicle communication terminal 72 is managed by the owner of the car. Therefore, the owner of the car can input various information using the out-of-vehicle communication terminal 72 and perform various settings related to the car by remote operation without going to the car he owns. is there. Incidentally, various types of information input using the external communication terminal 72 are input to the verification ECU 35 via the external communication network 71, the communication device 70, and the in-vehicle communication network 60. In short, the communication device 70 corresponds to a receiving unit that receives information transmitted from the outside of the automobile.

  In particular, the owner of the car uses the out-of-vehicle communication terminal 72 to input a reference allowable travel distance that is an upper limit value of the allowable travel distance that is an index of how much the automobile that the user owns is allowed to travel. By doing so, it is possible to arbitrarily set the security level of the automobile. Of course, when the reference travel allowable distance is input using the vehicle communication terminal 72, a password predetermined by the owner of the vehicle is required. In short, the person who can accurately input the reference travel allowable distance using the out-of-vehicle communication terminal 72 is limited to the owner of the automobile.

  A vehicle-mounted input device 81 is electrically connected to the display device 80. The display device 80 is for displaying various information input using the in-vehicle input device 81. The in-vehicle input device 81 is used when inputting information to be displayed on the display device 80. Therefore, the owner of the car can make various settings related to the car by inputting various information using the in-vehicle input device 81. Incidentally, various information input using the in-vehicle input device 81 is input to the verification ECU 35 via the display device 80 and the in-vehicle communication network 60.

  In particular, the owner of the car can arbitrarily set the security level of the car by inputting the same reference allowable travel distance using the in-vehicle input device 81 as input using the out-of-vehicle communication terminal 72 as described above. It is possible to set. Of course, when inputting the reference travel allowable distance using the in-vehicle input device 81, a password predetermined by the owner of the vehicle is required. In short, the person who can accurately input the reference travel allowable distance using the in-vehicle input device 81 is limited to the owner of the car.

  The fingerprint sensor 90 is provided on the surface of the steering wheel. The fingerprint sensor 90 is for detecting a fingerprint of a person (driver) holding the steering wheel. When the steering wheel is gripped, the fingerprint sensor 90 detects the fingerprint of the person (driver) holding the steering wheel, generates data related to the fingerprint (driver fingerprint data), and includes the driver's fingerprint data A detection signal is output to the verification ECU 35. Needless to say, fingerprint data is information specific to an individual. In short, the fingerprint sensor 90 corresponds to an acquisition unit that acquires fingerprint data that is information unique to an individual.

  In relation to this, fingerprint data (reference fingerprint data) of a legitimate driver (car owner) is stored in the memory 35a of the verification ECU 35. When the detection signal is input from the fingerprint sensor 90, the verification ECU 35 determines whether the fingerprint data included in the detection signal matches the reference fingerprint data. That is, in this case, the verification ECU 35 executes fingerprint verification.

  The travel distance sensor 95 is for detecting the cumulative travel distance of the automobile. The travel distance sensor 95 calculates the travel distance when the automobile is traveled. The travel distance sensor 95 calculates the integrated travel distance by adding the travel distance each time the automobile travels, and outputs a detection signal including data relating to the integrated travel distance to the verification ECU 35. Then, when the detection signal is input from the travel distance sensor 95, the verification ECU 35 refers to the data related to the integrated travel distance included in the detection signal and recognizes the integrated travel distance of the automobile.

  Here, the verification ECU 35 recognizes the accumulated travel distance at the start point with reference to the data related to the accumulated travel distance included in the detection signal input from the travel distance sensor 95 at an arbitrary start point in time. On the other hand, the verification ECU 35 refers to the data related to the integrated travel distance included in the detection signal input from the travel distance sensor 95 at any temporal end point, and recognizes the integrated travel distance at the end point. Then, the verification ECU 35 subtracts the total travel distance at the start point from the total travel distance at the end point, and calculates the travel distance of the automobile within the period from the start point to the end point.

  For example, when the verification ECU 35 recognizes that the in-vehicle engine has been started, it refers to the data related to the accumulated travel distance included in the detection signal first input from the travel distance sensor 95 after recognizing that fact. Then, the accumulated travel distance at the time of engine start is recognized. In addition, the collation ECU 35 refers to the data relating to the accumulated travel distance included in the detection signal first input from the travel distance sensor 95 after reaching an arbitrary end point in time, and performs the accumulated travel at the end point. Recognize the distance. Then, the verification ECU 35 subtracts the cumulative travel distance at the time of starting the engine from the cumulative travel distance at the time of the end point, and calculates the travel distance of the automobile within the period from the start of the engine to the end point.

  In relation to this, the reference travel allowable distance that can be set also by the input using the out-of-vehicle communication terminal 72 or the in-vehicle input device 81 is stored in the memory 35a of the verification ECU 35 as described above. Then, the collation ECU 35 outputs an engine rotation stop command signal to the engine ECU 50 when the travel distance from the start of the engine reaches the reference travel allowable distance. The engine ECU 50 stops the rotation of the in-vehicle engine when an engine rotation stop command signal is input from the verification ECU 35. Needless to say, when the in-vehicle engine stops in this way, the vehicle is prohibited from traveling. In short, the verification ECU 35 corresponds to control means for prohibiting the traveling of the automobile when the traveling distance starting from the time of starting the engine reaches the reference traveling allowable distance.

Next, the vehicle travel approval / rejection control by the verification ECU 35 of the engine start control device 3 will be described with reference to the flowcharts shown in FIGS.
When the verification ECU 35 recognizes that the vehicle-mounted door has been opened (YES in step S1), it outputs a request signal to the transmission circuit 31 (step S2). The verification ECU 35 outputs a request signal to the transmission circuit 31 in step S2, and thereafter, when a reception signal including an ID code that matches the ID code on the automobile side is input from the reception circuit 34 (YES in step S3), the engine. An engine start permission signal is output to the ECU 50 (step S4). On the other hand, the collation ECU 35 outputs a request signal to the transmission circuit 31 in step S2, and thereafter, when a reception signal including an ID code that matches the ID code on the automobile side is not input from the reception circuit 34 (NO in step S3). An engine start permission signal is not output to the engine ECU 50 (step S5).

  When the verification ECU 35 outputs an engine start permission signal to the engine ECU 50 in step S4 and thereafter recognizes that the in-vehicle engine has been started (YES in step S6), the verification ECU 35 sets a first predetermined reference travel allowable distance. The reference travel allowable distance is stored in the memory 35a (step S7).

  The verification ECU 35 calculates the travel distance of the automobile starting from the time when the first reference travel allowable distance is stored in the memory 35a in step S7 (step S8). The verification ECU 35 subtracts the travel distance calculated in step S8 from the first reference travel allowable distance stored in the memory 35a in step S7, and stores the subtraction result in the memory 35a (step S9).

  The verification ECU 35 calculates the travel distance of the automobile starting from the time when the subtraction result is stored in the memory 35a in step S9 (step S10). The verification ECU 35 subtracts the travel distance calculated in step S10 from the subtraction result stored in the memory 35a in step S9, and stores the subtraction result in the memory 35a (step S11).

  When the subtraction result stored in the memory 35a in step S11 becomes zero (YES in step S12), the verification ECU 35 recognizes that the moving distance of the vehicle has reached the first reference travel allowable distance, and the engine ECU 50 The engine rotation stop command signal is output to (step S13). On the other hand, when the subtraction result stored in the memory 35a in step S11 is not yet zero (NO in step S12), the verification ECU 35 determines whether or not a detection signal including fingerprint data that matches the reference fingerprint data is input from the fingerprint sensor 90. Is determined (step S14).

  When a detection signal including fingerprint data that matches the reference fingerprint data is input from fingerprint sensor 90 (YES in step S14), verification ECU 35 proceeds to step S21 shown in FIG. On the other hand, when the detection signal including the fingerprint data that matches the reference fingerprint data is not input from fingerprint sensor 90 (NO in step S14), verification ECU 35 proceeds to step S10.

  Then, the verification ECU 35 calculates the travel distance of the vehicle at the current step S10, starting from the time when the subtraction result is stored in the memory 35a in the previous step S11. In step S11, the verification ECU 35 subtracts the travel distance calculated in step S10 from the subtraction result stored in the memory 35a in step S11, and stores the subtraction result in the memory 35a. And also in this step S12, collation ECU35 judges whether the subtraction result memorize | stored in the memory 35a in this step S11 became zero similarly to previous step S12.

  In short, the collation ECU 35 determines that the subtraction result stored in the memory 35a in step S11 when the vehicle continues to run without receiving a detection signal including fingerprint data matching the reference fingerprint data from the fingerprint sensor 90 in step S14. Steps S10 and S11 are repeated until zero. Then, the collation ECU 35 keeps the vehicle running without receiving the detection signal including the fingerprint data that matches the reference fingerprint data from the fingerprint sensor 90 in step S14, and the subtraction result stored in the memory 35a in step S11 is eventually obtained. When zero (YES in step S12), the process proceeds to step S13. In step S13, the verification ECU 35 recognizes that the travel distance of the vehicle has reached the first reference travel allowable distance, and outputs an engine rotation stop command signal to the engine ECU 50.

  By the way, when the detection signal including the fingerprint data that matches the reference fingerprint data is input from the fingerprint sensor 90 (YES in step S14), the verification ECU 35 sets the reference travel allowable distance longer than the first reference travel allowable distance. The 2 reference travel allowable distance is stored in the memory 35a (step S21 shown in FIG. 3).

  The verification ECU 35 calculates the travel distance of the automobile from the time point when the second reference travel allowable distance is stored in the memory 35a in step S21 (step S22). The verification ECU 35 subtracts the travel distance calculated in step S22 from the second reference travel allowable distance stored in the memory 35a in step S21, and stores the subtraction result in the memory 35a (step S23).

  The verification ECU 35 calculates the travel distance of the automobile starting from the time when the subtraction result is stored in the memory 35a in step S23 (step S24). The verification ECU 35 subtracts the travel distance calculated in step S24 from the subtraction result stored in the memory 35a in step S23, and stores the subtraction result in the memory 35a (step S25).

  When the subtraction result stored in memory 35a in step S25 becomes zero (YES in step S26), verification ECU 35 recognizes that the moving distance of the vehicle has reached the second reference travel allowable distance, and engine ECU 50 The engine rotation stop command signal is output to (step S27). On the other hand, when the subtraction result stored in the memory 35a in step S25 is not yet zero (NO in step S26), the verification ECU 35 determines whether the rotation of the in-vehicle engine has been stopped (step S28).

  When the verification ECU 35 recognizes that the rotation of the in-vehicle engine has been stopped (YES in step S28), the verification ECU 35 ends the series of processes. On the other hand, when the verification ECU 35 recognizes that the in-vehicle engine is rotating, the verification ECU 35 proceeds to step S24.

  Then, in this step S24, the verification ECU 35 calculates the travel distance of the automobile starting from the time point when the subtraction result is stored in the memory 35a in the previous step S25. In step S25, the verification ECU 35 subtracts the travel distance calculated in step S24 from the subtraction result stored in the memory 35a in step S25, and stores the subtraction result in the memory 35a. And also in this step S26, collation ECU35 judges whether the subtraction result memorize | stored in memory 35a in this step S25 became zero similarly to previous step S26.

  In short, when the detection signal including the fingerprint data that matches the reference fingerprint data is input from the fingerprint sensor 90 in step S14 shown in FIG. 2, the verification ECU 35 stores in the memory 35a in step S25 when the automobile continues to travel. Steps S24 and S25 are repeated until the stored subtraction result becomes zero. Then, after the detection signal including the fingerprint data that matches the reference fingerprint data is input from the fingerprint sensor 90 in step S14 shown in FIG. 2, the verification ECU 35 continues to drive the vehicle, and eventually stores it in the memory 35a in step S25. When the stored subtraction result becomes zero (YES in step S26), the process proceeds to step S27. In step S27, the verification ECU 35 recognizes that the travel distance of the vehicle has reached the second reference travel allowable distance, and outputs an engine rotation stop command signal to the engine ECU 50.

As described above, according to the present embodiment, the following operations and effects can be obtained.
(1) When the travel distance starting from the engine start of the automobile reaches the reference travel allowable distance, the travel of the automobile is prohibited. In other words, the allowable travel distance of the automobile is not determined by the degree of fuel supply that can be replenished by any person. Therefore, the security level can be improved.

  (2) When a car is run by a third party who has obtained a legitimate portable device 2 for some reason, the car is prohibited from traveling at an earlier stage than when a car is run by a legitimate driver. For this reason, it is possible to quickly find a car driven by a third party. Therefore, the subsequent security level can be improved.

  (3) Even if the driver's fingerprint data does not match the reference fingerprint data, if the ID code of the portable device 2 matches the ID code on the car side, the start of the in-vehicle engine is permitted, and the longest first It is possible to drive the automobile over the reference travel allowable distance. In short, it is possible to make a third party recognize that the vehicle can be driven. This is to ensure the safety of the legitimate driver when the legitimate portable device 2 reaches the third party in front of the legitimate driver against the will of the legitimate driver. It is very effective.

  (4) In relation to the above (3), even if the vehicle is traveled by a third party who recognizes that the vehicle can travel, the first time the travel distance reaches the first reference travel allowable distance, Contrary to the will of the three parties, driving is prohibited. In short, a third party has no choice but to leave the car. In this case, the authorized driver can find the vehicle by searching for the range from the point where the third party starts to travel to the first reference travel allowable distance. Therefore, the subsequent security level can be improved.

  (5) As the reference travel allowable distance, the first reference travel allowable distance and the second reference travel allowable distance are properly used. In other words, at the beginning of the engine start, when a car may be driven by a third party, while setting the short first reference travel allowable distance, it is determined that a regular driver is driving the car. The long second reference travel allowable distance is set. Therefore, it is possible to obtain a suitable security level even when the automobile is driven by a third party, and it is possible to obtain convenience that is suitable when a regular driver runs the automobile.

  (6) The fingerprint sensor 90 is provided in a steering wheel which is indispensable when driving a car. For this reason, the regular driver can set the second reference travel allowable distance without being aware of it. In short, there is no room to confuse regular drivers. Therefore, excellent convenience can be obtained.

(7) In other words, in (6) above, no third party is informed of the necessity of fingerprint verification. Therefore, high confidentiality can be obtained.
In addition, the said embodiment can also be changed and actualized as follows.

  The verification ECU 35, when the detection distance including the fingerprint data matching the reference fingerprint data is not input from the fingerprint sensor 90 and the mileage of the vehicle reaches the first reference allowable travel distance, the fingerprint matching the reference fingerprint data thereafter You may make it prohibit driving | running | working of a motor vehicle until the detection signal containing data is input from the fingerprint sensor 90. FIG.

  If comprised in this way, when a motor vehicle is drive | worked by the third party and the driving distance of the motor vehicle reaches the 1st standard driving | running | working tolerance distance eventually, driving | running | working of a motor vehicle will be carried out until a driving | running | working vehicle of a regular driver after that. Is prohibited. In short, a third party cannot keep driving a car. Therefore, the subsequent security level can be improved.

  When the reference travel allowable distance is received by the communication device 70, the verification ECU 35 may store the reference travel allowable distance in the memory 35a as a new reference travel allowable distance. In this case, the verification ECU 35 subtracts the travel distance of the vehicle from the new reference travel allowable distance while the vehicle is traveling, and when the subtraction result becomes zero, the travel distance of the vehicle reaches the reference travel allowable distance. Recognizing the fact that the vehicle has been operated, the vehicle is prohibited from traveling.

  If comprised in this way, even if a motor vehicle drive | works by a 3rd party, it is possible to change a standard driving | running | working permissible distance by transmitting a new standard driving | running | working permissible distance to a motor vehicle from the exterior of a motor vehicle. For example, if the new reference allowable travel distance is extremely small, the travel distance of the automobile by a third party can be extremely suppressed. Therefore, the subsequent security level can be improved.

  -Travel distance (travel distance) is at least one (single or multiple) of vehicle speed sensor signal, GPS (Global Positioning System) information, VICS (Vehicle Information and Communication System) information, etc. May be employed to calculate using a combination of the above.

  -The reference travel allowable amount is not limited to the reference travel allowable distance. That is, the memory 35a may store a reference travel allowable time that is an upper limit value of a travel allowable time that is an index of how much the vehicle is allowed to travel as the reference travel allowable amount. In this case, the verification ECU 35 prohibits traveling of the automobile when the elapsed time has reached the reference travel allowable time after the on-board engine is started and the rotation of the on-vehicle engine is not stopped. In short, a configuration in which time is used instead of the moving distance may be adopted.

  If comprised in this way, driving | running | working of a motor vehicle will be prohibited when the time which passed after the vehicle-mounted engine was started without rotation of a vehicle-mounted engine having reached the reference | standard driving | running | working permissible time. In other words, the allowable running time of a car is not determined by the degree of fuel supply that can be refilled by any person. Therefore, the security level can be improved.

  Alternatively, the memory 35a may store a reference start allowable number of times that is an upper limit value of the allowable start number of times that serves as an index of how much the vehicle is allowed to travel as the reference travel allowance. In this case, the collation ECU 35 prohibits the traveling of the vehicle when the number of start times of the in-vehicle engine within a predetermined time period reaches the reference start allowable number of times. In short, a configuration may be adopted in which the number of engine starts is limited instead of the moving distance.

  If comprised in this way, driving | running | working of a motor vehicle will be prohibited when the frequency | count of start of a vehicle-mounted engine in the predetermined period defined beforehand reaches the reference | standard start allowable frequency | count. In other words, the allowable number of start times for the on-board engine is not determined by the degree of fuel supply that can be refilled by any person. Therefore, the security level can be improved.

The acquisition unit is not limited to the fingerprint sensor 90. That is, a palm print sensor for detecting a palm print of a person (driver) holding the steering wheel may be employed as the acquisition means.
-An acquisition means is not limited to what was provided in the surface of the steering wheel. That is, the acquisition means may be provided on the surface of the shift knob operated to change the shift position. Alternatively, the acquisition unit may be provided on the surface of the engine switch 52. In short, it is preferable that the acquisition means be provided on a thing that the driver always touches when driving a car or starting an in-vehicle engine. Of course, a configuration may be adopted in which acquisition means are provided at a plurality of locations (for example, the surface of the steering wheel, the surface of the shift knob, and the surface of the engine switch 52).

  The operation order of the in-vehicle equipment (car audio, car air conditioner, etc.) by the authorized driver is stored in the memory 35a as the reference operation order, and when the in-vehicle equipment is operated in accordance with the reference operation order, You may employ | adopt the structure recognized by collation ECU35 as what acquired the specific information.

  A question having information that can be known only by an authorized driver as an answer is stored in the memory 35a, and the question is notified to the inside of the vehicle using notification means (at least one of the display device 80 and the ringing device). When the answer to the question is correct, a configuration in which the verification ECU 35 recognizes that information specific to the authorized driver has been acquired may be employed.

  ・ When the reference travel allowance (from the smallest one, the reference travel allowance A and the reference travel allowance B) are set stepwise (for example, in two stages), and the vehicle travel amount reaches the reference travel allowance A, the vehicle A configuration may be adopted in which the travel of the vehicle is restricted, and when the travel amount of the vehicle eventually reaches the reference travel allowance B, the travel of the vehicle is prohibited. As a specific method for limiting the travel of the automobile, for example, the original value of the automobile may be reduced by limiting the maximum speed.

  Here, a configuration may be adopted in which a warning is issued before at least one of the reference travel allowance A and the reference travel allowance B is reached. For example, you may employ | adopt the structure which alert | reports the residual amount until it reaches at least one of the reference | standard driving | running | working tolerance A and the reference | standard driving | running | working tolerance B by at least one of a display and a sound.

  -A moving body is not limited to vehicles, such as a car. A walking robot may be employed as the moving body.

The block diagram which shows the structure of an electronic key system. The flowchart for demonstrating the driving | running | working approval / disapproval control of the motor vehicle by collation ECU. The flowchart for demonstrating the driving | running | working approval / disapproval control of the motor vehicle by collation ECU.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Electronic key system (movement approval / disapproval system), 35 ... Verification ECU (control means), 35a ... Memory (storage means), 70 ... Communication apparatus (reception means), 90 ... Fingerprint sensor (acquisition means).

Claims (7)

Storage means for storing a reference movement allowable amount that is an upper limit value of a movement allowable amount serving as an index of how much the moving body is allowed to move;
A movement acceptance / rejection system comprising: control means for prohibiting movement of the moving body when the moving amount starting from the starting time of the moving body reaches a reference movement allowable amount. The movement approval / disapproval system according to claim 1,
The storage means stores a reference movement allowable distance that is an upper limit value of a movement allowable distance serving as an index of how much movement of the moving body is allowed as a reference movement allowable amount,
The control means for prohibiting movement of the moving body when the moving distance from the starting time of the moving body reaches a reference movement allowable distance. In the movement approval / disapproval system according to claim 1 or 2,
The storage means stores, as a reference movement allowable amount, a reference movement allowable time that is an upper limit value of a movement allowable time that is an index of how much movement of the moving body is allowed,
The control means prohibits movement of the moving body when a time that has elapsed without stopping the operation of the moving body has reached a reference movement allowable time after the moving body is started. system. In the movement approval / disapproval system according to any one of claims 1 to 3,
The storage means stores, as a reference movement allowance, a reference start allowable number of times that is an upper limit value of an allowable start number that serves as an index of how much the moving body is allowed to move,
The movement approval / rejection system characterized in that the control means prohibits movement of the moving body when the number of start times of the moving body reaches a reference start allowable number of times within a predetermined period. In the movement approval / disapproval system according to any one of claims 1 to 4,
It has an acquisition means to acquire information specific to regular drivers,
When the moving body is started, the control means stores a predetermined first reference movement allowable amount in the storage means as a reference movement allowable amount, and the first reference movement during the operation of the moving body. When the moving amount of the moving body is subtracted from the permissible amount, and the subtraction result becomes zero, it is recognized that the moving amount of the moving body has reached the first reference movement allowable amount, and the moving body is prohibited from moving. ,
The control means includes a second reference movement allowable amount that is larger than the first reference movement allowable amount as a reference movement allowable amount when information specific to a normal driver is acquired by the acquisition means during driving of the moving body. Is stored in the storage means, and when the moving body is in operation, the moving amount of the moving body is subtracted from the second reference movement allowable amount. 2. A movement approval / disapproval system characterized by recognizing that a reference movement allowable amount has been reached and prohibiting movement of the moving body. In the movement approval / disapproval system according to claim 5,
When the movement amount of the moving body reaches the first reference movement allowable amount without acquiring information specific to the regular driver by the acquisition unit, the control unit is then unique to the regular driver by the acquisition unit. A movement approval / disapproval system characterized in that movement of a moving object is prohibited until information of the above is acquired. In the movement approval / disapproval system according to any one of claims 1 to 6,
A receiving means for receiving a reference movement allowable amount transmitted from the outside of the mobile body;
When the reference movement allowable amount is received by the receiving means, the control means stores the reference movement allowable amount as a new reference movement allowable amount in the storage means, and during operation of the moving body, Subtracting the moving amount of the moving body from the reference moving allowable amount, and when the subtraction result becomes zero, recognizing that the moving amount of the moving body has reached the reference moving allowable amount and prohibiting the moving of the moving body A mobile approval / disapproval system.

Images