JP2017087843A - Wireless communication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a wireless communication system capable of shortening authentication time of authentication processing in accordance with another authentication request in a case where the other authentication request is received while executing authentication processing by receiving an authentication request as a result of a user performing different vehicular operations.SOLUTION: In a case where there is another authentication request received by a reception part while an authentication part is executing authentication processing by receiving an authentication request, an authentication result report part reports an authentication result as a common authentication result for the authentication request and the other authentication request, in accordance with the authentication result of the authentication processing.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a wireless communication system mounted on a vehicle.

  2. Description of the Related Art Conventionally, a wireless communication system that permits use of a vehicle when a vehicle-mounted device and a portable device possessed by a user of the vehicle perform wireless communication and user authentication is established is known. In this system, a vehicle called a relay attack that realizes wireless communication between a portable device and a vehicle-mounted device and establishes user authentication even in a situation where the portable device is so far away that radio waves transmitted from the vehicle-mounted device cannot be received. Theft can be a problem.

  When the portable device is so far away that radio waves transmitted from the vehicle-mounted device cannot be received, the portable device cannot receive the user authentication signal transmitted from the vehicle-mounted device. In the relay attack, a repeater is installed between the vehicle-mounted device and the portable device. The repeater receives a signal transmitted from the vehicle-mounted device and transmits the received signal to the portable device. The portable device that has received the signal transmits a response signal toward the vehicle-mounted device. The repeater receives the response signal and transmits the received response signal to the vehicle-mounted device. As described above, in relay attack, wireless communication between a vehicle-mounted device and a portable device is realized by using a relay device.

  As a countermeasure against vehicle theft by a relay attack, a technique for determining whether or not a delay time in communication between a vehicle-mounted device and a portable device is within a predetermined time in addition to collation of an ID code is known. The delay time is the time from when the vehicle-mounted device transmits a signal to the portable device until the portable device that has received the signal transmits a response signal to the vehicle-mounted device and the vehicle-mounted device receives the response signal. When a repeater is present, the delay time is longer than when no repeater is present. For this reason, the wireless communication system can determine whether or not a relay attack is being performed. This technique is described in Patent Document 1, for example.

JP 2012-175518 A

  By the way, in the conventional technology in which countermeasures against relay attack are taken, it is necessary to determine whether or not the delay time between the vehicle-mounted device and the portable device is within a predetermined time, and therefore a system that performs only ID code verification Rather, it takes more time to complete the authentication process. For this reason, when the user continuously performs a plurality of vehicle operations that require user authentication, another authentication request may be received while the system is receiving the authentication request and executing the authentication process. In this case, since the authentication process corresponding to the other authentication request is performed after the authentication process is completed, there is a problem that it takes time until the authentication process corresponding to the other authentication request is completed.

  The present invention has been made in view of the above problems, and when different vehicle operations are continuously performed by a user and another authentication request is received while an authentication request is received and an authentication process is being performed, another authentication is performed. An object of the present invention is to provide a wireless communication system capable of shortening the authentication time of authentication processing according to a request.

  The present invention is a wireless communication system in which a vehicle-mounted device and a portable device perform wireless communication and perform user authentication, and the vehicle-mounted device sequentially accepts authentication requests issued each time a vehicle operation is performed by a user. In addition to the first authentication process and the low level authentication process for performing the first authentication process as the authentication process according to the security level determined based on the vehicle operation represented by the reception unit and the authentication request, An authentication unit that can perform high-level authentication processing that performs authentication processing, performs authentication processing in the order received by the reception unit, and authenticates the authentication result of the authentication processing performed by the authentication unit in response to the authentication request A result notifying unit, and when there is another authentication request accepted by the accepting unit during the execution of the authentication process by the authenticating unit, at least one of the following (1) and (2) Authentication result notification unit, an authentication result is notified as a common authentication result to the authentication request and other authentication request and the wireless communication system. (1) The authentication process corresponding to the authentication request is a low level authentication process, the authentication result is OK, and the authentication process corresponding to another authentication request is a high level authentication process. (2) When the authentication process corresponding to the authentication request is a high-level authentication process, the execution result of the first authentication process is OK, and the execution result of the second authentication process is NG, When the authentication result is NG and the authentication process corresponding to another authentication request is a low-level authentication process.

  In the present invention, when there is another authentication request accepted by the accepting unit during the execution of the authentication process by the authenticating unit, the authentication result of the authentication process is commonly used as the authentication result of the authentication process corresponding to the other authentication request. Judge whether it can be used. When it is determined that they can be used in common, the authentication result notification unit notifies the authentication result of the authentication process as a common authentication result for the authentication request and other authentication requests. Authentication processing according to other authentication requests is not performed after the authentication processing is completed. For this reason, when another authentication request is received while the authentication request is received and the authentication process is being executed, the authentication time of the authentication process corresponding to the other authentication request can be shortened.

  As described above, according to the present invention, when a different vehicle operation is continuously performed by a user and another authentication request is received while the authentication request is received and the authentication process is being executed, the response to the other authentication request is performed. The authentication time for the authentication process can be shortened.

Block diagram of wireless communication system The figure which showed an example of commonality permission information Flow chart showing processing procedure of low level authentication processing Flow chart showing processing procedure of high level authentication processing Flowchart for explaining processing procedure of common authentication result notification Conceptual diagram showing an example of operation of a wireless communication system

  Hereinafter, embodiments will be described in detail with reference to FIGS.

[Overview]
When the wireless communication system according to the present embodiment receives an authentication request, the wireless communication system executes a low-level authentication process in which no countermeasure against relay attack is taken and a high-level authentication process in which a countermeasure against relay attack is taken. When this system receives another authentication request during the execution of the authentication process, the system notifies the authentication result as a common authentication result for the authentication request and the other authentication request. Since the authentication process according to another authentication request is not performed after the authentication process is completed, the authentication time is shortened.

[Configuration of wireless communication system]
FIG. 1 is a block diagram of a wireless communication system 1 according to the present embodiment. The wireless communication system 1 includes a vehicle-mounted device 10 mounted on a vehicle 40 and a portable device 30 possessed by a user. A plurality of vehicle control devices 20_1 to 20_n (n is an integer of 2 or more) are connected to the vehicle-mounted machine 10. The vehicle-mounted device 10 performs wireless communication with the portable device 30 and performs user authentication when a vehicle operation requiring user authentication is performed. Hereinafter, each structure of the radio | wireless communications system 1 is demonstrated.

  The vehicle control devices 20_1 to 20_n are devices that control the operation of the vehicle. Each of the vehicle control devices 20_1 to 20_n is, for example, an engine start control device or a door locking / unlocking control device. Each of the vehicle control devices 20_1 to 20_n includes operation units 21_1 to 21_n that are operated by a user. For example, the operation unit 21_1 is an engine start switch when the vehicle control device 20_1 is an engine start control device.

  Each vehicle control device 20_1 to 20_n issues an authentication request every time a vehicle operation requiring user authentication is performed on any of the corresponding operation units 21_1 to 21_n. Specifically, each of the vehicle control devices 20_1 to 20_n outputs a request signal for requesting user authentication to the vehicle-mounted device 10. The request signal includes at least information transmitted from any of the vehicle control devices 20_1 to 20_n and capable of identifying what kind of vehicle operation has been performed. The vehicle operation requiring user authentication is set as appropriate, and is, for example, pressing an engine start switch or a door locking / unlocking operation.

  The vehicle-mounted device 10 includes a wireless communication unit 11, a crystal oscillator 12, a reception unit 13, a memory unit 14, an authentication unit 15, and an authentication result notification unit 16. The wireless communication unit 11 performs radio communication with the portable device 30 by transmitting radio waves in the LF (Low Frequency) band. The crystal oscillator 12 transmits power at a predetermined transmission frequency by supplying power.

  The reception unit 13 sequentially receives authentication requests issued from the vehicle control devices 20_1 to 20_n.

  In the memory unit 14, an ID code 141 and commonality determination information 142 are stored in advance. The ID code 141 is an ID code uniquely given to the vehicle 40.

  The sharing possibility information 142 is an authentication process in response to an authentication request when the receiving unit 13 receives another authentication request while the receiving unit 13 receives another authentication request while the receiving unit 13 receives an authentication request and the later-described authentication unit 15 is executing the authentication process. The authentication result can be identified as a common authentication result for the authentication request and other authentication requests. An example of the sharing possibility information 142 is shown in FIG. As shown in FIG. 2, based on the authentication result of the authentication process according to the authentication request, it is determined whether or not the authentication result can be a common authentication result for the authentication request and other authentication requests. .

Although the commonal availability information 142 is set as appropriate, at least when neither of the following (1) and (2) is true, the authentication result is set as a common authentication result for the authentication request and other authentication requests. Is set.
(1) When the authentication process according to the authentication request is a low level authentication process described later, the authentication result is OK, and the authentication process according to another authentication request is a high level authentication process described later. .
(2) The authentication process according to the authentication request is a high-level authentication process described later, the execution result of the first authentication process described later is OK, and the execution result of the second authentication process described later is When the authentication result is NG due to being NG, and the authentication process according to another authentication request is a low-level authentication process.

  The authentication unit 15 performs user authentication as to whether or not the vehicle operation performed on each of the operation units 21_1 to 21_n is performed by the user himself / herself. Specifically, in the authentication unit 15, the reception unit 13 receives a low-level authentication process and a high-level authentication process as authentication processes according to a security level determined based on the vehicle operation represented by the authentication request. Run in order.

  The low level authentication process is an authentication process executed when a vehicle operation with a relatively low security level is performed. The vehicle operation with a relatively low security level is, for example, door locking or the like, and is a vehicle operation with a low possibility of the vehicle 40 being stolen even when a person other than the user performs. In the low level authentication process, the first authentication process is performed. The first authentication process is, for example, ID code verification. The ID code collation is a collation between an ID code 141 unique to the vehicle 40 and an ID code 321 described later stored in the portable device 30. The low-level authentication process is an authentication process for which no countermeasure against relay attack is taken.

  The high-level authentication process is an authentication process that is executed when a vehicle operation with a relatively high security level is performed and higher-level user authentication is requested than in the low-level authentication process. The vehicle operation with a relatively high security level is, for example, engine start or door unlocking, and is a vehicle operation that is highly likely to be stolen when a person other than the user performs it. In the high-level authentication process, a second authentication process is performed in addition to the first authentication process. The second authentication process is, for example, delay time determination. The delay time determination is a determination as to whether or not the delay time until the vehicle-mounted device 10 transmits a signal to the portable device 30 and the vehicle-mounted device 10 receives a response signal from the portable device 30 is within a predetermined time. is there. The high-level authentication process is an authentication process in which a countermeasure against relay attack is taken.

  The authentication result notification unit 16 notifies the authentication result of the authentication process executed by the authentication unit 15 in response to the authentication request issued from the vehicle control devices 20_1 to 20_n. Further, the authentication result notifying unit 16 sends an authentication result to the authentication request based on the commonality information 142 when there is another authentication request received by the receiving unit 13 during execution of the authentication process by the authenticating unit 15. And other authentication requests as a common authentication result (hereinafter referred to as “common authentication result notification”).

  The portable device 30 includes a wireless communication unit 31 and a memory unit 32. The wireless communication unit 31 transmits radio waves in an RF (Radio Frequency) band and performs wireless communication with the vehicle-mounted device 10. The memory unit 32 stores in advance an ID code 321 uniquely assigned to a vehicle corresponding to the portable device 30.

[Operation of wireless communication system]
Next, the operation of the wireless communication system 1 will be described with reference to FIGS.

1. Low Level Authentication Process First, the processing procedure of the low level authentication process will be described with reference to FIG. FIG. 3 is a flowchart showing a processing procedure of the low-level authentication processing.

  First, in step S301, the authentication unit 15 executes a first authentication process. The first authentication process will be specifically described on the assumption that the ID code is collated. First, the authentication unit 15 transmits a request signal to the portable device 30 via the wireless communication unit 11. The portable device 30 that has received the request signal transmits the ID code 321 to the vehicle-mounted device 10 via the wireless communication unit 31. Then, the authentication unit 15 collates the received ID code 321 with the ID code 141 stored in the memory unit 14.

  Subsequently, in step S302, the authentication unit 15 determines whether or not the execution result of the first authentication process is OK. When the execution result is OK, the process proceeds to step S303, and when the execution result is NG, the process proceeds to step S304.

  If it is determined in step S302 that the execution result is OK, in step S303, the authentication unit 15 sets authentication to OK, and the low-level authentication process ends. On the other hand, if it is determined in step S302 that the execution result is NG, in step S304, the authentication unit 15 sets authentication as NG, and the low-level authentication process ends.

2. High Level Authentication Process Next, the processing procedure of the high level authentication process will be described with reference to FIG. FIG. 4 is a flowchart showing a processing procedure of high-level authentication processing.

  First, in step S401, the authentication unit 15 executes a first authentication process.

  Subsequently, in step S402, the authentication unit 15 executes a second authentication process. The second authentication process will be specifically described on the assumption that it is a delay time determination. First, the authentication unit 15 transmits a first clock signal having a constant frequency to the portable device 30 via the wireless communication unit 11 based on a predetermined transmission frequency of the crystal oscillator 12. The portable device 30 measures the frequency of the received first clock signal. Then, the portable device 30 transmits a second clock signal having a constant frequency to the vehicle-mounted device 10 via the wireless communication unit 31 based on the measured frequency. The authentication unit 15 that has received the second clock signal calculates a phase shift between the first clock signal and the second clock signal as a delay time. Then, the authentication unit 15 determines whether or not the calculated delay time is within a predetermined time. When a relay attack is performed, the delay time increases because a repeater is interposed.

  Subsequently, in step S403, the authentication unit 15 determines whether the execution results of the first authentication process and the second authentication process are OK. If the execution results of the first authentication process and the second authentication process are OK, the process proceeds to step S404, where the first authentication process is OK and the second authentication process is NG, or the first authentication process is NG and If the second authentication process is OK, or the first authentication process is NG and the second authentication process is NG, the process proceeds to step S405.

  When it is determined in step S403 that the execution results of the first authentication process and the second authentication process are OK, in step S404, the authentication unit 15 sets the authentication OK, and the high-level authentication process ends. On the other hand, in step S403, the first authentication process is OK and the second authentication process is NG, or the first authentication process is NG and the second authentication process is OK, or the first authentication process is NG and When it is determined that the second authentication process is NG, in step S405, the authentication unit 15 sets the authentication as NG, and the high-level authentication process ends.

3. Common Authentication Result Notification Processing Procedure Next, the common authentication result notification processing procedure will be described with reference to FIG. FIG. 5 is a flowchart for explaining the processing procedure of the common authentication result notification.

  First, in step S501, the reception unit 13 starts receiving authentication requests issued from the vehicle control devices 20_1 to 20_n.

  Subsequently, in step S502, it is determined whether or not a vehicle operation has been performed and an authentication request has been received by the receiving unit 13. If the authentication request is accepted, the process proceeds to step S503. If the authentication request is not accepted, the process of step S502 is performed again.

  If it is determined in step S502 that the authentication request has been accepted, in step S503, the authentication unit 15 determines whether the security level of the authentication request is high or low. If the security level of the authentication request is high, the process proceeds to step S504. If the security level of the authentication request is low, the process proceeds to step S505.

  If it is determined in step S503 that the security level of the authentication request is high, in step S504, the authentication unit 15 executes high-level authentication processing. On the other hand, when it is determined in step S503 that the security level of the authentication request is low, in step S505, the authentication unit 15 executes low-level authentication processing.

  Subsequently, in step S506, the authentication result notifying unit 16 notifies the authentication result to the vehicle control devices 20_1 to 20_n that have issued the authentication request.

  Subsequently, in step S507, the authentication unit 15 determines whether there is another authentication request received by the reception unit 13 during execution of the authentication process. If it is determined that there is another authentication request, the process proceeds to step S508. If it is determined that there is no other authentication request, the process returns to step S502.

  When it is determined in step S507 that there is another authentication request, in step S508, the authentication result notifying unit 16 outputs the authentication result based on the commonality information 142 in the authentication process corresponding to the other authentication request. About the authentication process which can be made common, the common authentication result is notified to the vehicle control apparatuses 20_1 to 20_n which issued other corresponding authentication requests.

  Subsequently, in step S509, the authentication unit 15 determines whether there is an authentication process in which the authentication result cannot be shared among the authentication processes according to other authentication requests. If there is an authentication process in which the authentication result cannot be shared, the process returns to step S503. If there is no authentication process in which the authentication result cannot be shared, the process returns to step S502.

  Next, the common authentication result notification will be further described with reference to FIG. FIG. 6 is a conceptual diagram illustrating an example of the operation of the wireless communication system 1.

  In FIG. 6, the engine start control device as the vehicle control device makes an authentication request to the vehicle-mounted machine 10. The vehicle-mounted device 10 that has received the authentication request performs high-level authentication processing because engine start is a vehicle operation with a high security level. In the high-level authentication process, first, the wireless communication unit 11 and the wireless communication unit 31 exchange request signals and response signals, and collate ID codes. Next, the wireless communication unit 11 and the wireless communication unit 31 exchange clock signals and perform delay time determination.

  In FIG. 6, the door locking / unlocking control device as the vehicle control device performs another authentication request to the vehicle mounting device 10 while the vehicle mounting device 10 is performing the high-level authentication process. Yes. Door locking is a vehicle operation with a low security level. The vehicle-mounted device 10 notifies the authentication result to each of the engine start control device and the door locking / unlocking control device as a common authentication result for the authentication request and other authentication requests, based on the commonality availability information 142.

[Effect of the embodiment]
In the present embodiment, when there is another authentication request accepted by the accepting unit 13 during the execution of the authentication process by the authenticating unit 15, the authentication result of the authentication process is used as the authentication result of the authentication process corresponding to the other authentication request. As a result, it is determined whether it can be used in common. When it is determined that they can be used in common, the authentication result notification unit 16 notifies the authentication result of the authentication process as a common authentication result for the authentication request and other authentication requests. Authentication processing according to other authentication requests is not performed after the authentication processing is completed. For this reason, when another authentication request is received while the authentication request is received and the authentication process is being executed, the authentication time of the authentication process corresponding to the other authentication request can be shortened.

  The present invention is applicable to a wireless communication system mounted on a vehicle.

DESCRIPTION OF SYMBOLS 1 Radio | wireless communications system 10 Vehicle mounting machine 13 Reception part 14 Memory part 15 Authentication part 16 Authentication result notification part 30 Portable machine 141 ID code 142 Shareability information

Claims (1)

A wireless communication system in which a vehicle-mounted device and a portable device perform wireless communication and perform user authentication,
The vehicle-mounted machine is
A reception unit for sequentially receiving authentication requests issued each time a vehicle operation is performed by a user;
As an authentication process according to a security level determined based on the vehicle operation represented by the authentication request, a low-level authentication process for performing a first authentication process and a second authentication in addition to the first authentication process A high-level authentication process that performs processing, an authentication unit that performs the authentication process in the order received by the reception unit;
An authentication result notifying unit for notifying an authentication result of the authentication process executed by the authentication unit in response to the authentication request,
In the case where there is another authentication request accepted by the accepting unit during execution of the authentication process by the authenticating unit, at least when neither of the following (1) and (2) is true, the authentication result notifying unit is A wireless communication system that notifies the authentication result as a common authentication result for the authentication request and the other authentication request.
(1) The case where the authentication process corresponding to the authentication request is a low level authentication process, the authentication result is OK, and the authentication process corresponding to the other authentication request is a high level authentication process.
(2) The authentication process corresponding to the authentication request is a high-level authentication process, the execution result of the first authentication process is OK, and the execution result of the second authentication process is NG. Thus, when the authentication result is NG and the authentication process according to the other authentication request is a low-level authentication process.

Images