JP2013147172A - Vehicle authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a vehicle authentication system configured to prevent a vehicle from starting by prohibiting a power source from being started unnecessarily even when an irregular portable device or in-vehicle determination device is mounted.SOLUTION: A system includes a portable device 1, an SSU 20 for determining whether the portable device 1 is legitimate or not, and an HV-ECU 21 that comprises: a determination part 21a for determining whether the SSU 20 is legitimate or not; a control part 21b that permits start of a hybrid system 3 when the portable device 1 and the SSU 20 are legitimate; and a flag setting part 21c for setting an YET flag when a high-voltage relay 33 is OFF and when the portable device 1 or the SSU 20 is not legitimate, or setting a NG flag when the high-voltage relay 33 is turned ON and when the portable device 1 or the SSU 20 is not legitimate.

Description

  The present invention includes a portable device, an in-vehicle determination device that determines whether the portable device is genuine, a determination unit that determines whether the in-vehicle determination device is genuine, and the in-vehicle device. Control for permitting the vehicle to be in a travelable state when the determination device determines that the portable device is authentic and the determination unit determines that the in-vehicle determination device is authentic. The present invention relates to a vehicular authentication system that includes a vehicle-mounted power control device having a unit.

  Authentication for vehicle that allows the vehicle to run by permitting the start of the power source such as the engine, etc., when authentication communication is performed between the portable device carried by the occupant and the in-vehicle device, and the authentication is obtained A system is known as a prior art (see, for example, Patent Document 1).

  In Patent Document 1, when the driver operates the engine start switch, the smart keyless control means sequentially transmits LF signals from the smart keyless LF transmission antenna and the LF transmission / immobilizer reception antenna. If there is a normal response to the LF signal transmitted from either the smart keyless LF transmission antenna or the LF transmission / immobilizer reception antenna, the smart keyless control unit performs smart keyless authentication, and if there is no response, As an emergency such as a failure of the portable device, the immobilizer control unit transmits an LF signal from the antenna for both LF transmission / immobilizer reception. If there is a normal response to the LF signal transmitted from the LF transmission / immobilizer reception antenna, the key identification code received by the LF transmission / immobilizer reception antenna is transmitted to the engine control unit via the immobilizer control unit, Immobilizer authentication is performed. When smart keyless authentication or immobilizer authentication is obtained, engine start is permitted.

JP 2008-196228 A

  By the way, if the above authentication is not obtained, even if the authentication is obtained afterwards, if the start of the power source is not permitted until the ignition is turned off and the vehicle is not allowed to run, The control does not depend on the authentication result, and the convenience of the vehicle authentication system in which the occupant carries the portable device is impaired. In this regard, it is desirable to suppress the start of the power source from being prohibited until the vehicle is allowed to run even if the authentication is not obtained once until the ignition is turned off carelessly. .

  The present invention has been made in view of the above points, and the problem is that a portable device, an in-vehicle determination device that determines whether the portable device is genuine, and the in-vehicle determination device. A determination unit that determines whether or not the mobile device is genuine, and the in-vehicle determination device determines that the portable device is authentic and the determination unit determines that the in-vehicle determination device is normal In a vehicle authentication system comprising a vehicle-mounted power control device having a control unit that allows a vehicle to be in a state where the vehicle can run when the portable device is not legitimate or on-vehicle Even when the determination device is not authorized, it is intended to prevent the vehicle from being allowed to travel inadvertently leaving the start of the power source unacceptable.

  In order to solve the above-described problem, the present invention is a non-authorization indicating that the vehicle is not allowed to run when the portable device is not a regular one or when the in-vehicle determination device is not a regular one. Whether to set a permission flag or a prohibition flag indicating that it is prohibited in the ignition cycle to make the vehicle ready to run, the state of a predetermined in-vehicle device, the state of the vehicle authentication system, the operation state of the driver, It is determined based on the necessity to set a prohibition flag.

  Specifically, the present invention relates to a portable device, an in-vehicle determination device that determines whether the portable device is authentic, and a determination that determines whether the in-vehicle determination device is authentic. And the vehicle-mounted determination device determine that the portable device is legitimate and the determination unit determines that the vehicle-mounted determination device is legitimate. The following solution was taken for a vehicular authentication system including an in-vehicle power control device having a control unit that permits the above.

  That is, according to the first aspect of the present invention, in the in-vehicle power control device, the in-vehicle determination device determines that the portable device is authorized, and the determination unit determines that the in-vehicle determination device is authorized. A permission flag is set to indicate that the vehicle is allowed to run regardless of whether or not the predetermined vehicle-mounted device is in a predetermined state. When the portable device is determined not to be genuine by the vehicle-mounted determination device or when the vehicle determination device is determined not to be genuine by the determination unit A non-permission flag indicating that it is not permitted to make the vehicle ready to travel is set, while the in-vehicle determination device performs the above-mentioned When the vehicle is determined not to be authorized or when the determination unit determines that the in-vehicle determination device is not authorized, it is prohibited in the ignition cycle that the vehicle is allowed to travel. A flag setting unit that sets a prohibition flag indicating that, when the prohibition flag is set by the flag setting unit, the control unit does not allow the vehicle to travel in the ignition cycle. It is comprised so that it may be comprised.

  According to this, when the predetermined in-vehicle device is not in a predetermined state, when the in-vehicle determination device determines that the portable device is not normal or the determination unit does not have the normal in-vehicle determination device When the flag is determined, the flag setting unit is not a prohibition flag indicating that the vehicle is allowed to run in the ignition cycle, but is not allowed to make the vehicle ready to run. A state in which the vehicle is allowed to run without being allowed to start the power source carelessly even when the portable device is not authorized or the vehicle-mounted determination device is not authorized. Therefore, it is possible to suppress both the convenience and security of the vehicle authentication system.

  In a second aspect based on the first aspect, the flag setting unit is configured such that the vehicle-mounted device is in the predetermined state while the vehicle is being driven by the control unit. Then, the portable device is determined to be not legitimate by the vehicle-mounted determination device for reasons other than at least one failure of the vehicle-mounted determination device, the vehicle-mounted power control device, and the information communication means between them. When the determination unit determines that the in-vehicle determination device is not legitimate, the permission flag is set while the in-vehicle determination device determines that the portable device is not legitimate due to the failure. When the determination unit determines that the in-vehicle determination device is not authorized, the prohibition flag is set. It is an butterfly.

  According to this, when the vehicle is being driven by the control unit, the in-vehicle device is in a predetermined state, and the in-vehicle determination device, the in-vehicle power control device, and between these When the on-vehicle determination device determines that the portable device is not genuine due to a failure other than at least one failure of the information communication means (for example, the occupant has taken the portable device out of the passenger compartment) When it is determined that the device is not legitimate, the flag setting unit sets a permission flag on the assumption that it is less necessary to prevent the vehicle from running. On the other hand, when the on-vehicle determination device determines that the portable device is not legitimate due to at least one failure of the on-vehicle determination device, the on-vehicle power control device, and the information communication means between them, or on-vehicle determination by the determination unit When it is determined that the device is not legitimate, the flag setting unit preferably sets the prohibition flag to prevent the vehicle from being allowed to travel from the viewpoint of security when there is such a failure. Stand up. As described above, when the on-vehicle determination device determines that the portable device is not legitimate or when the determination unit determines that the on-vehicle determination device is not legitimate, the vehicle is set by setting a flag suitable for the cause. The convenience and security of the authentication system can be further improved.

  According to a third invention, in the first or second invention, the flag setting unit determines that the portable device is genuine by the vehicle-mounted determination device, and the vehicle-mounted determination device is regular by the determination unit. When it is determined that the vehicle is in a state where the vehicle can run by the control unit, the vehicle-mounted device is in the predetermined state and the driver performs a predetermined operation. Even if it is a time when it is stopped that the said vehicle is made into the state which can drive | work, it is comprised so that the said permission flag may be set.

  According to this, when the on-vehicle determination device determines that the portable device is authentic and the determination unit determines that the on-vehicle determination device is authentic, the flag setting unit causes the control unit to drive the vehicle. Even when the on-vehicle equipment is in a predetermined state and the driver has made a predetermined operation while the vehicle is being brought into a possible state, Since it is necessary to make the vehicle ready to run again, the permission flag is set, so that the vehicle can be made to run again and the convenience of the vehicle authentication system can be further enhanced. it can.

  According to a fourth aspect of the present invention, in any one of the first to third aspects, the flag setting unit sets the non-permission flag, and the vehicle is ready to travel. The above-described prohibition flag is set.

  According to this, when the non-permission flag is set and the vehicle is ready to run, the flag setting unit sets the prohibition flag, so that the vehicle can be run by unauthorized means. Therefore, it is possible to suppress the loss of security.

  According to a fifth invention, in any one of the first to fourth inventions, the flag setting unit is configured so that the vehicle-mounted device is in a state where the vehicle is being driven by the control unit. Even when the vehicle is in a predetermined state, when it is determined that there is no need to prohibit the vehicle from being allowed to travel in the ignition cycle, the vehicle-mounted determination device determines that the portable device is Even if it is determined that it is not a thing or when the on-vehicle determination device is determined not to be genuine by the determination unit, the non-permission flag is set. is there.

  According to this, even when the vehicle-mounted device is in a predetermined state while the vehicle is being driven by the control unit, it is the ignition cycle that makes the vehicle ready to run. When it is determined that there is no necessity for prohibition, even when the in-vehicle determination device determines that the portable device is not authorized or when the determination unit determines that the in-vehicle determination device is not authorized When the flag setting unit sets the non-permission flag, it is determined that there is no need to prohibit the vehicle from being allowed to travel in the ignition cycle, so that the vehicle is inadvertently allowed to travel. Can be prevented from being prohibited during the ignition cycle, and the convenience of the vehicle authentication system can be prevented from being impaired. It can be.

  According to the present invention, when a predetermined in-vehicle device is not in a predetermined state, when the in-vehicle determination device determines that the portable device is not normal, or the determination unit determines that the in-vehicle determination device is normal. If it is determined that the vehicle is not in the ignition cycle, the flag setting unit does not permit the vehicle to be allowed to travel, but is not a prohibition flag indicating that the vehicle is allowed to travel in the ignition cycle. The vehicle is allowed to run without carelessly starting the power source even when the portable device is not authorized or the vehicle-mounted determination device is not authorized. It is possible to prevent the state from being set.

It is a block diagram which shows the authentication system for vehicles which concerns on embodiment of this invention. It is a graph for demonstrating how to set a flag. It is a flowchart which shows the flag setting control by HV-ECU.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a block diagram illustrating a vehicle authentication system (also referred to as a vehicle power start system) mounted on a hybrid vehicle (hereinafter simply referred to as a vehicle) according to an embodiment of the present invention. A portable device 1 carried by the occupant and an in-vehicle device 2 mounted on the vehicle are provided.

  The portable device 1 has a portable device control unit 10. The portable device control unit 10 can receive and transmit signals from a receiving antenna 11 that receives a request signal from the in-vehicle device 2 and a transmitting antenna 12 that wirelessly transmits a portable device ID signal including the ID code of the portable device 1. It is connected to the. When the reception antenna 11 receives the request signal from the in-vehicle device 2, the portable device control unit 10 receives the received signal and causes the portable antenna ID signal including the ID code of the portable device 1 to be transmitted from the transmission antenna 12. .

  In addition, a mechanical key (not shown) for starting a hybrid system 3 (power source), which will be described later, is attached to and detached from the portable device 1 when the battery of the portable device 1 runs out or when the vehicle authentication system does not operate. It is stored freely. This mechanical key has a built-in transponder in which an internal antenna and an IC for storing an ID code are stored.

  The vehicle-mounted device 2 includes a smart start control unit (corresponding to a vehicle-mounted determination device; hereinafter referred to as SSU) 20 and an HV control unit (corresponding to a vehicle-mounted power control device; hereinafter referred to as HV-ECU) 21. . The SSU 20 stores an indoor transmission antenna 22 for wirelessly transmitting a request signal to the portable device 1, an in-vehicle reception antenna 23 for receiving a portable device ID signal from the portable device 1, and an ID code of the portable device 1. A memory 24 for storing, a shift position detection sensor 25 for detecting the shift position of the vehicle, a brake pedal operation detection sensor 26 for detecting that the brake pedal of the vehicle has been depressed, and a state in which the vehicle can run. The smart start switch 27 and the HV-ECU 21 are connected so as to be able to exchange signals.

  The SSU 20 periodically determines whether or not the portable device 1 is genuine, and a power supply position selection for selecting and setting one power supply position from a plurality of power supply positions (details will be described later). Part 20b. The indoor transmission antenna 22 includes a front transmission antenna and a rear transmission antenna (not shown) provided at two locations on the vehicle front side of the instrument panel located in front of the passenger seat and on the vehicle rear side of the seat. . Each of these transmission antennas is configured to transmit a request signal into the vehicle interior within a substantially spherical range around the transmission antenna, and to overlap these ranges. The in-vehicle receiving antenna 23 supplies the portable ID signal received from the portable device 1 to the SSU 20. In the memory 24, the ID code of the portable device 1 and the ID code of the SSU 20 are registered in advance. When the hybrid system 3 is stopped, when a passenger presses the smart start switch 27, a request signal is transmitted from the indoor transmission antenna 22. The portable device 1 that has received the request signal from the indoor transmitting antenna 22 returns a portable device ID signal, the portable device ID signal is received by the in-vehicle receiving antenna 23, and the ID code in the portable device ID signal is verified. Is performed by the determination unit 20a. When the authentication of the ID code is obtained, it is determined that the portable device 1 is a legitimate one existing in the vehicle interior. On the other hand, when the authentication is not obtained, it is determined that the portable device 1 is not a legitimate one.

  The shift position detection sensor 25 supplies the detection signal to the SSU 20. The brake pedal operation detection sensor 26 supplies a brake pedal operation signal to the SSU 20 when the brake pedal is depressed. The smart start switch 27 supplies an operation signal to the SSU 20 when it is pressed. Then, the power position selector 20b selects and sets one power position from a plurality of power positions based on the output signals of the shift position detection sensor 25, the brake pedal operation detection sensor 26, and the smart start switch 27. A selection signal including the result is supplied to the HV-ECU 21 (when a later-described HV start position is selected and set, a hybrid system start signal is supplied to the HV-ECU 21 as a selection signal) and the vehicle is mounted on the basis of the selected and set power supply position. Control the power supply to the equipment.

  The power supply position includes an OFF position, an ACC position, an ignition ON position, and an HV start position. The ignition ON position includes a Ready-OFF position and a Ready-ON position based on the hybrid start state. In the following description, a position other than the Ready-ON position is also referred to as a Ready-OFF position including an OFF position or an ACC position. If the smart start switch 27 is pressed without depressing the brake pedal when the shift position is the P position, the power supply position transitions in the order of the OFF position, the ACC position, and the ignition ON position. If the smart start switch 27 is pressed while depressing the brake pedal when the shift position is the P position, the power position is the OFF position, the ACC position, or the ignition ON position, the power position changes to the HV start position. To do. On the other hand, when the smart start switch 27 is pressed when the power supply position is the ignition ON position or the HV start position, the power supply position transitions to the OFF position. That is, when the smart start switch 27 is pressed at the Ready-ON position, a transition request to the Ready-OFF position (Ready-OFF request) is made.

  In the OFF position corresponding to the power OFF state, power supply to the in-vehicle device is interrupted. In the ACC position, power is supplied to accessories such as audio and air conditioners. In the ignition ON position, power is further supplied to equipment necessary for vehicle travel. At the HV start position, the start-up process of the hybrid system 3 is performed by the HV-ECU 21 so that the vehicle can run. After the start process is started, when a predetermined condition is satisfied (details will be described later), a transition is made to the Ready-ON position. The period from the transition to the HV start position to the transition to the Ready-ON position (that is, the start processing period of the hybrid system 3) is about 1 second. In the Ready-ON position, the vehicle can run.

  The hybrid system 3 is connected to the HV-ECU 21 so that signals can be exchanged. The hybrid system 3 includes a gasoline engine 30, an electric motor 31, a high voltage battery 32, and a high voltage relay 33 provided between the electric motor 31 and the high voltage battery 32. The high-voltage relay 33 intermittently energizes the electric motor 31 and the high-voltage battery 32, and has a current limiting resistor (not shown) that limits the flow of a large inrush current. . In the present embodiment, the high voltage relay 33 can be turned on only once per ignition ON.

  The HV-ECU 21 controls the overall operation of the vehicle including the hybrid system 3. When the SSU 20 determines that the portable device 1 is authorized, the HV-ECU 21 determines whether the SSU 20 is authorized. Determination unit 21a that automatically determines, and when this determination unit 21a determines that the SSU 20 is genuine, control that permits the hybrid system 3 to start (that is, to make the vehicle ready to run) Part 21b and an OK flag (corresponding to a permission flag) indicating that the hybrid system 3 is permitted to be started, and the hybrid system 3 is not permitted to start (that is, the hybrid system 3 is started YET flag (corresponding to a non-permission flag) indicating that prohibition is suspended in the ignition cycle, or In the ignition cycle to start the Brides system 3 and a flag setting unit 21c which sets the NG flag (corresponding to prohibition flag) indicating that the prohibited. Note that only one of these flags can be set, and when one flag is set, the remaining two flags are cleared.

  A memory 28 for storing the ID code of the SSU 20 is connected to the HV-ECU 21 so that signals can be exchanged. In this memory 28, the ID code of the SSU 20 is registered in advance. When it is determined that the portable device 1 is genuine when the hybrid system 3 is stopped, a determination signal including the determination result is transmitted from the SSU 20, and the HV-ECU 21 that receives the signal from the SSU 20 receives the determination signal. Returns a request signal. The SSU 20 that has received the request signal from the HV-ECU 21 returns an SSUID signal including the ID code of the SSU 20, receives the SSUID signal by the HV-ECU 21, and further determines the ID code in the SSUID signal by the determination unit 21a. To do. When the authentication of this ID code is obtained, it is determined that the SSU 20 is authentic. On the other hand, when the authentication is not obtained, it is determined that the ID code is not authentic.

  The flag setting unit 21c needs to set the determination results of the determination units 20a and 21a of the SSU 20 and the HV-ECU 21, the state of the high-voltage relay 33, the state of the vehicle authentication system, the operation state of the driver, and the NG flag. Based on this, an OK flag, a YET flag, or an NG flag is set.

  The details will be described below with reference to FIG. FIG. 2 is a graph for explaining how to set the flag. The vertical axis indicates the hybrid system start state, and the horizontal axis indicates time.

  When the determination unit 20a of the SSU 20 determines that the portable device 1 is authorized and the determination unit 21a of the HV-ECU 21 determines that the SSU 20 is authorized, the high-voltage relay 33 (“predetermined vehicle-mounted” The OK flag is set regardless of whether or not the “device” corresponds to the ON state (corresponding to the “predetermined state”). Further, when the high voltage relay 33 is in the OFF state (that is, when the high voltage relay 33 is not in the ON state), the determination unit 20a of the SSU 20 determines that the portable device 1 is not genuine. When the determination unit 21a of the HV-ECU 21 determines that the SSU 20 is not legitimate, the YET flag is set. On the other hand, when the high-voltage relay 33 is in the ON state (hereinafter), when the determination unit 20a of the SSU 20 determines that the portable device 1 is not legitimate, or the determination unit 21a of the HV-ECU 21 determines the SSU 20 When it is determined that is not legitimate, an NG flag is set.

  Further, in the start-up process period of the hybrid system 3 (that is, during the time when the vehicle is being driven by the control unit 21b), the high voltage relay 33 is turned on, and the SSU 20, HV− Due to a failure other than at least one failure of the information communication means between the ECU 21 and the SSU 20 and the HV-ECU 21 (for example, the occupant took the portable device 1 out of the passenger compartment), the determination unit 20a of the SSU 20 causes the portable device 1 to Is determined to be not legitimate, or when the SSU 20 is determined not to be legitimate by the judgment unit 21a of the HV-ECU 21, an OK flag is set. On the other hand, during the start-up process period of the hybrid system 3, at least one failure of the SSU 20, the HV-ECU 21, and the information communication means between the SSU 20 and the HV-ECU 21 (for example, the failure of the ID code verification function or the SSU 20 and the HV- When the portable unit 1 is determined not to be genuine by the determination unit 20a of the SSU 20 or due to the determination unit 21a of the HV-ECU 21 due to the disconnection between the ECUs 21), Set the NG flag.

  In addition, during the start-up processing period of the hybrid system 3, the high-voltage relay 33 is turned on and the driver performs an operation for changing the shift position from the P position to the N position (corresponding to “predetermined operation”). Even when the starting process of the hybrid system 3 is stopped, the determination unit 20a of the SSU 20 determines that the portable device 1 is genuine, and the determination unit 21a of the HV-ECU 21 determines that the SSU 20 is normal. If it is determined, the OK flag is set.

  Further, when the YET flag is set and the hybrid system start state transitions to the Ready-ON position (that is, the vehicle is ready to run), the NG flag is set.

  Further, even if the high voltage relay 33 is turned on during the start-up process period of the hybrid system 3, the hybrid system 3 is started because the current limiting resistance of the high voltage relay 33 is under overheat protection. When it is determined that there is no need to prohibit the ignition cycle in the ignition cycle, when the determination unit 20a of the SSU 20 determines that the portable device 1 is not normal, or when the determination unit 21a of the HV-ECU 21 determines that the SSU 20 is normal Even when it is determined that it is not, the YET flag is set.

  As can be seen from the above, when the high-voltage relay 33 is in the OFF state during the start-up process period of the hybrid system 3, the flag is set to OK or YET based on the determination results of the determination units 20a and 21a of the SSU 20 and the HV-ECU 21. Transition is possible only between them. On the other hand, when the high voltage relay 33 is in the ON state during the start-up processing period of the hybrid system 3, the flag is set between OK and YET based on the determination results of the determination units 20a and 21a of the SSU 20 and the HV-ECU 21. Only a transition, a transition from YET to NG, and a transition from OK to NG are possible. In this way, the NG flag is restricted from being raised during the start-up process period of the hybrid system 3.

  When the HV start position is selected and set by the power supply position selection unit 20b, the control unit 21b performs a start process of the hybrid system 3. Specifically, when the start processing of the hybrid system 3 is completed (that is, when the hybrid system start state is the Ready-ON position), when the OK flag is set by the flag setting unit 21c, the hybrid system start state is changed. The Ready-ON position is maintained (i.e., the vehicle is maintained in a travelable state). On the other hand, when the NG flag is set by the flag setting unit 21c, the hybrid system start state is set to the Ready-OFF position, and the start of the hybrid system 3 is stopped (that is, the vehicle travelable state is stopped). In this case, the hybrid system 3 cannot be restarted in the same ignition cycle (that is, the period from when the ignition is turned on to when the ignition is turned off). That is, once the ignition is turned off, the operation for starting the hybrid system 3 has to be performed again as described above (that is, the smart start switch 27 is pressed again while depressing the brake pedal).

Further, during the start-up process period of the hybrid system 3, the start-up process of the hybrid system 3 is stopped when the high-voltage relay 33 is turned on and the driver performs an operation of changing the shift position from the P position to the N position. Even when the determination unit 20a of the SSU 20 determines that the portable device 1 is genuine and the determination unit 21a of the HV-ECU 21 determines that the SSU 20 is genuine, as described above. Set the OK flag. In this case, the hybrid system 3 can be restarted in the same ignition cycle.
Specifically, when the operation for setting the shift position to the N position is performed while the high voltage relay 33 is in the OFF state, the starting process of the hybrid system 3 is stopped, and the hybrid system starting state transitions to the Ready-OFF position ( (See the dashed line in FIG. 2). On the other hand, when the operation for setting the shift position to the N position is performed while the high voltage relay 33 is in the ON state, the starting process of the hybrid system 3 is stopped, but the high voltage relay 33 remains in the ON state ( (See the two-dot chain line in FIG. 2). In any case, in order to restart the hybrid system 3, the operation for returning the shift position to the P position is performed, and then the operation for starting the hybrid system 3 is performed again as described above (that is, again, The smart start switch 27 is pressed while depressing the brake pedal).

  In the present embodiment, the control unit 21b can recognize only the NG flag when the high-voltage relay 33 is turned on. Therefore, when the NG flag is not set at the end of the starting process of the hybrid system 3, the hybrid system starting state is maintained at the Ready-ON position as described above.

  Hereinafter, the flag setting control by the HV-ECU 21 will be described with reference to the flowchart shown in FIG. In the initial state, all flags are cleared (OK flag → 0, YET flag → 0, NG flag → 0).

  First, when the shift position is at the P position, pressing the smart start switch 27 while depressing the brake pedal turns on the ignition (step S1), and the YET flag is set (YET flag → 1) (step S2). ).

  In the subsequent step S3, it is determined whether or not the ID code collation result of the portable device 1 and the SSU 20 is enable for which any ID code authentication has been obtained. In step S3, the high voltage relay 33 is in an OFF state. If the determination result in step S3 is YES and enable, the process proceeds to step S4. On the other hand, if the determination result is NO and one of the ID codes cannot be authenticated, the process proceeds to step S12.

  In step S4, an OK flag is set (OK flag → 1). In subsequent step S5, it is determined whether or not the driver has performed an operation of changing the shift position from the P position to the N position. If the determination result in step S5 is YES and the operation is performed, the process returns to step S4. If the determination result is NO and the operation is not performed, the process proceeds to step S6.

  In step S6, it is determined whether or not the periodic collation result of the ID codes of the portable device 1 and the SSU 20 is enable. If the determination result in step S6 is YES and enable, the process returns to step S4. If the determination result is NO and disable, the process proceeds to step S7.

  In step S <b> 7, it is determined whether or not the high voltage relay 33 is turned on during the start-up process period of the hybrid system 3. If the determination result in step S7 is YES and the ON state is entered, the process proceeds to step S8. If the determination result is NO and the OFF state is established, the process proceeds to step S12.

  In step S8, it is determined whether or not at least one of the SSU 20, the HV-ECU 21, and the information communication means between the SSU 20 and the HV-ECU 21 has failed. If the determination result in step S8 is YES and the failure occurs, the process proceeds to step S9. If the determination result is NO and the failure does not occur, the process returns to step S4.

In step S9, it is determined whether or not the current limiting resistor of the high voltage relay 33 is in overheat protection. If the determination result in step S9 is YES and overheat protection is not in progress, the process proceeds to step S10. If the determination result is NO and overheat protection is in progress, the process proceeds to step S12.
In step S10, an NG flag is set (NG flag → 1). Thus, when the NG flag is set, the starting process of the hybrid system 3 is stopped and the hybrid system starting state is set to the Ready-OFF position. In a succeeding step S11, it is determined whether or not the ignition is turned off. If the determination result in step S11 is NO and the ignition is on, the process returns to step S10 regardless of whether the periodic verification results of the ID codes of the portable device 1 and the SSU 20 are enabled, while the determination result is If the ignition is turned off with YES, the process proceeds to the end. Note that the periodic verification of the ID codes of the portable device 1 and the SSU 20 continues until the ignition is turned off.

  In step S12, a YET flag is set. In a succeeding step S13, it is determined whether or not the periodic collation result of the ID codes of the portable device 1 and the SSU 20 is enable. If the determination result in step S13 is YES and enable, the process proceeds to step S4. If the determination result is NO and disable, the process proceeds to step S14.

  In step S14, it is determined whether or not the hybrid system start state is the Ready-ON position. If the determination result of step S14 is YES and the position is the Ready-ON position, the process proceeds to step S10. On the other hand, if the determination result is NO and the position is the Ready-OFF position, the process returns to step S12.

  Note that the flag setting control ends (ie, proceeds to the end) when the ignition is turned off.

-Effect-
As described above, according to the present embodiment, when the high-voltage relay 33 is in the OFF state and the determination unit 20a of the SSU 20 determines that the portable device 1 is not legitimate, or the determination unit of the HV-ECU 21 When it is determined by 21a that the SSU 20 is not genuine, the flag setting unit 21c starts the hybrid system 3 instead of the NG flag indicating that starting the hybrid system 3 is prohibited in the ignition cycle. Therefore, even if the portable device 1 is not authorized or the SSU 20 is not authorized, the start of the hybrid system 3 is inadvertently prohibited (prohibited). , It is possible to prevent the hybrid system 3 from starting.

  In addition, in the start-up process period of the hybrid system 3, the high voltage relay 33 is turned on, and at least one of the SSU 20, the HV-ECU 21, and the information communication means between the SSU 20 and the HV-ECU 21 is used. When it is determined by the determination unit 20a of the SSU 20 that the portable device 1 is not authorized due to a cause other than a failure or when the determination unit 21a of the HV-ECU 21 determines that the SSU 20 is not authorized, the flag setting unit 21c Therefore, an OK flag indicating that the hybrid system 3 is permitted to be started is set on the assumption that the necessity of not starting the hybrid system 3 is low. On the other hand, in the start-up process period of the hybrid system 3, the high voltage relay 33 is in the ON state, and is at least one of the SSU 20, the HV-ECU 21, and the information communication means between the SSU 20 and the HV-ECU 21. When it is determined that the portable device 1 is not authorized by the determination unit 20a of the SSU 20 due to a failure or when the determination unit 21a of the HV-ECU 21 determines that the SSU 20 is not authorized, the flag setting unit 21c When there is such a failure, an NG flag is set as it is preferable not to start the hybrid system 3 from the viewpoint of security. As described above, when the determination unit 20a of the SSU 20 determines that the portable device 1 is not legitimate or when the determination unit 21a of the HV-ECU 21 determines that the SSU 20 is not legitimate, the flag suitable for the cause Can stand up.

  When the determination unit 20a of the SSU 20 determines that the portable device 1 is genuine and the determination unit 21a of the HV-ECU 21 determines that the SSU 20 is genuine, the flag setting unit 21c causes the hybrid system 3, when the high-voltage relay 33 is turned on and the driver performs an operation to change the shift position from the P position to the N position, and thus the start process of the hybrid system 3 is stopped. However, since it is necessary to make the hybrid system 3 startable again, the OK flag is set, so that the hybrid system 3 can be started again in the same ignition cycle.

  Further, when the YET flag is set and the hybrid system start state becomes the Ready-ON position, the flag setting unit 21c sets the NG flag, so that an illegal means (for example, an illegal Ready-ON is set). The start of the hybrid system 3 can be suppressed by the request for transition to a position).

  Further, even if the high voltage relay 33 is turned on during the start-up process period of the hybrid system 3, the hybrid system 3 is started because the current limiting resistance of the high voltage relay 33 is under overheat protection. When it is determined that there is no need to prohibit the ignition cycle in the ignition cycle, when the determination unit 20a of the SSU 20 determines that the portable device 1 is not normal, or when the determination unit 21a of the HV-ECU 21 determines that the SSU 20 is normal Even when it is determined that it is not, the flag setting unit 21c sets the YET flag, so that the hybrid system 3 is inadvertently started during overheating protection of the current limiting resistor of the high voltage relay 33. Can be inhibited from being prohibited in the ignition cycle.

(Other embodiments)
In the above embodiment, the vehicle authentication system is applied to a hybrid vehicle. However, the present invention is not limited to this, and may be applied to, for example, an electric vehicle or an engine vehicle. In the case of an engine vehicle, cranking is equivalent to the starting process of the hybrid system 3.

  Moreover, in the said embodiment, although collation of ID code was utilized for determining with the portable apparatus 1 and SSU20 being regular, it is not restricted to this, You may utilize another means.

  Moreover, in the said embodiment, although the determination part 21a, the control part 21b, and the flag setting part 21c were made into a different body in HV-ECU21, it is not restricted to this, For example, you may integrate these.

  Moreover, in the said embodiment, although SSU20 and HV-ECU21 were set as a different body, you may integrate these, for example not only in this.

  Moreover, in the said embodiment, although the vehicle equipment 2 was comprised by two units, SSU20 and HV-ECU21, it may comprise not only this but 3 or more units, for example.

  In the above embodiment, the operation state (control state) of the high voltage relay 33 is used as the flag setting reference. However, the present invention is not limited to this. For example, devices other than the high voltage relay 33 among the devices of the hybrid system 3 are used. The operating state of the device may be used.

  Moreover, in the said embodiment, although the smart start switch was pressed, it is not restricted to this, For example, you may make it rotate.

  The present invention is not limited to the embodiments, and can be implemented in various other forms without departing from the spirit or main features thereof.

  As described above, the above-described embodiment is merely an example in all respects and should not be interpreted in a limited manner. The scope of the present invention is defined by the claims, and is not limited by the specification. Further, all modifications and changes belonging to the equivalent scope of the claims are within the scope of the present invention.

  As described above, in the vehicle authentication system according to the present invention, even when the portable device is not authorized or when the on-vehicle determination device is not authorized, carelessly starting the power source is not permitted, The present invention can be applied to usages that need to prevent the vehicle from being allowed to travel.

DESCRIPTION OF SYMBOLS 1 Portable device 10 Portable device control unit 11 Reception antenna 12 Transmission antenna 2 Vehicle-mounted device 20 SSU (vehicle-mounted determination apparatus)
20a Determination unit 20b Power supply position selection unit 21 HV-ECU (vehicle power control device)
21a Determination unit 21b Control unit 21c Flag setting unit 22 Indoor transmission antenna 23 In-vehicle reception antenna 24 Memory 25 Shift position detection sensor 26 Brake pedal operation detection sensor 27 Smart start switch 28 Memory 3 Hybrid system 30 Gasoline engine 31 Electric motor 32 High voltage battery 33 Relay for high voltage (predetermined in-vehicle equipment)

Claims (5)

A portable machine,
An in-vehicle determination device for determining whether or not the portable device is genuine,
A determination unit that determines whether or not the in-vehicle determination device is genuine, and the in-vehicle determination device determines that the portable device is normal and the determination unit determines that the in-vehicle determination device is normal An on-vehicle power control device that includes a control unit that permits the vehicle to be in a travelable state when it is determined that
The in-vehicle power control device is
Whether the predetermined in-vehicle device is in a predetermined state when the on-vehicle determination device determines that the portable device is authentic and the determination unit determines that the on-vehicle determination device is authentic Regardless of whether or not the vehicle-mounted device is not in the predetermined state, the permission flag is set to indicate that the vehicle is allowed to run, and the vehicle-mounted determination device When the portable device is determined not to be authorized or when the determination unit determines that the in-vehicle determination device is not authorized, the vehicle is not permitted to run. On the other hand, when the in-vehicle device is in the predetermined state and the in-vehicle determination device determines that the portable device is not legitimate or above When the determination unit determines that the in-vehicle determination device is not legitimate, it further includes a flag setting unit that sets a prohibition flag indicating that the vehicle is not allowed to travel in the ignition cycle. And
The vehicular authentication system, wherein the control unit is configured not to make the vehicle travelable in the ignition cycle when the prohibition flag is set by the flag setting unit. The vehicle authentication system according to claim 1,
The flag setting unit is a case where the vehicle-mounted device is in the predetermined state while the vehicle is being driven by the control unit, and the vehicle-mounted determination device and the vehicle-mounted power control. When the portable device is determined not to be authorized by the vehicle-mounted determination device or due to a reason other than at least one failure of the information communication means between the devices, or the vehicle-mounted determination device is authorized by the determination unit When it is determined that the mobile device is not a normal one, the permission flag is set, and when the portable device is determined not to be genuine by the on-vehicle determination device or due to the failure, the on-vehicle determination device is A vehicular authentication system configured to raise the prohibition flag when it is determined that the vehicle is not a vehicle. The vehicle authentication system according to claim 1 or 2,
The flag setting unit is configured such that when the on-vehicle determination device determines that the portable device is authentic and the determination unit determines that the on-vehicle determination device is authentic, the control unit determines that the vehicle While the vehicle is being put into a state where it can be driven, the vehicle is stopped from being put into a state where the vehicle is allowed to run because the in-vehicle device is in the predetermined state and the driver performs a predetermined operation. Even if it is time, it is comprised so that the said permission flag may be set, The authentication system for vehicles characterized by the above-mentioned. In the vehicle authentication system according to any one of claims 1 to 3,
The flag setting unit is configured to set the prohibition flag when the non-permission flag is set and the vehicle is ready to travel. system. In the vehicle authentication system according to any one of claims 1 to 4,
The flag setting unit sets the vehicle in a state where the vehicle can travel even when the vehicle-mounted device is in the predetermined state while the vehicle is being driven by the control unit. When it is determined that it is not necessary to prohibit the ignition cycle in the ignition cycle, when the portable device is determined not to be authorized by the vehicle-mounted determination device, or the vehicle-mounted determination device is authorized by the determination unit Even if it is judged that it is not, it is comprised so that the said disapproval flag may be set, The vehicle authentication system characterized by the above-mentioned.

Images