JP2009102943A - Vehicular electronic key system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a vehicular electronic key system capable of improving the convenience of a user while suppressing the decrease of security performance. <P>SOLUTION: The vehicular electronic key system (1) is provided with a plurality of electronic keys (10, 20), a detection means (40) capable of detecting each electronic key, and an actuation permission apparatus (50) for an on-vehicle device which permits the actuation of the on-vehicle device corresponding to actuation authorization imparted to each electronic key detected by the detection means. The vehicular electronic key system is enabled to impart a part or a whole part of the actuation authorization imparted to one of the plurality of the electronic keys to other electronic keys corresponding to the operation of the user. <P>COPYRIGHT: (C)2009,JPO&INPIT

Description

  The present invention relates to a vehicular electronic key system that permits the operation of an in-vehicle device in accordance with an operating authority assigned to each of a plurality of electronic keys.

  Conventionally, an electronic key system that collates a user ID transmitted from an electronic key carried by a user with a pre-registered user ID and permits the unlocking of the vehicle door and the engine start based on the collation result is smart. It is known by names such as entry systems and immobilizer systems.

  In such an electronic key system, a plurality of electronic keys are usually set. It is also assumed that a copy key that temporarily functions as an electronic key is set (see, for example, Patent Document 1).

Patent Document 1 describes that when a copy key is issued, an effective number of times, an expiration date, and the like are set, and unlocking of the vehicle door by the copy key is permitted within the limits.
JP 2007-113306 A

  However, in the system described in Patent Document 1, no consideration is given to restricting the operation of a predetermined in-vehicle device using a copy key. Therefore, for example, when setting a copy key for a limited use and lending it to another person, the security of the vehicle may be lowered.

  The present invention is intended to solve such problems, and a main object thereof is to provide a vehicular electronic key system capable of improving user convenience while suppressing a decrease in security performance. .

In order to achieve the above object, one embodiment of the present invention provides:
Multiple electronic keys,
Detection means capable of detecting each electronic key;
An on-vehicle device operation permission device that permits the operation of the on-vehicle device according to the operation authority given to the electronic key detected by the detection means, and an electronic key system for a vehicle comprising:
According to a user operation, a part or all of the operation authority given to one of the plurality of electronic keys can be given to another electronic key,
This is an electronic key system for a vehicle.

  According to this aspect of the present invention, it is possible to use an electronic key whose operating authority is restricted, for example, by lending it to another person. Therefore, it is possible to improve user convenience while suppressing a decrease in security performance.

In one embodiment of the present invention,
When there is a master key that is included in the plurality of electronic keys and has all operating authority, all operating authorities are granted to subkeys that are included in the plurality of electronic keys and have partial operating authority. In such a case, the operating authority relating to vehicle travel may be temporarily deleted from the master key in the vehicle.

  In this way, it is possible to prevent theft of the vehicle in a situation where the user temporarily gets off the vehicle with the master key in the vehicle and returns immediately.

In one embodiment of the present invention,
The plurality of electronic keys may hold information related to the operation authority of the plurality of electronic keys.

  By so doing, it is not always necessary to use the vehicle when granting the operating authority, so the communication load between the electronic key and the vehicle can be reduced.

In one embodiment of the present invention,
In response to a user operation, the electronic key can be divided into two or more electronic keys,
The on-vehicle device operation permission device may allow the operation of the on-vehicle device when all of the divided two or more electronic keys are detected.

  In this way, if any of the divided electronic keys is lost, the operation of the in-vehicle device is not permitted, so that the security can be improved.

In one embodiment of the present invention,
A facility communicable with the plurality of electronic keys and the in-vehicle device operation permission device, comprising a storage facility capable of storing information relating to the operation authority given to the plurality of electronic keys. Good.

  In this way, even if the electronic key is lost, it can be reset by communication with the storage facility. Further, if the procedure for temporarily disabling the electronic key is performed when the vehicle is stored, the vehicle cannot travel while the information is stored, so that the vehicle theft can be detected at an early stage.

  ADVANTAGE OF THE INVENTION According to this invention, the electronic key system for vehicles which can improve a user's convenience can be provided, suppressing the fall of security performance.

  Hereinafter, the best mode for carrying out the present invention will be described with reference to the accompanying drawings.

  A vehicle electronic key system according to an embodiment of the present invention will be described below. The vehicle electronic key system basically includes a plurality (any number) of electronic keys and an in-vehicle device operation permission device that permits the operation of the in-vehicle device according to the operation authority given to each electronic key. This is a component. In the following embodiments, the in-vehicle device operation permission device has a parent key having all the operation authority that can be operated, a child key having a partial operation authority, and a portable device as a device for giving the operation authority to each electronic key. Description will be made assuming that the telephone has a vehicle-side transmission / reception device that can detect each electronic key, and an authentication ECU (Electronic Control Unit) that functions as an in-vehicle device operation permission device.

[Constitution]
FIG. 1 is a diagram illustrating an example of the overall configuration of a vehicle electronic key system 1. The vehicle electronic key system 1 includes a parent key 10, a child key 20, a mobile phone 30, a vehicle-side transmission / reception device 40, a verification ECU 50, and a center 70.

  The parent key 10 includes, for example, a transmission unit 11 and a reception unit 12 that perform wired or wireless communication, and a memory 13 that stores a key ID and an access ID. Similarly, the child key 20 includes, for example, a transmission unit 21 and a reception unit 22 that perform wired or wireless communication, and a memory 23 that stores a key ID and an access ID. The parent key 10 and the child key 20 may have any shape. For example, it may be a dedicated device manufactured by an automobile manufacturer, or a general-purpose device such as a mobile phone, an IC card, or a PDA.

  The cellular phone 30 includes a transmission unit 31, a reception unit 32, a division processing unit 33, a copy processing unit 34, and a transfer processing unit as functional blocks realized by an internal computer executing a program stored in a ROM or the like. 35, an access restriction setting unit 36, an ID bank deposit / withdrawal processing unit 37, and a memory 38 for storing a key ID and an access ID. Note that any device having a communication function such as a PC or PDA may be used instead of the mobile phone.

  The vehicle-side transmission / reception device 40 is disposed, for example, in the vicinity of a vehicle door or a luggage door, in a vehicle compartment, etc., and transmits / receives to / from the parent key 10 and the child key 20 and the center 70 using the mobile phone network. Including devices for sending and receiving.

  The verification ECU 50 is, for example, a computer unit in which a ROM, a RAM, and the like are connected to each other via a bus with a CPU at the center. In addition, a storage medium such as an HDD (Hard Disc Drive) or a DVD (Digital Versatile Disk) or an I / O port, timer, counter etc. are provided. The ROM stores programs and data executed by the CPU. The verification ECU 50 includes a key ID verification unit 51, a home presence verification unit 52, an access ID verification unit 53, an access level as main functional blocks that function when the CPU executes a program stored in the ROM. The determination part 54 and the memory 55 which memorize | stored key ID are provided.

  Connected to the verification ECU 50 are a door lock device 60 that controls the door lock state of each seat, a trunk drive device 61, a steering lock drive device 62, an engine control device 63, a shift control device 64, an accelerator control device 65, and the like. . The verification ECU 50 can permit or disallow the operation of the in-vehicle device by transmitting a permission signal or a disapproval signal to these devices.

[basic action]
The parent key 10 and the child key 20 perform wireless communication with the vehicle-side transmitting / receiving device 40 to realize a known smart entry system. That is, when the user carries these keys and approaches the vehicle door, wireless communication is performed between the keys and the vehicle-side transmission / reception device 40. If the key ID matches the vehicle-side verification ID, the door lock Is automatically released, and the verification ECU 50 transmits a permission signal or a disapproval signal so that the engine starts when the start button is pressed without inserting a key into the cylinder.

  The parent key 10 has all operating authority of the in-vehicle device. That is, the user who possesses this can operate all the in-vehicle devices controlled by this system. On the other hand, the child key 20 has a part of operation authority of the in-vehicle device. That is, the user who possesses this cannot operate a part of in-vehicle equipment controlled by this system.

  In order to realize such a restriction, the parent key 10 and the child key 20 hold an access ID and a key ID. FIG. 2 is a diagram illustrating a detailed example of an access ID and a key ID.

  First, the key ID will be described. The configuration of the key ID is, for example, a type ID + vehicle ID + update ID, and the type is classified as a parent key, temporary child key, child key, temporary parent key, split key A, split key B, etc. Each is assigned an ID. If none of them apply, it becomes an invalid key. The vehicle ID is used to determine whether the ID stored in the key ID collating unit 51 on the vehicle side matches the key ID held by the electronic key carried by the owner. And set. The update ID is 1D attached to the vehicle ID, and is information that is updated when the parent key is transferred or pulled out from the ID bank (the ID bank will be described later).

  Next, the access ID will be described. The configuration of the access ID is composed of function ID ten restriction level information (restriction item ten restriction level). In the function ID, each function that the key has, that is, a lock / unlock function of the door lock, a function related to engine start, and a travel function that indicates whether or not the vehicle can be driven when the engine is started ID is given. The restriction level information includes an ID representing a restriction item corresponding to each function and a restriction level. As an example, the structure of the access ID will be described as the structure of 2 bytes information, and the upper 4 bits of the 1 byte will be described as a function ID, the lower 4 bits as a restriction item, and the 2 bytes as a restriction level. As the function ID, any one of data 1h, 2h, and 3h and functions of locking / unlocking, engine starting, and traveling are assigned. Restriction items for function IDs are assigned to the restriction items. The restriction level indicates what kind of restriction is actually imposed on the function and restriction items defined in the upper byte. For example, 1111h indicates that unlocking of the locking / unlocking function is permitted, and 1411h indicates that only the D seat is permitted to unlock. 1901h indicates that the effective number is 1, 2311h indicates that the engine is permitted to start, and 3188h indicates that travel is prohibited. In this example, the access ID is effective, for example, when the owner wants someone other than himself to unlock the door of the car, start the engine, and turn on the air conditioner. In this state, the person who owns the child key assigned with this access ID can get into the car and start the engine and turn on the air conditioner. I can't. For this reason, it is possible to give a key according to the purpose to those other than the owner while ensuring safety by not providing functions other than necessary. Here, prohibiting traveling is realized by the following method, for example.

  (1) Lock the position of the shift operation device (shift lever, etc.) to P (parking). Alternatively, control is performed so as not to change from P (parking) even if a shift operation is performed. (2) Secure the accelerator pedal so that it cannot be depressed. Alternatively, control is performed so that the engine speed does not increase even when the accelerator pedal is depressed (3) The steering wheel is locked. Alternatively, control is performed so that power is not transmitted to the tire even when the steering wheel is operated. (4) When an operation for driving the vehicle is detected, the engine is automatically turned off.

  In the lock / unlock function, the access ID can be designated up to which seat, or the number of valid times, expiration date, and date / time can be specified when unlocking / locking is permitted. In the engine function, it is possible to limit whether ACC = ON, IG = ON, or engine start. In the traveling function, it is possible to restrict whether or not traveling is permitted.

  With such a configuration, a desired operation authority is given to the child key 20.

[Copy]
Hereinafter, copying of an electronic key, which is one of the functions that can be realized by the vehicle electronic key system 1 of this embodiment, will be described. The copying of the electronic key is to write the key ID into hardware that can be an electronic key and to make it a child key 20. FIG. 3 is a diagram conceptually showing how copying is performed. Here, the hardware that can be an electronic key includes a transmission unit, a reception unit, and a memory. As described above, a dedicated device, a mobile phone, an IC card, a PDA, and the like are conceivable. Hereinafter, such hardware is referred to as “key token” and illustrated.

  FIG. 4 is a diagram showing a procedure for copying.

  S101: First, the access level permitted for the child key 20 on the screen of the mobile phone 30 is selected and determined in advance as follows by user operation.

  Example: Unlocking only for seat D, only usable for XX month and XX days, can be used twice, permitted to start the engine, and prohibited to run.

  Here, if all access levels are permitted, all the operating authority of the parent key 10 is copied. If the access level is partially limited, a part of the operating authority of the parent key 10 is copied.

  S102; Next, a read request is issued from the mobile phone 30 to the parent key 10 in response to a user operation.

  S103: The parent key 10 responds to the mobile phone 30 with the key ID that it has. For example, (11 1234 00h). Hereinafter, the processed key ID is shown in parentheses as necessary. Note that “h” at the end is an abbreviation for hex representing a hexadecimal number.

  S104: When the mobile phone 30 obtains the key ID from the parent key 10, type ID = 21h is added to the head of the vehicle ID + update ID, and a write request is made to the key token as a child key ID (21 1234 00h). .

  S105: When the writing is completed, the key token becomes the child key 20 newly assigned with the child key ID. The flow from S102 to S105 is preferably performed in a series of operations by one operation in consideration of convenience.

  It is not limited to copying the child key 20 based on the parent key 10, and copying of a child key (grandchild key) based on the child key 20 may be permitted.

[transfer]
Next, key transfer, which is one of the functions that can be realized by the vehicle electronic key system 1 of the present embodiment, will be described. The transfer of the electronic key refers to transferring the operating authority of one electronic key to another electronic key. FIG. 5 is a diagram conceptually illustrating a state where the transfer is performed. For example, in a situation where the main key 10 is inserted into the key cylinder of the vehicle and the engine is started and the vehicle is running and the vehicle temporarily gets off the vehicle and returns immediately, the parent key 10 remains attached and the key is released. Some people drive and leave the car without being able to lock the door, so the car is stolen in an instant. Such a situation can be solved by the present invention. When the parent key 10 is in the vehicle, the child key 20 can be temporarily taken out as the parent key 10 to leave the vehicle. In this case, the parent key 10 remaining in the vehicle becomes a child key 20 for which access restrictions have been temporarily set (running authority has been temporarily deleted). If a person remains in the vehicle or is likely to be stolen Even then, the vehicle cannot travel. This is realized by issuing a temporary ID from the parent key 10 to the child key 20.

  FIG. 6 is a diagram illustrating a procedure for performing transfer.

  S111: First, a setting for receiving a temporary ID from the parent key 10 is performed in advance in order to temporarily leave the screen on the mobile phone 30 by a user operation. At this time, an access restriction setting for the parent key 10 that temporarily becomes the child key 20 is set in advance (for example, travel prohibition).

  S112; Then, in response to a user operation, the mobile phone 30 issues a temporary ID read request to the parent key 10.

  S113; The parent key 10 responds to the mobile phone 30 with the temporary ID (12 1234 00h).

  S114; And, by issuing the temporary ID to the child key 20, the own key ID is rewritten to the temporary child key ID (11 1234 00h → 22 1234 00h).

  S115: After rewriting is completed, the parent key 10 temporarily becomes the child key 20, and thereafter communicates with the vehicle. Then, the vehicle implements restrictions on the vehicle side according to the access restrictions of the temporary child key (travel prohibition).

  S116: Next, the cellular phone 30 requests the child key 20 to write the temporary ID. Since the child key 20 becomes a temporary parent key when rewriting is completed (12 1234 00h), it is possible to lock the vehicle even when going out of the vehicle and to leave the vehicle while maintaining the security state.

  FIG. 7 is a diagram conceptually illustrating a state in which processing is performed when the user returns to the vehicle thereafter. FIG. 8 is a diagram showing a procedure for performing such processing.

  S121: When the user returns to the vehicle, communication is performed between the temporary parent key and the vehicle, ID verification is performed, the temporary parent key ID is confirmed, and access to the vehicle is permitted.

  Then, the vehicle door is opened, the vehicle is returned to the vehicle, and the temporary ID of the temporary parent key is returned from the mobile phone 30.

  S122: First, communication with the temporary parent key is performed, and a temporary ID return request is issued.

  S123: The temporary parent key responds with the temporary ID and rewrites its own key ID to the child key ID (12 1234 00h → 21 1234 00h).

  S124: Upon receiving the temporary ID (12 1234 00h), the mobile phone 30 issues a rewrite request to the temporary child key. When the temporary child key receives a temporary ID (temporary parent) rewriting request, it determines that the temporary child key has been returned from the temporary parent key because it is a temporary child key based on the temporary ID.

S125; Thereafter, the own ID is rewritten to the parent ID (22 1234 00h → 11
1234 00h), the process returns to the parent key. In this way, the parent key is transferred when leaving the vehicle temporarily. Here, an example in which communication is performed via the mobile phone 30 has been described. However, for example, an operation when leaving the vehicle may be performed on the in-vehicle monitor or on the operation panel of the parent key 10 or the child key 20. Also, when returning from a temporary departure, the example of returning from a mobile phone has been described. However, communication is automatically performed when the door is opened, and ID is automatically returned. May be.

[Use of ID bank]
If the parent key ID is transmitted from the parent key 10 to the key token, the key token memory is rewritten, and the parent key ID is deleted, the parent key 10 so far becomes a simple key token, and a new parent key. The key token given the ID becomes the new parent key 10. In order to move, for example, it goes through ID80 bank. FIG. 9 is a diagram conceptually showing a state of transfer via the ID bank.

  In order to realize such control, the center 70 that can communicate with the mobile phone 30 via the mobile phone network communicates with the ID bank 80. The center 70 is, for example, equipment for providing information communication services for automobile manufacturers. The ID bank 80 is a database facility, for example.

  The ID bank 80 includes a transmission unit 81, a reception unit 82, an update ID provision unit 83, a deposit / withdrawal management unit 84, and ID data 85 stored on a predetermined storage medium.

  The user can deposit his / her own key ID in the ID bank 80 using the mobile phone 30 or the like (a PC or PDA that can communicate with the center 70). By depositing, the electronic key can be held at hand. Thereby, it is possible to further improve the security. For example, if any abnormality (door opened, vehicle moved, etc.) occurs on the vehicle side while depositing the ID in the ID bank 80, it may be damaged such as theft. It is possible to report immediately. Also, lost key tokens that are no longer electronic keys after depositing the key ID. Even if stolen, the vehicle is not damaged because it does not have the authority to operate as an electronic key.

  A specific method for depositing into and withdrawal from the ID bank 80 will be described. FIG. 10 is a diagram showing a procedure for performing the depositing process.

  S131: First, regarding the key ID (11 1234 00h) received from the parent key 10 by the user operation, a request for depositing the key ID is issued from the mobile phone 30 to the ID bank 80 via the center 70.

  S132: When the ID bank 80 confirms storage of the ID, a response is returned to the mobile phone 30.

  S133: When it is confirmed that the storage is completed in the ID bank 80, the mobile phone 30 instructs the parent key 10 to delete the key ID.

  S134: By doing so, the parent key 10 becomes a key token having no role as an electronic key. When it is desired to keep the electronic key at hand, it can be selected not to delete the key ID.

  FIG. 11 is a diagram showing a procedure for performing the drawer process.

  S141: When a request for extracting the key ID is made from the mobile phone 30 to the ID bank 80, the ID bank 80 replies with a new update ID added to the key ID stored when the key ID is returned (11 1234). 01h).

  S142: Upon receiving the return of the key ID from the ID bank 80, the mobile phone 30 transmits a key ID write request to the target key token.

  S143: The key token becomes the parent key 10 by writing the key ID newly assigned with the update ID into the memory. At this time, if you write to the key token that you have used so far, you have deposited and withdrawn the parent key function, if you write to another new key token, you have transferred the parent key function to another key token .

  S144: When the ID bank 80 confirms that the new key ID assigned with the update ID has been returned to the mobile phone 30, this time, through the center 70, the ID bank 80 communicates with the vehicle-side transceiver 40 of the vehicle owned by the user. Do. Then, the new key ID (11 1234 01h) returned to the mobile phone 30 is transmitted to the vehicle side, and a rewrite request is made.

  S145: In the authentication ECU 40, by rewriting the key ID in response to the request from the ID bank 80, the user's parent key 10 and the vehicle ID match, and the vehicle can be accessed. If the key ID once deposited in the ID bank 80 is not deleted at the request of the owner, the ID with the new update ID is always drawn from the ID bank 80 while holding the parent key 10 at hand. For example, even if the parent key 10 is lost or stolen, it can be protected from vehicle theft by immediately issuing a new ID and changing the ID of the vehicle and the key, improving security. .

[Split]
Next, key ID division, which is one of the functions that can be realized by the vehicle electronic key system 1 of the present embodiment, will be described. It is possible to copy, transfer, and deposit key functions using the above-mentioned embodiment, but the security performance is further improved by dividing the key IDs handled here into separate key tokens. Can be made. The division refers to control for dividing the electronic key into two or more electronic keys and permitting the operation of the in-vehicle device when the verification ECU 50 detects all of the divided two or more electronic keys. FIG. 12 is a diagram conceptually showing how division is performed.

  For example, two types of key tokens are provided, and one of the division IDs is written into a card type key token to form a division key A and closed in a wallet or the like. The other split ID is written in the key token of the vehicle key type, and is put in the box as the split parent key B. In this way, when accessing the vehicle, access to the vehicle is permitted only when the two split IDs are available. Therefore, even if one or both of the split key keys are lost or stolen, vehicle theft is prevented. Can do. If the vehicle door does not open even with the split key B, it is possible to know, for example, that the user has forgotten his wallet before entering the vehicle.

  The division key is realized, for example, by writing the divided ID when writing the copy ID from the mobile phone 30 by the above-described copying method.

  FIG. 13 is a diagram illustrating a procedure for performing division.

  S151: First, a read request is made from the mobile phone 30 to the parent key 10 in response to a user operation. The parent key 10 responds with the key ID (11 1234 01h).

  S152: The mobile phone 30 performs a process of dividing the ID received from the parent key (11 1234 01h → 31 1234 01h and 32 1234 01h).

  S153: The cellular phone 30 requests the parent key 10 to write the ID of the division A (31 1234 01h).

  S154: After the writing is completed, the parent key 10 becomes the divided parent key A.

  S155; Further, the cellular phone 30 requests to write the ID of the division B in an arbitrary key token (32 1234 01h).

  S156: After the writing is completed, the key token becomes the split parent key B.

[Home determination]
Hereinafter, processing on the vehicle side including at-home determination, which is one of the functions that can be realized by the vehicle electronic key system 1 of the present embodiment, will be described. When the vehicle-side transmitting / receiving device 40 detects that the electronic key has approached, communication is automatically performed between the vehicle-side transmitting / receiving device 40 and the electronic key. FIG. 14 is a flowchart showing a flow of characteristic processing executed thereafter by cooperation of the functional blocks of the verification ECU 50.

  The verification ECU 50 first determines whether or not the user is at home by referring to the at-home information (S200). The home information is transmitted to the vehicle through the center 70 after the home system 90 determines whether the user is at home. Note that this step is omitted when home determination is not performed.

  Confirmation that the user is at home may depend on any method depending on the specific configuration of the home-side system 90. For example, the user may be at home because a button indicating that he / she is at home is pressed or a communication device such as the user's mobile phone 30 is detected by the communication device of the home system 90. I can confirm. For this purpose, the home-side system 90 has a transmission unit 91, a reception unit 92, an at-home determination unit 93 composed of an electronic circuit or a computer, and other hardware configurations.

  If the user is at home, access is denied (S202). In this case, even though the owner is at home, there is a possibility that the vehicle key is taken out and used without the owner's permission, that is, the electronic key may have been stolen. By such control, even when the legitimate electronic key is stolen, it is impossible to start the vehicle or the like when the user is at home, and the security can be improved.

  If the user is not at home, it is determined whether the type ID is a split key (S204).

  If the type ID is not a split key, the key ID transmitted from the electronic key is checked against the key ID stored in the vehicle (S206). If the key ID transmitted from the electronic key does not match the key ID stored in the vehicle, access is denied (S202).

  If the key ID transmitted from the electronic key matches the key ID stored in the vehicle, it is determined whether or not the electronic key is the parent key 10 (S208). If the electronic key is the parent key 10, all access to the vehicle is permitted (S210).

  On the other hand, when the electronic key is the child key 20, the contents of the access ID are confirmed, and it is determined which function is permitted up to which level (S212). Then, part of the operation of the in-vehicle device is permitted based on the access level determination result (S214).

  If it is determined in S204 that the type ID is a split key, it is determined whether or not both split key IDs match the key ID stored in the vehicle (S216). If the key IDs do not match, access is denied (S202). If the key IDs match, the processing from S208 is executed.

  Note that this flow is merely an example, and any order change or the like is allowed, for example, whether or not the user is at home after performing ID verification.

[Summary]
According to the vehicle electronic key system 1 of the present embodiment described above, it is possible to control copying, relocation, ID bank use, division, home determination, etc. Can improve convenience.

  The best mode for carrying out the present invention has been described above with reference to the embodiments. However, the present invention is not limited to these embodiments, and various modifications can be made without departing from the scope of the present invention. And substitutions can be added.

  For example, all of copying, relocation, ID bank use, division, and home determination need not be realizable, and only a part may be possible. Some hardware configurations may be omitted depending on the functional range.

  In addition, although each electronic key includes a memory and an access ID is stored, each electronic key may hold only the key ID and store the access ID on the vehicle side.

  The present invention can be used in the automobile manufacturing industry, the automobile parts manufacturing industry, and the like.

It is a figure which shows an example of the whole structure of the electronic key system 1 for vehicles. It is a figure which shows the detailed example of access ID and key ID. It is a figure which shows notionally how copying is performed. It is a figure which shows the procedure at the time of copying. It is a figure which shows notionally a mode that a transfer is performed. It is a figure which shows the procedure at the time of performing transfer. It is a figure which shows notionally a mode that a process when a user returns to a vehicle is performed. It is a figure which shows the procedure at the time of performing the process when a user returns to a vehicle. It is a figure which shows notionally a mode that the transfer via ID bank is performed. It is a figure which shows the procedure at the time of performing a deposit process. It is a figure which shows the procedure at the time of performing a drawer | drawing-out process. It is a figure which shows a mode that a division | segmentation is performed notionally. It is a figure which shows the procedure at the time of dividing | segmenting. It is a flowchart which shows the flow of the characteristic process performed by cooperation of each functional block of collation ECU50.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Electronic key system for vehicles 10 Parent key 11, 21, 31, 81, 91 Transmission part 12, 22, 32, 82, 92 Reception part 13, 23, 55 Memory 20 Child key 30 Cellular phone 33 Division | segmentation process part 34 Copy processing Unit 35 Transfer processing unit 36 Access restriction setting unit 37 ID bank deposit / withdrawal processing unit 40 Vehicle side transceiver 50 Verification ECU
51 Key ID verification unit 52 Home presence / absence determination unit 53 Access ID verification unit 54 Access level determination unit 60 Door lock device 70 Center 80 ID bank 90 House side system

Claims (5)

Multiple electronic keys,
Detection means capable of detecting each electronic key;
An on-vehicle device operation permission device that permits the operation of the on-vehicle device according to the operation authority given to the electronic key detected by the detection means, and an electronic key system for a vehicle comprising:
According to a user operation, a part or all of the operation authority given to one of the plurality of electronic keys can be given to another electronic key,
Electronic key system for vehicles. When there is a master key that is included in the plurality of electronic keys and has all operating authority, all operating authorities are granted to subkeys that are included in the plurality of electronic keys and have partial operating authority. In such a case, the operating authority related to vehicle travel is temporarily deleted from the master key in the vehicle.
The vehicle electronic key system according to claim 1. The plurality of electronic keys hold information related to the operation authority of the electronic keys.
The vehicle electronic key system according to claim 1 or 2. In response to a user operation, the electronic key can be divided into two or more electronic keys,
The vehicle-mounted device operation permission device permits the operation of the vehicle-mounted device when all of the divided two or more electronic keys are detected.
The electronic key system for vehicles according to any one of claims 1 to 3. It is a facility capable of communicating with the plurality of electronic keys and the in-vehicle device operation permission device, comprising a storage facility capable of storing information on the operation authority given to the plurality of electronic keys,
The electronic key system for vehicles according to any one of claims 1 to 4.

Images