JP2011158954A - Movable body control apparatus and movable body control method for movable body control apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To control a movable body so that an operator having no drive authority cannot drive a vehicle using an IC card of an operator. <P>SOLUTION: A movable body control apparatus includes an IC card reader 2 for reading authority data periodically from an IC card storing therein authority data for determining the authority of an operator of a vehicle 20, an in-vehicle control unit 4 for determining, by an processing device, whether an operator 31 is authorized to drive the vehicle 20 based on the authority data read by the IC card reader 2, and a vehicle drive control unit 5 for controlling the vehicle 20 in a drivable state when the in-vehicle control unit 4 has determined that the operator 31 is authorized to drive the vehicle 20 and for controlling the vehicle 20 in a non-drivable state when the in-vehicle control unit 4 has determined that the operator is not authorized to drive the vehicle 20. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a moving body control device and a moving body control method for the moving body control device. In particular, the present invention relates to a moving body control device that controls the state of a moving body using information of an IC (integrated circuit) card in which driver authority data is stored, and a moving body control method for the moving body control device.

  As a method of restricting who can drive a vehicle, record the presence or absence of the driver's authority on the IC card, check the presence or absence of the driver's authority using the IC card information, and only if the vehicle has the authority to drive There is a method that enables drive control (Patent Document 1).

JP 2005-346388 A

  As described above, in the case of a method of restricting the driver by reading the IC card information, for example, once a person with driving authority reads the IC card information and permission to drive the vehicle is issued, thereafter, There is a problem that it is possible to impersonate the driver that even a person without driving permission can drive the vehicle. Furthermore, once a person with driving authority is allowed to drive the vehicle by reading the IC card information, the IC card can be illegally diverted to be taken out of the vehicle and used by others. There is a problem of end.

  The present invention has been made to solve the above-described problems. When a driver drives a mobile body, the driver is restricted using information on the IC card, and the IC card is illegally diverted. It is an object of the present invention to provide a moving body control device that controls a moving body so as to make it impossible.

The moving body control device according to the present invention includes:
In the moving body control device that controls the state of the moving body,
A storage medium reading unit that periodically reads the authority data from a storage medium in which authority data for determining the authority of the driver of the moving object is stored;
An authority determination unit that determines whether or not the driver has the authority to drive the mobile body based on the authority data read by the storage medium reading unit;
When it is determined by the authority determination unit that the driver has the authority to drive the mobile body, the mobile body is controlled to be operable, and the authority determination unit controls the mobile body to the driver. And a moving body control unit that controls the moving body to be in an inoperable state when it is determined that there is no authority to drive.

  A mobile control device according to the present invention is a mobile control device that controls the state of a mobile body. The mobile data control device periodically transmits the authority data from a storage medium storing authority data for determining the authority of the driver of the mobile body. A storage medium reading unit that automatically reads, and an authority determination unit that determines, by a processing device, whether or not the driver has the authority to drive the mobile body based on the authority data read by the storage medium reading unit When the authority determining unit determines that the driver has the authority to drive the mobile body, the mobile body is controlled to be drivable by the authority determining unit. And a moving body control unit that controls the moving body to an inoperable state when it is determined that there is no authority to drive the vehicle. While limited, an effect that can control the mobile to preclude misappropriation like storage media.

1 is an overall configuration diagram of an entrance / exit management system 100 according to Embodiment 1. FIG. 1 is a block configuration diagram of an entrance / exit management system 100 according to Embodiment 1. FIG. 6 is a diagram illustrating an example of hardware resources of a mobile control device 200 (ID information transmission device 120) according to Embodiment 1. FIG. It is a flowchart which shows the flow of a process of the moving body control method of the moving body control apparatus 200 which concerns on Embodiment 1. FIG. FIG. 6 is a flowchart showing ID information transmission processing of the mobile control device 200 (ID information transmission device 120) in the first embodiment. 6 is a flowchart showing an ID information receiving method of the ID information receiving device 130 and an entrance / exit management method of the entrance / exit management device 51 in Embodiment 1. FIG. FIG. 6 is a flowchart showing a flow of processing of a moving body control method of a moving body control device 200 according to Embodiment 2. FIG. 10 is a functional block configuration diagram of a mobile control device 200 according to Embodiment 3. It is a flowchart which shows the flow of a process of the moving body control method of the moving body control apparatus 200 concerning Embodiment 3. FIG. It is a flowchart which shows the other example of the flow of a process of the mobile body control method of the mobile body control apparatus 200 concerning Embodiment 3.

  Embodiments of the present invention will be described below with reference to the drawings.

Embodiment 1 FIG.
In the present embodiment, a moving body control device that controls the moving body so that only a driver who has the authority to drive the moving body can drive the moving body will be described. In addition, a system that includes the above-described moving body control device, and manages entry / exit including whether the vehicle and the driver are allowed to enter or leave when the vehicle (moving body) enters or exits a predetermined area. explain. A vehicle is an example of a moving body, for example, a forklift, a passenger car, a truck, and other moving bodies that are operated (driving, maneuvering) by an operator (driver, driver).

  FIG. 1 is an overall configuration diagram of an entrance / exit management system 100 according to the first embodiment. The overall configuration of the entrance / exit management system 100 will be described with reference to FIG.

  In FIG. 1, it is assumed that a vehicle 20 such as a forklift operated (operated) by an operator 31 (driver) enters the security area 53 as the vehicle 20. Usually, a specific vehicle 20 (moving body) such as a forklift requires a specific operation permit for safety. It is very dangerous for a person who does not have such a driving permit to operate a special vehicle 20 such as a forklift. Of course, a driver's license is also required for a vehicle 20 such as a normal passenger car.

  Therefore, for entering and leaving a predetermined area such as the security area 53 of the vehicle 20 driven by the operator 31, it is first necessary to check whether the operator 31 of the vehicle 20 has the authority to operate the vehicle 20. There is. Then, after it is authenticated that the operator 31 can operate the vehicle 20, it is necessary to check whether the vehicle 20 operated by the operator 31 has the authority to enter and leave the security area 53.

  In the present embodiment, the operator 31 of the vehicle 20 uses the authority data included in the ID information registered in an IC (integrated circuit) card (IC card 1) such as an employee ID card of the operator 31. The mobile body control device 200 and the mobile body control that control the vehicle 20 so as to make it impossible to illegally divert or reuse the IC card 1 based on the check result. A method will be described. Information for determining whether or not the operator 31 has the authority to drive the vehicle 20 is referred to as authority data. The authority data is included in ID information registered in an IC (integrated circuit) card (IC card 1) such as an employee's card of the operator 31.

  Further, using the ID information registered in an IC (integrated circuit) card (IC card 1) such as an employee ID card of the operator 31, entry / exit management to the security area 53 of the vehicle 20 driven by the operator 31 is performed. A simple and reliable entrance / exit management system will be described. Information for determining whether the vehicle 20 driven by the operator 31 can enter or leave the security area 53 is also referred to as identification information. The identification information is included in the ID information registered in the IC card 1. ID information (identification information / authorization data) is encoded (encrypted) and stored in the IC card.

  In the mobile body control device and the mobile body control method of the present embodiment, the IC card 1 is prevented from being diverted or reused, and only the operator 31 having the authority to operate the vehicle 20 operates (drives) the mobile body. The feature is to be able to.

  As shown in FIG. 1, in the entrance / exit management system 100, a moving body control device 200 is mounted on a vehicle 20 to be managed. The mobile control device 200 includes an IC card reader 2, a vehicle-mounted control unit 4 (control PC), a communication button 6, a DSRC vehicle-mounted device 7, and a DSRC vehicle-mounted device antenna 8.

  In the entrance / exit management system 100, the DSRC controller antenna 9 is installed in the vicinity of the entrance / exit gate 23. Furthermore, the entrance / exit management system 100 includes a DSRC controller 50 connected to the DSRC controller antenna 9, an entrance / exit management device 51, and a gate opening / closing control device 52.

  For example, the operator 31 (vehicle driver) holds the IC card 1 over the IC card reader 2 and reads the ID information. Alternatively, the IC card reader 2 may include an IC card holder, and the ID information may be automatically read when the IC card 1 is set in the IC card holder. In the following description, setting the IC card 1 in the IC card holder or placing it on the IC card reader 2 in order to cause the IC card reader 2 to read the ID information of the IC card 1 1 is set in the IC card reader 2 ".

  The IC card 1 is a non-contact type IC card. The non-contact type IC card exchanges data by performing wireless communication with the IC card reader 2. In this embodiment, a non-contact type IC card is assumed as the IC card, but a contact type IC card may be used. In the case of a contact type IC card, an IC card reader 2 for contact type IC card is used. The ID information includes authority data for determining whether or not the operator 31 has the authority to operate the vehicle 20. The ID information is input to the in-vehicle control unit 4 (control PC) via the IC card reader 2, is decrypted, and is stored (held) in the storage device of the in-vehicle control unit 4 (control PC).

  The in-vehicle control unit 4 determines whether or not the operator 31 has the authority to operate the vehicle 20 using the ID information (information including authority data) read from the IC card 1. As a result of the determination, the in-vehicle control unit 4 controls the vehicle 20 to be operable (operable) when it is determined that the operator 31 has authority to operate the vehicle 20. As a result of the determination, the in-vehicle control unit 4 controls the vehicle 20 to an inoperable (unoperable) state when it is determined that the operator 31 is not authorized to operate the vehicle 20. Details of the control method of the vehicle 20 by the in-vehicle control unit 4 will be described later.

  When the vehicle 20 can be operated by the vehicle-mounted control unit 4, the vehicle 20 enters the DSRC communication area by the operation of the operator 31. The DSRC communication area is an area where the DSRC vehicle-mounted device antenna 8 and the DSRC controller antenna 9 can perform DSRC wireless communication. The DSRC wireless communication is started when the vehicle 20 enters the DSRC communication area. Here, the DSRC (Dedicated Short Range Communication) wireless communication is a bidirectional wireless communication technology, and is called narrow-area communication or dedicated narrow-area communication. Although the communication distance is as short as several meters to several hundred meters, high-speed communication (about 4 Mbps) within a specific spot is realized by deliberately reducing the usable range.

  When the vehicle 20 enters the DSRC communication area and the operator 31 presses the communication button 6, ID information (identification information (employee card data or the like)) is transmitted from the in-vehicle control unit 4 to the DSRC in-vehicle device 7. The DSRC controller 50 acquires ID information (identification information (employee ID data, etc.)) from the DSRC onboard device 7 by the DSRC onboard device antenna 8 and the DSRC controller antenna 9 performing DSRC wireless communication. The ID information (identification information (employee card data, etc.)) acquired by the DSRC controller 50 is transmitted to the entrance / exit management device 51. That is, the mobile control device 200 also has a function of an ID information transmission device that transmits ID information by DSRC wireless communication.

  The entrance / exit management device 51 performs an authentication process using the ID information and controls opening / closing of the gate shutter of the entrance / exit gate 23. That is, when the ID authentication is completed, the gate shutter is opened and the vehicle 20 can pass.

  Here, the ID information (identification information such as employee ID data) for determining whether the vehicle 20 is allowed to enter or leave and the ID information (authority data) for determining the driving authority of the vehicle 20 are common. You can use data. Alternatively, data managed separately may be used. Hereinafter, the ID information includes identification information for determining whether entry / exit is permitted and authority data for determining authority for driving the vehicle 20.

  FIG. 2 is a block configuration diagram of the entrance / exit management system 100 according to the first embodiment. The block configuration of the entrance / exit management system 100 will be described with reference to FIG.

  The entrance / exit management system 100 includes a moving body control device 200 on the vehicle 20 side. As described above, the mobile control device 200 also has the function of the ID information transmission device 120. The mobile control device 200 includes an in-vehicle control unit 4, a vehicle drive control unit 5, an IC card reader 2, a communication button 6, a DSRC in-vehicle device 7, a DSRC in-vehicle device antenna 8, and a direction sensor 34.

  The entrance / exit management system 100 includes an ID information receiving device 130, an entrance / exit management device 51, a gate opening / closing control device 52, and an entrance / exit gate 23 on the road side (entrance / exit gate 23 side). In the entrance / exit management system 100, the ID information receiving device 130, the entrance / exit management device 51, and the gate opening / closing control device 52 are collectively referred to as an entrance / exit system. The ID information receiving apparatus 130 includes a DSRC controller antenna 9 and a DSRC controller 50.

  The IC card reader 2 periodically reads ID information (authorization data / identification information) recorded on the IC card 1. The IC card 1 is a storage medium in which ID information (authorization data) for determining the authority of a driver of a mobile object is stored. The IC card reader 2 is an example of a storage medium reading unit.

  The IC card reader 2 periodically transmits an inquiry signal asking whether there is ID information (authorization data) to be read, and sends a transmission request signal of ID information (authorization data) for the transmitted inquiry signal to the IC card 1 ( ID information is read from the IC card 1 when received from the storage medium. For example, the IC card reader 2 periodically reads ID information (authorization data) by polling. The operator 31 sets the IC card 1 by placing the IC card 1 on the IC card reader 2 or holding it. The IC card reader 2 can periodically read ID information from the IC card 1 by polling while the IC card 1 is set.

  In addition to normal employee ID data (for example, employee number, name, department, access rights, etc.), ID information is used as authority data to determine whether or not there is authority to handle dangerous goods Information, information on the type of dangerous goods permitted to be handled when authorized to handle dangerous goods, information for determining whether or not authorized to enter and exit the security area 53, and a specific vehicle Information such as information for determining whether or not there is an authority to operate, and information related to a vehicle type that is permitted to operate when it has the authority to operate a specific vehicle is included. Information such as normal employee ID data may be used as authority data for determining whether or not there is a predetermined authority.

  In the present embodiment, the mobile control device 200 is a mechanism that can limit the operator 31 (driver) of the vehicle 20, prevent the operator 31 (driver) from impersonating, and enhance security.

  The in-vehicle control unit 4 inputs ID information (identification information / authorization data) read by the IC card reader 2. The in-vehicle control unit 4 decrypts the input ID information (identification information / authorization data) and stores it in the storage device.

  The in-vehicle control unit 4 determines whether or not the operator 31 has the authority to operate (drive) the vehicle 20 from the ID information based on the authority data included in the ID information stored in the storage device. The in-vehicle control unit 4 is an example of an authority determining unit. The in-vehicle control unit 4 outputs a determination result as to whether or not the operator 31 has authority to operate (drive) the vehicle 20 to the vehicle drive control unit 5. The in-vehicle control unit 4 outputs an authority determination result of “authorized” to the vehicle drive control unit 5 when it is determined from the ID information that the operator 31 has the authority to operate (drive) the vehicle 20. The in-vehicle control unit 4 outputs an authority determination result of “no authority” to the vehicle drive control unit 5 when it is determined from the ID information that the operator 31 does not have the authority to operate (drive) the vehicle 20. Further, the in-vehicle control unit 4 counts the number of times that the IC card 1 is determined to be “no authority”, and when the number of times determined as “no authority” exceeds a predetermined number, the authority determination result of “no authority” May be output to the vehicle drive control unit 5.

  The in-vehicle control unit 4 determines that the IC card 1 is unreadable when the IC card reader 2 (storage medium reading unit) does not receive the ID information transmission request signal from the IC card 1 in response to the inquiry signal. . The fact that the IC card reader 2 does not receive the ID information transmission request signal from the IC card 1 means that the IC card 1 is not set in the IC card reader 2 or the IC card reader 2 reads the IC card 1. Possible conditions such as errors. When it is determined that the IC card 1 cannot be read, the in-vehicle control unit 4 outputs an authority determination result of “no authority” to the vehicle drive control unit 5. The in-vehicle control unit 4 counts the number of times the IC card 1 is determined to be unreadable, and when the number of times determined to be unreadable is equal to or greater than a predetermined number, the authority determination result of “no authority” is subjected to vehicle drive control. You may output to the part 5.

  Further, the in-vehicle control unit 4 counts the number of times determined as “no authority” and the number of times determined as unreadable, and the number of times determined as “no authority” and the number of times determined as unreadable is added. The authority determination result of “no authority” may be output to the vehicle drive control unit 5 when the predetermined number of times is reached.

  The vehicle drive control unit 5 controls the vehicle 20 to be in a drivable state when the in-vehicle control unit 4 determines that the operator 31 has the authority to drive the vehicle 20. When it is determined that the operator 31 does not have the authority to drive the vehicle 20, the vehicle 20 is controlled so that it cannot be driven. The vehicle drive control unit 5 is an example of a moving body control unit.

  When it is determined that the operator 31 has the authority to operate (drive) the vehicle 20, that is, when the authority determination result of “authorized” is input from the in-vehicle controller 4. For example, vehicle drive control is performed such that the engine of the vehicle 20 can be operated. Further, when it is determined that the operator 31 does not have the authority to operate (drive) the vehicle 20, that is, when the authority determination result of “no authority” is input from the in-vehicle controller 4. For example, vehicle drive control is performed such that the engine of the vehicle 20 cannot be operated.

  The vehicle 20 equipped with the moving body control device 200 cannot be driven when the power of the moving body control device 200 is not turned on (that is, when the moving body control device 200 is not activated). State. That is, the vehicle 20 is in a drivable state only when the moving body control device 200 outputs an authority determination result of “authorized” to the vehicle drive control unit 5.

  The mobile body control device 200 including the IC card reader 2, the in-vehicle control unit 4, and the vehicle drive control unit 5 can be used only when the ID information of the operator 31 is authorized to drive the vehicle 20. The vehicle 20 can be operated and can enter the security area 53.

  The communication button 6 is a button that is pressed (contacted) when the operator 31 desires to open the entrance / exit gate 23 by transmitting ID information. The communication button 6 inputs a transmission instruction signal instructed by the operator 31 to transmit ID information (instructs transmission of ID information read by the IC card reader 2), and the input transmission instruction signal is input to the in-vehicle control unit. 4 (from DSRC onboard unit 7). The communication button 6 is an example of a transmission instruction unit. The communication button 6 may not be a button pressed by the operator 31. The communication button 6 may be a touch sensor, a switch, a remote control machine, or the like.

  The in-vehicle controller 4 uses the ID information read by the IC card reader 2 as information for determining whether the operator 31 is allowed to enter or leave the security area 53 (predetermined area). It transmits by the onboard equipment antenna 8 (mobile body side radio | wireless communication apparatus). When receiving the transmission instruction signal from the communication button 6, the in-vehicle control unit 4 transmits the ID information decoded and stored in the storage device by the DSRC in-vehicle device 7 and the DSRC in-vehicle device antenna 8 (mobile body side wireless communication device). To do. Here, the transmitted ID information is identification information for determining whether to enter or leave the security area 53.

  When the DSRC on-vehicle device 7 receives the ID information from the on-vehicle controller 4, the DSRC on-vehicle device 7 transmits the ID information using the DSRC on-vehicle device antenna 8.

  The DSRC in-vehicle device antenna 8 is mounted on the vehicle 20. The DSRC onboard equipment antenna 8 transmits ID information by DSRC wireless communication.

  The DSRC controller antenna 9 receives the ID information transmitted by DSRC wireless communication. The DSRC controller antenna 9 is installed in the vicinity of the entrance / exit gate 23 and receives ID information transmitted from the vehicle 20 using the entrance / exit gate 23.

  The DSRC controller 50 inputs the ID information received by the DSRC controller antenna 9. The DSRC controller 50 transmits the input ID information to the entrance / exit management device 51.

  The entrance / exit management device 51 receives the ID information from the DSRC controller 50. The entrance / exit management device 51 performs an authentication process on the received ID information. When the entrance / exit management device 51 determines that the operator 31 has the authority to enter / exit based on the ID information, the gate open / close control device provides an open / close control signal (open control signal) for controlling the entrance / exit gate 23 to open. 52. Alternatively, when the entrance / exit management device 51 determines that both the operator 31 and the vehicle 20 have authority to enter / exit, the gate opening / closing control signal (open control signal) for controlling the entrance / exit gate 23 is opened and closed. It may be transmitted to the control device 52. Further, the entrance / exit management device 51 transmits an open control signal to the gate opening / closing control device 52, and then sends an opening / closing control signal (closed control signal) for performing the closing control of the entrance / exit gate 23 after a predetermined time. The process of transmitting to 52 may be performed. Alternatively, the entrance / exit management device 51 determines that the vehicle 20 has passed through the entrance / exit gate 23 using a sensor or the like, and then gates an open / close control signal (closed control signal) for controlling the entrance / exit gate 23 to be closed. Processing to transmit to the opening / closing control device 52 may be performed.

  The entrance / exit gate 23 is subjected to gate opening / closing control in accordance with an opening / closing control signal from the gate opening / closing control device 52.

  FIG. 3 is a diagram illustrating an example of hardware resources of the mobile control device 200 (ID information transmission device 120) in the first embodiment. In FIG. 2, the configuration in which the mobile control device 200 also serves as the ID information transmission device 120 has been described. However, the ID information transmission device 120 and the mobile control device 200 may be configured as separate devices having different hardware resources. The moving body control device 200 includes an IC card reader 2 (storage medium reading unit), an in-vehicle control unit 4 (authority determination unit), and a vehicle drive control unit 5 (moving body control unit). DSRC onboard equipment 7, DSRC onboard equipment antenna 8, orientation sensor 34, etc.) are not essential.

In FIG. 3, the mobile control device 200 (ID information transmission device 120) is a CPU 911 (also referred to as a central processing unit, a central processing unit, a processing unit, a processing unit, a microprocessor, a microcomputer, or a processor) that executes a program. It has. The CPU 911 includes a ROM 913, a RAM 914, a display device 901 having a CRT (Cathode / Ray / Tube) or LCD (liquid crystal) display screen, a communication board 915, an IC card reader 2, a communication button 6, and an orientation sensor 34 via a bus 912. Are connected to the magnetic disk device 920 to control these hardware devices. Instead of the magnetic disk device 920, a storage device such as an optical disk device or a memory card read / write device may be used.
The RAM 914 is an example of a volatile memory. The storage medium of the ROM 913 and the magnetic disk device 920 is an example of a nonvolatile memory. These are examples of a storage device or a storage unit.

The communication board 915, the IC card reader 2, the communication button 6, the direction sensor 34, and the like are examples of an input unit and an input device.
In addition, the display device 901, the communication board 915, a speaker, a buzzer, an alarm device, and the like (not shown) are examples of an output unit and an output device.

  The communication board 915 is a DSRC wireless communication device. The communication board 915 may be connected to a LAN or the like. The communication board 915 may be connected not only to the LAN but also to a WAN (wide area network) such as the Internet or ISDN.

  The magnetic disk device 920 stores an operating system 921 (OS), a program group 923, and a file group 924. The programs in the program group 923 are executed by the CPU 911 and the operating system 921.

The program group 923 stores programs for executing functions described as “˜unit” and “˜means” in the description of the embodiments described below. The program is read and executed by the CPU 911.
The file group 924 includes information, data, signal values, variable values, and parameters that are described as “determination results of”, “calculation results of”, and “processing results of” in the description of the embodiments described below. Are stored as items “˜file”, “˜database”, and “˜data”. “˜file”, “˜database”, and “˜data” are stored in a recording medium such as a disk or a memory. Information, data, signal values, variable values, and parameters stored in a storage medium such as a disk or memory are read out to the main memory or cache memory by the CPU 911 via a read / write circuit, and extracted, searched, referenced, compared, Used for CPU operations such as calculation, calculation, processing, output, printing, and display. Information, data, signal values, variable values, and parameters are temporarily stored in the main memory, cache memory, and buffer memory during the CPU operations of extraction, search, reference, comparison, operation, calculation, processing, output, printing, and display. Is remembered.
In addition, the arrows in the flow described in the description of the embodiment described below mainly indicate input / output of data and signals, and the data and signal values are the magnetic disk of the magnetic disk device 920, other optical disks, minidisks, DVDs. It may be recorded on a recording medium such as (Digital / Versatile / Disk). Data and signals are transmitted online via a bus 912, signal lines, cables, or other transmission media.

  In addition, what is described as “to part” in the description of the embodiment described below may be “to circuit”, “to device”, “to device”, “means”, and “to step”. ”,“ ˜procedure ”, or“ ˜processing ”. That is, what is described as “˜unit” may be realized by firmware stored in the ROM 913. Alternatively, it may be implemented only by software, or only by hardware such as elements, devices, substrates, and wirings, by a combination of software and hardware, or by a combination of firmware. Firmware and software are stored as programs in a recording medium such as a magnetic disk, a flexible disk, an optical disk, a compact disk, a mini disk, and a DVD. The program is read by the CPU 911 and executed by the CPU 911. That is, the program causes the computer to function as “to part” described below. Alternatively, the procedure or method of “to part” described below is executed by a computer.

  FIG. 4 is a flowchart showing the flow of processing of the moving body control method of the moving body control apparatus 200 according to Embodiment 1. The process of the mobile body control method of mobile body control apparatus 200 according to the present embodiment will be described using FIG.

<Polling start processing: S410 to S420>
In S410, when the entrance / exit management system 100 is started (for example, the power supply of the mobile control device 200 is turned on), the mobile control device 200 is activated. The vehicle-mounted control unit 4 of the mobile control device 200 initializes the unreadable count M and the non-driving authority count N by the processing device (M = 0, N = 0).

  As described above, in the entrance / exit management system 100, the vehicle 20 is controlled not to operate when the moving body control device 200 is not activated. That is, the operator 31 cannot operate the vehicle 20 when the power of the moving body control device 200 is not turned on.

  The in-vehicle control unit 4 outputs a polling start request signal for causing the IC card reader 2 to start periodic polling transmission processing. When the IC card reader 2 receives a polling start request signal from the in-vehicle controller 4, the IC card reader 2 starts polling transmission processing.

  In S420, the IC card reader 2 transmits polling (an example of an inquiry signal) for inquiring whether there is data (ID information) to be read. When the IC card reader 2 receives a transmission request signal of ID information for the polling (inquiry signal) transmitted from the IC card 1, the IC card reader 2 reads the ID information from the IC card 1 and stores the read ID information in the storage device. The in-vehicle control unit 4 inputs and decodes the ID information read by the IC card reader 2 by the processing device. The in-vehicle controller 4 stores the ID information decrypted by the processing device in the storage device.

<ID information reading determination processing: S430>
In S430, the in-vehicle control unit 4 confirms whether or not the IC card reader 2 has read the ID information by the processing device. If the processing unit determines that the IC card reader 2 cannot read the ID information (NO in S430), the in-vehicle control unit 4 proceeds to S431. When the processing unit determines that the IC card reader 2 has read the ID information (YES in S430), the in-vehicle control unit 4 proceeds to S440.

  Here, the inability to read ID information by the IC card reader 2 means, for example, the following cases. (State 1) The operator 31 does not hold the IC card 1 over the IC card reader 2, (State 2) The IC card 1 is not set in the IC card reader 2, (State 3) According to the IC card reader 2 The state of the reading error of the IC card 1 and the like.

<Unreadable count determination processing: S431 to S432>
In S431, if the processing unit determines that the IC card reader 2 cannot read the ID information, the in-vehicle control unit 4 increments the unreadable count M (M = M + 1). Then, the in-vehicle control unit 4 compares the unreadable count M with the unreadable count upper limit number L1 (an example of the first predetermined number of times) by the processing device. If the unreadable count M is not equal to or greater than the unreadable count upper limit number L1 (M ≧ L1) (NO in S431), the in-vehicle control unit 4 proceeds to S480. If the unreadable count M is equal to or greater than the unreadable count upper limit number L1 (M ≧ L1) (YES in S431), the in-vehicle controller 4 proceeds to S432.

  The unreadable count M is counted, for example, when the state is in the state 1 to the state 3 described above. In the case of the state 1 or the state 2, the operator 31 may not have the IC card 1, and the operator 31 should not be allowed to operate the vehicle 20. However, even if the operator 31 holds the IC card 1 over the IC card reader 2 appropriately or sets the IC card 1 appropriately over the IC card reader 2, a reading error occurs. There is also. In consideration of such a case, the mobile body control device 200 does not immediately control the vehicle 20 to the driving disabled state even when the reading disabled state occurs, but instead of the unreadable count upper limit number L1 (first predetermined number of times). When the number of times) is exceeded, the vehicle 20 is controlled so as not to be driven. The unreadable count upper limit number L1 (first predetermined number) is stored in the storage device in advance at the time of system setting or the like.

  In addition, the in-vehicle control unit 4 controlling the vehicle 20 to the non-operational state means that the in-vehicle control unit 4 outputs the authority determination result of “no authority” to the vehicle drive control unit 5 as described above. The vehicle drive control part 5 will control the vehicle 20 in the state which cannot drive, if the authority determination result of "no authority" is input from the vehicle-mounted control part 4. FIG. For example, control is performed so that the operator 31 does not start the engine of the vehicle 20, and when the vehicle is running, for example, control is performed such that the speed is gradually reduced and the engine is stopped.

  In S480, the IC card reader 2 waits for a predetermined time, and returns to S420. By waiting for a certain period of time, the IC card reader 2 implements a polling process (that is, a periodic polling) every certain period of time. The IC card reader 2 repeats the process until the polling end request signal for the polling transmission process is input from the in-vehicle controller 4 (S490).

  In S <b> 432, the in-vehicle control unit 4 outputs an authority determination result of “no authority” for making the vehicle 20 inoperable to the vehicle drive control unit 5. The vehicle drive control part 5 will control the vehicle 20 in the state which cannot drive, if the authority determination result of "no authority" is input. And the vehicle-mounted control part 4 initializes the unreadable count M (M = 0), and progresses to S480.

<Driving determination without driving authority: S440 to S470>
In S440, the vehicle-mounted control unit 4 reads the authority data included in the decrypted ID information from the storage device. The in-vehicle control unit 4 analyzes the read authority data by the processing device. The in-vehicle control unit 4 determines whether or not the authority data has authority to drive the vehicle 20 based on the result of analyzing the authority data by the processing apparatus.

  For example, the in-vehicle control unit 4 includes a driving authority table in which employee numbers of operators having driving authority for each vehicle type are registered in the storage device, and searches the driving authority table with the employee numbers of the decrypted ID information. Thus, it may be determined whether or not the user has driving authority. In this case, the authority data is an employee number.

  If the in-vehicle control unit 4 determines that the authority data has authority to drive the vehicle 20 (YES in S440), the process proceeds to S450. If the in-vehicle control unit 4 determines that the authority data is not authorized to drive the vehicle 20 (YES in S440), the process proceeds to S460.

  Here, when it is determined that the authority data included in the ID information read by the IC card reader 2 (hereinafter, authority data to be processed) is not authorized to drive the vehicle 20, for example, There is a case. (State 4) State in which operator 31 does not actually have authority to drive vehicle 20, (State 5) Actually, operator 31 has authority to drive vehicle 20, but erroneously due to reading error of IC card reader 2, etc. The state in which the determination is made, etc.

  In S450 (when the in-vehicle control unit 4 determines that the authority data to be processed has the authority to drive the vehicle 20), the in-vehicle control unit 4 makes the vehicle 20 ready for driving by the operator 31. The authority determination result of “authorized” is output to the vehicle drive control unit 5. The vehicle drive control part 5 will control the vehicle 20 in the state which can drive | operate, if the authority determination result of "with authority" is input. And the vehicle-mounted control part 4 initializes the count N without driving authority (N = 0), and progresses to S480.

  When the vehicle drive control unit 5 inputs the authority determination result of “authorized” from the in-vehicle control unit 4, for example, the vehicle drive control unit 5 can start the engine, enter the engine start waiting state, or run or drive the engine. Then, vehicle drive control is performed such as nothing is performed so that the operator 31 can drive (drive) the vehicle 20.

  In S460 (when the in-vehicle control unit 4 determines that the authority data to be processed is not authorized to drive the vehicle 20), the in-vehicle control unit 4 increments the count N without driving authority (N = N + 1). Then, the in-vehicle control unit 4 compares the non-driving authority count N and the non-driving authority count upper limit number L2 (an example of the second predetermined number of times) by the processing device. If the non-driving authority count N is not equal to or greater than the non-driving authority count upper limit number L2 (N ≧ L2) (NO in S460), the in-vehicle control unit 4 proceeds to S480. If the non-driving authority count N is equal to or greater than the non-driving authority count upper limit number L2 (N ≧ L2) (YES in S460), the in-vehicle control unit 4 proceeds to S470.

  The non-driving authority count N is counted when it is determined that there is no driving authority in the case of the state 4 or the state 5 described above, for example. In the case of the state 4, it means that the operator 31 who does not have the driving authority intends to drive the vehicle 20, so the operator 31 should not be allowed to operate the vehicle 20. However, there are cases where it is determined that the operator 31 is not authorized due to a reading error or the like even though the operator 31 has the appropriate authority as in the state 5. In consideration of such a case, the mobile control apparatus 200 does not immediately control the vehicle 20 to the non-driving state even if the non-authoritative determination occurs, but instead of the non-driving authority count upper limit number L2 (second predetermined number). The vehicle 20 is controlled so as not to be driven. The count upper limit number L2 (second predetermined number) without driving authority is stored in advance in the storage device at the time of system setting or the like.

  In S <b> 470, the in-vehicle control unit 4 outputs an authority determination result of “no authority” for making the vehicle 20 inoperable to the vehicle drive control unit 5. The vehicle drive control part 5 will control the vehicle 20 in the state which cannot drive, if the authority determination result of "no authority" is input. And the vehicle-mounted control part 4 initializes the count N without driving authority (N = 0), and progresses to S480.

  In S480, the IC card reader 2 waits for a predetermined time, and returns to S420. The IC card reader 2 repeats the process until a polling end request signal for ending the polling transmission process is input from the in-vehicle controller 4 (S490).

  As described above, in the present embodiment, the vehicle 20 cannot be driven unless the moving body control device 200 is activated, and even if the IC card 1 is traveling, the IC card 1 is determined to be “authorized”. If it is not continued, the vehicle 20 cannot be continuously driven. Therefore, in order to keep driving the vehicle 2, the operator 31 cannot remove the IC card 1 and misappropriate it, and does not require an expensive HW (hardware) locking mechanism or the like. The IC card 1 can be locked by SW (software).

  In addition, since the vehicle 20 is controlled using the non-readable count M and the non-driving authority count N in consideration of read errors and the like, fine authority determination processing and moving body control processing can be realized.

  FIG. 5 is a flowchart showing ID information transmission processing of mobile control apparatus 200 (ID information transmission apparatus 120) in the first embodiment. The ID information transmission process of the mobile control device 200 (ID information transmission device 120) will be described with reference to FIG. In the following description, the ID information transmission device 120 will be described as the main subject of processing.

  In S <b> 7, the in-vehicle control unit 4 enters a standby state for pressing the communication button 6 by the processing device. That is, the in-vehicle controller 4 enters a transmission instruction signal waiting state.

  In S <b> 8, the in-vehicle control unit 4 determines whether or not the state is “the vehicle 20 is in the DSRC communication area” and “the transmission instruction signal is input from the communication button 6”.

  In S8, the vehicle-mounted control unit 4 returns the process to S7 when it is not “the vehicle 20 is in the DSRC communication area” and “the transmission instruction signal is input from the communication button 6” (NO in S8). . In S8, the vehicle-mounted control unit 4 is in a state where “the vehicle 20 is in the DSRC communication area” and “a transmission instruction signal has been input from the communication button 6” (YES in S8), the process proceeds to S9. Proceed.

  In S <b> 9, the vehicle-mounted control unit 4 outputs ID information to the DSRC vehicle-mounted device 7 by the processing device. Then, the DSRC on-board unit 7 modulates the input ID information to be transmitted by DSRC wireless communication by the processing device, and transmits the modulated ID information to the DSRC on-board unit antenna 8. The modulated ID information is transmitted as a radio wave from the DSRC onboard equipment antenna 8.

  The above is the ID information transmission processing of the ID information transmission device 120.

  FIG. 6 is a flowchart showing the ID information receiving method of the ID information receiving device 130 and the entrance / exit management method of the entrance / exit management device 51 in the first embodiment. The ID information receiving method of the ID information receiving device 130 and the entrance / exit management method of the entrance / exit management device 51 will be described with reference to FIG.

  In S10, the DSRC controller antenna 9 receives the ID information transmitted as a radio wave from the DSRC onboard equipment antenna 8. The DSRC controller 50 demodulates the ID information received as radio waves by the DSRC controller antenna 9 by the processing device. That is, the DSRC controller 50 acquires the ID information stored in the DSRC on-board unit 7 by DSRC wireless communication via the DSRC on-board unit antenna 8 and the DSRC controller unit antenna 9.

  In S <b> 11, the DSRC controller 50 transmits the demodulated ID information to the entrance / exit management device 51.

  In S12, the entrance / exit management device 51 inputs ID information from the DSRC controller 50, and performs ID authentication of the input ID information by the processing device. The entrance / exit management device 51 includes, for example, an entrance / exit permission table in which an employee number of an employee (operator) permitted to enter / exit is registered for each predetermined area including the security area 53. The entrance / exit management device 51 uses the processing device to determine the ID authentication by searching the entrance / exit permission table by the employee number of the input ID information.

  Here, in the ID information, “information on a vehicle type that is permitted to be operated when the user has authority to operate a specific vehicle” (for example, a vehicle number uniquely assigned in the company) is recorded. Suppose that When one vehicle is registered for one employee, the entrance / exit management device 51 authenticates the vehicle 20 driven by the operator 31 as well as the ID authentication of the operator 31 by the employee number. It can also be done.

  For example, the entrance / exit management device 51 includes an entry / exit permitted vehicle table in which vehicle numbers permitted to enter / exit are registered for each predetermined area including the security area 53. The entrance / exit management device 51 uses the processing device to search the entrance / exit permission table and the entrance / exit permission vehicle table using the employee number and the vehicle number of the input ID information, thereby identifying the ID of the operator 31 and the vehicle. Twenty authentications can be determined. Authentication may be permitted only when entry and exit of both the operator 31 and the vehicle 20 are permitted.

  If the ID information is not authenticated by the entrance / exit management device 51 (NO in S12), the process returns to S7. If the ID information is authenticated by the entrance / exit management device 51 (YES in S12), the process proceeds to S13.

  In S13, when the authentication of ID information is completed, the entrance / exit management device 51 transmits an opening / closing control signal to the gate opening / closing control device 52 by the processing device. When the gate opening / closing control device 52 receives an opening / closing control signal (open control signal) from the processing device, the gate opening / closing control device 52 transmits an opening control signal to the entrance / exit gate 23 to open the entrance / exit gate 23.

  In S14, the gate opening / closing control device 52 transmits a closing control signal for closing the entrance / exit gate 23 when the processing device does not receive the opening control signal for a predetermined time while the entrance / exit gate 23 is open. Then, the entrance / exit gate 23 is closed.

  Here, the entrance / exit management device 51 stores, in a storage device or the like, information indicating that the operator 31 who performed ID authentication when the vehicle 20 entered and the vehicle 20 exist in the security area 53 by the processing device. Thus, management of the operator 31 and the vehicle 20 can be performed. In addition, the entry / exit management device 51 stores, in a storage device or the like, information indicating that the operator 31 and the vehicle 20 that have performed ID authentication when the vehicle 20 leaves the storage area or the like is not present in the security area 53. In addition, the operator 31 and the vehicle 20 can be managed.

  In the entrance / exit management system 100 according to the first embodiment, when the vehicle 20 enters / exits the security area 53, the ID information of the IC card 1 of the driver (operator 31) read by the IC card reader 2 is DSRC in-vehicle. The vehicle 20 and the driver's entry / exit management are stored in the device 7 and transmitted to the entrance / exit system (the ID information receiving device 130, the entrance / exit management device 51, the gate opening / closing control device 52) via the DSRC wireless communication. It is characterized by performing. Thus, since the entrance / exit management system 100 includes the ID information transmission device 120, the driver can enter the security area 53 without getting out of the vehicle 20. Further, not only the person (driver (operator 31)) but also the entrance / exit of the vehicle 20 can be managed.

  In the entrance / exit management system 100 according to the first embodiment, when the vehicle 20 enters / exits the security area 53, the ID information of the driver's IC card 1 is input / exited via the DSRC communication (ID information receiving device 130). To the entrance / exit management device 51 and the gate opening / closing control device 52). The ID information of the driver's IC card 1 is transmitted to the entrance / exit system (ID information receiving device 130, entrance / exit management device 51, gate opening / closing control device 52) triggered by pressing the communication button 6 provided on the vehicle 20. It is characterized by that. In this way, it is possible to control the entrance / exit gate 23 not to be opened only by entering the DSRC communication area. This prevents the entrance / exit gate 23 from being unnecessarily opened and prevents unauthorized entry into the security area 53.

  According to the mobile control device 200 according to the first embodiment, when the vehicle 20 is driven (operated), the encrypted ID information of the driver's IC card 1 is mounted on the vehicle 20 by the IC card reader 2. If the ID information read and decrypted by the vehicle-mounted control unit 4 is decrypted and there is an authority to drive the vehicle 20, engine control (vehicle drive control) of the vehicle 20 is performed. Thereby, it is possible to prevent a person who does not have authority to drive the vehicle 20 from operating (operating) the vehicle 20.

  According to the mobile control device 200 according to the first embodiment, when the ID information obtained from the IC card 1 of the operator 31 (driver) is authenticated and the engine of the vehicle 20 is controlled, the operator 31 The IC card 1 is polled from the IC card reader 2 and the ID information is periodically read by the IC card reader 2. As a result, when a person with the authority to drive the vehicle leaves the vehicle, if the IC card 1 is taken out, the driving authority is lost, and the vehicle can be controlled so that it cannot be operated by controlling the engine. Can not be. In addition, such a method can be realized by a simple and low-cost SW method without requiring a robust and waterproof casing.

  According to the mobile control device 200 according to the first embodiment, when the IC card 1 is taken out from the IC card reader 2 after the vehicle 20 is once operable, the unreadable count M is incremented, and the vehicle 20 Becomes inoperable. Thereby, unauthorized use of the IC card 1 can be prevented.

  The vehicle 20 on which the moving body control device 200 according to Embodiment 1 is mounted cannot drive the vehicle 20 unless the moving body control device 200 is activated. Further, even if the IC card 1 is not continuously determined to be “authorized” even if the vehicle 20 is traveling (if authentication is not continued), the operator 31 may continue to drive (drive) the vehicle 20. Can not. Therefore, the operator 31 cannot illegally divert the IC card 1 in order to keep driving the vehicle 20, and does not require an expensive HW-like lock mechanism or the like, and can easily perform the IC operation in a SW manner. The card 1 can be locked.

  According to the mobile control device 200 according to the first embodiment, the ID information is periodically read by the IC card reader 2, and the engine control of the vehicle 20 is performed until the ID information without driving authority is read a predetermined number of times. Absent. As a result, even if there is a reading error in the ID information read from the IC card 1 by the IC card reader 2, the engine control of the vehicle 20 is not performed unnecessarily.

  According to the mobile control apparatus 200 according to the first embodiment, the driving authority determination process and the mobile body control process are performed using the non-readable count M and the non-driving authority count N. A moving body control method can be realized.

Embodiment 2. FIG.
In the present embodiment, a method in which the unreadable count M is not used in the moving body control method of the moving body control apparatus 200 will be described. The functional block configuration of the mobile control device 200 in the present embodiment is the same as that in FIG. 2 of the first embodiment. The same functional block configuration as that of the first embodiment is denoted by the same reference numeral, and the description thereof is omitted.

  FIG. 7 is a flowchart showing the flow of processing of the moving body control method of the moving body control apparatus 200 according to Embodiment 2. 7 is different from FIG. 4 of the first embodiment in that the unreadable count M is not used.

  In FIG. 7, S510 to S520 are the same as the polling start process (S410 to S420) of FIG.

  In S530, when the in-vehicle control unit 4 determines by the processing device that the IC card reader 2 cannot read the ID information from the IC card 1 (NO in S530), the process proceeds to S560. S560 is the same as S460 of FIG. Steps S540 to S590 are the same as steps S440 to S490 in FIG.

  In the mobile control device 200 according to the present embodiment, when the IC card reader 2 cannot read the ID information of the IC card 1, the in-vehicle control unit 4 increments the non-driving authority counter N (N = N + 1). Even when it is determined that the IC card reader 2 can read the ID information of the IC card 1 and the authority data to be processed does not have the driving authority, the non-driving authority counter N is incremented (N = N + 1) (S560). That is, the non-driving authority count N is a sum of a count when the IC card reader 2 cannot read the ID information of the IC card 1 and a count when it is determined that the authority data to be processed does not have the driving authority. Become.

  And the vehicle-mounted control part 4 compares the count N without driving authority and the count upper limit frequency L2 without driving authority with a processing apparatus. If the non-driving authority count N is not equal to or greater than the non-driving authority count upper limit number L2 (N ≧ L2) (NO in S460), the in-vehicle control unit 4 proceeds to S580. If the non-driving authority count N is equal to or greater than the non-driving authority count upper limit number L2 (N ≧ L2) (YES in S560), the in-vehicle control unit 4 proceeds to S570.

  As described above, according to the mobile control apparatus 200 of the present embodiment, the determination process for determining whether or not to make the vehicle 20 in a driving disabled state is performed using one count value (count N without driving authority). Therefore, the mobile body control process can be performed with a simpler process.

Embodiment 3 FIG.
In the present embodiment, a mode will be described in which warning information is output to the operator 31 when the in-vehicle control unit 4 controls the vehicle 20 so that it cannot be driven.

  FIG. 8 is a diagram illustrating a functional block configuration of the mobile control device 200 according to Embodiment 3. The same reference numerals are given to the same block configurations as those in Embodiment 1, and the description thereof is omitted. 8 is different from FIG. 2 of the first embodiment in that the mobile control device 200 includes a warning information output unit 41.

  The in-vehicle control unit 4 outputs an authority determination result of “no authority” to the vehicle drive control unit 5 and also outputs a warning information output instruction to the warning information output unit 41 when it is desired to control the vehicle 20 in an inoperable state. Output. The timing at which the in-vehicle control unit 4 outputs the warning information output instruction to the warning information output unit 41 may be before the authority determination result of “no authority” is output to the vehicle drive control unit 5.

  When the warning information output unit 41 receives a warning information output instruction from the in-vehicle control unit 4, the warning information output unit 41 outputs warning information for warning the operator 31. The warning information notifies the operator 31 that the authorization data has failed to be authenticated (determined that there is no authority in the determination of authority). The warning information notifies the operator 31 that the vehicle 20 is in an inoperable state by, for example, a buzzer, sound, screen display, blinking screen display, or a combination thereof. For example, when controlling the vehicle 20 so that it cannot be driven by the operator 31 removing the IC card 1 from the IC card reader 2 while the vehicle 20 is traveling, the engine is stopped due to authentication failure. The operator 31 is cautioned by outputting a sound such as from the speaker. For example, the vehicle-mounted control unit 4 may sound a buzzer to notify the operator 31 that the vehicle 20 is stopped.

  FIG. 9 is a flowchart showing the flow of processing of the moving object control method of the moving object control apparatus 200 according to the third embodiment. FIG. 10 is a flowchart illustrating another example of the process flow of the moving object control method of the moving object control apparatus 200 according to the third embodiment. Since the process shown in FIG. 9 corresponds to the process shown in FIG. 4 of the first embodiment, the same steps as those in FIG. Further, the process shown in FIG. 10 corresponds to the process shown in FIG. 7 of the second embodiment, and therefore, the same step number is assigned to the same process as in FIG. 7 and the description thereof is omitted.

  9 differs from FIG. 4 in the processing of S9432 and the processing of S9470. In S431, the in-vehicle control unit 4 proceeds to S9432 when the unreadable count M is equal to or greater than the unreadable count upper limit number L1 (M ≧ L1) (YES in S431). In S9432, the in-vehicle control unit 4 outputs the authority determination result of “no authority” for making the vehicle 20 inoperable to the vehicle drive control unit 5 by the processing device, and outputs a warning information. An information output instruction is output to the warning information output unit 41 by the processing device. And the vehicle-mounted control part 4 initializes the unreadable count M (M = 0), and progresses to S480.

  In S460, in-vehicle control part 4 progresses to S9470, when driving authority count N is more than driving authority count upper limit number L2 (N> = L2) (it is YES at S460). In S9470, the vehicle-mounted control unit 4 outputs the authority determination result of “no authority” for making the vehicle 20 inoperable to the vehicle drive control unit 5 by the processing device, and also outputs a warning information. An information output instruction is output to the warning information output unit 41 by the processing device. And the vehicle-mounted control part 4 initializes the count N without driving authority (N = 0), and progresses to S480.

  10 is different from FIG. 7 in the process of S9570. In S560, when the non-driving authority count N is equal to or greater than the non-driving authority count upper limit number L2 (N ≧ L2) (YES in S460), the in-vehicle control unit 4 proceeds to S9570. In S9570, the in-vehicle control unit 4 outputs the authority determination result of “no authority” for making the vehicle 20 inoperable to the vehicle drive control unit 5 by the processing device, and outputs warning information for the operator 31. Is output to the warning information output unit 41 by the processing device. And the vehicle-mounted control part 4 initializes the count N without driving authority with a processing apparatus (N = 0), and progresses to S480.

  According to the mobile control device 200 of the third embodiment, the operator 31 can be warned when the vehicle 20 is controlled so as not to be driven, so that the engine is stopped while the vehicle 20 is traveling. The safety in the case is improved.

  In the description of Embodiments 1 to 3 described above, the in-vehicle control unit 4, the vehicle drive control unit 5, and the warning information output unit 41 in the moving body control device 200 are each configured as an independent functional block. It may be a functional block. Alternatively, the in-vehicle control unit 4 and the vehicle drive control unit 5 may be combined into one functional block, or the in-vehicle control unit 4 and the warning information output unit 41 may be combined into one functional block. Alternatively, these functional blocks may be configured in any other combination.

  1 IC card, 2 IC card reader, 4 onboard control unit, 5 vehicle drive control unit, 6 communication button, 7 DSRC onboard unit, 8 DSRC onboard unit antenna, 9 DSRC controller antenna, 20 vehicle, 23 entrance / exit gate, 31 Operator, 34 Direction sensor, 41 Warning information output unit, 50 DSRC controller, 51 Entrance / exit management device, 52 Gate opening / closing control device, 53 Security area, 100 Entrance / exit management system, 110 Entrance / exit management system, 120 ID information transmission Device, 130 ID information receiving device, 200 mobile control device, 901 display device, 911 CPU, 912 bus, 913 ROM, 914 RAM, 915 communication board, 920 magnetic disk device, 921 OS, 923 program group, 924 file group.

Claims (10)

In the moving body control device that controls the state of the moving body,
A storage medium reading unit that periodically reads the authority data from a storage medium in which authority data for determining the authority of the driver of the moving object is stored;
An authority determination unit that determines whether or not the driver has the authority to drive the mobile body based on the authority data read by the storage medium reading unit;
When it is determined by the authority determination unit that the driver has the authority to drive the mobile body, the mobile body is controlled to be operable, and the authority determination unit controls the mobile body to the driver. A moving body control device comprising: a moving body control unit that controls the moving body to a state incapable of driving when it is determined that there is no authority to drive. The storage medium reading unit
When the inquiry signal for inquiring whether there is the authority data to be read is periodically transmitted, and the authority data transmission request signal for the transmitted inquiry signal is received from the storage medium, the authority data is read from the storage medium. The moving body control device according to claim 1, wherein: The mobile control unit is
The mobile body according to claim 2, wherein when the storage medium reading unit does not receive a transmission request signal for the authority data in response to the inquiry signal, the mobile body is controlled to be inoperable. Control device. The mobile control unit is
When the storage medium reading unit has not received the authority data transmission request signal in response to the inquiry signal for a first predetermined number of times or more, the storage medium is controlled to be inoperable. Item 4. The moving body control device according to Item 3. The mobile control unit is
When the authority determining unit determines that the driver does not have the authority to drive the mobile body more than a second predetermined number of times, the mobile body is controlled to be in an inoperable state. The moving body control device according to any one of claims 1 to 4. The mobile control unit is
Outputting warning information for warning the driver when it is determined that the driver has no authority to drive the moving body by the authority determination unit more than the second predetermined number of times. The moving body control device according to claim 5, wherein:   When the mobile body control device according to any one of claims 1 to 6 is mounted and the power source of the mobile body control device is not turned on, the mobile body is set in an inoperable state. Moving body. In the moving body control method of the moving body control device for controlling the state of the moving body,
A storage medium reading step for periodically reading the authority data from a storage medium storing authority data for the storage medium reader to determine authority of the driver of the mobile unit;
An authority determination step for determining whether or not the driver has the authority to drive the moving body based on the authority data read by the storage medium reading step by the authority determination unit;
When it is determined by the authority determination step that the driver has the authority to drive the mobile body, the mobile body control unit controls the mobile body to be operable, and the authority determination step causes the driver to And a moving body control step for controlling the moving body to an inoperable state when it is determined that the mobile body is not authorized to drive the moving body. . The storage medium reading step includes:
The storage medium reading unit periodically transmits an inquiry signal asking whether there is the authority data to be read, and when the transmission request signal of the authority data for the transmitted inquiry signal is received from the storage medium, the storage The mobile body control method of the mobile body control device according to claim 8, wherein the authority data is read from a medium. The moving body control step includes:
10. The mobile body control unit controls the mobile body to an inoperable state when it does not receive the authority data transmission request signal for the inquiry signal in the storage medium reading step. The moving body control method of the moving body control apparatus described in 1.

Images