JP2009275363A - Electronic key system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic key system which enables an electronic key to acquire information provided via an external communication network. <P>SOLUTION: This electronic key system 1 includes a portable machine 10 which transmits an ID code signal Sid depending on a request signal Srq, and an in-vehicle unit 20 which transmits the request signal Srq to the indoor and outdoor sides of a vehicle 2, which receives an ID code signal Sid and which controls corresponding in-vehicle equipment on condition that an ID code is authenticated as the result of ID code matching. The vehicle 2 is equipped with a communication device 25 for a network, which can be connected to the external communication network 4. The in-vehicle unit 20, which is communication-connected to the external communication network 4 via the communication device 25, acquires updated information from a server of 40a an information center 40 which provides the information after the updating of information to be updated, among pieces of information existing on the external communication network 4 and stored in the portable machine 10. The portable machine 10 acquires the updated information via the radio communication with the in-vehicle unit 20. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to an electronic key system provided in a vehicle.

  Conventionally, in automobiles, improvement in convenience as well as improvement in basic performance and safety has been demanded. Therefore, for the purpose of improving convenience, wireless communication is automatically performed between the portable device (electronic key) possessed by the user and the in-vehicle device, and the door lock is locked on the condition that the wireless communication is established. There has been proposed an electronic key system that automatically locks and unlocks and enables the engine to start (see, for example, Patent Document 1).

  Specifically, the in-vehicle device intermittently transmits a response request signal (request signal) including a radio signal around the vehicle and in the vehicle compartment. When a request signal is transmitted around the vehicle, the request signal is transmitted to a predetermined area around the vehicle (an area outside the vehicle). It is set not to be transmitted outside the vehicle. For this reason, when a user (driver) possessing an electronic key having a communication function enters the vehicle outside area or the indoor area, the electronic key receives the request signal and is set to itself in response to the request signal. A response signal (ID code signal) including the ID code is returned. The in-vehicle device receives this ID code signal and collates the ID code set in itself with the ID code included in the ID code signal. As a result, the in-vehicle device determines that communication with the electronic key has been established when the ID codes match, and if the ID code signal is in response to the request signal transmitted to the outside area, the door lock is set. The engine is automatically unlocked, and if the ID code signal is a response to the request signal transmitted to the indoor area, the engine can be started. That is, mutual communication is automatically performed between the in-vehicle device and the electronic key, and the door lock is automatically unlocked or the engine can be started on condition that the mutual communication is established. To do. This eliminates the need for complicated operations such as the use of a mechanical key for locking and unlocking the door and starting the engine, improving the operability of the vehicle. Further, since locking / unlocking and engine starting are controlled based on electrical verification, the security level is also improved.

In recent years, it has been considered to further improve safety by periodically updating an ID code set for the electronic key, software for controlling the electronic key, and the like. Furthermore, in the case of performing challenge response authentication using a common encryption key in the mutual communication between the in-vehicle device and the electronic key, the encryption key used here is periodically updated to ensure the same safety. It is considered to further improve the sex.
JP 2005-146647 A

  These updates may be performed using the electronic key communication function from the viewpoint of workability. However, the electronic key can perform wireless communication with the vehicle as described above. However, in order to obtain a new ID code, software for controlling the electronic key, and an encryption key, the electronic key can be connected to the outside of the vehicle. It did not have a function to communicate and could not obtain information from outside the vehicle. Therefore, there has been a demand for an electronic key system in which the electronic key can acquire information such as a new ID code and software for controlling the electronic key from outside the vehicle.

  The present invention has been made in view of such circumstances, and an object of the present invention is to provide an electronic key system in which an electronic key can acquire information provided through an external communication network.

Hereinafter, means for achieving the above-described object and its operation and effects will be described.
The invention according to claim 1 is mounted on the vehicle and an electronic key having a wireless communication function with the vehicle and transmitting a response signal including an ID code in response to a response request signal transmitted from the corresponding vehicle. An electronic key system comprising: an in-vehicle device that transmits the response request signal to the interior and exterior of the vehicle, receives the response signal, and controls a corresponding in-vehicle device on condition that the ID code verification matches. The vehicle includes a network communication device connectable to an external communication network, and the in-vehicle device is connected to the external communication network through the network communication device and exists on the external communication network. And obtaining update information from a server providing update information of information to be updated among the information stored in the electronic key, To get the update information through the wireless communication between the same vehicle device is set to its gist.

  According to this configuration, the in-vehicle device can be connected to an external communication network through a network communication device provided in the vehicle, and can acquire electronic key update information from a server existing on the external communication network. . The electronic key can acquire the update information by performing mutual communication with the in-vehicle device. For this reason, the electronic key can acquire update information from an external communication network using a network communication device provided in the vehicle. Thus, the electronic key can be virtually connected to an external communication network via the vehicle, and update information such as an ID code of the electronic key can be acquired and updated. In recent years, an increasing number of vehicles are equipped with network communication devices. In such a case, the existing network communication device can be used to perform the above-described operation, so that a new configuration is provided. There is no need.

  According to a second aspect of the present invention, in the electronic key system according to the first aspect, the in-vehicle device acquires update information of the in-vehicle device from the server through the network communication device, and acquires the update information from the server. The update information of the electronic key and the update information of the in-vehicle device acquired from the server are separately acquired from the server, and the content of the update information of the electronic key acquired from the server through the network communication device is confirmed. The main point is to transmit to the electronic key.

  In the electronic key system, when the information such as the ID code of the electronic key is updated, it is also necessary to update the information such as the ID code of the in-vehicle device corresponding thereto. At this time, it is conceivable to acquire the update information of the electronic key and the update information of the in-vehicle device together. Therefore, according to the above configuration, the update information of the electronic key and the update information of the in-vehicle device are acquired separately from the server, and the in-vehicle device does not confirm the content of the update information of the electronic key, and the update information of the electronic key is obtained. To the electronic key. For this reason, it is not necessary to divide the update information acquired by the in-vehicle device into the update information of the in-vehicle device and the update information of the electronic key, and the processing can be simplified. For example, when the update information of the electronic key is encrypted with an encryption key corresponding to the electronic key when transmitted from the server, only the electronic key can be decrypted and the in-vehicle device cannot be decrypted. In this way, since the contents of the update information of the electronic key cannot be confirmed except for the server and the electronic key, the security can be further improved.

  According to a third aspect of the present invention, in the electronic key system according to the first or second aspect, a public key used for a digital signature is stored in the electronic key and the in-vehicle device, and the digital signature is stored in the server. A secret key corresponding to the public key to be used is stored, and the gist is that the electronic key and the in-vehicle device confirm the authenticity of the update information acquired from the server by a digital signature.

  According to this configuration, the authenticity of the update information acquired from the server is confirmed by the digital signature. Specifically, a public key is stored in the electronic key and the in-vehicle device, and a secret key corresponding to the public key is stored in the server. The update information acquired from the server is given a hash value of the update information encrypted with the secret key. The electronic key and the in-vehicle device decrypt the hash value of the update information encrypted with the secret key with the public key, calculate the hash value of the update information acquired from the server, compare both hash values, and Check the authenticity of the update information obtained from. For this reason, the authenticity of the update information acquired from the server can be reliably confirmed, and falsification of the update information can be found.

  ADVANTAGE OF THE INVENTION According to this invention, the electronic key system which can acquire the information with which an electronic key is provided through an external communication network can be provided.

An embodiment of an electronic key system according to the present invention will be described below with reference to FIGS.
As shown in FIG. 1, the electronic key system 1 includes a portable device 10 as an electronic key possessed by a driver of the vehicle 2 and an in-vehicle device 20 disposed in the vehicle 2. Mutual communication is automatically performed between the portable device 10 and the in-vehicle device 20, and locking / unlocking of the door lock and starting of the engine as the in-vehicle device are controlled on the condition that the mutual communication is established. Further, the vehicle 2 is provided with a network communication device 25 that is connected to the control unit of the in-vehicle device 20 and wirelessly communicates with the information center 40 through the external communication network 4 to acquire information.

<Portable machine 10>
The portable device 10 has a wireless communication function and controls in-vehicle devices through mutual communication with the in-vehicle device 20. The portable device 10 includes an electronic key control unit 11 configured by a computer unit including a CPU, a ROM, a RAM, and the like, and LF reception capable of receiving an LF band signal electrically connected to the electronic key control unit 11. And a UHF transmitter 13 capable of transmitting UHF band signals.

  When the response request signal (request signal Srq) transmitted from the in-vehicle device 20 is received, the LF receiving unit 12 demodulates the request signal Srq into a pulse signal and outputs the demodulated demodulated signal to the electronic key control unit 11. . The electronic key control unit 11 is provided with a non-volatile memory 11a made of, for example, an EEPROM or the like, and a preset unique ID code is registered in the memory 11a. When the demodulated signal is input from the LF receiver 12, the electronic key controller 11 reads the received data and sends an ID code signal Sid as a response signal including the ID code registered in the memory 11 a to the UHF transmitter 13. Output.

  The portable device 10 includes a signal including an update request code for requesting preparation for updating data to be updated (in this embodiment, an ID code) transmitted from the vehicle 2 via the LF receiver 12 ( In this embodiment, when it receives the request signal Srq), it enters a standby state in which update information can be acquired. Then, the portable device 10 transmits the ID code signal Sid including the current ID code and the update standby code indicating that it is in the update standby state to the in-vehicle device 20 via the UHF transmission unit 13.

  When receiving the update data signal Snm including the update information via the LF receiver 12, the portable device 10 decodes and acquires the update information from the update data signal Snm, and updates the data to be updated to the update information. When the update is completed, the portable device 10 transmits an update completion signal Scm indicating that the update is completed to the in-vehicle device 20.

<In-vehicle device 20>
The in-vehicle device 20 is configured by a computer unit including a CPU, a ROM, a RAM, and the like, and is electrically connected to the in-vehicle control unit 21 that controls various in-vehicle devices including the door lock, and the in-vehicle control unit 21. 2, a vehicle exterior transmitter 22 that transmits a request signal Srq around the vehicle 2, an indoor transmitter 23 that transmits a request signal Srq into the vehicle 2, and an in-vehicle receiver that receives an ID code signal Sid transmitted from the portable device 10. 24.

  When the request signal Srq is input from the in-vehicle control unit 21, the vehicle exterior transmission unit 22 modulates the request signal Srq into a radio signal having a predetermined frequency (LF band), and the vehicle exterior transmission antenna 22 a with a preset intermittent cycle. To a predetermined area around the vehicle 2. When the request signal Srq is input from the in-vehicle control unit 21, the indoor transmission unit 23 modulates the request signal Srq into a radio signal of a predetermined frequency (LF band), and the indoor transmission antenna 23a with a preset intermittent period. Is transmitted to a predetermined area in the room of the vehicle 2. Here, the transmission area outside the vehicle and the indoor transmission area do not overlap.

  When receiving the radio signal (ID code signal Sid) transmitted from the portable device 10 via the receiving antenna 24a, the in-vehicle receiving unit 24 demodulates the radio signal into a pulse signal and outputs the pulse signal to the in-vehicle control unit 21.

  The in-vehicle control unit 21 includes a non-volatile memory 21 a made of, for example, an EEPROM or the like, and the same ID code as the ID code set in the corresponding portable device 10 is registered in the memory 21 a. The vehicle-mounted control unit 21 includes a door handle sensor 31 and a lock switch 32 provided on each outside door handle (not shown), a start switch 33 provided near the driver's seat in the vehicle 2, and a door. The lock device 34 and the engine control device 35 are electrically connected. The door lock device 34 is a device that automatically locks and unlocks the door lock. When the unlock signal is input from the in-vehicle control unit 21, the door lock is unlocked, and when the lock signal is input, the door lock device 34 is unlocked. And a locking / unlocking state signal indicating the locking / unlocking state of the door lock is output to the in-vehicle control unit 21. The engine control device 35 is connected to a cell motor (not shown). When a drive signal is input from the in-vehicle control unit 21, the engine control device 35 drives the cell motor to start an engine as a travel drive source and an engine state indicating the engine drive state The signal is output to the in-vehicle control unit 21. For this reason, the vehicle-mounted control part 21 can recognize the locking / unlocking state of the door lock and the driving state of the engine based on the locking / unlocking state signal and the engine state signal.

  The in-vehicle control unit 21 intermittently outputs request signals Srq at different timings to the outside transmission unit 22 and the indoor transmission unit 23. Then, when the in-vehicle receiving unit 24 receives the ID code signal Sid transmitted from the portable device 10 in response to the request signal Srq transmitted through the in-vehicle transmitting unit 22 and the indoor transmitting unit 23, The ID code included in the ID code signal Sid is compared with the ID code recorded in the memory 21a (ID code verification). At this time, the in-vehicle control unit 21 is based on whether the ID code signal Sid transmitted from the portable device 10 is a response to the request signal Srq transmitted from the outside transmission unit 22 or the indoor transmission unit 23. It is determined whether the portable device 10 exists in the vicinity of the vehicle 2 or in the vehicle 2.

  When the ID code verification is established in the vicinity of the vehicle 2, the in-vehicle control unit 21 determines that mutual communication with the portable device 10 is established, and enters the door unlocking permission state. In this state, the vehicle-mounted control unit 21 outputs an unlock signal to the door lock device 34 when a detection signal indicating that human contact with the outside door handle is detected is input from the door handle sensor 31. Then unlock the door lock. Further, when an operation signal is input from the lock switch 32 in such an unlocked state of the door lock, the in-vehicle controller 21 outputs a lock signal to the door lock device 34 to lock the door lock. Here, the unlocking signal is a command signal for unlocking the door lock, and the locking signal is a command signal for locking the door lock.

  When the ID code verification is established in the vehicle 2, the in-vehicle control unit 21 determines that mutual communication with the portable device 10 has been established, and enters the engine start permission state. The in-vehicle control unit 21 outputs a drive signal to the engine control device 35 and starts the engine on condition that an operation signal is input from the start switch 33. In other words, the vehicle-mounted control unit 21 does not output a drive signal to the engine control device 35 even if an operation signal is input from the start switch 33 unless the engine start permission state is entered.

  The in-vehicle control unit 21 counts the number of receptions of the ID code signal Sid transmitted from the portable device 10 through a counter (not shown), and updates the ID code when the count value reaches a predetermined value. Take control. That is, the in-vehicle control unit 21 generates an update request code and transmits an in-vehicle device update request signal Src to the information center 40 via the network communication device 25. Here, the in-vehicle device update request signal Src includes the identification code of the vehicle 2 (unique code set at the time of shipment), the update request code, and the current ID code. The update request code includes a code indicating that the update is performed and a code indicating how many times the update is performed. The in-vehicle control unit 21 includes a new ID code (in-vehicle device update data Dc) as update information transmitted by the information center 40 in response to the in-vehicle device update request signal Src via the network communication device 25. An update data signal Snc is received. Here, the in-vehicle device update data Dc included in the in-vehicle device update data signal Snc is encrypted with an encryption key corresponding to the in-vehicle device 20.

  When the vehicle-mounted control unit 21 receives the vehicle-mounted device update data signal Snc transmitted from the information center 40 in response to the vehicle-mounted device update request signal Src, the vehicle-mounted control unit 21 sends an update request code via the vehicle outside transmission unit 22 or the indoor transmission unit 23. The included signal (in this embodiment, the request signal Srq) is transmitted to the portable device 10. When the in-vehicle control unit 21 receives a signal (in this embodiment, an ID code signal Sid) that includes an update standby code indicating that the mobile device 10 can be updated from the portable device 10 via the in-vehicle receiving unit 24. A portable device update request signal Srm is transmitted to the information center 40 via the network communication device 25. Here, the update request signal Srm for the portable device includes the identification code, the update request code, and the current ID code of the in-vehicle device 20 as in the in-vehicle device. The in-vehicle control unit 21 includes a new ID code (update data Dm for portable device) as update information transmitted by the information center 40 in response to the update request signal Srm for portable device via the network communication device 25. The update data signal Snm for use is received. Here, the update data Dm for portable device included in the update data signal Snm for portable device is encrypted with an encryption key corresponding to the portable device 10. Therefore, the in-vehicle control unit 21 cannot confirm the content (update information) of the received portable device update data signal Snm. The in-vehicle control unit 21 transmits the update data signal Snm for portable device to the portable device 10 as it is through the outside transmission unit 22 or the indoor transmission unit 23. In the in-vehicle control unit 21, the portable device 10 acquires the update data Dm for the portable device via the in-vehicle reception unit 24, and the data to be updated (in this embodiment, the ID code) is the update data Dm for the portable device. When the update completion signal Scm indicating that it has been updated is received, the data to be updated (in this embodiment, the ID code) is updated to the update data Dc for in-vehicle devices that has already been decoded and acquired.

<Network communication device>
The network communication device 25 is connected to an information center 40 existing on an external communication network 4 via a relay station 41, and provides comfortable driving by acquiring road information, sightseeing information, etc., for example, G- It is an apparatus provided in the vehicle 2 in advance for use in BOOK (registered trademark) or the like. Here, in the case of G-BOOK (registered trademark), the network communication device 25 performs wireless communication by connecting to the wireless network of the mobile phone and connects to the external communication network 4. The relay station 41 is connected to the network communication device 25 by wireless communication, and functions as a base station for smoothly connecting the network communication device 25 and the information center 40.

<Information Center>
The information center 40 includes a server 40a that stores road information, sightseeing information, and the like. In the present embodiment, the server 40a stores an ID code for updating used for the portable device 10 and the in-vehicle device 20 of the electronic key system 1 in addition to road information and sightseeing information. The information center 40 is provided on the condition that the combination of the identification code, the update request code, and the current ID code of the vehicle 2 included in the received in-vehicle device update request signal Src and the portable device update request signal Srm matches. The in-vehicle device update data signal Snc including the update ID code and the portable device update data signal Snm are transmitted to the vehicle 2.

  Next, referring to the sequence chart of FIG. 2 as well, acquisition of update information from the mobile device 10 of the electronic key system 1 and the communication network 4 outside the in-vehicle device 20 and update of information based on the acquired update information. explain.

  As described above, the in-vehicle device 20 intermittently transmits the request signal Srq. The portable device 10 that has received the request signal Srq transmits an ID code signal Sid. The in-vehicle device 20 receives the ID code signal Sid from the portable device 10, performs ID code verification, and controls the door lock and the in-vehicle device of the engine when the verification is matched.

  In addition, as described above, it is desirable to periodically update information such as an ID code from the viewpoint of safety. And here, the timing which updates information, such as ID code, is determined based on the frequency | count of reception of ID code signal Sid transmitted from the portable device 10. FIG.

  That is, as shown in FIG. 2, when the in-vehicle device 20 receives the ID code signal Sid transmitted from the portable device 10 via the in-vehicle receiving unit 24, whether or not the number of receptions reaches a predetermined count. Is determined (step S1). In step S1, if the on-vehicle device 20 has not reached the predetermined count (step S1: NO), the on-vehicle device 20 repeats the process of step S1 until the predetermined count is reached. On the other hand, when the on-vehicle device 20 reaches the predetermined count (step S1: YES), the in-vehicle device 20 generates an update request code (step S2) so as to obtain an update ID code as update information. The in-vehicle device update request signal Src including the identification code of the vehicle 2 and the current ID code is transmitted to the information center 40 through the external communication network 4 (step S3).

  When the information center 40 receives the in-vehicle device update request signal Src transmitted from the in-vehicle device 20, the identification code, the update request code, and the current ID code of the vehicle 2 included in the in-vehicle device update request signal Src match. On the condition, the in-vehicle device update data signal Snc including the in-vehicle device update data Dc, which is a new ID code, is transmitted to the in-vehicle device 20 through the external communication network 4 (step S4). At this time, the in-vehicle device update data Dc is encrypted with an encryption key corresponding to the in-vehicle device 20.

  When the in-vehicle device update data signal Snc transmitted from the information center 40 is received, the in-vehicle device 20 decodes and acquires the in-vehicle device update data Dc included in the in-vehicle device update data signal Snc (step S5). The in-vehicle device 20 adds the update request code to the normal request signal Srq to acquire the update information for the portable device, and then updates the out-of-vehicle transmission unit 22 or the indoor transmission unit 23 to acquire the update information for the portable device. (Step S6).

  When the portable device 10 receives the request signal Srq including the update request code transmitted from the in-vehicle device 20 via the LF receiver 12, the portable device 10 enters a standby state in which update information can be acquired, and waits for an update to the normal ID code signal Sid. The code is added and transmitted via the UHF transmitter 13 (step S7).

  The in-vehicle device 20 performs ID code verification when receiving the ID code signal Sid transmitted from the portable device 10 via the in-vehicle receiving unit 24, and controls the door lock and the in-vehicle device of the engine when the ID code verification matches. (Step S8). Then, the in-vehicle device 20 sends the update request signal Srm for the portable device including the update request code, the identification code of the vehicle 2 and the current ID code based on the update standby code included in the ID code signal Sid to the external communication network 4. To the information center 40 (step S9).

  When the information center 40 receives the portable device update request signal Srm transmitted from the in-vehicle device 20, the update request code, the vehicle 2 identification code, and the current ID code included in the portable device update request signal Srm match. On the condition, the portable device update data signal Snm including the portable device update data Dm, which is a new ID code, is transmitted to the in-vehicle device 20 through the external communication network 4 (step S10). At this time, the update data Dm for the portable device is encrypted with the encryption key corresponding to the portable device 10.

  When the in-vehicle device 20 receives the update data signal Snm for the portable device including the update data Dm for the portable device via the in-vehicle receiving unit 24, the on-vehicle device 20 confirms the content of the update data Dm for the portable device because it is encrypted. However, the portable device update data signal Snm including the portable device update data Dm is transmitted to the portable device 10 through the outside transmission unit 22 or the indoor transmission unit 23 (step S11).

  When the portable device 10 receives the portable device update data signal Snm transmitted from the in-vehicle device 20 via the LF receiver 12, the portable device 10 decodes the portable device update data Dm included in the portable device update data signal Snm. Obtain (step S12). The portable device 10 updates the current ID code to a new ID code of the portable device update data Dm (step S13). The portable device 10 transmits an update completion signal Scm indicating that the update has been completed to the in-vehicle device 20 via the UHF transmission unit 13 (step S14).

  When the in-vehicle device 20 receives the update completion signal Scm transmitted from the portable device 10 via the in-vehicle receiver 24, the new ID code that is the in-vehicle device update data Dc that has already been acquired in step S5. (Step S15).

This completes the acquisition of update information from the portable device 10 of the electronic key system 1 and the communication network 4 outside the in-vehicle device 20 and the update of information based on the acquired update information.
As described above, according to the embodiment described above, the following effects can be obtained.

  (1) The in-vehicle device 20 is connected to the external communication network 4 through the network communication device 25 provided in the vehicle 2 and is updated for the portable device from the server 40a of the information center 40 existing on the external communication network 4. Data Dm can be acquired. The portable device 10 can acquire the update data Dm for portable device by performing mutual communication with the in-vehicle device 20. For this reason, it is not necessary to newly provide a device for communication connection to the external communication network 4 in the portable device 10, and the portable device update data Dm is acquired using the communication function with the normal vehicle 2. Can do. Therefore, the portable device 10 can virtually connect to the external communication network 4 via the vehicle 2 to acquire and update the portable device update data Dm that is the ID code of the portable device 10.

  (2) Portable device update data Dm and in-vehicle device update data Dc are separately acquired from the server 40a of the information center 40, and the in-vehicle device 20 is acquired from the information center 40 through the network communication device 25. The update information Dm for portable device is transmitted to the portable device 10 without confirming the content of the encrypted update information. For this reason, it is not necessary to divide the update data acquired by the in-vehicle device 20 into the in-vehicle device update data Dc and the portable device update data Dm, and the processing can be simplified. In addition, since the update data Dm for the portable device is encrypted with the encryption key corresponding to the portable device 10, the contents of the update data Dm for the portable device cannot be confirmed except for the information center 40 and the portable device 10. , Security can be further improved.

In addition, the said embodiment can be implemented with the following forms which changed this suitably.
In the above embodiment, the ID code update control is performed on the condition that the number of receptions of the ID code signal Sid has reached a predetermined value as the predetermined count. However, the number of times counted at regular intervals is not limited to the number of receptions. The ID code may be updated on condition that a predetermined value, that is, a predetermined time has elapsed.

  In the above embodiment, the network communication device 25 is a device used for G-BOOK (registered trademark), but a device that transmits / receives information to / from a beacon provided on a road from which road information can be acquired, etc. Other apparatuses may be used.

  In the above embodiment, the ID code is information to be updated. However, the information is not limited to the ID code, and the software for control of the portable device 10 and the common encryption key used for challenge response authentication may be updated. In such a case, software for controlling the portable device 10 or a common encryption key used for challenge response authentication may be stored as information to be updated in the server 40a of the information center 40.

  In the above configuration, the public key used for the digital signature is stored in the portable device 10 and the in-vehicle device 20, and the portable device 10 and the in-vehicle device 20 confirm the authenticity of the update information acquired from the information center 40 by the digital signature. You may make it do. Specifically, the public key used for the digital signature is stored in the portable device 10 and the in-vehicle device 20, and the update information acquired from the information center 40 includes the hash value of the update information encrypted with the secret key used for the digital signature. Is granted. The portable device 10 and the in-vehicle device 20 decrypt the update information hash value encrypted with the secret key with the public key, calculate the hash value of the update information acquired from the information center 40, and compare both hash values. The authenticity of the update information acquired from the information center 40 is confirmed. For this reason, the authenticity of the update information acquired from the information center 40 can be reliably confirmed, and falsification of the update information can be found.

  In the above embodiment, the portable device update data Dm and the in-vehicle device update data Dc acquired from the information center 40 are encrypted with the corresponding encryption keys, but may not be encrypted. In addition, when it is not encrypted, it is preferable that the in-vehicle device 20 does not confirm the content of the update data Dm for the portable device.

  In the above embodiment, the update information of the in-vehicle device 20 and the update information of the portable device 10 are separately acquired from the information center 40. However, the update information of the in-vehicle device 20 and the update information of the portable device 10 are May be acquired from the information center 40 together.

Next, the technical idea that can be grasped from the embodiment will be described together with the effects.
(A) In the electronic key system according to claim 1 or 2, after the information to be updated by the electronic key is updated to update information, the in-vehicle device is acquired from the server through the network communication device. An electronic key system, wherein information to be updated is updated to update information of a device.

  According to the configuration, since the update in the in-vehicle device is performed after the update in the electronic key, the update of the electronic key is confirmed, and the in-vehicle device updates in conjunction with the update, so that both updates can be surely performed. it can.

The block diagram which shows the structure of an electronic key system and an external communication network. The sequence chart which shows the information acquisition and update from a server.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Electronic key system, 2 ... Vehicle, 4 ... Communication network, 10 ... Portable machine, 11 ... Electronic key control part, 11a ... Memory, 12 ... LF reception part, 13 ... UHF transmission part, 20 ... In-vehicle apparatus, 21 ... Vehicle-mounted control unit, 21a ... memory, 22 ... out-vehicle transmission unit, 22a ... out-vehicle transmission antenna, 23 ... indoor transmission unit, 23a ... indoor transmission antenna, 24 ... in-vehicle reception unit, 24a ... reception antenna, 25 ... communication device for network, 31 ... Door handle sensor, 32 ... Lock switch, 33 ... Start switch, 34 ... Door lock device, 35 ... Engine control device, 40 ... Information center, 40a ... Server, 41 ... Relay station, Dc ... Update data for in-vehicle device, Dm ... Update data for portable device, Srq ... Request signal, Sid ... ID code signal, Src ... Update request signal for in-vehicle device, Srm ... For portable device New request signal, Snc ... update data signal for the in-vehicle device, Snm ... portable device for updating data signal, Scm ... update completion signal.

Claims (3)

An electronic key having a wireless communication function with a vehicle and transmitting a response signal including an ID code in response to a response request signal transmitted from the corresponding vehicle; And an on-vehicle device that controls the corresponding on-vehicle device on condition that the ID code verification is matched,
The vehicle includes a network communication device connectable to an external communication network,
The in-vehicle device is connected to the external communication network through the network communication device, exists on the external communication network, and updates information to be updated among the information stored in the electronic key. An electronic key system, wherein update information is acquired from a server to provide, and the electronic key acquires the update information through wireless communication with the in-vehicle device. The electronic key system according to claim 1.
The in-vehicle device acquires update information of the in-vehicle device from the server through the network communication device, and receives update information of the electronic key acquired from the server and update information of the in-vehicle device acquired from the server. The electronic key system, wherein the electronic key system is separately acquired from the server and transmitted to the electronic key without confirming the content of the update information of the electronic key acquired from the server through the network communication device. A public key used for a digital signature is stored in the electronic key and the in-vehicle device,
The server stores a secret key corresponding to a public key used for the digital signature,
The electronic key system according to claim 1, wherein the electronic key and the in-vehicle device confirm the authenticity of the update information acquired from the server by a digital signature.

Images