JP2008050885A - Vehicle authentication device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a vehicle authentication device which allows the user to use a vehicle by means of a spare portable machine while ensuring the security of the vehicle even if a portable machine is lost, stolen, or the like. <P>SOLUTION: In the vehicle authentication device, a key collating ECU 6 has a flag indicating that each identification information item registered beforehand is invalidated/validated. When an operating mode is set in a normal mode, even if the identification information item received by a receiver 61 coincides with one of the information identification items registered beforehand, provided that the flag corresponding to the identification information item is set, the key collating ECU 6 determines that the identification information item is not the one transmitted from the portable machine 62 or the spare portable machine. Then, the ECU 6 transmits an authentication failure signal via a bus 8 to a remote ECU 7. <P>COPYRIGHT: (C)2008,JPO&INPIT

Description

  The present invention relates to a vehicular authentication apparatus capable of using a vehicle by a spare portable device while maintaining the security of the vehicle even when the user is lost or stolen.

2. Description of the Related Art Conventionally, there is a known device that disables the use of a mechanical key or smart key of a vehicle when the key is lost or stolen. For example, in the apparatus of Patent Document 1, when a mechanical key of a vehicle is lost or stolen, a user issues a request signal for requesting that a door lock device, a trunk opening / closing device, and an engine mounted on the vehicle not function by the mechanical key. Send from. The data center receives the request signal described above via the base station, and transmits a command signal for rewriting the contents of the table of the remote ECU mounted on the vehicle to the vehicle via the base station. The remote ECU mounted on the vehicle rewrites the contents of the table by the command signal described above, and sets the door lock device, the trunk opening / closing device, and the engine so as not to function by the mechanical key. The same applies when the smart key is lost or stolen.
Japanese Patent Laid-Open No. 2005-97835

  By the way, as for a portable electronic key represented by a smart key (hereinafter referred to as a portable device), a spare portable device is usually prepared in consideration of a case where a user is lost or stolen. If the portable device is lost or stolen, the user uses the spare portable device, but when considering the security of the vehicle, the conventional device cannot be used as it is. In the conventional device, it is impossible to use various devices mounted on the vehicle for each type of key that has been lost or stolen. Therefore, if the conventional device is used as it is, if the mobile device is lost or stolen, It becomes impossible to use even portable devices.

  The present invention has been made in view of the above problems, and even when a user loses or steals a portable device, the vehicle can be used by a spare portable device while maintaining the security of the vehicle. An object of the present invention is to provide a vehicular authentication device.

  In order to achieve the above object, in the vehicular authentication apparatus according to claim 1, a registration unit in which identification information of a plurality of portable devices possessed by a user of the vehicle is registered, and the identification information is acquired from the portable devices. An authentication device for a vehicle comprising an acquisition means and an authentication means for permitting use of the vehicle when the identification information acquired by the acquisition means is registered in the registration means, the identification registered in the registration means Selects identification information to be invalidated from the information, outputs a signal indicating the selected identification information, and corresponds to a signal output by the selection means among a plurality of identification information registered in the registration means Invalidating means for invalidating the identification information to be performed, and the authenticating means prohibits the use of the vehicle when the identification information acquired by the acquiring means is invalidated by the invalidating means. And

  Thus, in the vehicular authentication device of the present invention, the selection means selects the identification information to be invalidated from the identification information registered in the registration means and outputs a signal, and the invalidation means is selected from the selection means. The identification information corresponding to the output signal is invalidated. And the authentication means does not permit the use of the vehicle when the identification information acquired by the acquisition means is invalidated by the invalidation means. As a result, even if a user loses or steals a mobile device, only the identification information of the mobile device that has been stolen or lost can be selected and invalidated by the selecting means out of the identification information registered in the registration means. At the same time, the spare portable device can continue to be used. As a result, even when the user loses or steals the mobile device, the vehicle can be used by the spare mobile device while maintaining the security of the vehicle.

  According to a second aspect of the present invention, the registration means has a flag set for each identification information when the registered identification information is invalidated, and the invalidation means is the identification selected by the selection means. It is desirable to invalidate the identification information by setting a flag corresponding to the identification information while the information is registered in the registration unit. Thereby, the identification information selected by the selection means can be temporarily invalidated while being registered in the registration means.

  As described in claim 3, it is desirable that the invalidating means invalidates the identification information by deleting the identification information selected by the selecting means from the registration means. The security of the vehicle can be further improved by deleting the identification information of the portable device that the user has lost or stolen from the registration means.

  According to a fourth aspect of the present invention, it is desirable that the selection means selects one of the identification information registered in the registration means and outputs a signal based on an instruction operation from the user. Thereby, the user can select the identification information set by the selection means.

  As described in claim 5, when the communication means for communicating with the portable communication device possessed by the user and the communication means receives the invalidation mode setting instruction transmitted from the portable communication device, Mode setting means for setting the operation mode to the invalidation mode, and the selection means obtains the identification information of one or a plurality of identification information when the operation mode is set to the invalidation mode by the mode setting means. Of the identification information registered in the registration means, it is desirable to select all the identification information other than the identification information or the plurality of identification information acquired by the acquisition means and output a signal. When a portable device is lost or stolen, the user does not have the portable device, so it is difficult for the user to directly invalidate the identification information. On the other hand, since the spare portable device is at hand of the user, it is easier to invalidate the identification information lost or stolen by using this as compared with the case described above. Therefore, the operation mode is set to the invalidation mode by the mode setting unit, and the identification information of the spare single or plural portable devices is acquired by the acquisition unit, and all the identification information other than the single or plural identification information acquired by the acquisition unit is acquired. Invalidate identification information. Thereby, the user can easily invalidate the identification information of the portable device that has been lost or stolen.

  As described in claim 6, among the identification information registered in the registration means, when the selection means selects all the identification information other than the single or plural identification information acquired by the acquisition means, and outputs a signal, It is desirable to provide first notification means for performing a notification operation. Thereby, the user can detect from the notification operation of the first notification means that the identification information of the lost or stolen portable device has been invalidated.

  According to a seventh aspect of the present invention, when the communication means receives the release mode setting instruction transmitted from the portable communication device, the mode setting means sets the operation mode of the vehicle authentication device to the release mode, and the mode setting means When the operation mode is set to the release mode by the acquisition unit, when the acquisition unit acquires the identification information or the plurality of identification information invalidated by the invalidation unit, the first invalidation of the identification information or the plurality of identification information is canceled. It is desirable to provide release means. Thus, even when one or more portable devices that are lost or stolen are discovered later, the user can use the vehicle again by the portable devices.

  As described in claim 8, it is desirable to provide a second notification means for performing a notification operation when the first cancellation means performs the invalidation cancellation operation. Thereby, the user can recognize that the vehicle can be used again by the discovered portable device from the notification operation performed by the second notification means.

  When the communication unit receives a release instruction for canceling any of the identification information invalidated by the invalidation unit, which is transmitted from the portable communication device, as described in claim 9, the release is performed. A second canceling unit that cancels the invalidation of the identification information indicated by the instruction may be provided. In this way, even if a lost or stolen portable device is discovered later, the user can use the vehicle again with the discovered portable device.

  As described in claim 10, when the second release means performs the invalidation release operation, first notification means is provided for notifying the user by sending notification information from the communication means to the portable communication device. Is desirable. Thereby, the user can grasp | ascertain reliably that the 2nd cancellation | release means performed invalidation cancellation | release operation | movement.

  The communication means for communicating with the portable communication device possessed by the user is provided as claimed in claim 11, and the selection means receives the invalidation instruction transmitted from the portable communication device, and the authentication means When the use of the vehicle is permitted last time, it is desirable to select the previous identification information that is the identification information acquired by the acquisition means and output a signal. Thereby, even when the mobile device used by the user last time is lost or stolen, the identification information of the mobile device can be immediately invalidated using the mobile communication device.

  The second notification means for sending notification information from the communication means to the portable communication device for notifying the user that the invalidation means has invalidated the identification information last time as described in claim 12. It is desirable to provide it. Thereby, the user can surely grasp that the invalidating means has invalidated the identification information acquired by the obtaining means when the authentication means has permitted the use of the vehicle last time.

  As described in claim 13, it is desirable to provide a warning means for performing a warning action when the acquisition means acquires the identification information invalidated by the invalidation means. As a result, when the vehicle is to be used with a portable device that has been lost or stolen, the warning means performs a warning operation, so that the security of the vehicle can be further improved.

  As described in claim 14, when the acquisition unit acquires invalidated identification information, it is desirable to provide a warning unit that transmits warning information from the communication unit to the portable communication device and warns the user. . As a result, the user can surely grasp that the vehicle is about to be used by a portable device that has been lost or stolen.

  According to a fifteenth aspect of the present invention, there is provided warning means for transmitting warning information from the communication means to the portable communication device when the acquisition means acquires the invalidated identification information. It is desirable to receive a warning and alert the user. If the specified period of time has passed with the identification information of a lost or stolen mobile device being invalidated, that is, if the specified period has passed without a lost or stolen mobile device being discovered, It is unlikely to be discovered later. Therefore, in such a case, the identification information of the portable device is deleted from the registration means. Thereby, the portable device cannot be used completely, and the security of the vehicle can be further enhanced.

(First embodiment)
FIG. 1 is a block diagram showing the overall configuration of the vehicular authentication apparatus according to the first embodiment of the present invention. The vehicular authentication device operates by being incorporated in an in-vehicle control device. As shown in FIG. 1, a door lock ECU 1, a trunk ECU 2, a sunroof ECU 3, a power window ECU 4, an engine ECU 5, a key verification ECU 6, and a remote ECU 7 are connected to each other via the bus 8. Further, the receiver 61 is connected to the key verification ECU 6 without going through the bus 8, and the communication ECU 71 is connected to the remote ECU 7 without going through the bus 8.

  The door lock ECU 1 is an ECU that controls locking / unlocking of each door of a vehicle (not shown). When receiving a door lock signal and a door designation signal from the remote ECU 7 via the bus 8, the door lock ECU 1 locks the door indicated by the door designation signal. To do. When the unlock signal and the door designation signal are received from the remote ECU 7 via the bus 8, the door indicated by the door designation signal is unlocked. The door designation signal may designate a single door or all doors.

  The trunk ECU 2 is an ECU that controls driving of a trunk opening motor (not shown) that opens a trunk of a vehicle (not shown). When a trunk opening signal is received from the remote ECU 7 via the bus 8, the trunk ECU 2 drives the trunk opening motor. Open the trunk.

  The sunroof ECU 3 is an ECU that controls the driving of a sunroof opening / closing motor (not shown) that opens and closes a sunroof of a vehicle (not shown). When the sunroof opening signal is received from the remote ECU 7 via the bus 8, the sunroof opening / closing motor is driven. Open the sunroof. When a sunroof close signal is received from the remote ECU 7 via the bus 8, the sunroof opening / closing motor is also driven to close the sunroof.

  The power window ECU 4 is an ECU that controls driving of a window opening / closing motor (not shown) that opens and closes a window of each door (not shown), and receives a window open signal and a door designation signal from the remote ECU 7 via the bus 8. Then, the window opening / closing motor corresponding to the door indicated by the door designation signal is driven to open the window of the door. When the window close signal and the door designation signal are received from the remote ECU 7 via the bus 8, the window opening / closing motor corresponding to the door indicated by the door designation signal is driven to close the window of the door. The door designation signal may designate a single door or all doors.

  The engine ECU 5 acquires the degree of depression of an accelerator pedal of a vehicle (not shown), adjusts the fuel injection amount from an injector (not shown), and adjusts the fuel ignition timing by an igniter (not shown) according to the degree of depression. The driving of a vehicle engine (not shown) is controlled. Further, the engine water temperature and the engine speed are measured, and the engine water temperature signal and the engine speed signal are transmitted to the remote ECU 7 via the bus 8.

  The receiver 61 is a small on-vehicle wireless receiver, and receives identification information transmitted from the portable device 62 possessed by the user or a spare portable device (not shown). The receiver 61 also receives a door lock / unlock instruction, a trunk opening instruction, a sunroof opening / closing instruction, and a window opening / closing instruction transmitted from the portable device 62 or a spare portable device. The receiver 61 functions as an acquisition unit.

  The key verification ECU 6 acquires the identification information received by the receiver 61 and performs an authentication operation.

  Specifically, identification information of the portable device 62 and identification information of a spare portable device are registered in the key verification ECU 6 in advance. Further, for each registered identification information, a flag indicating whether the identification information is invalidated is provided. When the receiver 61 receives the identification information when the operation mode is the normal mode, the key verification ECU 6 checks whether the identification information matches any of the previously registered identification information. If the identification information received by the receiver 61 matches any of the identification information registered in advance, the flag corresponding to the identification information is further examined. Then, when the identification information received by the receiver 61 matches any of the identification information registered in advance and the flag corresponding to the identification information is reset (that is, the identification information is validated) In this case, the key verification ECU 6 determines that the identification information received by the receiver 61 is identification information transmitted from the portable device 62 or the spare portable device, and sends an authentication success signal to the remote ECU 7 via the bus 8. Send to. After that, when the receiver 61 receives a door lock / unlock instruction, a trunk opening instruction, a sunroof opening / closing instruction, and a window opening / closing instruction, the identification information included in the instruction is examined, and if it matches the identification information used during the authentication operation. Transmits the instruction to the remote ECU 7 via the bus 8. On the other hand, if the identification information received by the receiver 61 does not match any of the pre-registered identification information, or matches the pre-registered identification information, the flag corresponding to the identification information is set. In the case (that is, when the identification information is invalidated), it is determined that the identification information is not the identification information transmitted from the portable device 62 or the spare portable device, and an authentication failure signal is sent to the bus 8. To the remote ECU 7. In the initial state, all the flags corresponding to the identification information registered in the key verification ECU 6 are reset (validated).

  In addition to the normal mode described above, the key verification ECU 6 has two operation modes, an invalidation mode and a release mode. Among the identification information registered in advance, the key verification ECU 6 invalidates / validates the identification information selected by the user. (Cancel invalidation).

  Specifically, when the key verification ECU 6 receives the invalidation mode setting signal from the remote ECU 7 via the bus 8, the key verification ECU 6 sets the operation mode to the invalidation mode. Thereafter, when the receiver 61 receives the identification information, the key verification ECU 6 checks whether the identification information matches any of the previously registered identification information. When the identification information received by the receiver 61 matches any of the identification information registered in advance, the key verification ECU 6 determines that all the identification information other than the identification information is selected by the user, and the identification information After setting each flag corresponding to all the identification information other than, the operation mode is set to the normal mode.

  Further, when the key verification ECU 6 receives the release mode setting signal from the remote ECU 7 via the bus 8, the key verification ECU 6 sets the operation mode to the release mode. Thereafter, when the receiver 61 receives the identification information, the key verification ECU 6 matches the identification information received by the receiver 61 with any of the identification information in which the corresponding flag is set among the previously registered identification information. Find out. When the identification information received by the receiver 61 matches any of the identification information registered in advance with a corresponding flag set, the key verification ECU 6 resets the flag corresponding to the identification information. After that, the operation mode is set to the normal mode.

  The key verification ECU 6 functions as a registration unit, an authentication unit, an invalidation unit, a first release unit, a selection unit, and a mode setting unit.

  The communication ECU 71 has a function of communicating with an information center 72 outside the vehicle via a public line, and an invalidation mode setting instruction and a cancellation mode setting instruction transmitted from a mobile phone 73 (portable communication device) possessed by the user. Is received via the information center 72. The warning information output from the remote ECU 7 is also transmitted to the mobile phone 73 via the information center 72. The communication ECU 71 functions as communication means.

  The remote ECU 7 performs various ECUs to lock / unlock the doors of the vehicle, open the trunk, open / close the sunroof, and open / close the windows of the doors of the vehicle according to instructions from an operation switch (not shown), a remote controller, and the key verification ECU 6. To direct.

  Specifically, when receiving an authentication success signal from the key verification ECU 6 via the bus 8, the remote ECU 7 determines that the use of the vehicle is permitted. Thereafter, when receiving a door lock / unlock instruction from the operation switch or the remote control or receiving a door lock / unlock instruction from the key verification ECU 6 via the bus 8, the remote ECU 7 receives the door lock signal, the door designation signal, A lock signal and a door designation signal are transmitted to the door lock ECU 1 via the bus 8. Similarly, when a trunk opening instruction is received from the operation switch or the remote controller or a trunk opening instruction is received from the key verification ECU 6 via the bus 8, the remote ECU 7 transmits a trunk opening signal to the trunk ECU 2 via the bus 8. Similarly, when a sunroof opening / closing instruction is received from an operation switch or a remote controller, or when a sunroof opening / closing instruction is received from the key verification ECU 6 via the bus 8, the remote ECU 7 sends a sunroof open signal or sunroof close signal via the bus 8 to the sunroof ECU3. Send to. Similarly, when a window opening / closing instruction is received from an operation switch or a remote controller, or when a window opening / closing instruction is received from the key verification ECU 6 via the bus 8, the remote ECU 7 receives a window opening signal and a door designation signal, a window closing signal and a door designation signal. Is transmitted to the power window ECU 4 via the bus 8. Further, the remote ECU 7 receives the engine water temperature signal and the engine speed signal transmitted from the engine ECU 5 via the bus 8, and also shows the engine water temperature indicated by the engine water temperature signal and the engine speed indicated by the engine speed signal. It is also possible to display on a display that does not. When the remote ECU 7 receives an authentication failure signal from the key verification ECU 6 via the bus 8, the remote ECU 7 determines that the vehicle is being used illegally, and refuses to use the vehicle. Signal transmission is not performed, headlights and taillights (not shown) are turned on, a horn (not shown) is blown (warning operation), and warning information is output to the communication ECU 71. The remote ECU 7 functions as warning means and warning means.

  Further, when the communication ECU 71 receives the invalidation mode setting instruction or the cancellation mode setting instruction, the remote ECU 7 transmits an invalidation mode setting signal or a cancellation mode setting signal to the key verification ECU 6 via the bus 8.

  FIG. 2 is a flowchart relating to processing for invalidating any of the identification information registered in advance in the key verification ECU 6 in the vehicular authentication device of the present embodiment. The process of this flowchart is started when the user inputs an invalidation mode setting instruction to the mobile phone 73.

  In step 201, the mobile phone 73 transmits an invalidation mode setting instruction to the information center 72. In step 202, the information center 72 receives the invalidation mode setting instruction transmitted from the mobile phone 73 in step 201 and transmits it to the in-vehicle control device.

  In step 203, the communication ECU 71 of the in-vehicle control device receives the invalidation mode setting instruction transmitted from the information center 72 in step 202. In step 204, when the communication ECU 71 receives the invalidation mode setting instruction in step 203, the remote ECU 7 transmits an invalidation mode setting signal to the key verification ECU 6 via the bus 8.

  In step 205, the key verification ECU 6 receives the invalidation mode setting signal transmitted from the remote ECU 7 in step 204 via the bus 8, and sets the operation mode to the invalidation mode.

  In step 206, the key verification ECU 6 determines whether or not the receiver 61 has received the identification information. When the receiver 61 receives the identification information, the process proceeds to step 207. If the receiver 61 has not yet received the identification information, the above determination is repeated.

  In step 207, the key verification ECU 6 determines whether or not the identification information received by the receiver 61 matches any of the identification information registered in advance. If it matches any of the identification information registered in advance, the process proceeds to step 208. If it does not match any of the pre-registered identification information, the process returns to step 206 and the above determination is repeated.

  In step 208, the key matching ECU 6 sets a flag corresponding to each of all identification information other than the identification information received by the receiver 61 among the identification information registered in advance. Thereby, the user can easily invalidate the identification information of the portable device that has been lost or stolen. In step 209, the key verification ECU 6 sets the operation mode to the normal mode, and ends the process.

  FIG. 3 is a flowchart relating to processing for validating invalidated identification information among identification information registered in advance in the key verification ECU 6 in the vehicular authentication apparatus of the present embodiment. The processing of this flowchart is started when the user inputs a release mode setting instruction to the mobile phone 73.

  In step 301, the mobile phone 73 transmits a release mode setting instruction to the information center 72. In step 302, the information center 72 receives the cancellation mode setting instruction transmitted from the mobile phone 73 in step 301, and transmits it to the in-vehicle control device.

  In step 303, the communication ECU 71 of the in-vehicle control device receives the release mode setting instruction transmitted from the information center 72 in step 302. In step 304, when the communication ECU 71 receives the release mode setting instruction in step 303, the remote ECU 7 transmits a release mode setting signal to the key verification ECU 6 via the bus 8.

  In step 305, the key verification ECU 6 receives the release mode setting signal transmitted from the remote ECU 7 in step 304 via the bus 8, and sets the operation mode to the release mode.

  In step 306, the key verification ECU 6 determines whether or not the receiver 61 has received the identification information. When the receiver 61 receives the identification information, the process proceeds to step 307. If the receiver 61 has not yet received the identification information, the above determination is repeated.

  In step 307, the key verification ECU 6 determines whether or not the identification information received by the receiver 61 matches any of the identification information for which the corresponding flag is set among the previously registered identification information. If it matches any one, the process proceeds to step 308. If they do not match, the process returns to step 306 to repeat the above determination.

  In step 308, the key verification ECU 6 resets a flag corresponding to the identification information received by the receiver 61. As a result, even if a lost or stolen portable device is discovered later, the user can use the vehicle again with the discovered portable device. In step 309, the key verification ECU 6 sets the operation mode to the normal mode and ends the process.

  FIG. 4 is a flowchart relating to processing for warning the user that the vehicle is being used illegally in the vehicle authentication device of the present embodiment. The processing of this flowchart starts when the receiver 61 receives the identification information when the operation mode of the key verification ECU 6 is set to the normal mode.

  In step 401, the key verification ECU 6 determines whether or not the identification information received by the receiver 61 matches any of the identification information registered in advance. If it matches any of the identification information registered in advance, the process proceeds to step 402. If it does not match any pre-registered identification information, the process is terminated.

  In step 402, the key verification ECU 6 determines whether or not a flag corresponding to the identification information received by the receiver 61 is set. If the flag is set, the process proceeds to step 403. If the flag is reset, it is determined that the authentication operation is successful, and the process is terminated. Thereafter, an authentication success signal is transmitted to the remote ECU 7 via the bus 8, and door lock / unlock, trunk opening, sunroof opening / closing, and window opening / closing are performed in accordance with an instruction operation of the portable device 62.

  In step 403, the key verification ECU 6 transmits an authentication failure signal to the remote ECU 7 via the bus 8. In step 404, the remote ECU 7 receives the authentication failure signal transmitted from the key verification ECU 6 in step 403 via the bus 8, turns on the headlight and taillight, makes the horn sound, and displays warning information. It outputs to communication ECU71.

  In step 405, the communication ECU 71 transmits the warning information output from the remote ECU 7 in step 404 to the information center 72. In step 406, the information center 72 receives the warning information transmitted from the in-vehicle control device in step 405 and transmits it to the mobile phone 73.

  In step 407, the mobile phone 73 receives the warning information transmitted from the information center 72 in step 406, and performs a warning operation for the user. As a result, the user can grasp that the vehicle is about to be used by a portable device that has been lost or stolen, and the security of the vehicle can be further improved.

  Thus, in the vehicular authentication device of this embodiment, the key verification ECU 6 has a flag indicating that the identification information is invalidated / validated for each piece of identification information registered in advance. When the operation mode is set to the invalidation mode and the receiver 61 receives the identification information, the key verification ECU 6 sets a flag corresponding to the identification information. In the case where the operation mode is set to the normal mode, even when the identification information received by the receiver 61 matches any of the identification information registered in advance, the flag corresponding to the identification information is set, The key verification ECU 6 determines that the identification information is not the identification information transmitted from the portable device 62 or the spare portable device, and transmits an authentication failure signal to the remote ECU 7 via the bus 8. As a result, even when the user loses or steals the mobile device, it is possible to invalidate only the identification information of the stolen / lost mobile device among the identification information registered in advance in the key verification ECU 6. The spare portable device can continue to be used. As a result, even when the user loses or steals the mobile device, the vehicle can be used by the spare mobile device while maintaining the security of the vehicle.

  In the present embodiment, due to the transmission of the invalidation mode setting instruction and the cancellation mode setting instruction from the mobile phone 73, the operation mode of the key verification ECU 6 is set to the invalidation mode and the cancellation mode. However, the present invention is not limited to this. For example, when the operation key of the mobile device 62 is pressed for a long time (because the operation signal is transmitted from the mobile device 62 for a predetermined time or more), the key The operation mode of the verification ECU 6 may be set to the invalidation mode and the release mode. Further, for example, the operation of the key collating ECU 6 is caused by the long press of the operation key of the portable device 62, the opening / closing of the vehicle door, and the locking / unlocking of the vehicle door performed in a predetermined procedure. The mode may be set to an invalidation mode and a release mode.

  Further, in this embodiment, when the operation mode is set to the invalidation mode, the key collation ECU 6 determines that if the identification information received by the receiver 61 matches any of the previously registered identification information, It is determined that all the identification information is selected by the user, and after setting the flags corresponding to all the identification information other than the identification information, the operation mode is set to the normal mode. However, the present invention is not limited to this. For example, it is assumed that the normal mode is set when a predetermined time elapses after the operation mode of the key verification ECU 6 is set to the invalidation mode. When the operation mode is set to the invalidation mode and the identification information or the identification information received by the receiver 61 matches any of the previously registered identification information, all the identification information other than the identification information It is also possible to set each flag corresponding to. As a result, even when there are a large number of spare portable devices, the vehicle can be used with all spare portable devices. At that time, a hazard (not shown) may be turned on or a buzzer (not shown) may be blown, and the user can recognize that the identification information of the lost or stolen portable device has been invalidated.

  In the present embodiment, the key verification ECU 6 sets the corresponding flag among the identification information registered in advance as the identification information received by the receiver 61 when the operation mode is set to the release mode. If it matches one of the identification information, the flag corresponding to the identification information is reset, and then the operation mode is set to the normal mode. However, the present invention is not limited to this. For example, it is assumed that the normal mode is set when a predetermined time elapses after the operation mode of the key verification ECU 6 is set to the release mode. While the operation mode is set to the release mode, the identification information or information received by the receiver 61 is one of the identification information in which the corresponding flag is set among the identification information registered in advance. If they match, the flag corresponding to the identification information may be reset. Thus, even when one or more portable devices that are lost or stolen are discovered later, the user can use the vehicle again by the portable devices. At that time, a hazard (not shown) may be turned on or a buzzer (not shown) may be sounded, and the user can recognize that the vehicle can be used again by the discovered portable device.

(Second Embodiment)
Next, a second embodiment of the present invention will be described. In the vehicular authentication device of the present embodiment, the key verification ECU 6 stores identification information used for the authentication operation performed when the vehicle was used last time, and was stored when the invalidation instruction signal was received. A flag corresponding to the identification information is set. When an activation instruction (cancellation instruction) signal including identification information to be activated is received, a flag corresponding to the identification information indicated by the signal is reset. The point mentioned above is the point of this embodiment.

  The communication ECU 71 receives, through the information center 72, an invalidation instruction transmitted from the mobile phone 73 and instructing to invalidate the identification information used for the authentication operation performed when the vehicle was last used. To do. Further, the communication ECU 71 sends an activation instruction for instructing to validate any of the identification information invalidated from the identification information registered in advance in the key verification ECU 6 transmitted from the mobile phone 73 to the information center 72. To receive via. The communication ECU 71 also transmits notification information output from the remote ECU 7 to the mobile phone 73 via the information center 72.

  When the communication ECU 71 receives the invalidation instruction or the validation instruction, the remote ECU 7 transmits a corresponding invalidation instruction signal or validation instruction signal to the key verification ECU 6 via the bus 8. When a notification signal is received from the key verification ECU 6 via the bus 8, notification information is output to the communication ECU 71. The remote ECU 7 also functions as second notification means.

  The key verification ECU 6 stores identification information used for the authentication operation performed when the vehicle was used last time. When the invalidation instruction signal is received from the remote ECU 7 via the bus 8, the key verification ECU 6 sets a flag corresponding to the stored identification information and transmits a notification signal to the remote ECU 7 via the bus 8. When receiving an activation instruction signal from the remote ECU 7 via the bus 8, the key verification ECU 6 resets a flag corresponding to the identification information indicated by the signal. This key verification ECU 6 also functions as a second release means.

  Other configurations are the same as in the case of the first embodiment described above, and a description thereof will be omitted. Hereinafter, operations characteristic of this embodiment will be described.

  FIG. 5: invalidates the identification information used for the authentication operation performed when the vehicle was used last time among the identification information registered in advance in the key verification ECU 6 in the vehicle authentication device of this embodiment. It is a flowchart regarding a process. The processing of this flowchart starts when the user inputs an invalidation instruction to the mobile phone 73.

  In step 501, the mobile phone 73 transmits an invalidation instruction to the information center. In step 502, the information center 72 receives the invalidation instruction transmitted from the mobile phone 73 in step 501, and transmits it to the in-vehicle control device.

  In step 503, the communication ECU 71 of the in-vehicle control device receives the invalidation instruction transmitted from the information center 72 in step 502. In step 504, when the communication ECU 71 receives an invalidation instruction in step 503, the remote ECU 7 transmits an invalidation instruction signal to the key verification ECU 6 via the bus 8.

  In step 505, when the key verification ECU 6 receives the invalidation instruction signal transmitted from the remote ECU 7 via the bus 8, it sets a flag corresponding to the stored identification information. In step 506, the key verification ECU 6 transmits a notification signal to the remote ECU 7 via the bus 8.

  In step 507, the remote ECU 7 receives the notification signal transmitted from the key verification ECU 6 in step 506 via the bus 8 and outputs notification information to the communication ECU 71. In step 508, the communication ECU 71 acquires the notification information output from the remote ECU 7 in step 507 and transmits it to the information center 72.

  In step 509, the information center 72 receives the notification information transmitted from the in-vehicle control device in step 508 and transmits it to the mobile phone 73. In step 510, the mobile phone 73 receives the notification information transmitted from the information center 72 in step 509, and performs a notification operation for the user. Thereby, the user can grasp | ascertain reliably that the identification information used for the authentication operation | movement performed when the vehicle was utilized last time was invalidated.

  FIG. 6 is a flowchart relating to processing for validating invalidated identification information in accordance with an activation instruction among identification information registered in advance in the key verification ECU 6 in the vehicle authentication device of the present embodiment. The processing of this flowchart starts when the user inputs an activation instruction to the mobile phone 73.

  In step 601, the mobile phone 73 transmits an activation instruction to the information center. In step 602, the information center 72 receives the activation instruction transmitted from the mobile phone 73 in step 601 and transmits it to the in-vehicle control device.

  In step 603, the communication ECU 71 of the in-vehicle control device receives the validation instruction transmitted from the information center 72 in step 602. In step 604, when the communication ECU 71 receives the activation instruction in step 603, the remote ECU 7 transmits an activation instruction signal to the key verification ECU 6 via the bus 8.

In step 605, when the key verification ECU 6 receives the activation instruction transmitted from the remote ECU 7 via the bus 8, the key verification ECU 6 resets the flag corresponding to the identification information indicated by the signal. In step 606, the key verification ECU 6 transmits a notification signal to the remote ECU 7 via the bus 8. In step 607, the remote ECU 7 receives the notification signal transmitted from the key verification ECU 6 in step 606 via the bus 8. Then, the notification information is output to the communication ECU 71. In step 608, the communication ECU 71 acquires the notification information output from the remote ECU 7 in step 607 and transmits it to the information center 72.

  In step 609, the information center 72 receives the notification information transmitted from the in-vehicle control device in step 608 and transmits it to the mobile phone 73. In step 610, the mobile phone 73 receives the notification information transmitted from the information center 72 in step 609, and performs a notification operation for the user. Thereby, the user can surely grasp that the identification information indicated by the activation instruction has been activated.

  Thus, in the vehicle authentication device of the present embodiment, the key verification ECU 6 stores the identification information used for the authentication operation performed when the vehicle was used last time. When the key verification ECU 6 receives the invalidation instruction signal, the key verification ECU 6 sets a flag corresponding to the stored identification information. Further, when the validation instruction signal is received, the flag corresponding to the identification information indicated by the signal is reset. Thereby, even when the mobile device used by the user last time is lost or stolen, the mobile phone 73 can be used to immediately invalidate the identification information of the mobile device. In addition, when a lost or stolen portable device is found, the user can use the vehicle again with the portable device.

  In this embodiment, when the key verification ECU 6 receives the activation instruction signal from the remote ECU 7 via the bus 8, the key verification ECU 6 resets the flag corresponding to the identification information indicated by the signal. Specifically, the content of the activation instruction is a unique number assigned to the identification information registered in the key verification ECU 6, and the key verification ECU 6 resets the flag of the identification information corresponding to the number. Is. Note that when resetting the flag, the notification information may be transmitted to the mobile phone 73 owned by the user. Thereby, the user can surely grasp that the invalidation of the identification information has been cancelled.

  In each embodiment described above, a flag corresponding to the identification information registered in the key verification ECU 6 is provided, and the identification information is invalidated by setting the flag. However, the present invention is not limited to this, and the identification information registered in the key verification ECU 6 may be deleted.

  In each embodiment described above, identification information to be invalidated is selected using the mobile device 62 or the mobile phone 73 possessed by the user. However, the present invention is not limited to this, and a signal indicating identification information selected based on an instruction operation from the user may be output using a personal computer or the like.

  In each of the above-described embodiments, the key verification ECU 6 is provided with a flag indicating that each identification information registered in advance is invalidated / validated. If the identification information received by the receiver 61 matches any of the identification information registered in advance, but the flag corresponding to the identification information is set, an authentication failure signal is sent via the bus 8. Sent to the remote ECU 7. The above-described method is effective in that when the portable device possessed by the user is lost or stolen, only the identification information of the portable device can be temporarily invalidated. However, the predetermined period elapses with the identification information of the lost / stolen mobile device being invalidated, i.e., the predetermined period elapses without finding the lost / stolen mobile device. In such a case, it is unlikely that the mobile device will be discovered later. Therefore, it is desirable that the key verification ECU 6 erases the identification information of the portable device when the predetermined period has passed with the identification information of the lost or stolen portable device being invalidated. Thereby, since the said portable apparatus becomes completely unusable, the security of a vehicle can further be improved.

It is a block diagram which shows the whole structure of the authentication apparatus for vehicles in the 1st Embodiment of this invention. In the vehicular authentication device according to the first embodiment, it is a flowchart relating to processing for invalidating any of identification information registered in advance in a key verification ECU. In the vehicular authentication device according to the first embodiment, it is a flowchart relating to processing for validating invalidated identification information among identification information registered in advance in a key verification ECU. It is a flowchart regarding the process which warns a user that the vehicle is going to be used illegally in the vehicle authentication device of the first embodiment. In the vehicular authentication device of the second embodiment, among the identification information registered in advance in the key verification ECU, the processing for invalidating the identification information used for the authentication operation performed when the vehicle was used last time. It is a flowchart. It is a flowchart regarding the process which validates the invalidated identification information by the validation instruction | indication among the identification information registered previously by key verification ECU in the vehicle authentication device of 2nd Embodiment.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Door lock ECU, 2 ... Trunk ECU, 3 ... Sunroof ECU, 4 ... Power window ECU, 5 ... Engine ECU, 6 ... Key collation ECU, 61 ... Receiver, 62 ... Portable equipment, 7 ... Remote ECU, 71 ... Communication ECU 72 ... Information center 73 ... Mobile phone 8 ... Bus

Claims (15)

A registration means in which identification information of a plurality of portable devices possessed by a vehicle user is registered;
Obtaining means for obtaining identification information from the portable device;
When the identification information acquired by the acquisition unit is registered in the registration unit, the vehicle authentication apparatus includes an authentication unit that permits use of the vehicle,
A selection unit that selects identification information to be invalidated from the identification information registered in the registration unit, and outputs a signal indicating the selected identification information;
Among the plurality of identification information registered in the registration means, provided invalidation means for invalidating the identification information corresponding to the signal output by the selection means,
The vehicle authentication apparatus according to claim 1, wherein when the identification information acquired by the acquisition unit is invalidated by the invalidation unit, use of the vehicle is not permitted. The registration means has a flag set for each identification information when the registered identification information is invalidated,
The invalidation means invalidates the identification information by setting a flag corresponding to the identification information while the identification information selected by the selection means is registered in the registration means. The vehicle authentication device according to claim 1. 2. The vehicular authentication apparatus according to claim 1, wherein the invalidation unit invalidates the identification information by deleting the identification information selected by the selection unit from the registration unit. The selection means selects one of the identification information registered in the registration means based on an instruction operation from the user and outputs a signal. The vehicle authentication device according to any one of the above. A communication means for communicating with a portable communication device possessed by the user;
When the communication means receives an invalidation mode setting instruction transmitted from the portable communication device, mode setting means for setting the operation mode of the vehicle authentication device to the invalidation mode is provided,
When the acquisition unit acquires one or a plurality of identification information when the operation mode is set to the invalidation mode by the mode setting unit, the selection unit acquires the identification information registered in the registration unit. 5. The vehicular authentication apparatus according to claim 1, wherein all the pieces of identification information other than the one or a plurality of pieces of identification information acquired by the acquisition unit are selected and a signal is output. . A first notification operation is performed when the selection means selects and outputs all the identification information other than the identification information or the plurality of identification information acquired by the acquisition means among the identification information registered in the registration means. 6. The vehicular authentication apparatus according to claim 5, further comprising a notification unit. The mode setting means, when the communication means receives a release mode setting instruction transmitted from the portable communication device, sets the operation mode of the vehicle authentication device to the release mode,
When the operation mode is set to the release mode by the mode setting unit, the acquisition unit acquires the identification information or the plurality of identification information invalidated by the invalidation unit, and the single or plural identification information 7. The vehicular authentication apparatus according to claim 5, further comprising first release means for canceling the invalidation. The vehicular authentication device according to claim 7, further comprising a second notification unit that performs a notification operation when the first cancellation unit performs the invalidation cancellation operation. When the communication unit receives a release instruction for instructing to release any of the identification information invalidated by the invalidation unit, transmitted from the portable communication device, the identification information indicated by the release instruction 6. The vehicular authentication apparatus according to claim 5, further comprising a second release unit that cancels invalidation. When the second release means performs the invalidation release operation, there is provided first notification means for sending notification information from the communication means to the portable communication device and notifying the user. The vehicular authentication device according to any one of claims 5 to 9. Providing a communication means for communicating with the portable communication device possessed by the user;
The selection means is identification information acquired by the acquisition means when the authentication means previously permitted use of the vehicle when the communication means receives an invalidation instruction transmitted from the portable communication device. 2. The vehicular authentication apparatus according to claim 1, wherein the identification information is selected last time and a signal is output. A second notification means is provided for notifying the user by sending notification information for notifying that the invalidation means invalidates the previous identification information from the communication means to the portable communication device. The vehicle authentication device according to claim 11. The vehicular authentication device according to any one of claims 1 to 12, further comprising a warning unit that performs a warning operation when the acquisition unit acquires the identification information invalidated by the invalidation unit. . 6. A warning means for sending warning information from the communication means to the portable communication device and warning the user when the acquisition means acquires invalidated identification information. The vehicle authentication device according to claim 13. The invalidation unit deletes the identification information from the registration unit when a predetermined period of time elapses with the identification information invalidated for the invalidated identification information. The vehicle authentication device according to any one of claims 1 to 14.

Images