JP2016012918A - Vehicle communication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a vehicle communication system which performs collation of an opposite communication party for a long period, through radio communication based on the BLUETOOTH standard.SOLUTION: A vehicle communication system 1 includes: a vehicle 10 which performs challenge/response authentication by radio communication based on the BLUETOOTH standard; and a smart phone 20. An on-vehicle control unit 11 includes a volatile memory 11b in which information for use for collation of a rolling counter value is stored. After the challenge/response authentication is successfully completed, the on-vehicle control unit 11 performs collation with the rolling counter value which is provided in a smart phone control unit 21. Then, each time the collation with the rolling counter value is successfully completed, the on-vehicle control unit 11 updates the information for use for the collation of the rolling counter value stored in the volatile memory 11b.

Description

  The present invention relates to a vehicle communication system.

  A vehicle communication system having an in-vehicle device that performs wireless communication with a portable device possessed by a user and permits operation of the in-vehicle device on condition that verification of a vehicle-specific ID code performed by the wireless communication is established There is. Wireless communication of the in-vehicle communication system of Patent Document 1 is performed using BLUETOOTH (registered trademark), which is one of the short-range wireless communication standards.

  In such a vehicle communication system, if the time during which the operation of the in-vehicle device is permitted becomes long, the security is impaired. On the other hand, when the ID code is closely collated, it takes time to collate the ID code, so that the operation responsiveness when the operation of the in-vehicle device is requested is poor.

  Therefore, a collation method such as the system shown in Patent Document 2 has been studied. That is, a rolling counter that is incremented every time wireless communication is provided in the portable device, and the portable device wirelessly transmits the value of the rolling counter. The in-vehicle device stores the value of the rolling counter when the operation of the in-vehicle device is permitted last time in the nonvolatile memory, compares the value stored in the nonvolatile memory with the value of the rolling counter to be received, Determine whether the value is valid. If it is determined to be valid, the operation of the in-vehicle device is permitted, and the value used to determine whether it is valid is updated to the value of the rolling counter received this time. In the case of this system, since the operation of the in-vehicle device is always permitted while the value of the rolling counter is determined to be appropriate, the operation responsiveness when the operation of the in-vehicle device is requested is good.

JP 2013-106338 A JP 2006-118205 A

  However, it is well known that a storage element used in a nonvolatile memory deteriorates as data is written. For this reason, in many cases, the nonvolatile memory has a limited number of data write (update) times. In BLUETOOTH, since wireless communication is periodically performed between communication targets to determine whether or not a connection state exists, in such a system, the number of updates of the nonvolatile memory is the upper limit of the number of data writes. Is likely to reach

  The present invention has been made in view of such circumstances, and an object of the present invention is to provide a vehicle communication system that performs verification of a communication partner over a long period of time through wireless communication of the BLUETOOTH standard.

  In order to solve the above-mentioned problem, in-vehicle wireless communication is performed with a portable device based on the BLUETOOTH standard, verification is performed using a dedicated verification key through the wireless communication, and the operation of the in-vehicle device is permitted when the verification is established. In the vehicle communication system provided with a machine, the portable device includes a rolling counter that is incremented every time wireless communication is performed with the in-vehicle device, and the value of the rolling counter is included in a wireless signal and transmitted. The in-vehicle device includes a volatile memory in which information for collating the value of the rolling counter is stored, and the value of the rolling counter and the volatility are triggered by pairing with the portable device. Synchronization with the information for checking the value of the rolling counter stored in the memory, and thereafter the rolling counter Time the matching value of data is established, and summarized in that updating the information to match the value of the rolling counter that is stored in the volatile memory.

  According to this system, information for collating the value of the rolling counter is stored in a volatile memory that can be used longer than a nonvolatile memory. As a result, the same level of security as that of the conventional system is ensured, and the in-vehicle device can check the communication partner for a longer period than the conventional system.

  In the above system, the in-vehicle device performs the collation of the collation key triggered by pairing with the portable device, and when the collation is established, through the periodic wireless communication performed thereafter, It is preferable that the value of the rolling counter is collated and the operation of the in-vehicle device is permitted while the collation is established.

  According to this system, after collation with the collation key is established, collation with a rolling counter is always performed, and the operation of the in-vehicle device is permitted only while this collation is established. Since collation by the rolling counter changes in value every time collation is performed, security equivalent to that of the conventional system is ensured even if collation with a dedicated collation key is performed only once after pairing. On the other hand, since the operation of the in-vehicle device is permitted while collation by the rolling counter is established, the time from when the operation to the in-vehicle device is requested to when the in-vehicle device actually operates is short. That is, the operation response of the in-vehicle device is good.

  In the above system, the portable device and the vehicle-mounted device have a common encryption key, and transmit and receive information obtained by encrypting the verification key using the encryption key. It is preferable to encrypt the value of the rolling counter using an encryption key and wirelessly transmit the encrypted information to the in-vehicle device.

According to this system, since the value of the rolling counter used for verification is also encrypted, the security is high.
In the system, the portable device includes an operation unit for inputting a request command indicating a request for operation of the in-vehicle device, encrypts the request command using the encryption key, and stores the encrypted information. It is preferable that wireless transmission is performed to the vehicle-mounted device, and the vehicle-mounted device operates the vehicle-mounted device according to the received request command.

According to this system, since the request command indicating the request for operation of the in-vehicle device is also encrypted, the security is high.
In the system, the in-vehicle device wirelessly transmits a control command indicating the operation of the in-vehicle device to the portable device, the portable device includes a notification unit appealing to a user's sense, and based on the received control command It is preferable to notify the operation of the in-vehicle device through the notification unit.

According to this system, the user can confirm that the in-vehicle device is operated through the portable device even if the user is away from the vehicle.
In the above system, the portable device includes a portable device side time counter that measures a time required for wireless communication with the in-vehicle device, and a measurement time by the portable device side time counter is set in the BLUETOOTH standard. It is preferable to cancel the pairing with the in-vehicle device when the interruption determination time set to a time shorter than a connection monitoring time and sufficient for wireless communication is exceeded.

  According to this system, the portable device cancels the pairing with the in-vehicle device when it is estimated that wireless communication with the in-vehicle device is impossible. Therefore, if there is a request for pairing from the in-vehicle device, this can be met.

In the above system, when the portable device cancels the pairing with the in-vehicle device, it is preferable to wirelessly transmit information indicating that the pairing is canceled to the in-vehicle device.
According to this system, the in-vehicle device can recognize early the cancellation of the pairing with the portable device. As a result, early recovery of pairing between the two can be expected.

  In the above system, the in-vehicle device has an in-vehicle device side time counter that measures time required for wireless communication with the portable device, and the measurement time by the in-vehicle device side time counter is set in the BLUETOOTH standard. It is preferable that the pairing with the portable device is canceled when the interruption determination time set to a time shorter than a connection monitoring time and sufficient for wireless communication is exceeded.

  According to this system, the in-vehicle device cancels the pairing with the portable device when it is estimated that wireless communication with the portable device is impossible. Therefore, if there is a pairing request from the portable device, it can be met.

In the above system, when the in-vehicle device cancels the pairing with the portable device, it is preferable to wirelessly transmit information indicating that the pairing is canceled to the portable device.
According to this system, the portable device can recognize early the cancellation of the pairing with the in-vehicle device. As a result, early recovery of pairing between the two can be expected.

  The vehicle communication system of the present invention has an effect that it is possible to collate a communication partner over a long period of time through wireless communication of the BLUETOOTH standard.

The block diagram which shows schematic structure of a vehicle communication system. The top view of the vehicle which shows a communication area. The sequence chart which shows the process sequence of each control part. The sequence chart which shows the process sequence of each control part. The sequence chart which shows the process sequence of each control part. The sequence chart which shows the process sequence of each control part. The sequence chart which shows the process sequence of each control part. The sequence chart which shows the process sequence of each control part.

[First Embodiment]
Hereinafter, a first embodiment of a vehicle communication system will be described with reference to the drawings.
As shown in FIG. 1, the vehicle communication system 1 performs vehicle control through wireless communication between the vehicle 10 and the smartphone 20.

<Smartphone>
The smartphone 20 includes a smartphone control unit 21, a BLUETOOTH (registered trademark) communication unit (hereinafter referred to as a BT communication unit) 22, a touch panel display 27, and various configurations for performing a telephone call, the Internet, and the like. Various configurations including the BT communication unit 22 are each electrically connected to the smartphone control unit 21 and are comprehensively controlled by the smartphone control unit 21.

  The BT communication unit 22 is mounted on other devices by performing frequency hopping that randomly changes the frequency of the 2.4 GHz band (2.40 to 2.48 GHz) divided into 79 or 40 frequency channels. BLUETOOTH communication (hereinafter referred to as BT communication) is performed with the BT communication unit that is present. Here, the BT communication includes both a classic type using 79 ch and a low energy type using 40 ch. The BT communication unit 22 converts the electrical signal generated by the smartphone control unit 21 into a 2.4 GHz band radio signal and wirelessly transmits the radio signal toward a preset communication area through the BT antenna 22a. The BT communication unit 22 converts a 2.4 GHz band radio signal received through the BT antenna 22a into an electrical signal.

The BT communication unit 22 includes an RSSI circuit 22b that detects an RSSI (signal strength) of a radio signal received via the BT antenna 22a.
The touch panel display 27 converts information indicating the touch position into an electrical signal and displays an image based on a signal generated by the smartphone control unit 21. It is also possible to input a request command for requesting the operation of the in-vehicle device (for example, starting the engine or switching between door locking and unlocking) through the operation of the touch panel display 27. The touch panel display 27 corresponds to a notification unit and an operation unit.

  The memory 21 a of the smartphone control unit 21 stores a BT device address unique to itself, an ID code common to the vehicle-mounted control unit 11 provided in the vehicle 10, and a common encryption key. The device address of BT is used for pairing processing and BT communication with a communication partner having a BT communication unit. The ID code and the encryption key are used for mutual authentication with the in-vehicle control unit 11. The ID code is obtained by encrypting an ID common to the vehicle-mounted control unit 11 with an encryption key, and corresponds to an authentication key.

The smartphone control unit 21 includes a rolling counter 23 that is incremented by 1 each time a periodic request signal described later is received.
The smartphone control unit 21 searches for a device capable of pairing, a BT communication enabled mode in which BT communication is enabled with a paired communication partner, a BT communication disabled mode in which BT communication is disabled, and And a search mode. Switching between these three modes is performed, for example, by operating a touch panel display.

  When the smartphone control unit 21 in the search mode finds a device that can be paired, it performs a pairing process. When the pairing process is completed, the smartphone control unit 21 can perform BT communication with the paired communication partner. The communication partner is specified by a code unique to the communication partner. In order to ensure security, the pairing process may require the entry of a personal identification number unique to the communication partner. Once the personal identification number is entered, pairing can be performed without entering the personal identification number thereafter. Sometimes allowed. In some cases, pairing is permitted without entering a password once.

  In the BT communication enabled mode, when the smartphone control unit 21 paired with the in-vehicle control unit 11 receives the challenge signal including the challenge code, the response in which the challenge code is encrypted using the encryption key Generate code. Then, the smartphone control unit 21 generates a response signal including the response code and the ID code stored in its own memory 21a, and wirelessly transmits the response signal.

  Further, in the BT communication enabled mode, when the smartphone control unit 21 paired with the in-vehicle control unit 11 receives the initial value request signal for requesting the value of the rolling counter, the value of the rolling counter 23 is used as the encryption key. Generate a rolling code that is encrypted using it. Then, an initial value response signal including the rolling code is generated and wirelessly transmitted.

  Further, in the BT communication possible mode, when the smartphone control unit 21 paired with the in-vehicle control unit 11 receives the periodic request signal requesting the value of the rolling counter and the signal strength information, only 1 is associated with the reception. A rolling code is generated by encrypting the incremented value of the rolling counter 23 using the encryption key. And the smart phone control part 21 produces | generates the periodic response signal containing the RSSI detected through the rolling code and the RSSI circuit 22b, and transmits this wirelessly.

  In addition, when the request command which requests | requires operation | movement of a vehicle-mounted apparatus is input through operation of the touchscreen display 27, the smart phone control part 21 uses the periodic response signal with respect to the periodic request signal received immediately after the request command was input. Include request commands.

  Moreover, the smart phone control part 21 produces | generates the video signal corresponding to the control command, when the control command which shows that vehicle equipment operate | moved is contained in the periodical request signal. The touch panel display 27 displays a video based on this video signal.

<Vehicle>
As shown in FIG. 1, the vehicle 10 includes an in-vehicle control unit 11, a BLUETOOTH communication unit 12, an engine switch 13, an engine control device 14, a door handle sensor 15, and a door lock device 16. . The BT communication unit 12, the engine switch 13, the engine control device 14, the door handle sensor 15, and the door lock device 16 are each electrically connected to the in-vehicle control unit 11 and are comprehensively controlled by the in-vehicle control unit 11. The

  The BT communication unit 12 performs BLUETOOTH communication with other BT communication units by performing frequency hopping in the 2.4 GHz band. The BT communication unit 12 converts the electrical signal generated by the in-vehicle control unit 11 into a 2.4 GHz band signal. The converted wireless signal is wirelessly transmitted through the BT antenna 12a toward the communication area A3 set in advance so as to cover the entire vehicle 10, as shown in FIG. Note that the communication area A3 in FIG. 2 is an area of about 1 m around the vehicle, but can be set to an area of about 10 to 100 m around the vehicle by adjusting the BT output. The BT communication unit 12 converts a 2.4 GHz band radio signal received through the BT antenna 12a into an electrical signal.

As shown in FIG. 1, the engine switch 13 detects a pressing operation.
The engine control device 14 controls starting and stopping of the engine.
The door handle sensor 15 detects contact with the door handle.

The door lock device 16 switches between locking and unlocking the door.
The in-vehicle control unit 11 includes a nonvolatile memory 11a that maintains stored information even when the supply of vehicle power is stopped, and a volatile memory 11b that deletes stored information when the supply of vehicle power is stopped. Yes.

  The non-volatile memory 11 a stores a BT device address and personal identification number unique to itself, an ID code common to the smartphone control unit 21 provided in the smartphone 20, and a common encryption key. The device address and password of the BT are used for pairing processing with a communication partner having the BT communication unit. The ID code and the encryption key are used for mutual authentication with the smartphone control unit 21. The ID code is obtained by encrypting an ID common to the smartphone control unit 21 with an encryption key, and corresponds to an authentication key.

  In addition, when the vehicle 10 receives a wireless signal transmitted from the outdoor determination area A2 that is set smaller than the communication area A3 shown in FIG. 2 and covers the outer periphery of the vehicle door in the nonvolatile memory 11a. The outdoor determination RSSI value is stored. Further, in the nonvolatile memory 11a, the vehicle 10 receives a radio signal transmitted from the indoor determination area A1 that is set smaller than the outdoor determination area A2 shown in FIG. 2 and does not leak outside the vehicle door. The indoor determination RSSI value is stored. Further, the non-volatile memory 11a stores a collation range calculation formula used for collating the value of the received rolling counter.

  On the other hand, a reference value is stored in the volatile memory 11b. This reference value is an initial value of the rolling counter included in the latest value of the rolling counter that is determined to be collated or the initial value response signal received as a response to the initial value request signal described later.

  The in-vehicle control unit 11 has a BT communication enable mode in which BT communication is possible with a communication partner with which pairing has been established, and a BT communication disable mode in which BT communication is disabled. . Switching between the BT communication enabled mode and the BT communication disabled mode is performed by operating an input device (not shown).

  Note that the in-vehicle control unit 11 in the BT communication enable mode is in a state that can be paired with a device having the BT communication unit, and is paired with the device by being discovered by the searching device and subjected to pairing processing. The When the pairing process is completed, the in-vehicle control unit 11 can perform BT communication with the paired communication partner. The communication partner is specified by a code unique to the communication partner. In addition, the vehicle-mounted control part 11 calculates | requires the input of a PIN code in the case of a pairing process. When a personal identification number is input to itself, pairing with a device having the personal identification number is permitted.

  In the BT communication enabled mode, the in-vehicle control unit 11 generates a challenge signal including a challenge code and wirelessly transmits the challenge signal using the pairing with the smartphone control unit 21 as a trigger. A response code obtained by encrypting the challenge code is generated using the encryption key common to the unit 21.

  When the in-vehicle control unit 11 receives a response signal as a response to the challenge signal, the in-vehicle control unit 11 collates the response code included in the signal with the response code calculated by itself, and the ID code included in the signal and its own nonvolatile memory. The ID code stored in 11a is collated. When these two verifications are established, the vehicle-mounted control unit 11 determines that the communication partner (here, the smartphone control unit 21) corresponds to itself.

  Thereafter, the in-vehicle controller 11 generates an initial value request signal for requesting the value of the rolling counter, and wirelessly transmits this signal. When the in-vehicle control unit 11 receives the initial value response signal as a response to the initial value request signal, the in-vehicle control unit 11 sets the reference value of the volatile memory 11b to the value of the rolling counter obtained by decrypting the rolling code included therein with the encryption key. Update. Moreover, the vehicle-mounted control part 11 calculates the collation value range used for collation of the value of the rolling counter received next using the calculation formula memorize | stored in the non-volatile memory 11a.

  Thereafter, the in-vehicle control unit 11 periodically generates a periodic request signal for requesting the value of the rolling counter and the signal strength information, and wirelessly transmits the request signal. When receiving the periodic response signal as a response to the periodic request signal, the in-vehicle control unit 11 collates the value of the rolling counter obtained by decrypting the rolling code included in the signal with the encryption key and the collation value range.

  When the value of the received rolling counter is included in the verification value range, the in-vehicle control unit 11 updates the reference value of the volatile memory 11b to the value of the received rolling counter, and also receives the received RSSI, the indoor determination RSSI, and the outdoor The position of the smartphone 20 with respect to the vehicle 10 is determined through comparison with the determination RSSI. When it is determined that the smartphone 20 is located in the vehicle compartment, the engine is allowed to start. When the engine switch 13 detects an operation in this state, the in-vehicle control unit 11 starts the engine through the engine control device 14. On the other hand, when it is determined that the smartphone 20 is located outside the passenger compartment, switching between door locking and unlocking is permitted. When the door handle sensor 15 detects contact in this state, the vehicle-mounted control unit 11 switches between locking and unlocking the door through the door lock device 16.

  In addition, the in-vehicle control unit 11 includes the value of the received rolling counter in the verification value range, and the operation of the in-vehicle device (for example, engine start, door locking and unlocking) is included in the periodic request signal that includes the value. When a request command for requesting switching is input, the in-vehicle device corresponding to the request command is operated. Also in this case, the reference value of the volatile memory 11b is updated to the value of the received rolling counter.

When the vehicle-mounted control unit 11 operates the vehicle-mounted device, the vehicle-mounted control unit 11 generates a control command indicating that and includes the control command in the periodic request signal.
<Action>
Next, the operation of the vehicle communication system 1 will be described with reference to FIGS.

  First, after the pairing process between the in-vehicle control unit 11 and the smartphone control unit 21 is completed, the periodical transmission and reception of the periodic request signal and the periodic response signal between them will be described.

  As shown in FIG. 3, the in-vehicle control unit 11 authenticates whether the smartphone control unit 21 corresponds to itself through transmission / reception of a challenge signal and a response signal with the smartphone control unit 21, so-called challenge response authentication. I do.

When the challenge response authentication is established, the in-vehicle controller 11 generates an initial value request signal and wirelessly transmits it (step S1).
When receiving the initial value request signal, the smartphone control unit 21 generates an initial value response signal including a rolling code obtained by encrypting the value of the rolling counter 23 as a response to the initial value request signal, and wirelessly transmits this (step S2).

  When the in-vehicle control unit 11 receives the initial value response signal, the in-vehicle control unit 11 updates the reference value of the volatile memory 11b to the value of the rolling counter 23 obtained by decoding the rolling code included therein, and calculates the collation range ( Step S3). Then, a periodic request signal is generated and wirelessly transmitted (step S4).

  Upon receiving the periodic request signal, the smartphone control unit 21 generates an initial value response signal including each information of the rolling code that encrypts the value of the rolling counter 23 and the RSSI of the received periodic request signal as a response thereto. Is wirelessly transmitted (step S5).

  When receiving the periodic response signal, the in-vehicle control unit 11 updates the reference value of the volatile memory 11b to the value of the rolling counter 23 obtained by decoding the rolling code included therein, and calculates the collation range (step). S6). And operation | movement of the vehicle equipment according to the position of the smart phone 20 with respect to the vehicle 10 is permitted from received RSSI (step S7). In step S7, the operation of the in-vehicle device may not be permitted depending on the position of the smartphone 20. Thereafter, the in-vehicle controller 11 generates a periodic request signal and wirelessly transmits it (step S8).

  Thereafter, the processes of steps S5 to S8 are sequentially repeated until the smartphone 20 is removed from the communication area A3 and the BT communication between the in-vehicle control unit 11 and the smartphone control unit 21 becomes impossible.

  Next, when each process of steps S5 to S8 is sequentially repeated between the in-vehicle control unit 11 and the smartphone control unit 21, the engine start is permitted in step S7 and the engine switch 13 is operated. Will be described. In the following description, it is assumed that the engine switch 13 is operated immediately after the in-vehicle control unit 11 performs the process of step S8 and the smartphone control unit 21 performs the process of step S5.

  As shown in FIG. 4, when detecting that the engine switch 13 has been operated, the in-vehicle control unit 11 starts the engine through the engine control device 14 and generates a control command indicating that the engine has been started ( Step S9).

  When the in-vehicle control unit 11 receives the periodic response signal, it performs each process of steps S6 and S7, and then generates a periodic request signal including a control command indicating that the engine has been started, and wirelessly transmits this signal. (Step S10).

When receiving the periodic request signal including the control command, the smartphone control unit 21 displays an image based on the control command on the touch panel display 27 (step S11).
Thereafter, between the in-vehicle control unit 11 and the smartphone control unit 21, the processes in steps S5 to S8 illustrated in FIG. 3 are sequentially repeated.

  Note that the timing at which the process of step S9 is performed may be any time between the processes of steps S5 to S8. The in-vehicle control unit 11 may include the control command in the periodic request signal generated immediately after the process of step S9.

  Next, while the processes in steps S5 to S8 are sequentially repeated between the in-vehicle control unit 11 and the smartphone control unit 21, a request command for requesting engine start is input to the smartphone control unit 21 through the touch panel display 27. The case will be described. Here, a description will be given assuming that a request command is input while the processes in steps S6 to S8 are being performed in the in-vehicle control unit 11.

  As illustrated in FIG. 5, when receiving the periodic request signal in a state where the request command is input, the smartphone control unit 21 generates a periodic response signal including the request command and wirelessly transmits this (step S12). ).

  When receiving the periodic response signal including the request command, the in-vehicle control unit 11 operates the in-vehicle device according to the request command and generates a control command indicating the operation of the in-vehicle device. Here, the engine is started and a control command indicating that the engine has been started is generated (step S9).

  Thereafter, between the in-vehicle control unit 11 and the smartphone control unit 21, the processes in steps S <b> 6, S <b> 7, S <b> 10, and S <b> 11 illustrated in FIG. 4 are performed, and then the processes in steps S <b> 5 to S <b> 8 illustrated in FIG. It is.

In the above description, each process when the engine is started has been described, but the same process is also performed when the door is locked and unlocked.
As described above in detail, according to the present embodiment, the following effects can be obtained.

  (1) The in-vehicle control unit 11 is provided with a volatile memory 11b, and a reference value for collating the value of the rolling counter is stored in the volatile memory 11b. Then, after the collation by the ID code is established, the collation value range calculated from the value of the rolling counter and the reference value is collated, and whenever the collation is established, the reference value of the volatile memory 11b is updated. . Thus, by adopting the volatile memory 11b that can be used longer than the non-volatile memory, the in-vehicle control unit 11 can check the communication partner for a longer period than the conventional system. In addition, security equivalent to that of the conventional system is ensured.

  (2) The in-vehicle control unit 11 performs collation using an ID code triggered by pairing with the smartphone control unit 21 as a trigger. After the collation is established, the in-vehicle control unit 11 collates the value of the rolling counter through periodic exchange of the periodic request signal and the periodic response signal, and permits the operation of the in-vehicle device while the collation is established. I did it. Since the value of the rolling counter changes each time collation is performed, security equivalent to that of the conventional system is ensured even if collation by ID code is performed only once after pairing.

  In addition, since the operation of the in-vehicle device is permitted while the collation by the rolling counter is established, the time from when the operation to the in-vehicle device is requested to when the in-vehicle device actually operates is short. That is, the operation response of the in-vehicle device is good.

  (3) A common encryption key is stored in each memory of the in-vehicle control unit 11 and the smartphone control unit 21. And the smart phone control part 21 encrypted the data wirelessly transmitted to the vehicle-mounted control part 11 with an encryption key. The in-vehicle control unit 11 decrypts the received data with the encryption key and uses it. Thereby, since all the data used for collation by the vehicle-mounted control part 11 are encrypted, security is high.

  (4) When the vehicle-mounted device 11 operates the vehicle-mounted device, the vehicle-mounted control unit 11 transmits a control command indicating that in the periodic request signal. The smartphone control unit 21 notifies the touch panel display 27 that the in-vehicle device has been operated based on the received control command. Thereby, the user can confirm that the in-vehicle device has operated even if the user is away from the vehicle.

[Second Embodiment]
Next, a second embodiment of the vehicle communication system will be described. The main difference between the second embodiment and the first embodiment described above is that both the vehicle 10 and the smartphone 20 have a time counter, and the time counted by the time counter exceeds the breakage determination time. It is to eliminate pairing with the communication partner. Therefore, the detailed description of the parts common to the second embodiment and the first embodiment described above is omitted.

<In-vehicle control unit>
As shown by a broken line in FIG. 1, the in-vehicle control unit 11 includes an in-vehicle time counter 19 that resets the generation of a periodic request signal as a trigger and starts measuring time.

  The non-volatile memory 11a stores a preset interruption determination time Ts. The disconnection determination time Ts is longer than the time required for receiving the periodic response signal after the in-vehicle control unit 11 generates the periodic request signal when the BT communication is normally performed, and is set in the BLUETOOTH standard. A time shorter than the monitoring time is set.

  The in-vehicle control unit 11 outputs a pairing cancellation signal including information indicating that the pairing with the smartphone control unit 21 is canceled when the measurement time T1 of the in-vehicle time counter 19 exceeds the interruption determination time Ts. Generate and perform pairing cancellation processing. Thereafter, the in-vehicle controller 11 requests the smartphone controller 21 to perform pairing again.

<Smartphone control unit>
As shown by a broken line in FIG. 1, the smartphone control unit 21 includes a terminal time counter 29 that resets the generation of a periodic response signal as a trigger and starts measuring time.

Further, the memory 21a stores the same interruption determination time Ts as the interruption determination time Ts stored in the nonvolatile memory 11a.
When the measurement time T2 of the terminal time counter 29 exceeds the interruption determination time Ts, the smartphone control unit 21 outputs a pairing cancellation signal including information indicating that the pairing with the in-vehicle control unit 11 is canceled. Generate and perform pairing cancellation processing. Thereafter, the smartphone control unit 21 requests the vehicle-mounted control unit 11 to perform pairing again.

<Action>
Next, the operation of the vehicle communication system 1 will be described with reference to FIGS. 6, 7, and 8.
First, with reference to FIG. 6, the case where BT communication between the vehicle-mounted control part 11 and the smart phone control part 21 is performed normally is demonstrated. In addition, each process concerning pairing processing, challenge response authentication, generation / transmission of an initial value request signal, generation / transmission of an initial value response signal, update of a reference value, and calculation of a collation range is shown in FIG. Since each process up to S3 is the same, description of each of these processes is omitted.

  As shown in FIG. 6, the in-vehicle controller 11 generates a periodic request signal after the processing in step S3, wirelessly transmits the signal, and activates the in-vehicle time counter 19 to start time measurement (step S21). .

  When receiving the periodic request signal, the smartphone control unit 21 generates a periodic response signal including each information of the rolling code that encrypts the value of the rolling counter 23 and the RSSI of the received periodic request signal as a response thereto. In addition to wireless transmission, the terminal time counter 29 is activated to start time measurement (step S22).

  When the vehicle-mounted control unit 11 receives the periodic response signal before the measurement time T1 of the vehicle-mounted time counter 19 exceeds the interruption determination time Ts (T1 ≦ Ts), the rolling counter 23 obtained by decoding the rolling code included therein. The reference value of the volatile memory 11b is updated to the above value and the collation value range is calculated (step S23). And operation | movement of the vehicle equipment according to the position of the smart phone 20 with respect to the vehicle 10 is permitted from received RSSI (step S24). Thereafter, the in-vehicle controller 11 generates a periodic request signal, wirelessly transmits it, and resets the in-vehicle time counter 19 to resume time measurement (step S25).

  When the smartphone control unit 21 receives the periodic request signal before the measurement time T2 of the terminal time counter 29 exceeds the interruption determination time Ts (T2 ≦ Ts), the rolling code that encrypts the value of the rolling counter 23 as a response thereto And a periodic response signal including each piece of RSSI information of the received periodic request signal. The smartphone control unit 21 wirelessly transmits the generated periodic response signal and resets the terminal time counter 29 to restart time measurement (step S26).

Thereafter, the processes in steps S23 to S26 are sequentially repeated until the BT communication between the in-vehicle control unit 11 and the smartphone control unit 21 becomes impossible.
Next, a description will be given of a case where BT communication is disabled due to temporary freezing of the control unit while the processes in steps S23 to S26 are sequentially repeated between the in-vehicle control unit 11 and the smartphone control unit 21. To do.

First, the case where the measurement time T1 of the on-vehicle time counter 19 exceeds the interruption determination time Ts will be described with reference to FIG.
As shown in FIG. 7, when the measurement time T1 of the vehicle-mounted time counter 19 exceeds the interruption determination time Ts (T1> Ts), the vehicle-mounted control unit 11 generates a pairing cancellation signal and wirelessly transmits this signal. The self-pairing cancellation process is performed (step S31). After completion of the pairing cancellation process, the in-vehicle control unit 11 requests the smartphone control unit 21 to perform pairing again (step S32).

  When receiving the pairing cancellation signal, the smartphone control unit 21 performs a pairing cancellation process (step S33). After completion of the pairing cancellation process, the smartphone control unit 21 requests the in-vehicle control unit 11 to perform pairing again (step S34).

Next, a case where the measurement time T2 of the terminal time counter 29 exceeds the interruption determination time Ts will be described with reference to FIG.
As shown in FIG. 8, when the measurement time T2 of the terminal time counter 29 exceeds the interruption determination time Ts (T2> Ts), the smartphone control unit 21 generates a pairing cancellation signal and wirelessly transmits this signal. The self-pairing cancellation process is performed (step S41). After completing the pairing cancellation process, the smartphone control unit 21 requests the vehicle-mounted control unit 11 to perform pairing again (step S42).

  When receiving the pairing cancellation signal, the in-vehicle control unit 11 performs a pairing cancellation process (step S43). After completion of the pairing cancellation process, the in-vehicle control unit 11 requests the smartphone control unit 21 to perform pairing again (step S44).

  In addition, BT communication is impossible when the measurement time T1 of the vehicle-mounted time counter 19 exceeds the interruption determination time Ts in FIG. 7 and when the measurement time T2 of the terminal time counter 29 exceeds the interruption determination time Ts in FIG. It may be. When BT communication is impossible, in FIG. 7, the pairing cancellation | release signal which the vehicle-mounted control part 11 produces | generates in the smart phone control part 21, and in FIG. 8, the pairing elimination signal which the smart phone control part 21 produces | generates in-vehicle control. The unit 11 does not receive each. Therefore, the processes in steps S33 and S34 are not executed in FIG. 7, and the processes in steps S43 and S44 are not executed in FIG.

  However, in FIG. 7, even if the pairing cancellation signal is not received by the smartphone control unit 21, the measurement time T2 of the terminal time counter 29 is reached if time passes, and in FIG. 8, the pairing cancellation signal is transmitted to the in-vehicle control unit 11. If the time elapses without being received, the measurement time T1 of the in-vehicle time counter 19 exceeds the breakage determination time Ts. That is, in FIG. 7, the processes of steps S41 and S42 shown in FIG. 8 instead of the processes of steps S33 and S34 are replaced by the steps shown in FIG. 7 instead of the processes of steps S43 and S44 in FIG. 8. Each process of S31 and S32 is performed. Thus, if a pairing cancellation | release process is performed in any one of the vehicle-mounted control part 11 and the smart phone control part 21, a pairing cancellation | release process will be performed also in the other.

As described above in detail, according to the present embodiment, in addition to the effects (1) to (4) of the first embodiment, the following effects can be obtained.
(5) A terminal time counter 29 is provided in the smartphone control unit 21. In addition, when the BT communication is normally performed in the memory 21a of the smartphone control unit 21, it is longer than the time taken for the reception of the periodic response signal after the in-vehicle control unit 11 generates the periodic request signal, and in the BLUETOOTH standard. The interruption determination time Ts shorter than the set connection monitoring time was stored. And the smart phone control part 21 was set so that the cancellation process of the pairing with the vehicle-mounted control part 11 may be implemented when the measurement time T2 by the terminal time counter 29 exceeds the interruption determination time Ts. Thus, since the smart phone control unit 21 immediately cancels the pairing with the in-vehicle control unit 11 when it is estimated that wireless communication with the in-vehicle control unit 11 is impossible, If there is a request for pairing, it can be met.

  (6) When the smart phone control unit 21 determines to cancel the pairing with the in-vehicle control unit 11, the smart phone control unit 21 wirelessly transmits a pairing cancellation signal including information indicating that to the in-vehicle control unit 11. Thereby, the vehicle-mounted control part 11 can recognize cancellation | release of the pairing between the smart phone control parts 21 at an early stage. For this reason, it can be expected that the early pairing between the two is restored and the exchange of the periodic request signal and the periodic response signal is resumed.

  (7) The in-vehicle time counter 19 is provided in the in-vehicle controller 11. Further, in the nonvolatile memory 11a of the in-vehicle controller 11, when the BT communication is normally performed, it is longer than the time taken to receive the periodic response signal after generating the periodic request signal, and is set in the BLUETOOTH standard. The disconnection determination time Ts shorter than the connection monitoring time is stored. And when the measurement time T1 by the vehicle-mounted time counter 19 exceeds the breakage determination time Ts, the vehicle-mounted control unit 11 is set so that the pairing cancellation process with the smartphone control unit 21 is performed. In this way, the in-vehicle control unit 11 immediately cancels the pairing with the smartphone control unit 21 when it is estimated that wireless communication with the smartphone control unit 21 is impossible. If there is a request for pairing, it can be met.

  (8) When the in-vehicle control unit 11 determines to cancel the pairing with the smartphone control unit 21, the in-vehicle control unit 11 wirelessly transmits a pairing cancellation signal including information indicating that to the smartphone control unit 21. Thereby, the smart phone control part 21 can recognize cancellation | release of the pairing between the vehicle-mounted control part 11 at an early stage. For this reason, it can be expected that the early pairing between the two is restored and the exchange of the periodic request signal and the periodic response signal is resumed.

In addition, you may change each said embodiment as follows.
In the second embodiment, the interruption determination times Ts stored in the nonvolatile memory 11a and the memory 21a may be set to different times. Even if it is set at a different time, the effects (5) to (8) in the second embodiment can be obtained.

  -In the said 2nd Embodiment, although both the vehicle-mounted control part 11 and the smart phone control part 21 had the time counter, the structure which has only one has a time counter may be sufficient.

  If the on-vehicle time counter 19 of the on-vehicle controller 11 is omitted, the effects (5) and (6) in the second embodiment can be obtained. When this configuration is employed, it is desirable to omit the interruption determination time Ts from the nonvolatile memory 11a.

  If the terminal time counter 29 of the smartphone control unit 21 is omitted, the effects (7) and (8) in the second embodiment can be obtained. When this configuration is adopted, it is desirable to omit the interruption determination time Ts from the memory 21a.

  -In said 2nd Embodiment, when the vehicle-mounted control part 11 and the smart phone control part 21 judge cancellation of pairing, respectively, it produces | generates the pairing cancellation signal containing the information which shows that, and transmits this wirelessly However, this may be omitted. Even if the generation of the pairing cancellation signal and the wireless transmission are omitted, the counterpart control unit performs the pairing cancellation processing when the measurement time by the time counter exceeds the interruption determination time Ts.

In each of the above embodiments, the smartphone control unit 21 may encrypt the request command with an encryption key. Thereby, the security property as a system increases.
In the above embodiments, the in-vehicle control unit 11 does not have to generate a control command. That is, it is not necessary to notify that the in-vehicle device has operated through the touch panel display 27.

  In each of the above embodiments, the case where the touch panel display 27 is caused to function as a notification unit has been described. However, the notification unit may be anything that appeals to human senses. For example, a speaker may be used. Moreover, although the case where the touch panel display 27 is caused to function as an operation unit has been described, a dedicated button or switch may be used.

  -In each above-mentioned embodiment, the smart phone control part 21 does not need to encrypt the data wirelessly transmitted to the vehicle-mounted control part 11. FIG. In this case, the encryption key stored in each memory of the in-vehicle control unit 11 and the smartphone control unit 21 may be omitted.

  In each of the above-described embodiments, the in-vehicle control unit 11 performs the challenge response authentication using the pairing with the smartphone control unit 21 as a trigger, but it does not necessarily have to be at this timing. In each of the above embodiments, challenge response authentication is performed only once, but it may be performed a plurality of times or periodically.

  In each of the above embodiments, the reference value stored in the volatile memory 11b is the value of the rolling counter itself when the collation is established, but may be a collation value range in each of the above embodiments. In this case, the in-vehicle control unit 11 calculates a collation value range using the fact that collation of the value of the rolling counter has been established as a trigger, and stores this in the volatile memory 11b. Even if comprised in this way, the effect similar to each effect as described in each said embodiment can be acquired.

  In each of the above embodiments, the in-vehicle control unit 11 determines the position of the smartphone 20 with respect to the vehicle 10 from the received RSSI and permits the operation of the in-vehicle device according to the position, but the position determination may not be performed. . For example, if verification of the value of the rolling counter is established, the operation of all in-vehicle devices may be permitted. In this case, the outdoor determination RSSI and the indoor determination RSSI stored in the nonvolatile memory 11a may be omitted. Further, the RSSI circuit 22b in the smartphone 20 may be omitted.

In the above embodiments, searching for a pairable partner and pairing processing may be performed from the in-vehicle control unit 11.
In each of the above embodiments, the smartphone 20 is used as the portable device, but instead of this, a tablet terminal, a portable music terminal, a notebook computer, or the like that does not have a telephone function may be used. Moreover, the electronic key only for vehicles may be sufficient.

DESCRIPTION OF SYMBOLS 1 ... Vehicle communication system, 10 ... Vehicle, 11 ... Vehicle-mounted control part, 11a ... Nonvolatile memory, 11b ... Volatile memory, 12, 22 ... BLUETOOTH communication part, 14 ... Engine control apparatus, 16 ... Door lock apparatus, 20 ... Smartphone, 21 ... Smartphone control unit, 21a ... Memory, 22b ... RSSI circuit, 23 ... Rolling counter, 27 ... Touch panel display.

Claims (9)

In a vehicle communication system including an in-vehicle device that performs wireless communication of a BLUETOOTH standard with a portable device, performs verification with a dedicated verification key through this wireless communication, and permits the operation of the in-vehicle device when the verification is established,
The portable device includes a rolling counter that increments each time wireless communication is performed with the in-vehicle device, and the value of the rolling counter is included in a wireless signal and transmitted.
The in-vehicle device includes a volatile memory in which information for collating the value of the rolling counter is stored, and the value of the rolling counter and the volatile property are triggered by pairing with the portable device. Synchronize with the information for collating the value of the rolling counter stored in the memory, and thereafter, whenever the collation of the value of the rolling counter is established, the value of the rolling counter stored in the volatile memory is The vehicle communication system which updates the information for collation. The vehicle communication system according to claim 1,
The in-vehicle device performs the verification of the verification key using a pairing with the portable device as a trigger, and when the verification is established, the value of the rolling counter is performed through periodic wireless communication performed thereafter. The vehicle communication system that permits the operation of the in-vehicle device while the verification is established. The vehicle communication system according to claim 1 or 2,
The portable device and the in-vehicle device have a common encryption key, and transmit and receive information obtained by encrypting the verification key using the encryption key,
The mobile device is a vehicle communication system that encrypts the value of the rolling counter using the encryption key and wirelessly transmits the encrypted information to the in-vehicle device. The vehicle communication system according to claim 3,
The portable device includes an operation unit for inputting a request command indicating an operation request of the in-vehicle device, encrypts the request command using the encryption key, and transmits the encrypted information to the in-vehicle device. Wirelessly transmit,
The vehicle-mounted device is a vehicle communication system that operates a vehicle-mounted device in accordance with the received request command. In the vehicle communication system according to any one of claims 1 to 4,
The in-vehicle device wirelessly transmits a control command indicating the operation of the in-vehicle device to the portable device,
The portable device includes a notification unit appealing to a user's sense, and notifies the operation of the in-vehicle device through the notification unit based on the received control command. In the vehicle communication system according to any one of claims 1 to 5,
The portable device has a portable device-side time counter that measures the time required for wireless communication with the in-vehicle device, and the measurement time by the portable device-side time counter is a connection monitoring time set in the BLUETOOTH standard A vehicle communication system that eliminates pairing with the in-vehicle device when a breakage determination time set to a time shorter than that and sufficient for wireless communication is exceeded. The vehicle communication system according to claim 6, wherein
When the portable device cancels the pairing with the in-vehicle device, the vehicle communication system wirelessly transmits information indicating that the pairing is canceled to the in-vehicle device. In the vehicle communication system according to any one of claims 1 to 7,
The vehicle-mounted device has a vehicle-mounted device side time counter that measures the time required for wireless communication with the portable device, and the time measured by the vehicle-mounted device side time counter is a connection monitoring time set in the BLUETOOTH standard A vehicle communication system that eliminates pairing with the portable device when a breakage determination time that is shorter than the time set for the wireless communication is exceeded. The vehicle communication system according to claim 8,
When the in-vehicle device cancels the pairing with the portable device, the vehicle communication system wirelessly transmits information indicating that the pairing is canceled to the portable device.