JP2014169059A - Vehicle function permission system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a vehicle function permission system capable of securing security maintained by operation of a lending key without using an authentication server.SOLUTION: According to a vehicle function permission system 10, when a lending key 12 is lent, an owner sets permission information in advance by a permission information setting part 28. The permission information includes a usable time and a usable district, so after lending the lending ley 12, use of the key in the set range becomes possible. Therefore, it is possible to prevent the vehicle from being operated beyond owner's category by the person to whom the owner lends the key.

Description

  The present invention relates to a vehicle function permission system that allows a vehicle to be rented after limiting the use of the vehicle function when the vehicle is lent to a borrower.

  The authentication system described in Patent Document 1 includes an electronic key, an electronic lock, and an authentication server. The authentication server has information on the valid time zone and valid position of the authentication key as an authentication table. After the electronic key is physically collated with the electronic lock, the electronic key transmits time information / position information to the authentication server and receives an authentication key validity determination result. The electronic lock receives the verification result, the authentication key from the electronic key, and collates the authentication key. Such an authentication system is robust in terms of security, and can provide a key system that can prevent unauthorized use even if a key is lost, and that can limit use conditions.

JP 2007-315149 A

  In the related art, since the authentication server determines whether the authentication key is valid each time the lock is unlocked, there is a problem that the lock cannot be unlocked if the authentication server is down. Also, since the lender (owner) uses the remote control terminal to invalidate the authentication key and change the setting of the valid time / valid position, the vehicle can be used illegally if the lender forgets to operate it. Will remain. For example, when an owner lends an electronic key to a third party, if the management of the lent electronic key (lending key) is forgotten, unauthorized use of the vehicle remains possible. Therefore, if the owner forgets to perform an invalid operation, there is a problem that the security of the vehicle cannot be secured.

  Accordingly, the present invention has been made in view of the above-described problems, and an object thereof is to provide a vehicle function permission system that can ensure security by operating a rental key without using an authentication server.

  The present invention employs the following technical means in order to achieve the aforementioned object.

  A vehicle function permission system according to the present invention is mounted on a vehicle, and is provided with an on-vehicle device (11) that permits at least one operation among functions for operating the vehicle on condition that authentication of a key code of a vehicle key is established. And a rental key (12) used as a vehicle key to be lent to the other party. The in-vehicle device is permission information indicating the contents for permitting the operation of the function, and is a setting for setting permission information including a region where the lending key can be used, a time when the lending key can be used, and a function that can be operated. Means (28). Further, the lending key includes storage means (42) for storing the key code generated by the generation means.

  According to the present invention as described above, the owner can set the permission information by the setting means when lending the lending key. Since the permission information includes a usable time and a usable region, it can be used within a set range after the rental key is lent. Therefore, it is possible to prevent the partner lent by the owner from being operated by the partner lent beyond the category of the owner.

  Moreover, since the vehicle function permission system of this invention is a structure which a vehicle-mounted apparatus and a rental key communicate, an external centralized management apparatus like an authentication server is unnecessary. Therefore, it can be used without being affected by the situation of the centralized management apparatus. The owner also sets the vehicle functions that can be operated by the setting means. Therefore, if the borrower is a third party such as a condominium manager, for example, by restricting the permitted functions, the vehicle is prevented from being operated by the borrower beyond the owner's mind. be able to. In addition, since the permitted function can be set by the setting means, a security level corresponding to the borrower can be ensured.

  In addition, the code | symbol in the bracket | parenthesis of each above-mentioned means is an example which shows a corresponding relationship with the specific means as described in embodiment mentioned later.

It is a block diagram which shows the vehicle function permission system of 1st Embodiment. It is a figure which shows an example of a selection screen. It is a flowchart which shows the process in a vehicle-mounted apparatus. It is a figure which shows an example of a rental key level. It is an activity figure of a vehicle function permission system. It is a figure which shows the process of a vehicle function permission system. It is an activity figure of the vehicle function permission system of 2nd Embodiment. It is a figure which shows the process of a vehicle function permission system. It is a block diagram which shows the rental key of 3rd Embodiment. It is a flowchart which shows the process of the vehicle-mounted apparatus of 4th Embodiment. It is a figure which shows the chargeable time corresponding to FIG. It is a flowchart which shows the other process of a vehicle-mounted apparatus. It is a figure which shows the chargeable time corresponding to FIG.

  Hereinafter, a plurality of embodiments for carrying out the present invention will be described with reference to the drawings. In some embodiments, portions corresponding to the matters described in the preceding embodiments may be given the same reference numerals, or one letter may be added to the preceding reference numerals, and overlapping descriptions may be omitted. In addition, when a part of the configuration is described in each embodiment, the other parts of the configuration are the same as those of the embodiment described in advance. In addition to the combination of parts specifically described in each embodiment, the embodiments may be partially combined as long as the combination does not hinder the combination.

(First embodiment)
The vehicle function permission system 10 of 1st Embodiment of this invention is demonstrated using FIGS. The vehicle function permission system 10 is a system that allows a vehicle to be rented after limiting the use of the function of the vehicle when the vehicle is lent to a loan partner. The vehicle function permission system 10 includes an in-vehicle device 11, a rental key 12, and a communication device 13.

First, the in-vehicle device 11 will be described. The in-vehicle device 11 is a device that is mounted on a vehicle and permits at least one operation of a function for operating the vehicle on condition that key authentication of a key code of a vehicle key is established. The in-vehicle device 11 includes a navigation unit 21, a use permission condition determination unit 22, a key code generation unit 23, a key code registration unit 24, a key code collation unit 25, and a permission information setting unit 28.
The navigation unit 21 is a route guidance device that guides a route to a destination set by a vehicle occupant. The navigation unit 21 performs, for example, a route search process for searching for a route to the destination, a route guidance process for guiding the route to the destination, and the like, when operated by a vehicle occupant. The navigation unit 21 includes a touch panel display 26 and various input switch groups 27 as an input system other than the touch panel operation type. The navigation unit 21 calculates a current travel position using a global positioning system (abbreviated as GPS), and displays the current travel position and a travel route to the destination on the display 26.

  When renting a vehicle to the borrower, the vehicle key for lending (lending key), which is different from the master key vehicle key, is lent to the vehicle renter, and the vehicle A vehicle function permission system 10 is provided for setting a security level and setting a vehicle restriction state. In the vehicle function permission system 10 of this example, when lending a vehicle to a lender, a lending key 12 is handed to the vehicle lender. Each time the key is lent, the security level of the vehicle, that is, the security level of the rental key 12 (hereinafter referred to as the rental key level) is set to limit the usage state of the vehicle.

  The permission information setting unit 28 is permission information for permitting the operation of the function for operating the vehicle. The permission information setting unit 28 is a region where the lending key 12 can be used (use region), a time when the lending key 12 can be used (use time), and an operation This is setting means for setting permission information including possible functions.

  When the lending operation of the lending key 12 is performed, the permission information setting unit 28 displays a lending key level selection screen of the vehicle function permission system 10 on the display 26 of the car navigation unit 21 (see FIG. 2). Therefore, in the permission information setting unit 28, the display 26 and the input switch group 27 of the navigation unit 21 are shared with the car navigation unit 21 as an input unit and a display unit. The owner operates the touch operation on the display 26 of the navigation unit 21 and the input switch group 27 to input the rental key level (permission information) to be set. Upon confirming that this setting operation has been completed, the permission information setting unit 28 gives the set permission information to the key code generation unit 23.

  The key code generation unit 23 generates a lending key ID (lending key code) corresponding to the given permission information. Accordingly, the lending key ID is a lending key ID associated with the set lending key level. The key code generation unit 23 gives the generated rental key ID to the key code registration unit 24. The key code registration unit 24 registers the lending key ID given from the key code generating unit 23 in the lending key 12. Specifically, the key code registration unit 24 transmits the lending key ID to the lending key 12.

  When the key code collation unit 25 is an authentication unit and receives the key code transmitted from the vehicle key, the key code collation unit 25 compares the key code of the vehicle key with the key code registered in its own memory in advance to check the immobilizer ( Authentication). The key code collation unit 25 releases the immobilizer lock if the two codes match and immobilizer collation is established. On the other hand, if both codes do not coincide and the immobilizer collation does not hold, the immobilizer lock is kept locked. .

  The use permission condition determination unit 22 is connected to the navigation unit 21, the key code collation unit 25, and a plurality of in-vehicle ECUs. The use permission condition determination unit 22 is a determination unit, and is an area where the current position can be used based on the permission information corresponding to the received key code when the key code verification unit 25 performs verification. And it functions as a determination means for determining whether or not the current time is a usable time. When it is determined that the use permission condition determining unit 22 is a usable region and time, the use permission condition determining unit 22 also functions as a permission unit that permits the operation of the function according to the permission information.

  The use permission condition determination unit 22 is connected to a door ECU 31 for managing door locking / unlocking of the vehicle, an engine ECU 32 for controlling engine ignition and fuel injection, and a battery ECU 33 for managing a battery via an in-vehicle LAN. Yes. The use permission condition determination unit 22 permits and restricts at least some functions of the ECUs 31 to 33. The use permission condition determination unit 22 restricts the functions of the ECUs 31 to 33 in advance according to permission information. When the function to be permitted and the function to be restricted are determined according to the permission information, the use permission condition determination unit 22 gives the permission information to the corresponding ECUs 31 to 33. The ECUs 31 to 33 to which the permission information is given store the contents in the memory. When an operation command is given to each of the ECUs 31 to 33, each of the ECUs 31 to 33 executes the command so that only permitted functions are operated based on the permission information stored in the memory. . Accordingly, each of the ECUs 31 to 33 does not execute the command when an unauthorized command is given. When each of the ECUs 31 to 33 cannot execute the function, the ECUs 31 to 33 perform control to display on the screen of the display 26 that the function cannot be executed.

  When the door ECU 31 uses a wireless key as a vehicle key, when the lock button of the wireless key is operated, a lock request signal is transmitted from the wireless key. When the vehicle receives this locking request signal, when the locking operation is permitted from the use permission condition determination unit 22, the door ECU 31 places the doors in the all seats locked state when receiving the locking request signal. Similarly, when the unlocking request signal is given by operating the unlock button of the wireless key, the door ECU 31 responds to the request when the unlocking operation is permitted by the use permission condition determining unit 22. All doors are unlocked.

  Although not shown, the vehicle has a trunk switch that is operated when the closed trunk is opened, a seat memory switch that is operated when the front and rear position of the driver seat is registered in the vehicle, and a closed state. There is provided a gasoline open switch that is operated when the fuel filler door in the open state is opened. These switches are connected to the door ECU 31 via electric wiring, and the operation state is monitored by the door ECU 31. The door ECU 31 manages the validity of the switch operation of these switches according to the permission information from the use permission condition determination unit 22.

  The engine ECU 32 permits the start of the engine according to the permission information. When the engine ECU 32 receives the start signal, if the use permission condition determination unit 22 permits the start, the engine ECU 32 starts the ignition control and the fuel injection control to start the engine. On the other hand, when the engine start is not permitted, the engine ECU 32 does not execute the ignition control and the fuel injection control, and maintains the engine in a stopped state.

  The battery ECU 33 is an ECU that monitors the charge amount, temperature, and the like of the main battery and controls charging / discharging of the main battery. When the battery ECU 33 receives the charging start signal, the battery ECU 33 controls the charging to be started when the use permission condition determination unit 22 permits the charging. Further, when the battery ECU 33 receives the discharge start signal, the battery ECU 33 performs control so as to start the discharge when the use permission condition determination unit 22 permits the discharge.

  Next, the lending key 12 will be described. The lending key 12 includes a key code receiving unit 41, a key code storage unit 42, a key code transmitting unit 43, a GPS information receiving unit 44, and a key code erasure determining unit 45. The lending key 12 is a key in which an electronic key function is incorporated into a mechanical key in the same manner as a vehicle key. The key code receiving unit 41, the key code transmitting unit 43, and the GPS information receiving unit 44 can wirelessly communicate with the vehicle in a communication format conforming to RFID. Further, in the key code storage unit 42, a rental key ID is registered as a key code inherent to the rental key 12. This lending key ID is a code string that can be used only under restricted conditions when authentication with the vehicle is established. The key code receiving unit 41 is a receiving unit. When receiving the rental key ID from the vehicle, the key code receiving unit 41 stores the received rental key ID in the key code storage unit 42. Then, the lending key 12 is caused to function as a vehicle key. The key code transmission unit 43 is a transmission means, and the rental key ID is transmitted from the key code transmission unit 43 to the vehicle when the user operates the lending key 12.

  The GPS information receiving unit 44 communicates with the navigation unit 21 of the vehicle and functions as a lending key position acquisition unit and a lending key time acquisition unit that acquire the current position information and current time of the vehicle from the navigation unit 21. Based on the information from the GPS information receiving unit 44, the key code erasure determination unit 45 stores the key code in the key code storage unit 42 (storage unit) when the current position moves from the available region to the outside region. It functions as an erasing means for erasing from. The key code erasure determination unit 45 also functions as an erasure unit that erases the key code from the key code storage unit 42 after the usable time has elapsed based on the information received from the GPS information.

  Next, the communication device 13 will be described. The communication device 13 communicates with the navigation unit 21 of the in-vehicle device 11 and can set permission information separately from the in-vehicle device 11. The communication device 13 includes a display unit 51, a remote permission information setting unit 52, and a communication unit 53. The remote permission information setting unit 52 has the same function as the permission information setting unit 28 and is a remote setting unit for setting permission information. The display unit 51 is a display unit that displays permission information. The display unit 51 is an input unit that can be operated by an owner, and is realized by a touch panel. The owner touches the display unit 51 to input a rental key level (permission information) to be set. When the remote permission information setting unit 52 confirms that this setting operation has been completed, the remote permission information setting unit 52 gives the set permission information to the communication unit 53. The communication unit 53 transmits the given setting information to the in-vehicle device 11.

  When the permission information setting unit 28 of the in-vehicle device 11 receives the setting information from the communication device 13 via the navigation unit 21, the permission information setting unit 28 sets the permission information with priority on the received setting information. Therefore, the setting information can be rewritten by the communication device 13.

  Next, operation | movement of the vehicle function permission system 10 is demonstrated using FIG. A case will be described in which a regular user (owner) of a vehicle lends the vehicle to a borrower in a state where use of the vehicle is restricted. In the case of lending, the owner carries the vehicle key (master key) and gets on the vehicle and inserts the vehicle key into the key cylinder in order to confirm the verification by the vehicle key (authentication is established). Then, the owner starts when the operation of setting the permission information is performed by the navigation unit 21 in order to set the operation mode of the vehicle function permission system 10 to the lending key restriction mode which is the system execution state.

  In step S31, a rental key level selection screen as shown in FIG. 2 is displayed on the display 26 of the car navigation unit 21, and the process proceeds to step S32. On the lending key level selection screen, a plurality of level selection buttons 61 are displayed as touch buttons to be selected and specified when selecting a specific one from a plurality of lending key levels. When the display 26 is a touch panel type, when setting the lending key level, the display screen of the display 26 on which the level selection button 61 to be designated is displayed from among the plurality of level selection buttons 61 displayed on the display 26. Touch the position. As a result, the level setting operation of the lending key level is performed. Further, when selecting the permission function separately from the lending key level, the permission function can be set by individually selecting the charge / discharge items displayed below. For example, whether or not rapid charging is possible, upper limit SOC during charging, charging time, and the like. When the lending key level is selected, the charge / discharge item corresponding to the lending key level is displayed in a selected state.

  As shown in FIG. 4, the lending key level is set so that the security level increases as the numerical value of the level increases. If the security level is set to a high level, many restrictions are imposed on the vehicle function. In the example shown in FIG. 4, the relationship between the function relating to charging / discharging of the vehicle and the rental key level is shown. In the lending key level 1, the vehicle lending partner (target person) is a relative such as a family, and all charge / discharge functions are permitted. In the lending key level 2, the vehicle lending partner is a friend, the time for quick charging is limited, and discharging is prohibited. In the lending key level 3, the vehicle lending partner is the car sharing partner, and only low-speed charging is permitted during the lending contract time. In the rental key level 4, the vehicle rental partner is a hotel employee or condominium manager when using the valet parking service, and only low-speed charging is permitted during midnight.

  In step S32, when the vehicle is lent to the lending partner, when the level selection button 61 corresponding to the vehicle lending partner is selected from the level selection buttons 61 displayed on the lending key level selection screen, the process proceeds to step S33. . For example, when lending a vehicle to a relative, the lending key level 1 is selected by touching the display screen position of the first level selection button 61 on the lending key level selection screen.

  In step S33, when it is confirmed that the level selection is completed on the lending key level selection screen, a screen for inputting the use period and the use region is subsequently displayed on the display 26, and the process proceeds to step S34. In step S34, when an input operation of a use period and a use region according to the vehicle lender is performed, the process proceeds to step S35. On the screen for entering the usage period and the usage region, for example, a numerical value input destination of the usage period and an input destination of the usage region are displayed. The usage period is, for example, how many hours (how many days) from the present, time designation from what hour to what hour, designation of day of the week such as Tuesday, date designation of what day of the month, or a combination thereof. The use area is within a designated distance centered on the input address, within the input municipality, within a site such as a hotel or apartment, within a predetermined route, and a combination thereof.

  In step S <b> 35, when the key code generation unit 23 confirms that the input operation of such a series of loan key levels has been completed, the key code generation unit 23 generates a loan key ID, and the key code registration unit 24 registers the ID in the loan key 12. Then, the process proceeds to step S36. The generated lending key ID is a rolling code that takes a different value each time the vehicle function permission system 10 enters the lending key restriction mode, that is, every time the lending key level is set. At this time, for example, if the rental key ID at the time of the previous lending has been registered in the lending key 12, the ID registration is performed by overwriting this ID with a new ID.

  The permission information setting unit 28 notifies the use permission condition determination unit 22 and the key code collation unit 25 of the permission information including the lending key ID registered in the lending key 12 and its use period, use region, and vehicle operation restriction. The key code collation unit 25 registers in the memory what code string the lending key ID registered in the lending key 12 has, and the usage period, area of use, and vehicle operation restrictions. In step S36, the operation mode of the vehicle function permission system 10 is set to the lending key restriction mode, and this flow is finished. Thus, when the vehicle is moved with the lending key 12, the operation state permitted when the vehicle function is restricted is taken.

  When the owner completes the input operation of the lending key level, the owner removes the vehicle key inserted into the key cylinder from the key cylinder, and lends the lending key 12 to the vehicle lending partner while holding the vehicle key by himself / herself. .

  When the vehicle lending partner drives the vehicle with the lending key 12 borrowed from the owner, the lending key 12 is inserted into the key cylinder to operate the key cylinder with the lending key 12. The key code collation unit 25 performs immobilizer collation by comparing the lending key ID received from the lending key 12 with the lending key ID registered in its own memory. Here, the key code verification unit 25 performs immobilizer verification by confirming whether or not the received key code (transponder code, lending key ID) is registered in the memory. When the key code verification unit 25 confirms that the received lending key ID is registered in the memory, if this ID is within the usage period and the usage area, ID verification with the lending key 12, so-called lending Recognizing that the key 12 collation has been established, the use of the vehicle is permitted with the vehicle function restricted.

Next, the charge / discharge items set in FIG. 4 will be further classified and the relationship with vehicle information will be described with reference to Table 1. Table 1 shows the relationship between the set application and the position information, time information, travel speed, battery SOC, battery temperature, and battery charge count in the application.

  As shown in Table 1, when there are various restrictions on the use, items corresponding to the use are restricted or prohibited. In addition to the screen shown in FIG. 2, when the usage of Table 1 is displayed on the screen and the owner selects it, whether or not there is a restriction on the items from the position information to the number of times of battery charging is automatically selected.

  Next, the operation of the vehicle function permission system 10 will be described with reference to FIGS. In FIG. 5, the navigation unit 21 is shown separately from the in-vehicle device 11. The processing shown in FIG. 5 is started from a state in which there is no key code in the lending key 12 or when the usage period of the key code has passed.

  First, the vehicle owner inputs conditions for permitting restricted operation (permission information) using the screen shown in FIG. 2 as described above (step S511). The in-vehicle device 11 sets a rental key ID (key code) (step S521), and is registered in the rental key 12 (step S522).

  The vehicle owner lends the lending key 12 to the condominium manager (step S512). The condominium manager borrows the rental key 12 (step S501) and uses it (step S502). Then, first, the in-vehicle device 11 authenticates the key code of the lending key 12 (step S523). If the authentication is successful (step S524), the current position is acquired from the navigation unit 21 (step S541), and the use area is compared with the current position (step S525). The current time is acquired from the navigation unit 21 (step S542), and the usage time and the current time are compared (step S526). When the conditions of use area and use time are satisfied (step S527, step S528), an operation permitted by the lending key 12 is accepted (step S529).

  Then, while the conditions of the use area are satisfied (steps S5210 and S5212) and the use time conditions are satisfied (steps S5211 and S5213), the permitted operation is accepted. If the user moves out of the use area or passes the use time from the condition that satisfies the condition, the key code of the lending key 12 is deleted (step S532). As a result, the device cannot be used automatically, so that the forbidden setting is not forgotten and the convenience is improved. However, the key code is not deleted while the vehicle is running. This is because if the key code of the traveling vehicle is erased and the lending key 12 becomes unusable, the vehicle stops despite traveling and is extremely inconvenient. The apartment manager returns the lending key 12 to the vehicle owner (step S503, step S513), and ends the process shown in FIG.

  Next, the operation of the vehicle function permission system 10 will be described with reference to FIG. The state shown in FIG. 6A is a state where no key code is stored in the lending key 12. When the use permission condition is set from this state, the key code is stored in the lending key 12 as shown in FIG. However, since the state shown in FIG. 6B is outside the use permission position, the lending key 12 cannot be used. From this state, it moves to the use permission position as shown in FIG. However, if it is outside the use permission time, the lending key 12 cannot be used. When time elapses from this state and the use permission time comes, the lending key 12 becomes usable as shown in FIG. Then, when the usage time elapses from the usable state or goes out of the usage area, the key code of the lending key 12 is automatically deleted as shown in FIG.

  As described above, according to the vehicle function permission system 10 of the present embodiment, when lending the lending key 12, the owner sets permission information in advance by the permission information setting unit 28 (setting means). Since the permission information includes a usable time and a usable region, after the rental key 12 is lent, it can be used within a set range. Therefore, it is possible to prevent the partner lent by the owner from being operated by the partner lent beyond the category of the owner.

  Moreover, since the vehicle function permission system 10 of this embodiment is the structure which the vehicle-mounted apparatus 11 and the lending key 12 communicate, an external centralized management apparatus like an authentication server is unnecessary. Therefore, it can be used without being affected by the situation of the centralized management apparatus. The owner also sets a vehicle function that can be operated by the permission information setting unit 28. Therefore, if the borrower is a third party such as a condominium manager, for example, by restricting the permitted functions, the vehicle is prevented from being operated by the borrower beyond the owner's mind. be able to. In addition, since the permitted function can be set by the permission information setting unit 28, it is possible to ensure a security level corresponding to the borrower.

  In other words, in the vehicle function permission system 10 of this embodiment, since the authentication server is not used, there is no problem that the authentication server goes down and the key cannot be used. Further, since the valid time and valid position are set in order to automatically invalidate the lending key ID, it is possible to prevent unauthorized use due to forgetting the owner's operation.

  Furthermore, in other words, when the use time and the use area are not set in the lending key 12, it is regarded as invalid and the lending key 12 cannot be used. Therefore, when the lending key 12 is stolen by a third party and when the owner has not set the lending key 12, it cannot be used, so that security can be ensured.

  In the present embodiment, the permission information includes information in which an operable area and an operable time are set for each function. When the use permission condition determination unit (permission means, determination means) determines that the area and time are usable, the operation permission function is permitted according to the operable area and the operable time (Table). 1, see FIG. As a result, functions that can be individually operated can be set, so that, for example, a function to be selected according to the security level of the borrower can be flexibly handled.

  Furthermore, in the present embodiment, the restricted vehicle function is a function related to at least one of charging and discharging of a battery (vehicle storage battery) mounted on the vehicle. Charging service is provided in the apartment parking lot for electric vehicles (EV) and plug-in hybrid vehicles (PHV), but due to the limited number of charging stations, waiting for charging may occur. Therefore, the condominium manager will change the vehicles waiting for charging to the charging station in order. At that time, there is a possibility that an operation not intended by the owner (incorrect discharge use, charging that promotes battery deterioration, or charging in a time zone with a high electricity bill) may be performed. Therefore, when lending to a condominium manager, as shown in FIG. 4, charging and discharging can be appropriately managed by limiting charging and discharging functions. As a result, the owner who owns the vehicle (EV / PHV) can be prevented from suffering disadvantages (theft, self-driving, self-powering, charging at a high charge). For example, the position (region) of the permitted vehicle is within the apartment site, and the chargeable time can be set in the midnight time zone.

  In addition to charging, functions related to battery discharge can also be limited. Thus, it is possible to prevent the battery from being discharged without permission when lent. This can suppress battery deterioration.

  Furthermore, in the present embodiment, the charging function related to battery charging is at least one of setting the number of quick charging operations and the upper limit value of charging. Fast charging operations speed up battery degradation and should not be used except in emergency situations. Therefore, the battery deterioration can be suppressed by limiting, for example, prohibiting the number of quick charging operations. Similarly, if the upper limit value of the charging is continued to be charged even when the charging is approaching the full charge, the deterioration of the battery is accelerated. Therefore, the deterioration of the battery can be suppressed by setting the upper limit value of charging to 80%, for example.

  In the present embodiment, the charging function includes a function related to traveling of the vehicle. In other words, as an operable function, a charging function that permits charging and a traveling function that permits traveling of the vehicle are associated with each other. Therefore, when the charging function is permitted, the traveling function is also permitted. As a result, it is possible to consider slowing down the area of use (apartment site) for charging, and the convenience of the owner can be improved.

  Furthermore, in the present embodiment, the permission information setting unit 28 includes setting storage means in which a plurality of combinations of usable areas, usable times, and operable functions are stored in advance. The permission information setting unit 28 can select a preset combination by selecting the security level shown in FIG. This makes it easy to select functions to be restricted. In other words, the functions that can be operated can be set using a plurality of operation function lists so that the functions can be easily changed according to the user level. As a result, it is not necessary for the user to change the contents of the restriction, so convenience is improved.

  Moreover, in this embodiment, the vehicle-mounted apparatus 11 uses the display 26 of the navigation part 21 as an output means which outputs permission information. As a result, the owner can visually recognize the permission information, for example, whether or not charging is possible, the time when charging is possible, the functions that can be used, the usage area, and the like. Based on the permission information displayed on the display 26, the owner can determine the restricted function and the permitted function.

  Furthermore, in this embodiment, the vehicle function permission system 10 further includes a communication device 13 that communicates with the in-vehicle device 11. The communication device 13 functions as a remote setting unit for setting permission information. The permission information setting unit 28 prioritizes permission information from the communication device 13 when permission information is set from the communication device 13. And reset the permission information. As a result, the owner can reset the permission information using the communication device 13 if the owner wants to reset the permission information after lending the lending key 12. It is preferable that the communication device 13 requests the input of a password when setting the permission information and authenticates the proper owner by biometric authentication or the like so that a third party cannot easily use it.

  In the present embodiment, the communication device 13 and the in-vehicle device 11 communicate directly, but may communicate via an external communication facility such as an information center. Therefore, the communication device 13 may be configured to be used in combination with a portable information terminal such as a smartphone. Moreover, you may implement | achieve the function of the communication apparatus 13 with the application which operate | moves with a smart phone. Further, since the communication device 13 is a device that gives an auxiliary function to the vehicle function permission system 10 instead of being an essential component, the vehicle function permission system 10 may be configured without using the communication device 13.

(Second Embodiment)
Next, a second embodiment of the present invention will be described with reference to FIGS. In the present embodiment, the permission information is characterized in that it includes information on a holding area including a usable area as an area holding a key code. The key code registration unit 24 (registration unit) is characterized in that the key code generated by the key code generation unit 23 (generation unit) is registered in the lending key 12 when the current position is within the holding area. . In other words, the timing for registering the key code is different from that in the first embodiment. In the first embodiment, when permission information is set by the permission information setting unit 28, the lending key ID is immediately registered in the lending key 12. However, in the second embodiment, even if permission information is set by the permission information setting unit 28, the lending key ID is not registered in the lending key 12 unless it is within a predetermined holding area.

  Next, the operation of the vehicle function permission system 10 will be described with reference to FIGS. The processing shown in FIG. 7 is started from a state in which the lending key 12 has no key code or when the key code usage period has passed.

  First, the vehicle owner inputs conditions (permission information) for permitting restricted operation using the screen shown in FIG. 2 as described above (step S711). The in-vehicle device 11 (key code registration unit 24) acquires the current position from the navigation unit 21 (step S741), and compares the holding area with the current position (step S722). If the conditions of the holding area are satisfied (step S723), a lending key ID (key code) is set so that the lending key 12 can be used (step S724) and registered in the lending key 12 (step S731). .

  The vehicle owner lends the lending key 12 to the apartment manager (step S712). Then, the condominium manager borrows the lending key 12 (step S701) and uses it (step S702). Then, first, the in-vehicle device 11 authenticates the key code of the lending key 12 (step S725). If the authentication is successful (step S726), the current position is acquired from the navigation unit 21 (step S741), and the use area is compared with the current position (step S727). The current time is acquired from the navigation unit 21 (step S742), and the usage time is compared with the current time (step S728). When the conditions of use area and use time are satisfied (step S729, step S7210), an operation permitted by the lending key 12 is accepted (step S7211).

  And while the conditions of use area are satisfy | filled (step S7212, step S7214) and the conditions of use time are satisfy | filled (step S7213, step S7215), the permitted operation is received. When moving outside the use area, the current position is acquired from the navigation unit 21 (step S741), and the storage area is compared with the current position (step S7216). If they do not match, it is determined that the user has moved out of the storage area, or when the usage time has passed, the key code of the lending key 12 is deleted (step S732). As a result, the device cannot be used automatically, so that the forbidden setting is not forgotten and the convenience is improved. However, the key code is not deleted while the vehicle is running. This is because it is extremely inconvenient if the key code of the running vehicle is deleted and the lending key 12 becomes unusable. The apartment manager returns the lending key 12 to the vehicle owner (step S703, step S713), and ends the process shown in FIG.

  Next, the operation of the vehicle function permission system 10 will be described with reference to FIG. The state shown in FIG. 8A is a state where no key code is stored in the lending key 12 or a key code whose usage time (expiration date) has passed is stored. When the use permission condition is set from this state, the key code is not stored in the lending key 12 as shown in FIG. This is because it is outside the key code storage location (storage area). Therefore, at this time, the key code of the lending key 12 is stored in the in-vehicle device 11. When moving from this state into the storage area as shown in FIG. 8 (3), the key code is stored in the lending key 12. However, since the state shown in FIG. 8 (3) is outside the use permission position, the lending key 12 cannot be used. From this state, as shown in FIG. However, if it is outside the use permission time, the lending key 12 cannot be used. When time elapses from this state and the use permission time comes, the lending key 12 becomes usable as shown in FIG. When the usage time elapses from the usable state or goes out of the use area, the key code is retained as shown in FIG. However, when the user moves out of the storage area, the key code of the lending key 12 is automatically deleted.

  As described above, in the present embodiment, the permission information includes information on the holding area including the usable area as the area holding the key code, and the key code is lent when the current position is within the holding area. Registered in As a result, the area where the key code is stored can be limited to the holding area. Therefore, since the area where the key code is stored becomes narrower than that in the first embodiment, security can be further improved.

(Third embodiment)
Next, a third embodiment of the present invention will be described with reference to FIG. The present embodiment is characterized in that the lending key 12B includes a timer 46.

  The timer 46 functions as time acquisition means for acquiring the current time. The timer 46 also functions as an erasing unit that erases the key code from the key code storage unit 42 after the usable time of the current time has elapsed. As a result, the lending key 12B of the present embodiment does not have the GPS information receiving unit 44 as shown in FIG. 9, so it cannot be determined whether or not it has moved outside the area of use, but is erased based on the time of use. be able to. Therefore, it is possible to prevent the key code from being continuously stored in the lending key 12B while simplifying the configuration of the lending key 12B.

(Fourth embodiment)
Next, a fourth embodiment of the present invention will be described with reference to FIGS. In the present embodiment, the in-vehicle device 11 is configured to be able to receive information from an information center such as an external power company. The GPS information receiving unit 44 also functions as a charging information acquisition unit that acquires charging information regarding charging costs and charging time from an electric power company.

  The processing of the in-vehicle device 11 when communicating with the electric power company will be described with reference to FIGS. 10 and 11. The flow shown in FIG. 10 is repeatedly executed in the power-on state of the in-vehicle device 11. In step S101, a request from the electric power company is received, and the process proceeds to step S102. In step S102, the requested time zone is acquired, and the process proceeds to step S103.

  In step S103, it is determined whether or not the unit price for the time period requested by the electric power company is higher than the unit price set by the owner. If it is higher, the process proceeds to step S104. . In step S104, since the charge is high, the current chargeable time is merged (updated), and this flow ends.

  When the power is tight, the power company raises the unit price of power during the tight time and suppresses the power consumption of the power supply destination. When such a unit price is changed, a request is transmitted to the owner as in step S101. As a result, in order to suppress the purchase of power at a higher unit price, the owner has changed the setting information in order to avoid the expensive time zone, as shown in FIG. Update. If the unit price is not high in step S104, there is no problem with the currently set chargeable time, and the flow is terminated as it is. In this way, by setting the threshold of the power unit price in advance by the owner, the chargeable time zone can be automatically set in consideration of the dynamic power rate table distributed from the power company. As a result, it is possible to prevent charging at a high unit price at the time of lending.

  In addition, based on information from the power company, the use permission determination unit determines whether or not the function related to charging is performed regardless of permission of operation of the function according to the permission information when the cost required for charging is lower than a predetermined reference value. You may control to permit. Therefore, for example, it is possible to determine whether the charging fee is free or charged, and control to cancel the restriction on the time zone so that the charging can be performed at any time when it is free.

  Next, another process of the vehicle-mounted device 11 when communicating with the power company will be described with reference to FIGS. 12 and 13. The flow shown in FIG. 12 is repeatedly executed in the power-on state of the in-vehicle device 11. In step S121, the emergency request from the electric power company is received, and the process proceeds to step S122. In step S122, the emergency request time zone is acquired, and the process proceeds to step S123. In step S123, in order to respond to the emergency request, the current chargeable time is merged (updated), and this flow is finished.

  As shown in FIG. 13, there is a time zone in which emergency vehicles are charged with priority and general vehicles cannot be charged. Since such a time zone cannot be charged naturally, the owner can recognize the emergency request of the electric power company by updating the setting information in advance.

  As described above, in the present embodiment, the permission information is automatically updated after rent based on the latest information from the electric power company. As a result, even if the unit price and the chargeable time are changed after lending, the owner can be prevented from suffering a disadvantage.

  In the present embodiment, the in-vehicle device 11 and the electric power company communicate directly. However, the present invention is not limited to such a configuration, and an available time zone is updated via a charging stand at the start of charging. Also good. Thus, even when the in-vehicle device 11 does not have a communication function, information from the power company can be received. When the power company transmits information via the information center without directly transmitting information to the in-vehicle device 11, the in-vehicle device 11 receives information from the information center. Moreover, the vehicle-mounted apparatus 11 may acquire various information via the communication function of the owner's portable information state terminal.

(Other embodiments)
The preferred embodiments of the present invention have been described above, but the present invention is not limited to the above-described embodiments, and various modifications can be made without departing from the spirit of the present invention.

  The structure of the said embodiment is an illustration to the last, Comprising: The scope of the present invention is not limited to the range of these description. The scope of the present invention is indicated by the description of the scope of claims, and further includes meanings equivalent to the description of the scope of claims and all modifications within the scope.

  In the first embodiment described above, the means for outputting the permission information is the display 26 of the navigation unit 21, but is not limited to the display 26 of the navigation unit 21. The display of the charging stand, the display around the inlet of the vehicle It may be a rental key display.

  In the first embodiment described above, the timing for authenticating the lending key ID is not particularly limited. For example, (1) When the EV / PHV is activated (when the main power switch is pressed), information between the vehicle and the key is displayed. It may be exchanged, (2) it may be exchanged constantly, or (3) it may be detected that it has left the area of use and exchanged at that moment.

  In the first embodiment described above, the set use region, use time, and permitted functions are irrelevant to the information of the navigation unit 21, but the operation contents permitting use from the destination set in the navigation unit 21. And the use permission time may be automatically set from the scheduled arrival time. Alternatively, the destination may be estimated from the travel route and set automatically. Therefore, for example, in the case of a guide route toward a condominium at home, after arriving at the home, the use area, use time, chargeable time, etc. are automatically set in the rental key 12. Further, all the authentication tables related to the lending key ID may be invalidated by using an elapsed time after entering the use area (effective area) or a specified time (morning) as a trigger. As a result, the operation with the lending key 12 is automatically disabled, and the security can be improved.

  In the first embodiment described above, the lending key 12 is configured to lend a physical object. However, the lending key 12 may be configured to lend a program instead of an object. For example, it is a program in which the smart phone functions as an electronic key of the lending key 12 by passing an authentication code of a program (app) preinstalled in the smart phone. Thereby, the loss of the rental key 12 can be prevented. Further, since the direct rental key 12 need not be delivered, convenience is improved.

  In the first embodiment described above, the vehicle function is limited to a configuration that can be controlled via the engine ECU 32, the battery ECU 33, and the door ECU 31, but is not limited thereto, and the operation of the air conditioner and the navigation unit 21 Other functions such as operations may be restricted.

DESCRIPTION OF SYMBOLS 10 ... Vehicle function permission system 11 ... In-vehicle apparatus 12 ... Lending key 13 ... Communication apparatus 21 ... Navigation part (position acquisition means, time acquisition means)
22 ... Use permission condition determination unit (determination means, permission means)
23: Key code generation unit (generation unit) 24 ... Key code registration unit (registration unit)
25 ... Key code verification unit (authentication unit) 26 ... Display 28 ... Permission information setting unit (setting unit) 41 ... Key code receiving unit (receiving unit)
42: Key code storage unit (storage unit) 43 ... Key code transmission unit (transmission unit)
44 ... GPS information receiving section (position acquisition means, time acquisition means, lending key position acquisition means, lending key time acquisition means) 45 ... key code deletion determination section (erasing means) 46 ... timer 51 ... display section 52 ... remote Permission information setting unit 53 ... communication unit

Claims (13)

An on-vehicle device (11) that is mounted on a vehicle and that permits at least one operation of the function of operating the vehicle on condition that authentication of a key code of a vehicle key is established;
A vehicle function permission system including a vehicle key other than a master key, and a lending key (12) used as a vehicle key to lend to the lending partner when lending the vehicle,
The in-vehicle device is
Position acquisition means (21) for acquiring a current position of the vehicle;
Time acquisition means (21) for acquiring the current time;
Setting means for setting permission information including contents permitting the operation of the function, including a region where the lending key can be used, a time when the lending key can be used, and the function that can be operated (28) and
Generating means (23) for generating a key code according to the permission information;
Registration means (24) for registering the key code generated by the generation means in the lending key;
Authentication means (25) for authenticating the key code transmitted from the lending key;
If authentication is established by the authentication means, based on the permission information corresponding to the key code, whether the current position is the usable area and the current time is the usable time Determining means (22) for determining whether or not;
Permission means (22) that permits the operation of the function according to the permission information when the determination means determines that the usable area and the usable time are,
The lending key is
Receiving means (41) for receiving the key code generated by the generating means;
Storage means (42) for storing the key code received by the receiving means;
A vehicle function permission system comprising: transmission means (43) for transmitting the key code stored in the storage means. The lending key is
Rental key position acquisition means (44) for acquiring the current position of the vehicle;
An erasing means (45) for erasing the key code from the storage means when the current position obtained by the lending key position obtaining means moves from the usable area to outside the usable area; The vehicle function permission system according to claim 1, further comprising: The lending key is
Rental key time acquisition means (44) for acquiring the current time;
An erasure unit (45) for erasing the key code from the storage unit after the current time acquired by the lending key time acquisition unit has passed the usable time. The vehicle function permission system according to 1. The permission information includes information on a holding area including the usable area as an area holding the key code,
The said registration means registers the said key code produced | generated by the said production | generation means to the said rental key, when the present position of the said vehicle is in the said holding | maintenance area. The vehicle function permission system as described in one. The permission information includes information in which the usable area and the usable time are set for each function,
In the case where the determination unit determines that the usable area and the usable time are determined by the determination unit, the permission unit responds to the usable area and the usable time based on the permission information. The vehicle function permission system according to any one of claims 1 to 4, wherein the operation of the function is permitted.   The vehicle function permission system according to any one of claims 1 to 5, wherein the function is a charge / discharge function related to at least one of charging and discharging of an in-vehicle storage battery mounted on the vehicle.   The vehicle function permission system according to claim 6, wherein the charging function related to charging among the charging / discharging functions is at least one of setting of the number of rapid charging operations and an upper limit value of charging.   The vehicle function permission system according to claim 6 or 7, wherein the charging function includes a function related to running of the vehicle.   The permission means allows the charging function to be permitted regardless of permission of operation of the function according to the permission information when a cost required for the charging is lower than a predetermined reference value. The vehicle function permission system as described in any one of Claims 6-8. The in-vehicle device further includes setting storage means (28) in which a plurality of combinations of the usable area, the usable time, and the operable function are stored in advance.
10. The vehicle function permission according to claim 1, wherein the permission information is set by selecting one of the plurality of combinations stored by the setting means. system.   The vehicle function permission system according to any one of claims 1 to 10, wherein the in-vehicle device further includes output means (26) for outputting the permission information. The in-vehicle device further includes charge information acquisition means (44) for acquiring charge information regarding the charge related to the charge and the chargeable time,
The said permission means gives priority to the acquired charging information over the permission information, and permits the operation of the function according to the permission information and the charging information. Vehicle function permission system described in one. The vehicle function permission system further includes a communication device that communicates with the in-vehicle device,
The communication device includes a remote setting means for setting the permission information,
The vehicle according to any one of claims 1 to 12, wherein when the setting means receives permission information from the communication device, the setting means preferentially resets the received permission information. Function authorization system.

Images