JP2007308136A - Engine starting system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To implement highly convenient starting of an engine using an individual authentication device by biological information providing a security function required when starting the engine, while protecting a sensor for inputting the biological information. <P>SOLUTION: An engine starting system comprises: an ignition switch for controlling a state of an automobile; a key for changing a state of the ignition switch; a registration key for registering the biological information; a switch for starting an engine; a sensor for acquiring biological information; a device for storing the biological information; a collating part for collating the input biological information with the stored biological information; and a lid for covering the sensor of the authentication device. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to control of an automobile using biological information.

  In order to start the vehicle, a key is inserted into the ignition switch, and the key is rotated to change the state of the vehicle and start the engine. At this time, if the key is stolen or the keyhole is picked, it may be driven by a malicious person other than the owner of the car. In order to prevent picking or use of a duplicate key, there is disclosed a method for starting an automobile equipped with an immobilizer function that can start an engine only with an IC called a transponder embedded in the key. In the issue. Japanese Patent Laid-Open No. 2001-184507 describes a personal authentication method using a finger vein pattern which is biometric information in order to enhance security. Furthermore, Japanese Patent Application Laid-Open No. 2000-352245 describes a method for starting an engine that combines personal authentication based on biometric information and a key switch.

JP 2000-108848 JP 2001-184507 A JP 2000-352245 A

  As a method for starting an engine with higher security, when a biometric authentication device is installed and it is determined that the registered biometric information matches the input biometric information, as described in JP 2000-352245 A, etc. A method of starting the engine is considered, but there are various problems to use in an environment such as an automobile.

  For example, if it takes too much time to authenticate at the start of a car, the driver is not only frustrated, but if the vehicle cannot be started quickly in an emergency, a safety problem may occur.

  Further, in the case of using such a biometric authentication device, the sensor of the biometric authentication device can be touched, so that there is a problem that the sensor fails due to mischief and is intentionally destroyed by others.

  It is necessary to perform an authentication process by the biometric authentication device every time the engine is started, and consideration must be given so that the engine can be restarted promptly in an emergency such as a so-called engine stall.

  Furthermore, in general, a car must be able to be driven by more than one person. That is, once it is passed to the user, it must be possible to register and delete the driver freely and safely for the convenience of the user, but such a function has not been taken into consideration.

  The present invention has been invented to solve the above-described problems, and an object of the present invention is to provide an engine start system that is used in an automobile and that enhances security and considers safety and usability in an emergency. It is in.

  In order to solve the above-described problems, the present invention has an ignition switch for controlling start / stop of a vehicle, a key for changing the state of the ignition switch, a personal authentication function using biometric information, and an authentication start detection unit Is to authenticate with biometric information and start the engine based on the key and biometric information.

  An engine start system is achieved that facilitates the registration of biometric information and realizes quick start in an emergency while enhancing the security of the automobile.

  The present invention provides an ignition switch for controlling the state of an automobile, a key for changing the state of the ignition switch, a living body, and a system for starting an engine without applying stress to a driver in an automobile environment. It has a personal authentication function using information, and authentication is performed by biometric information by an authentication start detection unit, and the engine is started based on the key and the biometric information.

  In addition, in order to provide a system that can restart the engine promptly in an emergency, an expiration date is set for the result authenticated by the personal authentication function, and if it is within the expiration date, the personal authentication is omitted and the engine is started. There is to do.

  Furthermore, in order to provide a system that can be used by a plurality of drivers, a switching unit that switches to a mode for registering biometric information is provided, and driver registration is performed in the driver registration mode.

  Further, in order to provide an engine starting system that can prevent malfunction due to mischief or the like, a sensor unit for reading biological information is provided with a lid that opens at the timing of reading the biological information.

  In the present invention, at least one of the above-described objects is achieved by each feature and a combination of these features.

  Next, an embodiment of the present invention will be described in detail.

  FIG. 1 is an engine start system for explaining an embodiment of the present invention.

  The system includes an engine control device 124, an electronic control throttle 126, a fuel injection valve 127, a spark plug 128, a starter (not shown), a power source 129, an ignition switch 2, an engine start switch 4, It consists of an authentication device 3.

  The ignition switch 2, the engine start switch 4, and the biometric authentication device 3 are mounted on, for example, the front panel 10 in the passenger compartment and around the driver's seat.

  The engine control device 124 and the authentication device 3 are connected so that they can communicate via a local area network LAN or the like. There are various types of LANs, but this can be easily realized by using a widely used Control Area Network (CAN).

  FIG. 2 shows the configuration of the front panel 10 of the automobile. There are provided an ignition switch 2 for changing the state of the automobile, such as start / stop, a biometric authentication device 3 for authenticating biometric information, and an engine start switch 4 for starting the engine.

  In this embodiment, description will be made on the premise of finger veins, but as the biometric authentication device 3, fingerprints, irises, voice, palm shapes, faces, handwriting, veins on the back of the hand, and the like can be used.

  Keys that can be inserted into the keyhole 20 opened in the ignition switch 2 include a registration key 61 used when registering biometric information in the biometric authentication device 3 in addition to a key 60 used when starting the engine. Thus, security can be enhanced by separating the key for registering biometric information from the key for starting the engine.

  The ignition switch 2 is in the state of handle lock (LOCK), power off (OFF), power supply to accessories (ACC), engine can be started (ON), and as will be described later. Each state of the state where the driver can be registered (REGIST) can be taken.

  Here, in the embodiment of the present invention, the engine start switch 4 for starting the engine is illustrated separately from the ignition switch, but the state (START) in which the starter is started next to ON like the current ignition switch is shown. It is also possible to turn the key to START when biometric authentication is possible, or to start the engine by turning to START. In this case, after turning to START, it is possible to use a mechanism for returning to the ON state like the current ignition switch.

  The biometric authentication device 3 is provided with a lid 311 that covers the biometric authentication device, or inputs the biometric information of the biometric authentication device, or a cover portion that covers the sensor unit. When the lid is closed, the biometric authentication device 3 is locked. It depends and cannot be deliberately opened. If necessary, the lock is released and the lid 311 opens. If the lid is opened while the lid is locked, or the biometric authentication device is activated while the lid is locked, the biometric authentication process can be interrupted or stopped from the viewpoint of security.

  The biometric authentication device 3 can be realized by a device having a configuration as shown in FIG. 9, for example. A biometric authentication device 3 illustrated in FIG. 9 is an example of an authentication device using a finger vein, and includes a microcomputer 300, an image sensor 301, a lens 302, a display 312, an infrared light source 303, an infrared filter 304, and an infrared light source 303. And a drive circuit 307 of the display 312, a nonvolatile memory 306 connected to the microcomputer 300, an authentication start switch 305, a drive mechanism 310 that opens and closes the lid 311, the lid 311, a drive circuit 309 that drives the drive mechanism 310, and a power source The circuit 308 is configured. When the finger 7 to be recognized is placed between the infrared light source 303 and the infrared filter 304, the infrared light is absorbed by blood hemoglobin, so that a blood vessel pattern is formed on the image sensor 301. Is done. When performing finger authentication, the blood vessel pattern of a part of the finger is used for authentication. However, since the accuracy of authentication is improved when the finger part to be acquired is properly limited, in this embodiment, the finger is inserted. The push button type authentication start switch 305 is provided at an optimal position so that the start of authentication can be instructed. Due to the act of pressing with a finger, the position of the finger with respect to the image sensor 301 is restricted, so that a stable image can be acquired and the authentication performance is improved.

  The formed image is converted into an electrical signal by the image sensor 301 and then taken into the microcomputer 300.

  When the ignition switch 2 is in the ACC, ON, or REGIST state, the power supply circuit 308 is supplied with power from the outside and starts supplying power to the internal circuit. Further, the signal of the engine start switch 4 is input, and the microcomputer 300 can read the state of the engine start switch 4. Further, the engine control device 124 is connected via a LAN. Further, as an option, the IC card reader or immobilizer and the microcomputer 300 can be connected by communication or the like.

  FIG. 3 is an example of a state transition diagram of the engine, the ignition switch, and the biometric authentication device 3, and an expiration date of authentication in each state. When the key 60 is inserted into the ignition switch 2 in the initial state D100 in which the automobile engine is completely stopped and parked in the garage or the like, the ignition switch 2 is in a state (LOCK state) D102 in which the handle is locked. When the user of the automobile inserts the key 60 into the ignition switch 2 and turns it, a transition is made to a state (OFF state) D104 in which the electrical system is completely cut off. When the key 60 is further turned, the state shifts to a state (ACC state) D106 of energizing the on-vehicle accessory.

  In this state, the authentication apparatus is supplied with power and is ready for operation. In these states (D100 to D106), the lid 311 covering the sensor of the biometric authentication device 3 cannot be opened in the closed state. Further, when the key 60 is turned and the authentication apparatus 3 is in a state (ON state) D108 in which the authentication operation can be performed, the lid 311 covering the sensor unit for inputting biometric information is opened. Subsequently, biometric information is input. At this time, the biometric authentication device 3 collates the input biometric information with biometric information stored in advance. As a result of the verification, if the user is authenticated, the engine can be started. Otherwise, the engine cannot be started. When the authentication is completed or the authentication process is completed, the lid 311 is closed again.

  When the authentication is completed and the engine can be started, pressing the engine start switch 4 causes the engine to enter a start state D110. Furthermore, the expiration date of the authentication starts when the authentication is completed. Within this period, the engine can be started without performing biometric authentication. The states corresponding to the range of the expiration date are an engine start state D110 and an engine stop state D112, which are indicated by a gray circle in FIG.

  When the engine starts, the car can be driven. In order to stop the engine, the engine is stopped by turning the ignition switch 2 to the ACC state D106 by rotating the key 60. Further, the ignition switch 2 is moved to a state other than the ON state, thereby exiting from the authentication expiration date. At this time, when the engine is started again, it is necessary to perform re-authentication, and another person cannot start the engine due to forgetting to remove the key 60 or the like.

  If the engine is in the stop state D112 while the ignition switch 2 remains on due to an engine stall or the like during operation, it is within the validity period of the authentication, so the engine can be started simply by pressing the engine start switch 4 The state 110 can be set, and personal authentication is not necessary. For this reason, a car can be started promptly also at the time of emergency. Further, when the user leaves the automobile temporarily, the key 60 is turned to stop the engine so that the ON state D108 is changed to the ACC state 106, the OFF state 104, or the LOCK state D102. At this time, the expiration date of authentication becomes invalid. This prevents the engine from starting even if another person presses the engine start button. Further, when the user removes the key 60, the ON state D108 cannot be set, and the personal authentication device cannot even be touched because the lid 311 remains closed.

  When the ignition switch 2 is in the LOCK state D102 and the registration key 61 is inserted into the ignition switch 2 and rotated, the ignition switch 2 enters the REGIST state D114. At this time, the lid 311 of the authentication device 3 is opened, and the biometric information can be registered in the authentication device 3. That is, the newly registered biometric information is stored in the nonvolatile memory 306. When the registration completion state D116 is reached, the lid 311 of the authentication device 3 is closed. The user returns to the LOCK state 102 again with the registration key 61. As a result, the registered person uses the key 60 to start the engine and drive the car.

  Since the registration key 61 is not normally used, for example, if it is stored in a safe at home, the security is further improved.

  FIG. 4 is a diagram for explaining the state of the system when the ignition switch 2 makes a transition from the on (ON) state to the engine start state. The ignition switch 2 is in an ON state, and the cover 311 of the biometric authentication device 3 is open. At this time, a sensor unit for inputting biological information appears outside. In this state, the biometric information, in this example, the finger 7 can be read by inserting the sensor unit, and the information can be input to the biometric authentication device 3. When it is determined that the read biometric information is biometric information registered in advance in the nonvolatile memory 306 that stores the biometric information, the engine start switch 4 is enabled. The engine is started by pressing the engine start switch 4 that has become effective. At this time, the authentication start switch 305 attached to the authentication device 3 can be used to start the engine, and the engine can be started in conjunction with the authentication process.

  The operation of the authentication device 3 is controlled by a program stored in the microcomputer 300 shown in FIG. The operation of the microcomputer 300 will be described with reference to the flowchart of FIG.

  When the ignition switch 2 shifts to the ACC state or the REGIST state, power is supplied to the authentication device 3 and operation starts. The microcomputer 300 starts to operate according to the program stored in the built-in memory.

  First, in step S1, necessary initialization is performed. The contents of the initialization process include, for example, initialization of an internal memory and initial setting of the image sensor 301. Next, in step S2, the state of the ignition switch 2 is inspected to determine whether it is in the ON state. If it is ON, the process proceeds to step S3, and if not, the process proceeds to step S14. Step S3 and subsequent steps are normal engine start modes. First, in step S3, the lid 311 is unlocked to start authentication, and the driver is prompted to insert the finger 7. In step S4, it is determined whether the authentication start switch 305 has been pressed. If not, the process returns to step S4. If the button is pressed, the process moves to step S5, and finger vein feature parameter extraction processing is performed. Details of this processing will be described later. Next, the process proceeds to step S <b> 6, where the extracted feature parameter is checked against one or more parameters stored in advance in the nonvolatile memory 306. In step S7, the collation result is determined. If there is no matching parameter, the process returns to step S4 as an unregistered person or a collation failure. If the collation results match, it is authenticated as a regular driver. Next, in step S8, the engine start switch 4 is pressed, and the driver confirms his intention to start the engine. While the button is not pressed, the process stands by by repeating step S8. When the button is pressed, the process proceeds to step S9, and a start permission command is issued to the engine control device 124 via the LAN. Next, in step S10, the lid 311 is locked.

  In subsequent processing, engine stall and engine stop by the ignition switch 2 are monitored, and appropriate processing is performed. That is, in step S11, engine stall is determined. The operating state of the engine is monitored by the engine control device 124, and when it falls into that state, the authentication device 3 is promptly notified via the LAN. If the engine is not stalled, the process proceeds to step 14. If the engine is stalled, it is determined in step S12 whether the engine start switch 4 has been pressed. If pressed, in step S13, an engine start permission command is issued to the engine control device 124, and the process returns to step S11. If it is determined in step S11 that the engine start switch 4 has not been pressed, it is determined in step S14 whether or not the ignition switch 2 is still in the ON state. If ON is continued, the process returns to step S11. If the ignition switch 2 is in a state other than ON, the engine is stopped, and the process returns to step S2. In step S15, it is checked whether the ignition switch 2 is in the REGIST state. If not, the process returns to step S2.

  If it is determined to be in the REGIST state, a new driver registration mode is set, and the following processing is executed.

  First, in step S16, the lid 311 is unlocked. Next, in step S17, the authentication start switch 2 is determined. If the switch is not pressed, the process returns to step S17. If it has been pressed, in step S18, the characteristic parameter of the finger vein of the driver to be newly registered is extracted. This process is exactly the same as step S5. Next, in step S 19, the extracted feature parameter is registered in the nonvolatile memory 306. Next, in step S20, the display 312 is turned on to display the completion of registration. Next, in step S21, the lid 311 is locked. Finally, in step S22, the process waits in an infinite loop. If the state of the ignition switch 2 changes, the power supply is turned off to escape from this state.

  FIG. 11 explains the details of the processing of steps S5 and S18 in FIG. First, in step S500, the infrared light source 303 that illuminates the finger 7 is turned on. In step S501, the video acquired by the image sensor 301 is captured. Next, in step S502, the infrared light source 303 is turned off. In step S503, the vein network characteristic parameters are extracted by performing arithmetic processing on the image acquired in step S501. The processing method in this step can be realized by performing filter processing combining integration processing and differentiation processing, as disclosed in JP-A-2001-184507.

  Next, an engine start control method in the case of a cylinder injection engine will be described. In-cylinder injection engines cannot inject fuel while the exhaust valve is open to inject fuel directly into the combustion chamber. Therefore, it is necessary to determine the cylinder in the intake to compression stroke and perform injection. When the engine is started, the cylinder cannot be determined until the engine is rotated by the starter. Therefore, if the engine is determined as soon as possible after the engine is rotated and fuel injection is not started, the startability is deteriorated.

  FIG. 5 shows a time chart of engine start control. When the starter is started, the engine starts to rotate, and signals from the crankshaft sensor attached to the crankshaft and the camshaft sensor attached to the camshaft are input to the control unit.

  Here, a crankshaft sensor with a tooth on the crankshaft every 10 degrees, and a crankshaft sensor with one tooth missing every 90 degrees and a four-cylinder engine with one, two, three, and four teeth on the camshaft. Explained as an example.

  The tooth missing part of the crankshaft sensor is adjusted to the top dead center position of a certain cylinder, but it is not possible to distinguish the cylinder by itself. The camshaft sensor attached to the camshaft is used to detect the number of teeth in the camshaft sensor signal when the crankshaft sensor has missing teeth. Determine if compression top dead center. The cylinder discrimination time is the ninth in the number of teeth of the crank angle sensor, which is just in the middle of the compression stroke, and is sufficiently in time for the injection timing for stratified start.

  This will be described with reference to FIG. The first missing tooth of the crankshaft sensor after the start of engine rotation actually corresponds to the top dead center of the fourth cylinder. Synchronously, the number of teeth of the camshaft sensor is detected. If the number of teeth is two, the next top dead center is the compression top dead center of the second cylinder, and if it is one, the next top dead center is the compression top of the first cylinder. Judge as dead point. The actual injection timing is a delay period ΔTinj from the cylinder discrimination signal, and the injection pulse width is Ti. The ignition signal also becomes a delay time ΔTign from the cylinder discrimination signal. By starting control after cylinder discrimination, combustion is reliably performed from the first injection start, and the engine is reliably started.

  Engine control is executed by a microcomputer program built in the engine control device 124. FIG. 6 shows a flowchart of engine start control. The ignition switch 2 is turned on (ON), and the biometric information to be newly authenticated is registered in advance in the non-volatile memory 306 storing the biometric information in the authentication device 3 as shown in FIG. When the information is determined and the engine start switch 4 is pressed, as described above, since the engine start permission command is transmitted from the authentication device 3, the starter is started (S701) and the engine is cranked. The engine control device 124 performs control so as to start. Cylinder discrimination (S702) is performed using a crankshaft sensor and a camshaft sensor input by engine rotation. At this time, it is determined from which cylinder to start the injection. Next, the rotation speed is detected (S703), the fuel pressure is detected (S704), and the injection / ignition timing and the fuel injection amount are determined (S705). The fuel injection amount is determined so that the air-fuel ratio in the entire cylinder is about 25. Based on the result of cylinder discrimination, injection (S706) and ignition (S707) are executed, and it is determined whether or not the engine speed has reached a predetermined speed (S708). When the engine speed is still low, the process returns to step S703 again to detect the engine speed and the fuel pressure, and appropriately reset the injection / ignition timing. When the engine speed increases sufficiently, the starter stops and the engine start control is terminated.

  In the embodiment described above, the engine start is started when the engine start switch 4 is pressed after successful authentication. However, the engine start may be permitted when the authentication is successful. As a countermeasure against the engine stall in this case, a part of the processing of the authentication device 3 may be changed and added. That is, in FIG. 10, the process of step S8 may be deleted, and the determination process of the engine start switch 4 in step S12 may be replaced with the unlocking process of the lid 311 and the determination process of the authentication start switch 305.

  In the embodiment described above, if the registration key 61 is copied for some reason, a third party can easily register the driver in the vehicle. With reference to FIG. 7, an embodiment that further improves the security assuming such a state will be described.

  FIG. 7 is a diagram for explaining an example of a method for registering biometric information with improved security.

  When the registration key 61 is inserted into the keyhole 20, the state of the ignition switch 2 can be changed to REGIST by rotating the registration key 61. At this time, if the one inserted into the keyhole 20 is not the registration key 61, the state of the ignition switch 2 cannot be set to REGIST. However, any duplicated key can be in the REGIST state. Whether the inserted key is the registration key 61 is determined by using the identification number (ID) of the transponder 800 inside the registration key 61 using the immobilizer 801. As shown in FIG. 9, the immobilizer 801 is configured to communicate with the authentication device 3 and, as long as the IDs do not match, even if the state of the ignition switch 2 can be changed to the REGIST state, the immobilizer 801 shifts to the registration mode. There is no.

  As a result, it is possible to determine that the key is not the regular registration key 61 even if the appearance of the key is completely the same as in the case of a combined key, or fraud due to picking or the like. This technology can be easily implemented because it is used in anti-theft devices that have already been put to practical use in some vehicle models.

  By strictly identifying the registration key 61 in this way, it is possible to prevent an outsider from intentionally registering biometric information. In addition, by separating the registration key 61 and the key used when starting the engine, the registration key 61 can be stored in a safe place outside the vehicle during driving. Therefore, when the user temporarily leaves the car, This prevents the outsider from easily registering biometric information due to forgetting to unplug.

  FIG. 8 shows another embodiment of an apparatus for registering biometric information for an automobile not equipped with an immobilizer.

  As described above, when the device for authenticating the key itself by the immobilizer cannot be used, if the biometric information can be registered in the vehicle, there is a possibility that the authentication device may be switched to the registration mode by an outsider. In order to prevent this, for example, an authentication device for registration is prepared at a car dealer or at home, for example, biometric information is written in the IC card 9 and inserted into the IC card reader 5 installed in the car, thereby registering. To be able to. In addition, in order to prevent outsiders from writing biometric information on the same IC card and inserting it into the biometric authentication device 3 installed in the car, the authentication device for registration and the IC card installed outside the car are prevented. The ID number unique to the authentication device installed in the car is set so that each device operates only when they are completely compatible.

  As shown in FIG. 9, the IC card reader 5 can be connected to the authentication device 3 through a communication line.

  Next, the operation of the microcomputer 300 of the authentication device 3 when the driver is registered using the IC card 9 will be described with reference to FIG.

  The flowchart shown in FIG. 12 is basically the same as the system using the registration key shown in FIG. 10, but the conditions for turning on the power and the registration process are different.

  That is, in the embodiment of FIG. 8, since there is no registration key 61, the ignition switch 2 does not have a REGIST state, so that the power of the authentication device 3 is turned on when it enters the ACC state.

  12 is the same as FIG. 10 except for the registration process, and a description of the normal engine start process is omitted. In step S2, when the ignition switch 2 is not turned on and is in the ACC state, registration processing is performed.

  First, in step S30, it is checked whether or not the IC card 9 has been inserted into the IC card reader 5. If there is no insertion, the process returns to step S2.

  When the IC card 9 is inserted, the ID stored in the IC card 9 is read and compared with the ID stored in the nonvolatile memory 306. If the comparison results do not match, an unauthorized registration IC card has been inserted, so registration is rejected and the process returns to step S2.

  If the IDs match, the new driver authentication data stored in the IC card 9 is transferred to the authentication device 3 in step S32 and written in the nonvolatile memory 306 in step S33.

  In step S34, the display 312 is turned on to notify the completion of registration.

  In this embodiment, since it is extremely difficult to actually switch to the registration mode in the car, the security is further improved.

  In the above embodiment, the driver registration data is created in advance outside the vehicle, and the IC card 9 is interposed in the authentication device 3 and written. This system requires a dedicated registration device outside the passenger compartment, and it is assumed that securing the installation location and managing the device are problematic. In that case, the problem can be solved by handling the IC card 9 itself like the registration key 61.

  The configuration of the apparatus is the same as that in FIG. 8, but part of the authentication registration process is different.

  FIG. 13 shows the change in only the registration processing portion of the processing flow of FIG. Other normal engine start processing may be exactly the same as in FIG.

  First, in step S41, it is checked whether or not the IC card 9 has been inserted into the IC card reader 5. If there is no insertion, the process returns to step S2.

  When the IC card 9 is inserted, the process proceeds to step S42, where the ID stored in the IC card 9 is read and compared with the ID stored in the nonvolatile memory 306. If the comparison results do not match, an unauthorized registration IC card has been inserted, so registration is rejected and the process returns to step S2.

  If the IDs match, the lid 311 is unlocked in step S43, and it is determined in step S44 whether or not the authentication start switch 305 has been pressed.

  While the switch is not pressed, the process waits in step S44.

  When the switch is pressed, a feature parameter extraction process is performed (S45), and the result is registered in the nonvolatile memory 306 (S46). Next, the display 312 is turned on and a registration completion display is performed (S47). Finally, the lid 311 is closed. Lock and return to step S2.

  According to the present embodiment, the security is improved as compared with the registration key 61, and the driver can be newly registered even without a special device outside the vehicle.

  In the embodiment described above, the lid 311 that can be opened and closed is used for the sensor unit of the authentication device 3 and the engine start switch 4 is installed. However, there is a possibility that spatial restrictions may occur in installation in the vehicle interior. There is sex. In that case, an authentication device 3 having a structure as shown in FIG. 14 may be used. Of the symbols in the drawing, the same ones used up to now show the same contents, so the explanation is omitted. The difference is that a cover 321 fixed to the main body is used instead of the movable lid 311 and that the engine start switch 4 is deleted. If the authentication method is finger vein authentication, for example, infrared light becomes disturbance light among the components of sunlight. Therefore, the material of the cover 321 may be a material that cuts at least infrared light. Desirably, any material that allows visible light to pass through, for example, allows light from the display 312 to pass through, so that the operator can confirm the state through the cover 321. Moreover, the effect with respect to the dust etc. which float in a vehicle interior is also expectable.

  The configuration of the authentication device 3 in this case can be realized with the contents as shown in FIG.

  The difference from FIG. 9 is that the input from the cover 311 and its drive mechanism 310, drive circuit 309, and engine start switch 4 is deleted. Since the same symbols have the same contents, detailed description is omitted.

  It is expected that a situation such as temporarily lending a car to another person will occur. That is, in a parking service at a hotel or the like, a car key is handed over to a staff member to request movement. In such a state, it is troublesome to perform driver registration work one by one, and there is also a problem in terms of security. In such a case, a function capable of temporarily releasing the security mode may be provided. FIG. 16 shows an embodiment of an apparatus for realizing such a function. The authentication device 3 basically has the same contents as in FIG. 9 except that a security mode setting switch 401 and a warning indicator light 402 are provided outside in FIG. The security mode setting switch 401 and the warning indicator light 402 are connected to the microcomputer 300, and reading of the switch state or display control is realized by the microcomputer 300. The security mode setting switch 401 is used for setting and canceling the security mode. The warning indicator light 402 is turned on when the security mode is released. The security mode has a design philosophy that can only be set and released after personal authentication is performed.

  Next, the operation flow of the microcomputer 300 will be described with reference to FIG. FIG. 17 is devised based on the flowchart shown in FIG. 10 and is obtained by adding the processes of steps S60, S61, and S62 to the process of FIG. The other processing of the same symbol is the same as the description in FIG. The security control process 1 (S60) after the initialization process (S1) controls the indicator (warning indicator lamp) 312 according to the current security mode state stored in the nonvolatile memory 306 of the authentication device 3. The details will be described later. In step S61, if the security mode is cancelled, it is determined that the personal authentication is skipped and the process proceeds to step S8 so that the engine start process can be performed directly. The security control process 2 (S62) determines the current security mode and the security mode setting switch 401, and sets and cancels the security mode. Since this process can be performed for the first time after an authorized registrant finishes authentication, a non-authenticated person will not accidentally set or cancel the security mode. Details of the security control process 2 (S62) will be described later.

  FIG. 18 explains the details of the security control process 1 (S60).

  First, in step S600, the current security mode state stored in the nonvolatile memory 306 is read, and the mode is determined. If the security mode is currently set, the process proceeds to step S601, and the warning indicator light 402 that warns that the security mode is released is turned off. That is, since the security mode is on, it indicates a state that requires authentication. If the security mode is currently cancelled, in step S602, the warning indicator lamp 402 is turned on to notify the driver that the security mode is cancelled and that the driver is in a dangerous state. After the processing of steps S601 and S602 is finished, the security control processing 1 is finished.

  FIG. 19 illustrates details of the security control process 2 (S62). First, in step S620, the current security mode state is determined. If the security mode is on, the process proceeds to step S621. When the mode is off, the process proceeds to step S624.

  In step S621, the state of the security mode setting switch 401 is determined, and if it is determined to be released, that is, if the switch 401 is off, information on the security mode off is stored in the nonvolatile memory 306 in step S622. Next, in step S623, the warning indicator light 402 is turned on, and the security control process 2 ends. In step S621, the state of the security mode setting switch 401 is determined. If it is a setting determination, the current state is not changed, and the security control processing 2 is terminated as it is.

  In step S624, the state of the security mode setting switch 401 is determined, and if it is determined to be released (ON), information on security mode ON is stored in the nonvolatile memory 306 in step S625. Next, in step S626, the warning indicator lamp 402 is turned off, and the security control process 2 ends. In step S624, the state of the security mode setting switch 401 is determined. If it is determined to be released (off), the current state is not changed, and the security control processing 2 is terminated as it is.

  According to this embodiment, a person other than the registrant can drive an automated person.

  As described above, according to the present invention, the biometric authentication device itself is protected from mischief or intentional damage, and biometric information is not easily registered by another person, thereby improving the security level of engine startup. In addition, biometric information can be easily registered by using a key for switching to a mode for registering biometric information and a key for starting the engine, or by registering outside the vehicle. Since the biometric information is a finger vein pattern, personal authentication is facilitated. Furthermore, it is possible to quickly start the engine in an emergency situation while maintaining a high security level.

The figure explaining the system configuration | structure for implement | achieving this invention. The figure explaining the structure of a front panel. The figure explaining the example of a state transition of the engine starting system by this invention. A device configuration that starts an engine by biometric authentication. The time chart of engine starting control. The flowchart of engine starting control. The apparatus block diagram which registers biometric information with an authentication apparatus in a vehicle. The apparatus block diagram which registers biometric information with an authentication apparatus outside a vehicle. The block diagram explaining the detailed structure of an authentication apparatus. The program operation | movement flowchart of the microcomputer of an authentication apparatus. The flowchart explaining the process of a characteristic parameter. The flowchart explaining the Example using an IC card. The flowchart explaining the other Example using an IC card. The block diagram explaining the other Example of an authentication apparatus. The circuit block diagram of the authentication apparatus by other Examples. The block diagram explaining the method of security release. The flowchart explaining the function of security cancellation | release. 18 is a flowchart for explaining details of part of the processing in FIG. 17. 18 is a flowchart for explaining details of another part of the processing in FIG.

Explanation of symbols

  2 ... Ignition switch, 3 ... Biometric authentication device, 4 ... Engine start switch, 5 ... IC card reader, 7 ... Finger, 9 ... IC card, 10 ... Front panel, 60 ... Key, 61 ... Registration key, 124 ... Engine control 300, microcomputer, 301 ... image sensor, 302 ... lens, 303 ... infrared light source, 304 ... infrared filter, 305 ... authentication start switch, 306 ... non-volatile memory, 311 ... lid, 312 ... indicator (warning display) 321 ... cover, 401 ... security mode setting switch, 402 ... warning indicator light, 800 ... transponder, 801 ... immobilizer, D100 ... initial state, D102 ... LOCK state, D104 ... OFF state, D106 ... ACC state, D108 ... ON state, D110 ... engine start state, D112 ... engine stop state D114 ... REGIST state, D116 ... registration completion state.

Claims (18)

  Ignition switch unit for controlling the state of the automobile, a key for changing the state of the ignition switch, a biometric information input unit for inputting biometric information, and biometric information registered in advance for authenticating the biometric information inputted A biometric information authentication unit having at least a biometric information storage unit that holds biometric information, and a biometric information registration unit that registers biometric information. The biometric information input unit is activated by the key, and the biometric information authentication unit An engine start system, wherein the input biometric information is authenticated by the registered biometric information, and the engine is started by the key.   In Claim 1, The said biometric information input part has a sensor part for inputting at least biometric information, a cover part which covers the said sensor part, and a trigger part which designates taking in of the said biometric information, An engine start system, wherein the biometric authentication is started, the biometric information is acquired, the engine is started by comparing the registered biometric information with the acquired biometric information.   3. The cover part of the biometric information input unit according to claim 1, wherein the cover part is unlocked when the ignition switch is on and the ignition switch is not on or personal authentication is performed. The engine starting system is characterized in that the cover portion is locked after being finished.   4. The engine start system according to claim 2, wherein the cover portion does not transmit at least infrared rays. 5.   5. The engine start system according to claim 2, wherein the cover portion of the biometric information input unit is a lid that covers at least a sensor unit of the biometric information input unit. 6.   The key according to any one of claims 1 to 5, wherein the key is a first key for starting an engine and a second key for switching to a mode for registering biometric information different from the first key. An engine starting system characterized by that.   The biological information registration unit according to claim 1, wherein the biological information registration unit includes a reading unit that reads from an information medium in which biological information that is not held in the biological information storage unit is held, and the biological information that is not registered from the reading unit. The engine starting system is characterized in that the biometric information storage unit is read and registered.   The engine start system according to claim 1, further comprising expiration date information indicating that the authentication result is valid for a predetermined period with respect to the authentication result authenticated by the personal authentication function.   2. The engine start system according to claim 1, wherein the expiration date information is invalidated when the ignition switch transitions to a state other than on.   9. The engine start system according to claim 8, wherein the engine is started without performing personal authentication within the period of the expiration date.   The engine starting system according to claim 1, wherein the biological information is a finger vein pattern.   7. The engine start according to claim 6, wherein the second key has a shape different from that of the first key, and the ignition switch unit is provided with a registration position for registering the biological information. system.   The said 2nd key which registers the said biometric information in Claim 6 is a key which incorporated the transponder which has the separate code set for every separate vehicle, Comprising: The said ignition key of the said ignition switch part is carried out by the said 2nd key When the state becomes a registered position, the personal authentication unit reads the individual code, compares it with an individual code stored in advance, and sets the biometric information authentication unit to a registration mode based on the verification. Engine start system.   7. The information stored in the card according to claim 6, wherein the second key for registering the biometric information is a card having an individual code set for each individual vehicle. An engine starting system, wherein a card reading unit for reading a card, a collation unit for collating with an individual code stored in advance, and setting the biometric information authentication unit in a registration mode based on a result of the collation unit.   8. The information medium according to claim 7, wherein the information medium is an IC card, and the IC card holds an individual code and biometric information provided for each individual vehicle, and the personal authentication unit reads the IC card. A collation unit that collates the individual code stored in the IC card with the individual code stored in the personal authentication unit in advance, and registers the biometric information in the biometric information storage device based on the collation An engine starting system characterized by:   2. The engine start system according to claim 1, wherein when engine stall is detected, the engine is restarted without authentication of the biometric information.   3. The engine start according to claim 1, wherein the biometric information registration unit includes a notification unit that notifies the registration of the biometric information when the biometric information registration is completed. system.   3. The engine start system according to claim 1, further comprising a release unit that cancels the function of biometric information authentication. 4.

Images