JP2010279175A - Device for preventing unauthorized drive of motor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a device for preventing unauthorized drive of a motor, that prevents the motor from being unauthorizedly driven. <P>SOLUTION: The device 20 for preventing unauthorized drive of a motor includes a vehicle control device 50 for calculating a drive request to a motor 11, and a motor control device 30 that calculates a current to be supplied to the motor 11 on the basis of the drive request received from the vehicle control device 50 so as to control the current to be supplied to the motor 11 on the basis of the calculation result. When it is confirmed that the vehicle control device 50 is a regular vehicle control device during authentication for allowing the motor 11 to be driven, the motor control device 30 allows current supply to the motor 11. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a motor improper drive prevention device used in, for example, an electric vehicle.

  Conventionally, in an automobile driven by an engine, a technique for mounting a collation device such as an immobilizer has been proposed in order to prevent the engine from being driven by unauthorized access (see, for example, Patent Document 1).

  On the other hand, an electric vehicle driven by a motor has been proposed. The electric vehicle includes a vehicle control device that controls the operation of the electric vehicle and a motor control device that controls the operation of the motor. The vehicle control device receives a rotation request for the motor, such as an accelerator pedal operation amount, and calculates a torque and a rotation speed corresponding to the rotation request. Then, the vehicle control device transmits the calculated value to the motor control device. The motor control device calculates a current value corresponding to the required torque and the required rotation speed received from the vehicle control device, and controls the operation of the motor by flowing the calculated current value through the motor.

  Also in such an electric vehicle, a structure for preventing the motor from being driven by unauthorized access has been proposed. Specifically, the ignition key is provided with a unique signal, and a collation device for collating the unique signal of the key is provided on the vehicle body side. The vehicle control device transmits the required torque and the required rotation speed to the motor control device when the collation result in the collation device is correct.

JP 2006-142981 A

  The vehicle control device is disposed at a relatively easily accessible location, for example, below the passenger seat, so that it can be removed relatively easily when a repair is required.

  For this reason, even if it is a structure provided with a collation device in order to prevent improper driving of the motor and the vehicle control device is set so that the collation result of the collation device can be confirmed, the collation device and the vehicle control device are By replacing the non-regular verification device and vehicle control device with the electric vehicle, the ignition key corresponding to the non-normal verification device and the vehicle control device is used without using the normal ignition key for the electric vehicle. By using it, the motor can be driven. That is, the motor is illegally driven.

  Therefore, an object of the present invention is to provide a motor illegal drive prevention device that can prevent the motor from being illegally driven.

  The motor improper drive prevention device of the present invention is a motor improper drive prevention device provided in a vehicle that can be driven by a motor, the vehicle control device calculating a drive request to the motor, and the vehicle control device receiving from the vehicle control device A motor control device that calculates a current to be supplied to the motor based on the drive request and controls the current supplied to the motor based on the calculation result; The motor control device can supply current to the motor when it is confirmed that the vehicle control device is a legitimate vehicle control device at the time of authentication for enabling the motor to be driven.

  According to a second aspect of the present invention, in the motor unauthorized driving prevention device according to the first aspect, the vehicle control device does not receive an unauthorized driving prevention device presence confirmation signal from the motor control device during the authentication. In this case, the drive request is not transmitted to the motor control device. The motor control device collates the unique signal included in the drive request received from the vehicle control device, and can supply current to the motor when the collation result is correct.

  In the present invention, the motor control device checks whether the vehicle control device is a regular vehicle control device, and enables the motor to be driven when the vehicle control device is a regular vehicle control device. For this reason, when the vehicle control device is replaced with an unauthorized vehicle control device, the motor cannot be driven, so that the motor is prevented from being illegally driven.

The perspective view which shows an electric vehicle provided with a part of motor unauthorized drive prevention apparatus of one Embodiment of this invention. Schematic which shows the structure of the electric vehicle shown by FIG. The flowchart which shows operation | movement of the motor control apparatus at the time of the authentication of the drive of the motor shown by FIG. The flowchart which shows operation | movement of the specific signal collation apparatus 70 at the time of the authentication of the drive of the motor shown by FIG. The flowchart which shows operation | movement of the vehicle control apparatus at the time of the authentication of the drive of the motor shown by FIG.

  A motor improper drive prevention apparatus according to an embodiment of the present invention will be described with reference to FIGS. FIG. 1 is a perspective view showing an electric vehicle 10 including a part of the motor unauthorized driving prevention device 20 of the present embodiment. As shown in FIG. 1, the electric vehicle 10 includes a motor 11, a motor control device 30, a battery device 40, a vehicle control device 50, and the like. The electric vehicle 10 is an example of a vehicle referred to in the present invention.

  The motor 11 is disposed, for example, at the rear part of the vehicle body 12. The motor 11 is disposed, for example, below the rear seat 13 and is disposed in a place that is difficult to access from inside or outside the vehicle. FIG. 2 is a schematic diagram showing the configuration of the electric vehicle 10. As shown in FIG. 2, the motor 11 is connected to the inverter 60 via three-phase wires 61 (three wires). In order to shorten the length of the three-phase wire 61, the inverter 60 is disposed in the vicinity of the motor 11.

  The motor control device 30 is disposed in the vicinity of the motor 11, and controls the operation of the inverter 60 to control the current supplied to the motor 11. Specifically, a current value corresponding to a drive request to the motor 11 received from the vehicle control device 50 described later (a motor drive command described later, request torque and requested rotation speed) is calculated, and the calculated value is calculated. The inverter 60 is controlled so as to supply the current value to the motor 11.

  Here, the relative positional relationship among the motor 11, the inverter 60, and the motor control device 30 will be specifically described. The motor 11 is arranged in consideration for effectively using the interior space of the vehicle. For this reason, as described above, it is disposed in a place where it is difficult to access from inside and outside the vehicle. The inverter 60 is connected to the motor 11 via the three-phase line 61. The three-phase wire 61 is relatively thick in order to pass a large current. Moreover, in order to reduce the loss of current due to the length of the three-phase wire 61, the three-phase wire 61 is required to be short. Therefore, the inverter 60 is disposed in the vicinity of the motor 11. The motor control device 30 and the inverter 60 are connected via a signal line. A high frequency is generated from this signal line. For this reason, the signal line connecting the motor control device 30 and the inverter 60 is required to be short. Therefore, in the present embodiment, the motor control device 30 and the inverter 60 are accommodated in the same housing and are disposed at positions close to each other.

  For the above reasons, the motor control device 30 is disposed in the vicinity of the motor 11 and is therefore disposed at a position that is difficult to access from inside and outside the vehicle.

  As shown in FIG. 1, the battery device 40 is disposed below a floor panel (not shown), for example, at approximately the center in the front-rear direction of the vehicle body 12.

  The vehicle control device 50 controls the operation of the electric vehicle 10. As an example of the operation of the vehicle control device 50, the torque corresponding to the operation amount (depression amount) of the accelerator pedal 100 and the required rotational speed are calculated, and the calculated required torque information and the required rotational speed information are used as the motor control device. 30. The calculated required torque information and required rotational speed information referred to here are examples of the drive request referred to in the present invention. The vehicle control device 50 is disposed, for example, below the passenger seat 14 and is disposed at a location that is relatively easily accessible.

  As shown in FIG. 2, in the electric vehicle 10, in order to allow the driver to drive the motor 11 to start the electric vehicle 10, an ignition key 15 is inserted into a cylinder (not shown) and the ignition key 15 is pressed. It rotates to the start position of the motor 11. The ignition key 15 includes a unique signal transmitter 16 that transmits a unique signal unique to the electric vehicle 10. The vehicle body 12 of the electric vehicle 10 is provided with a unique signal matching device 70 for matching unique signals.

  FIG. 2 schematically shows the ignition key 15, the unique signal matching device 70, the vehicle control device 50, the motor control device 30, and the motor 11. The ignition key 15, the unique signal verification device 70, the vehicle control device 50, and the motor control device 30 constitute the motor unauthorized drive prevention device 20 referred to in the present invention. Of the motor improper drive prevention device 20, a specific signal matching device 70, a vehicle control device 50, and a motor control device 30 are provided on the vehicle body 12.

  When the ignition key 15 is inserted into a cylinder (not shown) and turned to the start position to start the electric vehicle 10, the motor control device 30 communicates with the vehicle control device 50. Authenticates whether or not the electric vehicle 10 is a legitimate vehicle control device. Note that inserting the ignition key 15 into the cylinder and turning the ignition key to the start position is an example of authentication in the present invention.

  Next, the operation of the motor improper drive prevention device 20 will be described. FIG. 3 is a flowchart showing the operation of the motor control device 30 when the ignition key 15 is inserted into the cylinder and turned to the start position (at the time of authentication). FIG. 4 is a flowchart showing the operation of the unique signal verification device 70 when the ignition key 15 is inserted into the cylinder and turned to the start position (at the time of authentication). FIG. 5 is a flowchart showing the operation of the vehicle control device 50 when the ignition key 15 is inserted into the cylinder and turned to the start position (at the time of authentication).

  As shown in FIG. 3, when the ignition key 15 is rotated to the start position in step ST11 (when the key is turned on), the motor control device 30 proceeds from step ST11 to step ST12 to the vehicle control device 50. An unauthorized drive prevention device presence / absence confirmation signal is transmitted. The unauthorized drive prevention device presence / absence confirmation signal is a signal indicating whether or not a motor unauthorized drive prevention device is provided. In the case where the motor improper driving prevention device is provided, the signal indicates that the improper driving prevention device is provided, and in the case where the motor improper driving prevention device is not provided, the signal indicates that the improper driving prevention device is not provided.

  In this embodiment, since the motor improper driving prevention device 20 is provided, the motor control device 30 transmits a signal to the vehicle control device 50 that the motor improper driving prevention device 20 is provided as a fraudulent driving prevention device presence / absence confirmation signal. To do. After transmitting the improper drive prevention device presence / absence signal, the process proceeds to step ST13 and waits for a motor driving force command from the vehicle control device 50.

  As shown in FIG. 4, when the ignition key 15 is inserted into the cylinder and turned to the start position (when the key is turned on), the unique signal verification device 70 proceeds from step ST21 to step ST22, where the ignition key 15 A request signal for requesting transmission of the unique signal is transmitted to the 15 unique signal transmitters 16.

  After transmitting the request signal, the process proceeds to step ST23. In step ST23, reception of the unique signal from the ignition key 15 is awaited. When the unique signal transmitter 16 of the ignition key 15 receives the unique signal transmission request signal from the unique signal verification device 70, the unique signal transmitter 16 transmits the unique signal.

  In step ST23, if the unique signal from the ignition key 15 is not received within a preset time, the reception time is over, the process proceeds to step ST28, and key authentication (an example of authentication in the present invention) is stopped. That is, the motor 11 is not driven. In this state, the driver is notified of an error report. As an example, a lamp for notifying an error may be provided on an instrument panel (not shown), and the lamp may be turned on.

  When receiving the unique signal, the unique signal matching device 70 proceeds to step ST24. In step ST24, the unique signal collation device 70 collates the received unique signal. Specifically, the unique signal recorded in advance in the unique signal matching device 70 is matched with the unique signal received from the unique signal transmitter 16.

  If the collation result is correct, the process proceeds to step ST25. In step ST25, the unique signal verification device 70 generates an encryption signal to be transmitted to the vehicle control device 50. The cipher is a signal indicating that the unique signal verification device 70 is a proper unique signal verification device for the electric vehicle 10.

  If it is determined in step ST24 that the unique signal is not correct, the authentication of the ignition key 15 is stopped. That the unique signal is not correct indicates that the ignition key 15 is not a proper key for the electric vehicle 10. For this reason, in order to prevent the motor 11 from being driven by the non-regular ignition key, the key authentication is stopped and the motor 11 is not driven.

  As shown in FIG. 5, when the ignition key 15 is inserted into the cylinder and rotated to the start position (when the key is turned on), the vehicle control device 50 proceeds from step ST31 to step ST32, and the motor control device 30 waits for a motor unauthorized drive prevention device presence / absence confirmation signal.

  Next, when the vehicle control device 50 receives the motor unauthorized drive prevention device presence / absence confirmation signal from the motor control device 30, the vehicle control device 50 proceeds from step ST33 to step ST34. In step ST <b> 34, the vehicle control device 50 confirms whether or not the electric vehicle 10 includes the motor unauthorized drive prevention device 20. In this embodiment, since the motor improper driving prevention device 20 is provided, the received motor improper driving prevention device presence / absence confirmation signal is a signal that the motor improper driving prevention device is provided.

  If the vehicle control device 50 is a regular control device (if it is a vehicle control device for the electric vehicle 10), information that the motor improper drive prevention device 20 is provided is recorded. For this reason, it progresses to step ST35. In step ST35, the vehicle control device 50 transmits a request signal requesting the unique signal verification device 70 to transmit an encryption signal. Then, the process proceeds to step ST36. In step ST <b> 36, the vehicle control device 50 waits for reception of an encryption signal from the unique signal verification device 70.

  In the case where the electric vehicle 10 is configured not to include the motor improper drive prevention device 20 in advance (such as when the motor control device 30 and the vehicle control device 50 are provided and the unique signal matching device 70 is not provided), The motor unauthorized drive prevention device presence / absence confirmation signal transmitted by the motor control device 30 in step ST12 is a signal that the unauthorized drive prevention device is not provided. As described above, the motor control device 30 is set to transmit a signal indicating that the motor control device 30 is not provided when the motor control device 30 is not provided.

  The vehicle control device 50 stores information that the motor unauthorized drive prevention device 20 is not provided. For this reason, when the motor improper drive prevention apparatus 20 is not provided, it progresses to step ST41. In step ST41, the vehicle control device 50 starts a motor driving force command to the motor control device 30.

  As described above, the motor driving force command referred to here calculates a torque request and a rotation request for the motor 11 such as an accelerator pedal depression operation (an example of calculating a drive request referred to in the present invention), and the calculation. The value is transmitted to the motor control device 30. The motor driving force command signal that the vehicle control device 50 first transmits to the motor control device 30 includes a unique signal that is unique to the electric vehicle 10.

  As described above, the vehicle control device 50 can receive the unauthorized drive prevention device presence / absence confirmation signal from the motor control device even if it does not include the unauthorized drive prevention device, and the motor drive command signal to be transmitted first. It is set to include a unique signal.

  In step ST33, if the improper drive prevention device presence / absence confirmation signal from the motor control device 30 is not received within a preset time, the reception time is over, and the process proceeds from step ST39 to step ST40, where key authentication (in the present invention) An example of authentication) is canceled. That is, the drive of the motor 11 is prohibited.

  Similarly, in step ST36, if the encrypted signal is not received from the unique signal verification device 70 within a predetermined time set in advance, the reception time is over, and the process proceeds from step ST42 to step ST43, where the driving of the motor 11 is prohibited. The

  As illustrated in FIG. 4, when the generation of the encrypted signal is completed in step ST25, the unique signal verification device 70 proceeds to step ST26. In step ST26, it is confirmed whether or not an encryption request signal has been received from the vehicle control device 50. When the encryption request signal is received, the process proceeds to step ST27, where the encryption is transmitted to the vehicle control device 50.

  As shown in FIG. 5, when the vehicle control device 50 receives the encryption signal from the unique signal verification device 70, the vehicle control device 50 proceeds to step ST37. The vehicle control device 50 collates the received encrypted signal. If the received encrypted signal is correct, it is determined that the unique signal verification device 70 is a proper unique signal verification device for the electric vehicle 10, and the process proceeds to step ST38. The vehicle control device 50 starts a motor driving force command to the motor control device 30 in step ST38.

  As described above, the motor driving force command is to calculate a torque request or a rotation request such as a depression operation of an accelerator pedal, and transmit the calculated value to the motor control device 30. It is a request. The motor driving force command signal that is first transmitted from the vehicle control device 50 to the motor control device 30 includes a unique signal unique to the electric vehicle 10. The same unique signal is included in the motor driving force command signal transmitted first in step ST41.

  If it is determined in step ST37 that the received cipher is not a legitimate cipher, the process proceeds to step ST44 where the driving of the motor 11 is prohibited. The fact that the received encryption is not a normal signal indicates that the unique signal verification device 70 is not a proper unique signal verification device for the electric vehicle 10.

  As shown in FIG. 3, when the motor control device 30 receives a motor driving force command signal from the vehicle control device 50, the motor control device 30 proceeds from step ST14 to step ST15. In step ST15, the motor control device 30 determines whether or not the unique signal included in the first received motor driving force command signal is a normal unique signal. If the motor control device 30 determines that the received unique signal is correct, the process proceeds to step ST17, where a current can be supplied to the motor 11 (the motor can be controlled). The fact that the unique signal included in the motor drive command signal transmitted by the motor control device 30 is correct indicates that the vehicle control device 50 is a normal control device for the electric vehicle 10.

  In step ST14, if the motor driving force command signal from the vehicle control device 50 is not received within a preset time, the process proceeds to step ST16, the reception time is over, and key authentication (an example of authentication in the present invention) is stopped. Is done. That is, the motor 1 is not driven. In this state, an error is notified to the driver. As an example, a lamp for notifying an error is provided on an instrument panel (not shown), and the lamp is turned on.

  In step ST26, if the signal is not received within the preset time, the reception time is over, the process proceeds to step ST29, and authentication ends with an error.

  Thus, in motor improper drive prevention device 20, vehicle control device 50 does not transmit a motor drive command to motor control device 30 unless it receives an improper drive prevention device presence / absence confirmation signal from motor control device 30. Furthermore, the motor control device 30 confirms that the vehicle control device 50 is a legitimate vehicle control device by collating the unique signal in the motor drive command received from the vehicle control device 50. Thus, when the vehicle control device 50 is not a regular vehicle control device, the motor 11 is not driven.

  Further, the motor control device 30 is installed in a place that is difficult to access in the vehicle body 12. For this reason, it becomes difficult to replace the motor control device 30. That is, it is difficult to remove the motor control device 30 and replace it with a motor control device that is not authorized for the electric vehicle 10.

  As described above, the motor control device 30 that is disposed at a position where it is difficult to illegally replace the vehicle control device 50 confirms whether the vehicle control device 50 is a regular vehicle control device with respect to the electric vehicle 10, and performs regular vehicle control. Only when the device is confirmed to be a device, the motor control device 30 can control the motor 11, so that the motor 11 is prevented from being illegally driven.

  When the vehicle control device 50 does not receive the motor unauthorized drive prevention device presence / absence confirmation signal from the motor control device 30 as a vehicle control device confirmation means, the motor control command is not transmitted to the motor control device 30 and the motor control is performed. Since the device 30 can control the motor 11 only when the collation result of the unique signal in the motor drive command received from the vehicle control device 50 is correct, the confirmation of the vehicle control device 50 is doubled. 11 is further suppressed from being illegally driven.

  In this embodiment, as an example of the authentication for enabling the motor to be driven according to the present invention, an example of inserting the ignition key 15 into a cylinder (not shown) and turning the key 15 to the start position of the motor 11 is an example. Used as. However, it is not limited to this. The condition for starting the authentication referred to in the present invention may be, for example, an operation of pressing a start button that can drive the motor 11 instead of turning the ignition key 15.

  The present invention is not limited to the above-described embodiments as they are, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. Various inventions can be formed by appropriately combining a plurality of constituent elements disclosed in the above-described embodiments. For example, you may delete some components from all the components shown by embodiment mentioned above.

  DESCRIPTION OF SYMBOLS 10 ... Electric vehicle (vehicle), 11 ... Motor, 20 ... Motor improper action prevention apparatus, 30 ... Motor control apparatus, 50 ... Vehicle control apparatus.

Claims (2)

A motor improper drive prevention device provided in a vehicle that can be driven by a motor,
A vehicle control device for calculating a drive request to the motor;
A motor control device that calculates a current to be supplied to the motor based on the drive request received from the vehicle control device, and controls a current supplied to the motor based on the calculation result;
The motor control device can supply current to the motor when it is confirmed that the vehicle control device is an authorized vehicle control device at the time of authentication for enabling the motor to be driven. Unauthorized driving prevention device. The vehicle control device does not transmit the drive request to the motor control device when not receiving the unauthorized drive prevention device presence / absence confirmation signal from the motor control device during the authentication,
The said motor control apparatus collates the specific signal contained in the drive request received from the said vehicle control apparatus, and when the result of the said collation is correct, it becomes possible to supply an electric current to the said motor. The motor improper drive prevention apparatus described in 1.

Images