JP2013194393A - Electronic key registration system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an electronic key registration system capable of performing a key registration with high security even in an off-line area where no network connection can be established.SOLUTION: When a vehicle 1 is in an off-line area where network communication is unavailable, the vehicle 1 creates a ciphertext Dcr by combining a random number and an owner ID and passing it to an on-vehicle apparatus center key Kvc. A registered worker transmits an on-vehicle apparatus ID and the ciphertext Dcr as registration requirement information S1 to a center 25 by a letter, a phone, or the like. The center 25 decrypts the registration requirement information S1 by the on-vehicle apparatus center key Kvc at the center 25 and confirms the owner ID in the registration requirement information S1. When it is a normal owner, a response code is transmitted as registration approval information S2 to the registered worker by a letter, a phone, or the like. The vehicle 1 performs challenge response authentication by the response code at the vehicle 1, and when establishment of the authentication can be confirmed, a key registration is approved.

Description

  The present invention relates to an electronic key registration system for registering an electronic key in a communication target control device.

  As is conventionally known, many vehicles tend to be equipped with an electronic key system that uses an electronic key as a vehicle key. In the electronic key system, the key ID is transmitted from the electronic key to the vehicle wirelessly to perform ID collation. When the ID collation is established, door lock / unlock and engine start are permitted / executed. In this type of electronic key system, it is necessary to register the electronic key to be used in the vehicle in advance. This electronic key registration system is disclosed in, for example, Patent Documents 1 and 2.

JP-A-7-61328 JP 2004-107959 A

  By the way, as an electronic key registration system, adoption of a registration method (online registration method) using network communication (Internet communication) is being studied today. As an example of the online registration method, for example, it is assumed that the center is inquired through network communication, and if user authentication is established at the center, the electronic key registration to the vehicle is permitted. However, since it is also assumed that the user is in an area where network communication is not possible (offline area), there has been a need for technology development that enables key registration in the offline area as an aid for online registration.

  An object of the present invention is to provide an electronic key registration system capable of performing key registration with high security even in an offline area where network connection is not possible.

  In order to solve the above problems, in the present invention, an electronic key can be normally registered in a control device to be communicated by an online registration method in which a registration tool is connected to the network and inquired of the center, but the network is connected. An electronic key registration system that enables the electronic key to be registered in the control device even in an environment incapable of being registered, and a registration request generation step for generating encrypted registration request information on a registration worker side; A registration request information transmitting step for transmitting the registration request information to the center in a format not using a network, and a registration request for decrypting the encrypted registration request information at the center and determining the validity of the registration request information. If the information confirmation step and the validity of the registration request information can be confirmed, the encrypted registration permission Registration permission information transmission step for transmitting information to a registration worker in a format that does not use a network, and registration permission for decrypting the encrypted registration permission information in the control device and determining the validity of the registration permission information The gist of the invention is that it includes an information confirmation step and a key registration permission step for permitting registration of the electronic key to the control device if the validity of the registration permission information can be confirmed.

  According to the configuration of the present invention, in an offline area where network communication is not possible, encrypted registration request information is created on the registration worker side, and this registration request information is transmitted to the center, for example, in writing or by telephone. The validity of the registration request information is authenticated at the center, and if the validity can be confirmed, the registration permission information is transmitted from the center to the registration worker, for example, in writing or by telephone. If the registration permission information is decrypted by the control device and can be correctly decrypted, the registration of the electronic key to the control device is permitted. Therefore, key registration can be performed with high security even in an offline area.

  In the present invention, the registration request information is constructed by a random number having a different value each time it is generated and the owner ID of the communication target, and the registration request information confirmation step decrypts the registration request information. Thus, the gist is to determine the validity of the registration permission information by extracting the owner ID and confirming the owner ID. According to this configuration, since the inquiry partner who desires key registration is determined based on the owner ID, it is possible to accurately check the validity of the inquiry partner.

  In the present invention, the registration request information includes a unique communication target ID of the communication target, and the registration request information confirmation step specifies a communication pair target for which registration is requested based on the communication target ID. The gist is to do. According to this configuration, it is possible to accurately specify the communication target for which the key registration request has been made, based on the communication target ID included in the registration request information.

  The gist of the present invention is that the encryption / decryption of the registration request information uses a control device center dedicated key associated between the control device and the center. According to this configuration, since encryption / decryption is performed using a unique encryption key called a control device center dedicated key, the effect of securing the security of key registration is further enhanced.

  In the present invention, the registration permission information transmitting step generates a response code by encrypting the random number at the center, transmits the response code as the registration permission information to the registration worker, and the registration permission information The gist of the confirmation step is to determine the validity of the registration permission information by comparing the response code acquired from the center with the response code generated in the same manner in the control device. According to this configuration, an inquiry partner who desires key registration is confirmed by challenge response authentication, which further contributes to ensuring the security of key registration.

  According to the present invention, key registration can be performed with high security even in an offline area where network connection is not possible.

1 is a schematic configuration diagram of an electronic key system according to an embodiment. The schematic block diagram of an electronic key registration system (online registration system). 1 is a schematic configuration diagram of an electronic key registration system (offline registration method). The flowchart which shows the operation | movement procedure of an offline registration system. FIG. 5 is a flowchart continued from FIG. 4. FIG. The schematic block diagram of the electronic key registration system (online registration system) of another example.

Hereinafter, an embodiment of an electronic key registration system embodying the present invention will be described with reference to FIGS.
[Electronic key system]
As shown in FIG. 1, the vehicle 1 is provided with an electronic key system 3 that authenticates the validity of the electronic key 2 by bidirectional communication with the electronic key 2 triggered by communication from the vehicle 1. The electronic key 2 is a key capable of wirelessly transmitting an ID (electronic key ID) registered therein to the vehicle 1. Examples of the two-way communication electronic key system 3 include a key operation free system and an immobilizer system. Note that the vehicle 1 corresponds to a communication target.

  The vehicle 1 is provided with a verification ECU 4 that performs ID verification with the electronic key 2, a body ECU 5 that manages the power supply of the on-vehicle electrical components, and an engine ECU 6 that controls the engine, which are connected via a bus 7 in the vehicle. Has been. In the memory 4 a of the verification ECU 4, there are an in-vehicle device ID (vehicle ID) that is a unique ID of the vehicle 1, an electronic key ID registered in the vehicle 1, an encryption key Kcr used for encrypted communication with the electronic key 2, and the like. It is registered. When a plurality of electronic keys 2 are registered in the vehicle 1, a plurality of sets of the electronic key ID and the encryption key Kcr are stored in accordance with this. The verification ECU 4 is connected to a communication device (vehicle transmitter, vehicle receiver) 8 of a key operation free system (LF-UHF communication) and a communication device (immobilizer antenna) 9 of an immobilizer system (LF-LF communication). ing. The verification ECU 4 corresponds to a control device.

  The electronic key 2 is provided with a key control unit 10 that manages the communication operation of the electronic key 2. Similarly to the verification ECU 4, an electronic key ID, an in-vehicle device ID, an encryption key Kcr, and the like are also registered in the memory 10a of the key control unit 10. The key control unit 10 is connected to a communication unit 11 for a key operation free system and a communication unit 12 for an immobilizer system.

  In the case of the key operation free system, when the vehicle is parked, the transmitter outside the communication device LF transmits the request signal Srq to the outside of the vehicle, and returns the ID signal Sid to the electronic key 2 that has received the request signal Srq. Carry out smart verification outside the car). At this time, the in-vehicle device ID and the electronic key ID are authenticated, and encrypted communication using the encryption key Kcr is performed. If smart verification outside the vehicle is established, door locking / unlocking is permitted / executed. When the electronic key 2 is in the vehicle, the in-vehicle transmitter of the communication device 8 starts transmission of the request signal Srq, and performs in-vehicle smart verification in the same manner as outside the vehicle. If in-vehicle smart verification is established, engine start by operating the engine switch 13 is permitted.

  In the case of the immobilizer system, the authentication of the electronic key ID is performed between the vehicle 1 and the electronic key 2 by two-way communication with a short distance (communication distance: about 10 cm) using LF radio waves. Since this immobilizer communication is communication in which electric power radio waves transmitted from the vehicle 1 are used as the power source of the electronic key 2, the electronic key 2 can be operated without a power source. For short-range radio, for example, transponder communication, NFC (Near Field Communication) communication, or the like is used, and encryption communication using the encryption key Kcr is performed.

[Online registration method of electronic key registration system]
As shown in FIG. 2, the electronic key 2 can be registered in the vehicle 1 by the electronic key registration system 14. In this case, each of the verification ECU 4 and the key control unit 10 is provided with registration function units 15 and 16 for performing a key registration operation. The electronic key registration system 14 of this example registers the electronic key 2 in the vehicle 1 by connecting the registration tool 17 to the vehicle 1 by wire and operating a registration tool 17 by a service person.

  The registration tool 17 includes a tool control unit 18 that controls the operation of the registration tool 17, an operation unit 19 that includes various buttons such as a power source, numbers, and characters, and a display unit 20 that displays various screens. . The registration tool 17 includes a wireless communication unit 21 capable of network communication and a connection port unit 22 that performs wired communication with the vehicle 1. The network communication is so-called Internet communication, for example, IP (Internet Protocol) communication. The registration tool 17 can wire-connect the connection port portion 22 and the connection port portion 23 of the vehicle 1 with a cable 24. Short-distance LF bidirectional communication is used for communication between the vehicle 1 and the electronic key 2 at the time of key registration.

  The electronic key registration system 14 of this example is an online registration method in which key registration is performed online with a network connectable center 25. The center 25 is a vehicle information management center that mainly manages the electronic key registration system 14.

  In the case of online registration, when the registration function unit 15 inputs a key registration start command from the registration tool 17, the vehicle-mounted device ID is output as vehicle information to the registration tool 17 (steps 101 and 102). The registered worker (dealer) inputs the worker ID (serviceman ID) to the registration tool 17 (step 103). The registration tool 17 transmits the vehicle-mounted device ID acquired from the vehicle 1 and the serviceman ID input to the registration tool 17 to the center 25 online via network communication (step 104).

  The center 25 authenticates the vehicle-mounted device ID and the serviceman ID received from the registration tool 17, and transmits a registration permission command and an electronic key ID online via network communication if they can be confirmed (step 105). . The registration permission command is a notification that key registration may be executed. At this time, the encryption key Kcr may also be transmitted to the registration tool 17.

  The registration tool 17 transfers the registration permission command and the electronic key ID acquired from the center 25 to the vehicle 1 by wired communication (step 106). That is, the registration permission command and the electronic key ID transmitted from the center 25 to the network are output to the vehicle 1 via the registration tool 17.

  When a registration start command and an electronic key ID are input from the registration tool 17, the registration function unit 15 writes and stores the electronic key ID in the memory 4a using the registration start command as a trigger (step 107). Further, the registration function unit 15 transmits the electronic key ID acquired from the registration tool 17 to the electronic key 2 by LF communication (step 108). At this time, the vehicle-mounted device ID may also be transmitted to the electronic key 2 together. The registration function unit 16 writes and saves the electronic key ID received from the vehicle 1 in the memory 10a (step 109). The online registration key registration is thus completed.

[Offline registration method of electronic key registration system]
As shown in FIG. 3, the electronic key registration system 14 has an offline registration system that can register the electronic key 2 in the vehicle 1 without using network communication. In the case of the offline registration method, as the electronic key 2, a key in which an electronic key ID is written and stored is prepared in advance.

  The tool control unit 18 is provided with an owner ID input unit 26 that acquires an owner ID (owner ID) that is a unique ID of the owner of the vehicle 1. The owner ID is an ID assigned to each owner when registered in the electronic key registration system 14. The owner ID is input by operating the operation unit 19 while viewing the display unit 20 of the registration tool 17. The owner ID input unit 26 transfers the owner ID input to the registration tool 17 to the vehicle 1 by wired communication.

  In the registration function unit 15 and the center 25, an in-vehicle device center key Kvc used for key registration is registered. The in-vehicle device center key Kvc is an encryption key for key registration associated with the vehicle 1 and the center 25 and is assigned to each vehicle 1. The OBE center key Kvc is, for example, an encryption key compliant with AES (Advanced Encryption Standard) encryption, and the OBE center key Kvc corresponds to the control device center key.

  The center 25 is provided with a vehicle-mounted device database 27 for managing which vehicle-mounted device ID and electronic key 2 are registered in which vehicle 1. In the vehicle-mounted device database 27, what vehicle-mounted device center key Kvc is registered in which vehicle 1 (verification ECU 4) is also registered. The center 25 is provided with an owner ID database 28 that collectively manages each ID of the owner who has completed the procedure for using the electronic key registration system 14. The owner ID database 28 manages which owner ID corresponds to which in-vehicle device ID.

  The registration function unit 15 includes a random number generation unit 29 that generates a random number for one-time use, a ciphertext generation unit 30 that can encrypt information, and a registration tool that registers a group of information related to a registration request by wired communication. A registration request information notifying unit 31 for notifying the user 17 is provided. The random number generator 29 generates a different random number code each time it is generated. The ciphertext generation unit 30 generates the ciphertext Dcr by combining the owner ID and the random number and passing this through the vehicle-mounted device center key Kvc. The registration request information notification unit 31 outputs the vehicle-mounted device ID of the vehicle 1 and the generated ciphertext Dcr to the registration tool 17 by wired communication.

  The tool control unit 18 is provided with a registration request information acquisition unit 32 that acquires the vehicle-mounted device ID and the ciphertext Dcr from the vehicle 1. The registration request information acquisition unit 32 displays the acquired vehicle-mounted device ID and ciphertext Dcr on the display unit 20 of the registration tool 17 so that the serviceman can read them. The vehicle-mounted device ID of the vehicle 1 now registered and the ciphertext Dcr acquired by the registration tool 17 are transmitted from the serviceman to the center 25 as registration request information S1 by writing or telephone.

  The center 25 includes a ciphertext decryption unit 33 that decrypts the ciphertext Dcr in the registration request information S1 received by writing or telephone, an owner confirmation unit 34 that authenticates the owner ID obtained by the decryption, and the owner A registration permission information generation unit 35 is provided that generates registration permission information S2 on condition that ID verification is established. The ciphertext decryption unit 33 refers to the OBE database 27 to determine the OBE center key Kvc to be used at this time from the acquired OBE ID, and decrypts the ciphertext Dcr using the OBE center key Kvc. . The owner confirmation unit 34 authenticates the validity of the owner ID by referring to the owner ID database 28. The registration permission information generating unit 35 creates a response code as the registration permission information S2 by passing the random number in the decrypted ciphertext Dcr through the above-described vehicle-mounted device center key Kvc. The registration permission information S2 is transmitted from the center 25 to the service person as permission registration by writing or telephone.

  The registration tool 17 includes a registration permission information input unit 36 that inputs the registration permission information S2 transmitted from the center 25 to the registration tool 17, and a registration permission information notification unit 37 that notifies the vehicle 1 of the input registration permission information S2. And are provided. The registration permission information input unit 36 takes in the registration permission information S <b> 2 input to the registration tool 17 by operating the operation unit 19 while the serviceman looks at the display unit 20. The registration permission information notification unit 37 outputs the acquired registration permission information S2 to the vehicle 1 by wired communication.

  The registration function unit 15 includes a registration permission information authentication unit 38 that authenticates the registration permission information S2 acquired from the registration tool 17, and a key registration permission unit that permits key registration when the validity of the registration permission information S2 can be confirmed. 39 is provided. The registration permission information authentication unit 38 also calculates a response code by passing the random number of the random number generation unit 29 through the vehicle-mounted device center key Kvc of the vehicle 1 and compares it with the response code obtained as the registration permission information S2 from the registration tool 17. The validity of the registration permission information S2 is confirmed by matching challenge response authentication. The key registration permission unit 39 permits the electronic key ID to be registered in the vehicle 1 when the challenge response authentication is confirmed.

Next, the operation of the offline registration method will be described with reference to FIGS. As a premise, the electronic key 2 that has been registered with the electronic key ID is ordered in advance as a registration key.
In step 201, the service person (registration worker) inputs the owner ID to the registration tool 17. At this time, the owner ID input unit 26 takes in the owner ID input to the registration tool 17 and transfers it to the vehicle 1 by wired communication.

In step 202, the random number generation unit 29 generates a random number with a different code each time it is generated.
In step 203, the ciphertext generation unit 30 combines the owner ID and the random number, and passes this through the onboard unit center key Kvc to generate the ciphertext Dcr. The combination means that the owner ID and the random number data group are continuously arranged. Steps 201 to 203 correspond to a registration request generation step.

In step 204, the registration request information notification unit 31 notifies the registration tool 17 of the vehicle-mounted device ID and the ciphertext Dcr as the registration request information S1 by wired communication.
In step 205, the registration request information acquisition unit 32 acquires the vehicle-mounted device ID and the cipher text Dcr, which are the registration request information S 1, from the vehicle 1 and displays them on the registration tool 17. The service person recognizes what the vehicle-mounted device ID and the ciphertext Dcr are by checking this screen.

  In step 206, the service person transmits the vehicle-mounted device ID and the cipher text Dcr displayed on the screen of the registration tool 17 to the center 25 by writing or telephone. That is, in the case of offline registration, network communication between the registration tool 17 and the center 25 is disabled, so the vehicle-mounted device ID and the ciphertext Dcr are personally notified to the center 25. Steps 204 to 206 correspond to registration request information transmission steps.

  In step 207, the ciphertext decryption unit 33 refers to the on-board device database 27 to determine the on-board device center key Kvc to be used at this time, using the acquired on-board device ID as a clue, and to obtain the ciphertext Dcr as the on-board device. The ciphertext Dcr is decrypted by passing it through the center key Kvc. If the ciphertext Dcr can be decrypted correctly, the owner ID input to the registration tool 17 and the random number created by the vehicle 1 are acquired.

  In step 208, the owner confirmation unit 34 refers to the owner ID database 28 managed by the center 25, and confirms whether the owner is a proper owner from the owner ID obtained by decryption. The owner confirmation unit 34 determines that the owner is an authorized owner if the acquired owner ID is registered in the owner ID database 28 and has not been contacted as an abnormal ID. Steps 207 and 208 correspond to a registration request information confirmation step.

  In step 209, the registration permission information generating unit 35 creates a response code as the registration permission information S2 by passing the random number obtained by the decryption through the vehicle-mounted device center key Kvc used in step 207.

  In step 210, the center 25 transmits the generated response code to the service person in writing or by telephone. Steps 209 and 210 correspond to a registration permission information transmission step.

  In step 211, the service person manually inputs the response code acquired from the center 25 into the registration tool 17. At this time, the registration permission information input unit 36 captures the response code.

In step 212, the registration permission information notification unit 37 notifies the vehicle 1 of the response code input to the registration tool 17 by wired communication.
In step 213, the registration permission information authentication unit 38 performs challenge response authentication by comparing the response code input from the registration tool 17 with the response code similarly created in the vehicle 1. Steps 211 to 213 correspond to a registration permission information confirmation step.

  In step 214, when the key registration permission unit 39 confirms that challenge response authentication is established, the key registration permission unit 39 permits key registration. Thereby, the key registration operation between the vehicle 1 and the electronic key 2 is started. Step 214 corresponds to a key registration permission step.

  In step 215, the registration function unit 15 transmits the vehicle-mounted device ID and the electronic key acquisition request to the electronic key 2 by LF communication. The electronic key return request is a command for causing the electronic key 2 to return an electronic key ID.

In step 216, the registration function unit 16 writes and stores the vehicle-mounted device ID acquired from the vehicle 1 in the memory 10 a of the electronic key 2.
In step 217, when receiving the electronic key acquisition request from the vehicle 1, the registration function unit 16 transmits the electronic key ID registered in the electronic key 2 to the vehicle 1 by LF communication in response to the request. The encryption key Kcr may be notified to the vehicle 1 together with the electronic key ID.

  In step 218, the registration function unit 15 writes and saves the electronic key ID acquired from the electronic key 2 in the memory 4a of the verification ECU 4. The offline key registration is thus completed.

According to the configuration of the present embodiment, the following effects can be obtained.
(1) In an offline area where network communication is not possible, a ciphertext Dcr is created by combining a random number and an owner ID and passing this through the OBE center key Kvc, and the OBE ID of the vehicle 1 to be registered as a key and the ciphertext Dcr is transmitted as registration request information S1 to the center 25 by paper or telephone. The registration request information S1 is decrypted at the center 25 by the vehicle-mounted device center key Kvc, the owner ID in the registration request information S1 is confirmed, and if it is a regular owner, a response code is written or written by telephone as registration permission information S2. To the side. Then, challenge response authentication is performed in the vehicle 1 using this response code, and if registration is confirmed, key registration is permitted. Therefore, key registration can be performed with high security even in an offline area.

(2) Since the key registration is based on the permission system of the center 25, the electronic key 2 is never registered in the vehicle 1 without the owner in the market.
(3) Even if these are stolen during the mailing of the registration request information S1, the owner ID in the registration request information S1 is the ciphertext Dcr, so that the owner ID is not known. Therefore, the owner ID is excellent in confidentiality.

  (4) Even if the response code generation algorithm leaks, since the random number that is the basis of the calculation is a different code each time it is generated, a third party cannot generate a response code. Therefore, the effect of securing the security of key registration is further enhanced.

(5) Since the inquiry partner who desires key registration is confirmed by the owner ID at the center 25, the validity of the inquiry partner can be accurately determined.
(6) Since the encryption / decryption of the registration request information S1 and the registration permission information S2 is performed using a unique encryption key called the vehicle-mounted device center key Kvc, the effect of securing the security of key registration is further enhanced.

(7) Since an inquiry partner who desires key registration is confirmed by challenge response authentication, the effect of securing the security of key registration is further enhanced.
Note that the embodiment is not limited to the configuration described so far, and may be modified as follows.

  The online registration method may be a method that takes the system mode shown in FIG. In this case, an electronic key ID is registered in advance in the electronic key 2. The center 25 is provided with an electronic key database 41 for managing what electronic key ID and encryption key are registered in which electronic key 2. In the electronic key database 41, what kind of SEED code Ssd is registered in which electronic key 2 is also registered. The SEED code Ssd of the electronic key database 41 is created by passing the encryption key Kcr through the corresponding vehicle-mounted device center key Kvc at the center 25.

  In the case of this online registration, when the registration ECU 17 inputs a registration command (additional registration command) for the electronic key 2 from the registration tool 17, the verification ECU 4 acquires the electronic key ID “ID-3” from the electronic key 2 and stores it in the memory 4a. Write and save. Further, the verification ECU 4 outputs a SEED creation request to the center 25 via the registration tool 17 to create the SEED code Ssd of the electronic key 2 to be registered. At this time, the center 25 refers to the on-board device database 27 to determine the on-board device center key Kvc → “key-A” to be used, and the encryption key “key-3” of the electronic key 2 that is currently registered. ] Is passed through “key-A” to create a SEED code “A3”. The center 25 outputs the created SEED code “A3” to the verification ECU 4 via the registration tool 17. The verification ECU 4 generates the encryption key “key-3” by decrypting the SEED code “A3” acquired from the center 25 through its own vehicle-mounted device center key “key-A”, and stores this in the memory 4a. Write and save. In the electronic key 2, the vehicle-mounted device ID “ID-A” notified from the vehicle 1 during the additional registration process is written in the memory 10 a.

  When the center 25 obtains the SEED creation request from the registration tool 17, the center 25 knows the electronic key ID of the electronic key 2 that is to be additionally registered, so the electronic key ID “ID-3” of the electronic key 2 to be additionally registered is obtained. This is reflected in the in-vehicle device database 27. Further, after sending the SEED code “A3” to the registration tool 17, the center 25 reflects the encryption key “key-3” of the electronic key 2 additionally registered in the in-vehicle device database 27. Even if this method is used, key registration can be performed with high security.

  Electronic key 2 is initially not registered with an electronic key ID. The electronic key ID is sent from the center 25 as a SEED code, and the electronic key 2 is decrypted with the electronic key center key. A key ID may be generated and registered in the electronic key 2.

-The registered worker may be either a service person or an owner.
The vehicle 1 and the electronic key 2 may communicate directly with the center 25 to acquire information necessary for the registration sequence.

The registration request information S1 is not limited to data constructed from the vehicle-mounted device ID and the ciphertext Dcr, and can be changed to other data such as data obtained by simply encrypting the owner ID.
-The encryption used at the time of notification of registration request information S1 is not limited to the encryption using the onboard equipment center key Kvc, For example, you may use the encryption key used by communication of an electronic key system. That is, the encryption key used for generating the ciphertext Dcr can be changed to another key.

The registration permission information S2 is not limited to the response code, and may be, for example, ciphertext data obtained by encrypting an encryption key used for communication of the electronic key system with the vehicle-mounted device center key Kvc.
-The encryption used at the time of notification of the registration permission information S2 is not limited to the encryption using the in-vehicle device center key Kvc, and can be changed to another encryption method.

The authentication between the center 25 and the owner is not limited to challenge response authentication, and other authentication may be adopted.
The inquiry partner for key registration is not limited to confirmation by the owner ID, but can be changed to other information such as a preset password. That is, the owner ID may be information that can identify the owner.

-The offline registration system of this example is not limited to being applied to the vehicle 1 but can be applied to other devices and apparatuses.
Next, technical ideas that can be grasped from the above-described embodiment and other examples will be described below together with their effects.

  (B) Although the electronic key can be normally registered in the control device to be communicated by an online registration method in which the registration tool is connected to the network and inquires of the center, the electronic key can be used even in an environment where the network cannot be connected. An electronic key registration method for registering a key in the control device, wherein the registration request generation step, the registration request information transmission step, the registration request information confirmation step, the registration permission information transmission step, the registration permission information confirmation step, and the key An electronic key registration method comprising a registration permission step.

  DESCRIPTION OF SYMBOLS 1 ... Vehicle as communication object, 2 ... Electronic key, 4 ... Verification ECU as control apparatus, 14 ... Electronic key registration system, 17 ... Registration tool, 25 ... Center, S1 ... Registration request information, S2 ... Registration permission information, Kvc: OBE center key as a key for the control device center.

Claims (5)

An online registration method that connects the registration tool to the network and inquires the center. Normally, the electronic key can be registered in the control device to be communicated, but the electronic key is controlled even in an environment where the network cannot be connected. An electronic key registration system that enables registration to a device,
A registration request generating step for generating encrypted registration request information on the registration worker side;
A registration request information transmission step of transmitting the encrypted registration request information to the center in a format that does not use a network;
A registration request information confirmation step for decrypting the encrypted registration request information at the center and determining the validity of the registration request information;
If it is possible to confirm the validity of the registration request information, a registration permission information transmission step of transmitting the encrypted registration permission information to a registration worker in a format that does not use a network;
A registration permission information confirmation step of decrypting the encrypted registration permission information in the control device and determining the validity of the registration permission information;
An electronic key registration system comprising: a key registration permission step for permitting registration of the electronic key to the control device if the validity of the registration permission information can be confirmed. The registration request information is constructed by a random number having a different value each time it is generated and the owner ID of the communication target,
In the registration request information confirmation step, the owner ID is extracted by decrypting the registration request information, and the legitimacy of the registration permission information is determined by confirming the owner ID. The electronic key registration system according to claim 1. The registration request information includes a unique communication target ID that the communication target has,
The electronic key registration system according to claim 1 or 2, wherein the registration request information confirmation step specifies a communication pair target for which registration is requested based on the communication target ID. The encryption / decryption of the registration request information uses a control device center-dedicated key associated between the control device and the center. Electronic key registration system described in 1. The registration permission information transmission step generates a response code by encrypting the random number at the center, and transmits the response code to the registration worker as the registration permission information.
In the registration permission information confirmation step, the legitimacy of the registration permission information is determined by comparing the response code acquired from the center with a response code generated similarly in the control device. The electronic key registration system as described in any one of Claims 2-4.