JP2017088016A - On-vehicle equipment control system, and portable machine - Google Patents

Abstract

PROBLEM TO BE SOLVED: To improve crime prevention capability to relay attack and to secure convenience of a user without complicating processing in an on-vehicle equipment control system consisting of a portable machine and an on-vehicle controller.SOLUTION: In the case that a door of a vehicle 30 is in a locked state, when control, such as lock/unlock of the door, or start/stop of an engine, of on-vehicle equipment is requested, if a motion sensor 25 provided in a portable machine 20 detects a motion, the control of the on-vehicle equipment is permitted or prohibited based on a radio signal transmitted/received between the portable machine 20 and an on-vehicle controller 10, and if the motion sensor 25 does not detect the motion, the control of the on-vehicle equipment is not permitted. In addition, in the case that the door of the vehicle 30 is in an unlocked state, when the control of the on-vehicle equipment is requested, the control of the on-vehicle equipment is permitted or prohibited based on the radio signal transmitted/received between the portable machine 20 and the on-vehicle controller 10 irrespective of a detection result of the motion sensor 25.SELECTED DRAWING: Figure 1

Description

  The present invention relates to an in-vehicle device control system in which control of an in-vehicle device is permitted or prohibited based on a radio signal transmitted and received between a portable device carried by a user of the vehicle and an in-vehicle control device mounted on the vehicle. About.

  In-vehicle devices that allow or prohibit control of in-vehicle devices such as door locking and unlocking based on radio signals transmitted and received between the in-vehicle control device mounted on the vehicle and a portable device carried by the user of the vehicle There is a control system. There are roughly three types of communication methods between the in-vehicle control device and the portable device: a polling method, a passive entry method, and a keyless entry method.

  In the polling method, the in-vehicle control device transmits a request signal at a predetermined cycle regardless of the position of the portable device. In the passive entry method, for example, when the user approaches or contacts the door knob, the passive request switch is turned on, and a request signal is transmitted from the in-vehicle control device to the portable device. When these request signals are received by the portable device, a response signal is returned from the portable device to the in-vehicle control device. In the keyless entry method, when a user operates the portable device, a remote operation signal is transmitted from the portable device to the in-vehicle control device. When the vehicle-mounted control device receives a response signal or a remote operation signal from the portable device, the vehicle-mounted control device authenticates the portable device using an ID code included in these signals. I do.

  In the case of the passive entry method or the polling method, for example, a response request signal transmitted from the in-vehicle control device is relayed by a repeater and received by a portable device located far away, as if the portable device is in the vicinity of the vehicle There are cases where fraudulent unauthorized communications are performed. An unauthorized communication act using this repeater is called a relay attack. Due to the relay attack, a malicious third party who is not the owner of the vehicle may unlock the vehicle door or start the engine to commit a crime such as theft.

  Therefore, as a security measure against relay attack, for example, in Patent Document 1 and Patent Document 2, a motion sensor (movement detection sensor, vibration sensor) that detects movement is provided in a portable device (electronic key).

  And in patent document 1, when a portable machine is outside a vehicle and a motion (movement of a portable machine) is detected by a motion sensor, and when a portable machine is in a car, a portable machine for controlling in-vehicle equipment. Wireless communication (smart communication) by the in-vehicle control device is permitted. As a result, when the mobile device is stored at a place away from the vehicle (still stationary), even if a relay attack is performed by a malicious third party, the motion sensor does not detect movement. The wireless communication between the portable device and the vehicle-mounted control device is prohibited, and the vehicle-mounted device is not controlled. In addition, when the user places the portable device in the vehicle (stops), wireless communication between the portable device and the vehicle-mounted control device is allowed, and control of the vehicle-mounted device such as starting the engine is executed. Convenience is secured.

  In Patent Document 2, when the portable device is outside the vehicle, the door of the vehicle is locked, and movement (vibration) is not detected by the motion sensor, the reception standby state of the portable device is stopped. For this reason, even if a relay attack is performed, control of in-vehicle devices is not executed illegally. Moreover, the power consumption of the portable device is reduced by stopping the reception standby state of the portable device. Further, when the portable device is in the vehicle and no motion is detected by the motion sensor, the reception standby state of the portable device is not immediately stopped, and the reception standby state of the portable device is continued for a certain time. For this reason, when the user places the portable device in the vehicle (stills stationary), wireless communication between the portable device and the vehicle-mounted control device is allowed and control of the vehicle-mounted device is executed, thus ensuring convenience. Is done.

  On the other hand, even in Patent Document 3, a motion sensor is provided in a portable device, which detects a user's operation pattern and performs remote operation of the in-vehicle device according to the pattern. There is nothing to do with the permission / prohibition of wireless communication by the in-vehicle controller. In Patent Document 3, a command for turning on / off a motion sensor is added to a request signal transmitted from the in-vehicle control device to the portable device. That is, the in-vehicle control device controls the on / off of the motion sensor.

  Conventionally, in order to continue or stop wireless communication between the portable device and the in-vehicle control device for permitting or prohibiting the control of the in-vehicle device, the detection state of the motion sensor provided in the portable device or the unlocking state of the vehicle door In addition to this, the result of determining whether the portable device is outside the vehicle or inside the vehicle is referred to. However, the determination of whether the portable device is outside the vehicle or inside the vehicle cannot be performed by simply referring to the output of the sensor or the control information stored in the memory, as with other determination elements. Since it is necessary to transmit / receive a radio signal to / from the in-vehicle control device and refer to the intensity of the radio signal and information included in the radio signal, the processing becomes complicated.

JP 2011-52505 A JP 2011-184959 A JP 2014-216718 A

  SUMMARY OF THE INVENTION An object of the present invention is to improve crime prevention against a relay attack and ensure user convenience without complicating processing in an in-vehicle device control system including a portable device and an in-vehicle control device.

  An in-vehicle device control system according to the present invention includes a portable device having a motion sensor that detects its own motion, and an in-vehicle control device that executes control of the in-vehicle device mounted on the vehicle, the detection result of the motion sensor, Control of the in-vehicle device is permitted or prohibited based on the radio signal transmitted and received between the portable device and the in-vehicle control device. In such a configuration, when the door of the vehicle is in a locked state, when the motion sensor detects a motion when control of the in-vehicle device is requested, the radio transmitted / received between the portable device and the in-vehicle control device Based on the signal, control of the in-vehicle device is permitted or prohibited, and control of the in-vehicle device is not permitted unless the motion sensor detects movement. In addition, when the vehicle door is in an unlocked state, it is based on a radio signal transmitted and received between the portable device and the vehicle-mounted control device regardless of the detection result of the motion sensor when control of the vehicle-mounted device is requested. Therefore, control of the in-vehicle device is permitted or prohibited.

  Further, the portable device according to the present invention is a portable device that has a motion sensor that detects its own movement and transmits and receives radio signals to and from a vehicle-mounted control device that controls a vehicle-mounted device mounted on the vehicle. Based on the detection result of the motion sensor and the radio signal, the control unit is incorporated in an in-vehicle device control system in which control of the in-vehicle device is permitted or prohibited. In such a configuration, when the vehicle door is in a locked state, a radio signal for permitting or prohibiting the control of the in-vehicle device if the motion sensor detects a movement when the control of the in-vehicle device is requested. If the motion sensor does not detect movement, the wireless signal is not transmitted to or received from the in-vehicle control device so that control of the in-vehicle device is not permitted. In addition, when the vehicle door is in the unlocked state, when the control of the in-vehicle device is requested, the wireless signal is transmitted to and received from the in-vehicle control device regardless of the detection result of the motion sensor.

  According to the above, regardless of whether the portable device is outside or inside the vehicle, the door lock / unlock state of the vehicle, the detection state of the motion sensor provided on the portable device, or the portable device and the vehicle-mounted control device transmit and receive Based on the radio signal, control of the in-vehicle device is permitted or prohibited. For this reason, for example, a relay attack is performed by a malicious third party on a vehicle whose door is locked while the portable device is stored (still stationary) at a place away from the vehicle. When the door unlocking is requested, the motion sensor does not detect the movement, so that the door unlocking is not permitted. In addition, when a legitimate user carries a portable device and approaches the vehicle with the door locked, and the door is requested to be unlocked, the motion sensor detects the movement and Since the in-vehicle control device transmits and receives a radio signal, the door is unlocked based on the radio signal. In addition, if the engine door is unlocked and a legitimate user places the portable device in the vehicle (still stopped) and the engine is requested to start, the detection result of the motion sensor Regardless, the portable device and the vehicle-mounted control device transmit and receive wireless signals to allow the engine to be started. Therefore, in the in-vehicle device control system, it is possible to improve the security against relay attacks and to ensure the convenience for the user without complicating the processing of the portable device and the in-vehicle control device.

  In the present invention, the in-vehicle device includes a door lock device that locks or unlocks the door of the vehicle, and the in-vehicle control device controls the door lock device to perform locking or unlocking of the door. Before and after execution of the lock, a radio signal indicating the execution schedule of locking or unlocking and a radio signal indicating the execution result may be transmitted to the portable device. When the portable device receives the wireless signal indicating the execution schedule of the locking or the wireless signal indicating the execution result from the in-vehicle control device, the mobile device validates the motion sensor and indicates the execution schedule of the unlocking from the in-vehicle control device. When the wireless signal indicating the execution result or the wireless signal indicating the execution result is received, the motion sensor may be invalidated.

  Further, in the present invention, the portable device has a door operation unit operated to lock and unlock the door of the vehicle, and when the unlocking operation is performed by the door operation unit, the motion sensor is invalidated, or The motion sensor may be validated when a locking operation is performed by the door operation unit.

  In the present invention, when the motion sensor is valid, the portable device performs wireless communication with the in-vehicle control device only when the motion sensor detects movement, and when the motion sensor is invalid, the motion sensor Regardless of the detection result, wireless communication with the in-vehicle control device may be executed.

  In the present invention, when the motion sensor in the valid state does not detect movement, the portable device stops the portable device signal receiving unit for receiving a radio signal from the in-vehicle control device and is in the valid state. When the motion sensor detects movement, the portable device signal receiving unit may be activated.

  Furthermore, in the present invention, the in-vehicle control device permits the control of the in-vehicle device if the authentication of the portable device is successful based on the radio signal received from the portable device after the control of the in-vehicle device is requested. If the machine authentication is not successful, control of the in-vehicle device may be prohibited.

  According to the present invention, in an in-vehicle device control system composed of a portable device and an in-vehicle control device, it is possible to improve crime prevention against a relay attack and ensure user convenience without complicating processing. Become.

It is a block diagram of the vehicle equipment control system by embodiment of this invention. It is the flowchart which showed operation | movement of the vehicle-mounted control apparatus of FIG. It is the flowchart which showed operation | movement of the portable device of FIG. It is the time chart which showed an example of the communication state at the time of the passive entry of the vehicle-mounted control apparatus of FIG. 1, and a portable device. It is the time chart which showed an example of the communication state at the time of the passive entry by the relay attack of the vehicle-mounted control apparatus of FIG. 1, and a portable device. It is the time chart which showed an example of the communication state at the time of the keyless entry of the vehicle-mounted control apparatus of FIG. 1, and a portable device. 5 is a flowchart illustrating an operation of a portable device according to another embodiment of the present invention.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. In the drawings, the same or corresponding parts are denoted by the same reference numerals.

  First, the configuration of the in-vehicle device control system 100 according to the embodiment will be described with reference to FIG.

  FIG. 1 is a configuration diagram of the in-vehicle device control system 100. The in-vehicle device control system 100 includes an in-vehicle control device 10 and a portable device 20. In the in-vehicle device control system 100, the in-vehicle control device 10 and the portable device 20 communicate wirelessly, and the in-vehicle control device 10 permits or prohibits control of the in-vehicle device mounted on the vehicle 30.

  In the present embodiment, the control of the in-vehicle device means control of the door lock device 7 that locks and unlocks the door provided on the vehicle 30 and control of the engine device 8 that starts and stops the engine of the vehicle 30.

  The vehicle 30 is composed of an automobile. The vehicle 30 is provided with a door for a driver's seat, a door for a passenger seat, a door for left and right rear seats, and a back door at the rear of the vehicle 30 as doors that can be locked and unlocked (not shown).

  The vehicle 30 is equipped with an on-vehicle control device 10, a passive request switch 5, an engine switch 6, a door lock device 7, and an engine device 8. Electric power is supplied to these units 10 and 6 to 8 from a battery (not shown) mounted on the vehicle 30.

  The in-vehicle control device 10 includes a control unit 1, an in-vehicle signal transmission unit 2, and an in-vehicle signal reception unit 3. The control unit 1 includes a CPU and a memory.

  A plurality of in-vehicle signal transmission units 2 are installed in the vehicle 30. Each in-vehicle signal transmission unit 2 includes a transmission antenna 2a and a transmission signal processing unit (not shown). The transmission antenna 2a is installed, for example, on the right side of the vehicle 30 (outer side of the door of the driver's seat), the left side (outer side of the door of the passenger seat), the rear side (outer side of the back door), and the inside of the vehicle. . The in-vehicle signal transmission unit 2 generates an LF (Low Frequency) signal at the transmission signal processing unit, and transmits the LF (Low Frequency) signal to the portable device 20 inside or outside the vehicle from the transmission antenna 2a.

  The LF signal transmitted by the in-vehicle signal transmission unit 2 includes a request signal for requesting control of the in-vehicle device, and an acknowledge signal for approving the portable device 20 or notifying the state of the vehicle 30. And are included.

  The in-vehicle signal receiving unit 3 includes a receiving antenna 3a and a receiving signal processing unit (not shown). One in-vehicle signal receiving unit 3 is installed, for example, at the front portion of the vehicle 30. The in-vehicle signal receiving unit 3 receives an RF (Radio Frequency) signal transmitted from the portable device 20 by the receiving antenna 3a and the receiving signal processing unit.

  The RF signal received by the in-vehicle signal receiving unit 3 includes a response signal transmitted from the portable device 20 and a remote operation signal for locking and unlocking the door of the vehicle 30.

  The control unit 1 of the in-vehicle control device 10 controls the in-vehicle signal transmission unit 2 and the in-vehicle signal reception unit 3 to perform wireless communication with the portable device 20 and transmit / receive signals and information to / from the portable device 20.

  The passive request switch 5, the engine switch 6, the door lock device 7, and the engine device 8 are each connected to the control unit 1 of the in-vehicle control device 10.

  The passive request switch 5 is installed on an outer knob of each door of the vehicle 30. When the user locks and unlocks the door of the vehicle 30, the passive request switch 5 is operated by approaching or contacting any of the outer knobs.

  For example, when the door of the vehicle 30 is locked, the control unit 1 may determine that unlocking of the door is requested by operating the passive request switch 5. Further, when the door of the vehicle 30 is unlocked, the control unit 1 may determine that the door is required to be locked by operating the passive request switch 5.

  Alternatively, for example, according to the operation mode of the passive request switch 5, the control unit 1 may determine whether the door is required to be locked or unlocked.

  The engine switch 6 is installed in the vicinity of the driver's seat inside the vehicle 30. The engine switch 6 is operated to start and stop the engine.

  The control unit 1 detects the operation state of each switch 5, 6 based on the output signal from each switch 5, 6.

  The door lock device 7 includes a mechanism for locking and unlocking each door of the vehicle 30 and a drive circuit for the mechanism. The engine device 8 includes a starter motor for starting the engine of the vehicle 30 and a drive circuit for the starter motor. The door lock device 7 and the engine device 8 are examples of the “vehicle equipment” in the present invention.

  The portable device 20 includes an FOB key and is carried by a user of the vehicle 30. The portable device 20 includes a control unit 21, a portable device signal receiving unit 22, a portable device signal transmitting unit 23, a portable device door switch 24, and a motion sensor 25. Electric power is supplied to these units 21 to 25 from a battery (not shown) built in the portable device 20. The control unit 21 includes a CPU and a memory.

  The portable device signal receiving unit 22 includes a receiving antenna 22a and a receiving signal processing unit (not shown). The portable device signal receiving unit 22 receives the LF signal transmitted from the in-vehicle control device 10 via the receiving antenna 22a. The LF signal received by the portable device signal receiving unit 22 includes the request signal and the acknowledge signal described above.

  The portable device signal transmission unit 23 includes a transmission antenna 23a and a transmission signal processing unit (not shown). The portable device signal transmission unit 23 transmits the RF signal generated by the transmission signal processing unit to the in-vehicle control device 10 from the transmission antenna 23a. The RF signal transmitted by the portable device signal transmission unit 23 includes a response signal for the in-vehicle control device 10.

  The portable machine door switch 24 is operated to lock and unlock the door of the vehicle 30. When the portable device door switch 24 is operated, the control unit 21 generates a remote operation signal corresponding to the operation, and transmits the remote operation signal to the in-vehicle control device 10 by the portable device signal transmission unit 23.

  The RF signal transmitted by the portable device signal transmission unit 23 includes the response signal and the remote operation signal described above. The portable device door switch 24 is an example of the “door operation unit” in the present invention.

  The control unit 21 of the portable device 20 controls the portable device signal reception unit 22 and the portable device signal transmission unit 23 to wirelessly communicate with the in-vehicle control device 10 and transmit / receive signals and information to / from the in-vehicle control device 10. .

  An ID code (identification information) of the portable device 20 is included in the remote operation signal and the response signal that the portable device 20 transmits to the in-vehicle control device 10 by the portable device signal transmission unit 23.

  When the remote operation signal transmitted from the portable device 20 is received by the in-vehicle signal receiving unit 3, the control unit 1 of the in-vehicle control device 10 stores in advance the ID code of the portable device 20 included in the remote operation signal. The ID code of the vehicle-mounted control device 10 is collated. And if both ID codes correspond, the control part 1 will control the door lock apparatus 7 based on a remote control signal, and will lock and unlock the door of the vehicle 30. FIG. (Keyless entry method)

  When the user carrying the portable device 20 approaches the vehicle 30 and turns on any of the passive request switches 5, the control unit 1 of the in-vehicle control device 10 sends a request signal (described later) to the in-vehicle signal transmission unit 2. A lock request signal or an unlock request signal to be transmitted to the portable device 20. When the request signal is received by the portable device signal receiving unit 22, the control unit 21 of the portable device 20 returns a response signal to the in-vehicle control device 10 by the portable device signal transmitting unit 23. When the response signal is received by the in-vehicle signal receiving unit 3, the control unit 1 of the in-vehicle control device 10 collates the ID code of the portable device 20 included in the response signal with the ID code of the in-vehicle control device 10. And if both ID codes correspond, the control part 1 will control the door lock apparatus 7 based on a response signal, and will lock and unlock the door of the vehicle 30. FIG. (Passive entry method)

  When the user carrying the portable device 20 operates the engine switch 6 in the vehicle, the control unit 1 of the in-vehicle control device 10 transmits an engine request signal to the portable device 20 by the in-vehicle signal transmission unit 2. When the engine request signal is received by the portable device signal receiving unit 22, the control unit 21 of the portable device 20 returns a response signal to the in-vehicle control device 10 by the portable device signal transmitting unit 23. When the response signal is received by the in-vehicle signal receiving unit 3, the control unit 1 of the in-vehicle control device 10 collates the ID code of the portable device 20 included in the response signal with the ID code of the in-vehicle control device 10. When the two ID codes match, the control unit 1 controls the engine device 8 to start (or stop) the engine of the vehicle 30.

  By the way, a repeater (not shown) used in the relay attack relays signal transmission / reception between the in-vehicle control device 10 and the portable device 20 even when the portable device 20 is far away from the vehicle 30. It has a function. For this reason, at the time of passive entry, for example, the distant portable device 20 is disguised as if it is in the vicinity of the vehicle 30, and an unauthorized communication action is performed.

  The motion sensor 25 of the portable device 20 includes, for example, an acceleration sensor or a vibration sensor, and detects its own movement. The control unit 21 detects whether the portable device 20 is moving or stationary based on the output signal from the motion sensor 25. In addition, the control unit 21 enables or disables the motion sensor 25.

  The activation of the motion sensor 25 means that the power is supplied to the motion sensor 25 to cause the motion sensor 25 to function and the controller 1 effectively handles the output from the motion sensor 25. On the other hand, the invalidation of the motion sensor 25 may be, for example, stopping power supply to the motion sensor 25 to stop the function of the motion sensor 25, or outputting an output signal from the motion sensor 25 to the control unit. 1 may be ignored.

  Next, operations of the portable device 20 and the in-vehicle control device 10 will be described with reference to FIGS.

  FIG. 2 is a flowchart showing the operation of the in-vehicle control device 10. FIG. 3 is a flowchart showing the operation of the portable device 20. FIG. 4 is a time chart illustrating an example of a communication state during passive entry between the in-vehicle control device 10 and the portable device 20. FIG. 5 is a time chart showing an example of a communication state at the time of passive entry by the relay attack between the in-vehicle control device 10 and the portable device 20. FIG. 6 is a time chart showing an example of a communication state at the time of keyless entry between the in-vehicle control device 10 and the portable device 20.

  At the time of passive entry, the user operates the passive request switch 5 of the vehicle 30 to request locking of the door (step S1: YES in FIG. 2, P1 in FIGS. 4 and 5). In this case, the control unit 1 of the in-vehicle control device 10 transmits a lock request signal indicating that there is a door locking request and the execution schedule of the locking to the portable device 20 by the in-vehicle signal transmission unit 2 (FIG. 2). Step S2, the LRQ signal of FIGS. 4 and 5).

In the portable device 20, when the motion sensor 25 is invalid (step S31 in FIG. 3: invalid), the portable device signal receiving unit 22 receives the lock request signal from the in-vehicle control device 10 (step S34 in FIG. 3). YES), the control part 21 transmits a response signal to the vehicle-mounted control apparatus 10 by the portable device signal transmission part 23 (step S35 of FIG. 3, RES ₍₁₎ signal of FIG. 4 and FIG. 5). The response signal at this time includes information indicating that the motion sensor 25 is invalid in addition to the ID code of the portable device 20.

Next, in the in-vehicle control device 10, the response signal from the portable device 20 is received by the in-vehicle signal receiving unit 3 within a predetermined time after transmitting the lock request signal (step S3 in FIG. 2: YES). Then, the control unit 1 collates the ID code of the portable device 20 included in the response signal with the ID code of the in-vehicle control device 10. If the two ID codes match, the control unit 1 determines that the authentication of the portable device 20 has succeeded (step S4 in FIG. 2: YES), permits the door lock device 7 to lock the door, and locks the lock. (Step S5 in FIG. 2, P2 in FIGS. 4 and 5). Thereafter, the control unit 1 transmits an acknowledge signal indicating that the door is locked to the portable device 20 by the in-vehicle signal transmission unit 2 (step S6 in FIG. 2, ACK _{(1 in} FIG. 4 and FIG. 5). ₎ Signal).

  Next, when the portable device 20 receives an acknowledge signal indicating that the door is locked within a predetermined time after transmitting the response signal (step S36 in FIG. 3: YES), the control unit 21 The motion sensor 25 is activated (step S37 in FIG. 3, P3 in FIGS. 4 and 5).

  On the other hand, if the acknowledge signal indicating that the door is locked is not received within a predetermined time after the response signal is transmitted (step S36: NO in FIG. 3), the invalid state of the motion sensor 25 continues. Is done.

  Further, when the in-vehicle control device 10 does not receive a response signal within a predetermined time after transmitting the lock request signal (step S3 in FIG. 2: NO), the control unit 1 locks the door by the door lock device 7. Is prohibited (step S7 in FIG. 2).

  Further, after the response signal is received in the in-vehicle control device 10 (step S3 in FIG. 2: YES), if the ID codes of the portable device 20 and the in-vehicle control device 10 do not match, the control unit 1 It is determined that the authentication has not succeeded (step S4 in FIG. 2: NO). Also in this case, the control unit 1 prohibits the door locking by the door lock device 7 (step S7 in FIG. 2).

  On the other hand, when the motion sensor 25 is invalid in the portable device 20 (step S31 in FIG. 3: invalid), when the user performs a locking operation on the portable device door switch 24 (step S32 in FIG. 3: YES, P11) in FIG. 6 moves to a keyless entry. In this case, the control unit 21 transmits the lock remote operation signal to the in-vehicle control device 10 by the portable device signal transmission unit 23 (step S33 in FIG. 3, LOP signal in FIG. 6).

In the vehicle-mounted control device 10, the lock remote operation signal from the portable device 20 is received by the vehicle-mounted signal receiving unit 3 (step S8 in FIG. 2: YES). Then, the control unit 1 collates the ID code of the portable device 20 included in the lock remote operation signal with the ID code of the in-vehicle control device 10. If the two ID codes match, the control unit 1 determines that the authentication of the portable device 20 has succeeded (step S4 in FIG. 2: YES), permits the door lock device 7 to lock the door, and locks the lock. (Step S5 in FIG. 2, P12 in FIG. 6). Thereafter, the control unit 1 transmits an acknowledge signal indicating that the door has been locked to the portable device 20 by the in-vehicle signal transmission unit 2 (step S6 in FIG. 2, ACK ₍₄₎ signal in FIG. 6). .

  Next, the portable device 20 receives an acknowledge signal indicating that the door is locked within a predetermined time after transmitting the lock remote operation signal (step S36 in FIG. 3: YES). Then, the control part 21 validates the motion sensor 25 (step S37 of FIG. 3, P13 of FIG. 6).

  On the other hand, if the mobile device 20 does not receive an acknowledge signal indicating that the door is locked within a predetermined time after transmitting the lock remote operation signal (step S36 in FIG. 3: NO), the motion The invalid state of the sensor 25 is continued.

  In addition, after the lock remote operation signal is received in the in-vehicle control device 10 (step S8 in FIG. 2: YES), if the ID code of the portable device 20 and the in-vehicle control device 10 does not match, the control unit 1 It is determined that the authentication of the machine 20 has not been successful (step S4 in FIG. 2: NO). In this case, the control unit 1 prohibits locking of the door by the door lock device 7 (step S7 in FIG. 2).

  In the portable device 20, when the motion sensor 25 is valid (step S31 in FIG. 3: valid), when the user performs an unlocking operation with the portable device door switch 24 (step S42 in FIG. 3: YES). , P16 in FIG. 6, the process proceeds to the keyless entry. In this case, the control unit 21 invalidates the motion sensor 25 (step S46 in FIG. 3), and transmits an unlock remote operation signal to the in-vehicle control device 10 by the portable device signal transmission unit 23 (step S47 in FIG. 3, FIG. 3). 6 ULOP signal).

In the vehicle-mounted control apparatus 10, the unlock remote operation signal from the portable device 20 is received by the vehicle-mounted signal receiving unit 3 (step S16 in FIG. 2: YES). Then, the control unit 1 collates the ID code of the portable device 20 included in the unlock remote operation signal with the ID code of the in-vehicle control device 10. If the two ID codes match, the control unit 1 determines that the authentication of the portable device 20 has succeeded (step S12 in FIG. 2: YES). And the control part 1 permits the unlocking of the door by the door lock apparatus 7, and performs this unlocking (step S13 of FIG. 2, P17 of FIG. 6). Thereafter, the control unit 1 transmits an acknowledge signal indicating that the unlocking of the door has been completed to the portable device 20 by the in-vehicle signal transmission unit 2 (step S14 in FIG. 2, ACK ₍₅₎ signal in FIG. 6 _). ).

  In addition, after the unlock remote operation signal is received in the in-vehicle control device 10 (step S16 in FIG. 2: YES), if the ID code of the portable device 20 and the in-vehicle control device 10 does not match, the control unit 1 It is determined that the authentication of the portable device 20 was not successful (step S12 in FIG. 2: NO). In this case, the control unit 1 prohibits door unlocking by the door lock device 7 (step S15 in FIG. 2).

  On the other hand, when the motion sensor 25 of the portable device 20 is valid (step S31: valid in FIG. 3), the passive request switch 5 of the vehicle 30 is operated by the user carrying the portable device 20 to open the door. When the lock is requested (step S9 in FIG. 2: YES, P6 in FIG. 4), the process proceeds to the passive entry. In this case, the control unit 1 of the in-vehicle control device 10 transmits an unlock request signal indicating that there is a request for unlocking the door and the execution schedule of the unlocking to the portable device 20 by the in-vehicle signal transmission unit 2. (Step S10 in FIG. 2, ULRQ signal in FIG. 4).

  In the portable device 20, when the user carrying the portable device 20 operates the passive request switch 5, the motion sensor 25 detects the movement (movement) of the portable device 20 (step S43 in FIG. 3: YES). Then, the control part 21 continues starting of the portable device signal receiving part 22 (step S44 of FIG. 3). Specifically, for example, power is supplied to the portable device signal receiving unit 22 so that a wireless signal transmitted from the in-vehicle control device 10 can be received by the portable device signal receiving unit 22.

Then, when the unlock request signal from the in-vehicle control device 10 is received by the portable device signal receiving unit 22 (step S38 in FIG. 3: YES), the control unit 21 receives the response signal by the portable device signal transmitting unit 23. 10 (step S39 in FIG. 3, RES ₍₂₎ signal in FIG. 4). The response signal at this time includes information indicating that the motion sensor 25 is valid in addition to the ID code of the portable device 20.

In the vehicle-mounted control apparatus 10, the response signal from the portable device 20 is received by the vehicle-mounted signal receiving unit 3 within a predetermined time after transmitting the unlock request signal (step S11 in FIG. 2: YES). Then, the control unit 1 collates the ID code based on the response signal. And if the control part 1 judges that the authentication of the portable device 20 was successful from the collation result of the ID code (step S12 in FIG. 2: YES), it permits the door unlocking by the door lock device 7, The unlocking is executed (step S13 in FIG. 2, P7 in FIG. 4). Thereafter, the control unit 1 transmits an acknowledge signal indicating that the unlocking of the door is completed to the portable device 20 by the in-vehicle signal transmission unit 2 (step S14 in FIG. 2, ACK ₍₂₎ signal in FIG. 4 _). ).

  When the portable device 20 receives an acknowledge signal indicating that the unlocking of the door is completed within a predetermined time after transmitting the response signal (step S40 in FIG. 3: YES), the control unit 21 The motion sensor 25 is invalidated (step S41 in FIG. 3 and P8 in FIG. 4).

  On the other hand, if the acknowledge signal indicating that the unlocking of the door is completed is not received within a predetermined time after the response signal is transmitted (step S40 in FIG. 3: NO), the motion sensor 25 is enabled. Will continue.

  Further, when the in-vehicle control device 10 does not receive a response signal within a predetermined time after transmitting the unlock request signal (step S11 in FIG. 2: NO), the control unit 1 causes the door lock device 7 to open the door. Unlocking is prohibited (step S15 in FIG. 2).

  In addition, after receiving the response signal (step S11 in FIG. 2: YES), if the ID codes of the portable device 20 and the in-vehicle control device 10 do not match, the control unit 1 has determined that the authentication of the portable device 20 has not succeeded. Judgment is made (step S12 in FIG. 2: NO). Also in this case, the control unit 1 prohibits unlocking of the door by the door lock device 7 (step S15 in FIG. 2).

  On the other hand, when the motion sensor 25 of the portable device 20 is valid (step S31: valid in FIG. 3), if the portable device 20 is stationary and no motion is detected by the motion sensor 25 (step in FIG. 3). S43: NO, P4 in FIGS. 4 and 5 and P14 in FIG. 6), the control unit 21 stops the portable device signal receiving unit 22 (step S45 in FIG. 3). Specifically, for example, power supply to the portable device signal receiving unit 22 is stopped, and the portable device signal receiving unit 22 cannot receive a radio signal transmitted from the in-vehicle control device 10.

  Therefore, when the motion sensor 25 in the valid state has not detected movement, a relay attack is performed by a malicious third party (Pa in FIG. 5), and an unlock request signal is transmitted from the in-vehicle control device 10. Even (the ULRQ signal in FIG. 5), the unlock request signal is not accepted by the portable device 20 (cannot be received). For this reason, a response signal is not returned from the portable device 20 to the in-vehicle control device 10, the unlocking of the door of the vehicle 30 is not permitted, and the door remains locked.

  Further, after the door of the vehicle 30 is unlocked and the motion sensor 25 of the portable device 20 is invalidated, the engine switch 6 in the vehicle is operated by the user, and the engine is started (or stopped). Then (step S17 in FIG. 2: YES, P10 in FIG. 4, P19 in FIG. 6), the control unit 1 of the in-vehicle control device 10 transmits the engine request signal to the portable device 20 by the in-vehicle signal transmission unit 2 (FIG. 2 step S18, the EGN signal of FIGS. 4 and 6).

When the user brings the portable device 20 into the vehicle, when the engine request signal from the in-vehicle control device 10 is received by the portable device signal receiving unit 22 (step S48 in FIG. 3: YES), the control unit 21 responds. A signal is transmitted to the vehicle-mounted control apparatus 10 by the portable device signal transmission part 23 (step S49 of FIG. 3, RES ₍₃₎ signal of FIG. 4 and FIG. 6). The response signal at this time includes information indicating that the motion sensor 25 is invalid in addition to the ID code of the portable device 20.

In the in-vehicle control device 10, the response signal from the portable device 20 is received by the in-vehicle signal receiving unit 3 within a predetermined time after transmitting the engine request signal (step S19 in FIG. 2: YES). Then, the control unit 1 collates the ID code based on the response signal. Then, when the control unit 1 determines from the ID code collation result that the authentication of the portable device 20 is successful (step S20 in FIG. 2: YES), the control unit 1 permits the engine device 8 to start (or stop) the engine. Then, the start (or stop) is executed (step S21 in FIG. 2). Thereafter, the control unit 1 transmits an acknowledge signal indicating that the engine has been started (or stopped) to the portable device 20 by the in-vehicle signal transmission unit 2 (step S22 in FIG. 2, FIG. 4 and FIG. 6). ACK ₍₃₎ signal).

  Moreover, in the vehicle-mounted control apparatus 10, when an engine request signal is transmitted and a response signal is not received within a predetermined time (step S19: NO in FIG. 2), or when the authentication of the portable device 20 is not successful (FIG. 2). 2 (NO in step S20), the control unit 1 prohibits the engine device 8 from starting (or stopping) the engine (step S23 in FIG. 2).

  According to the above embodiment, when the door of the vehicle 30 is in the locked state, the motion sensor 25 of the portable device 20 moves when control of the in-vehicle device (door locking / unlocking or engine start / stop) is requested. Is detected, the in-vehicle control device 10 permits or prohibits the control of the in-vehicle device based on the response signal received from the portable device 20. Further, when the door is in a locked state, when the control of the in-vehicle device is requested, if the motion sensor 25 does not detect the movement, the portable device 20 and the in-vehicle control device 10 do not communicate, and the in-vehicle device Control is not allowed. Furthermore, when the door is in the unlocked state, when the door is requested to be locked, the vehicle-mounted control device 10 is based on the response signal received from the portable device 20 regardless of the detection result of the motion sensor 25. Allow or prohibit control. That is, regardless of whether the portable device 20 is outside the vehicle or inside the vehicle, the door lock / unlock state of the vehicle 30, the detection state of the motion sensor 25 provided in the portable device 20, or the in-vehicle control device 10 is the portable device. Based on the response signal received from 20, the control of the in-vehicle device is permitted or prohibited.

  Therefore, for example, a relay attack is performed by a malicious third party on the vehicle 30 with the door locked while the portable device 20 is stored (still stationary) in a place away from the vehicle 30. When the door unlocking is requested (Pa in FIG. 5), the motion sensor 25 of the portable device 20 does not detect the movement, so that the door unlocking is not permitted. Further, when a legitimate user carries the portable device 20 and approaches the vehicle 30 with the door locked, and the door unlocking is requested (P6 in FIG. 4), the motion sensor 25 is activated. Since the in-vehicle control device 10 and the portable device 20 transmit and receive the unlock request signal and the response signal by detecting the movement, the door unlocking is permitted based on the response signal. Furthermore, when the door of the vehicle 30 is unlocked and a legitimate user places the portable device 20 in the vehicle (stops) (P9 in FIG. 4, P18 in FIG. 6), the engine is started. When requested (P10 in FIG. 4, P19 in FIG. 6), the in-vehicle control device 10 and the portable device 20 transmit and receive an engine request signal and a response signal regardless of the detection result of the motion sensor 25. Is allowed to start (or stop).

  Therefore, in the in-vehicle device control system 100, it is possible to improve the security against relay attacks and to ensure the convenience for the user without complicating the processing of the portable device 20 and the in-vehicle control device 10.

  In the above embodiment, when the door of the vehicle 30 is locked / unlocked, an acknowledge signal indicating completion of the locking / unlocking is transmitted from the in-vehicle control device 10 to the portable device 20. Based on the acknowledge signal, the portable device 20 validates the motion sensor 25 when the door is locked, and invalidates the motion sensor 25 when the door is unlocked.

  When the motion sensor 25 is valid, that is, when the door is locked, the in-vehicle control device 10 and the portable device 20 send and receive request signals and response signals only when the motion sensor 25 detects movement. Therefore, control such as door unlocking can be safely permitted or prohibited based on the response signal. Further, when the motion sensor 25 is invalid, that is, when the door is unlocked, the in-vehicle control device 10 and the portable device 20 transmit and receive request signals and response signals regardless of the detection result of the motion sensor 25. Therefore, it is possible to safely or conveniently permit or prohibit control such as door locking or engine start based on the response signal. Furthermore, in order to invalidate the motion sensor 25, by stopping energization to the motion sensor 25, the power consumption of the portable device 20 can be reduced and the life of the battery built in the portable device 20 can be extended. .

  In the above-described embodiment, the motion sensor 25 is also disabled in the portable device 20 when the unlocking operation is performed by the portable device door switch 24. Therefore, when the door of the vehicle 30 is subsequently unlocked and an acknowledge signal indicating the unlocking is transmitted from the in-vehicle control device 10, the acknowledge signal is received by the portable device 20 due to the influence of noise, for example. Even if it is not, the motion sensor 25 can be reliably invalidated according to the unlocking of the door.

  Moreover, in the said embodiment, when the motion sensor 25 of the effective state is not detecting a motion in the portable device 20 (P4 of FIG. 4 and FIG. 5, P14 of FIG. 6), it transmits a radio signal from the vehicle-mounted control apparatus 10. Since the portable device signal receiving unit 22 for reception is stopped, the power consumption of the portable device 20 can be reduced and the life of the battery can be extended. When the motion sensor 25 in the valid state detects motion (P5 in FIG. 4 and P15 in FIG. 6), the portable device signal receiving unit 22 is activated. It can be received by the portable device signal receiving unit 22.

  Furthermore, in the said embodiment, after the control of vehicle equipment, such as door locking / unlocking and engine starting / stopping, is requested, the vehicle-mounted control device 10 authenticates the portable device 20 based on the response signal received from the portable device 20. The control of the in-vehicle device is executed on the condition that has succeeded. For this reason, since control of the in-vehicle device is executed only when a legitimate user carrying the portable device 20 approaches the vehicle 30 and requests control of the in-vehicle device, crime prevention is further improved. be able to.

  The present invention can employ various embodiments other than those described above. For example, in the above embodiment, as shown in FIG. 3, when the mobile device 20 receives an acknowledge signal indicating completion of the locking or unlocking of the door of the vehicle 30 from the in-vehicle control device 10, Although the example which validated or invalidated the sensor 25 was shown, this invention is not limited only to this. In addition to this, for example, as shown in FIG. 7, when the portable device 20 receives a lock request signal indicating the execution schedule of locking the door of the vehicle 30 from the in-vehicle control device 10 (step S <b> 34 in FIG. 7: YES), the motion sensor 25 may be validated (step S37a in FIG. 7). Further, when the portable device 20 receives from the in-vehicle control device 10 an unlock request signal indicating that the door of the vehicle 30 is to be unlocked (step S38 in FIG. 7: YES), the motion sensor 25 is invalidated. (Step S41a in FIG. 7).

  By doing in this way, after the request signal is received in the portable device 20, the motion sensor 25 is reliably set according to the locking / unlocking state of the door of the vehicle 30 even if the acknowledge signal is not received due to the influence of noise, for example. Can be enabled or disabled. And it is possible to improve crime prevention by reducing the possibility of a relay attack being performed by a malicious third party with the motion sensor 25 disabled. In addition, when the portable device 20 is placed in the vehicle (stationary state) and the engine switch 6 is operated, if the motion sensor 25 is valid, no motion is detected by the motion sensor 25, so the engine is started or stopped. Control is not permitted and convenience is impaired. However, when the motion sensor 25 is reliably disabled according to the unlocking of the door as described above, the portable device 20 is placed in the vehicle and the engine switch 6 is operated with the motion sensor 25 enabled. In addition, the probability that the motion sensor 25 is effective is reduced, and convenience can be ensured.

  Further, in the above embodiment, as shown in FIG. 3, after the vehicle-mounted control device 10 locks the door of the vehicle 30 in response to the locking operation by the portable device door switch 24, the acknowledge indicating the completion of the locking. Although the example which validated the motion sensor 25 when the portable device 20 received the signal from the vehicle-mounted control apparatus 10 was shown, this invention is not limited only to this. In addition to this, for example, as shown in FIG. 7, when the locking operation is performed by the portable device door switch 24 (step S32 in FIG. 7: YES), the motion sensor 25 may be activated (FIG. 7). Step S37b).

  By doing so, when the door of the vehicle 30 is locked and the acknowledge signal indicating the lock is transmitted from the in-vehicle control device 10, the acknowledge signal is received by the portable device 20 due to the influence of noise, for example. Even if it is not done, the motion sensor 25 can be reliably activated according to the locking of the door.

  Moreover, although the example which validated or invalidated the motion sensor 25 by the portable device 20 side was shown in the above embodiment, this invention is not limited only to this. In addition to this, for example, the detection result of the motion sensor 25 may be handled effectively on the vehicle-mounted control device 10 side, or may be ignored and invalidated.

  Moreover, although the example which transmitted the request signal and the acknowledge signal from the vehicle-mounted signal transmission part 2 of the vehicle-mounted control apparatus 10 was shown in the above embodiment, this invention is not limited only to this. In addition to this, for example, the request signal and the acknowledge signal may be transmitted from separate signal transmission circuits mounted on the vehicle. Further, the frequency bands of the request signal and the acknowledge signal carrier may be the same or different.

  Moreover, in the above embodiment, as control of the in-vehicle device executed by the in-vehicle device control system 100, the door locking / unlocking by the door lock device 7 and the start / stop of the engine by the engine device 8 are given as examples. Is not limited to this. Other than this, for example, control of other in-vehicle devices such as driving of an air conditioner by an air conditioner mounted on a vehicle, driving of an audio system, automatic opening / closing of a door, etc. may be executed.

  Furthermore, although the example which applied this invention to the vehicle-mounted apparatus control system 100 for motor vehicles, and the portable device 20 was given in the above embodiment, for example, vehicle-mounted apparatuses for other vehicles, such as a motorcycle and a large vehicle The present invention can also be applied to a control system and a portable device.

7 Door lock device (on-vehicle equipment)
8 Engine device (on-vehicle equipment)
DESCRIPTION OF SYMBOLS 10 In-vehicle control apparatus 20 Portable machine 22 Portable machine signal receiving part 24 Portable machine door switch (door operation part)
25 motion sensor 30 vehicle 100 in-vehicle device control system

Claims (10)

A portable device having a motion sensor for detecting its own movement;
An in-vehicle control device that executes control of an in-vehicle device mounted on the vehicle,
In the in-vehicle device control system in which the control of the in-vehicle device is permitted or prohibited based on the detection result of the motion sensor and the wireless signal transmitted and received between the portable device and the in-vehicle control device,
When the door of the vehicle is in a locked state, if the motion sensor detects a motion when control of the in-vehicle device is requested, a radio signal transmitted / received between the portable device and the in-vehicle control device Control of the in-vehicle device is permitted or prohibited, and if the motion sensor does not detect movement, the control of the in-vehicle device is not permitted,
When the door of the vehicle is in an unlocked state, when control of the in-vehicle device is requested, the radio transmitted / received between the portable device and the in-vehicle control device regardless of the detection result of the motion sensor An in-vehicle device control system, wherein control of the in-vehicle device is permitted or prohibited based on a signal. In the in-vehicle device control system according to claim 1,
The in-vehicle device includes a door lock device that locks or unlocks the door of the vehicle,
The in-vehicle control device is
The door is locked or unlocked by controlling the door lock device, and before and after execution of the locking and unlocking, a wireless signal indicating the execution schedule of the locking or unlocking and a wireless signal indicating the execution result are provided. Send to each mobile device,
The portable device is
Upon receiving a radio signal indicating the execution schedule of the locking or a radio signal indicating the execution result from the in-vehicle control device, the motion sensor is activated,
When receiving a wireless signal indicating the execution schedule of the unlocking or a wireless signal indicating an execution result from the in-vehicle control device, the motion sensor is invalidated. In the in-vehicle device control system according to claim 2,
The portable device is
A door operation unit operated to lock or unlock the door of the vehicle;
When the unlocking operation is performed by the door operation unit, the motion sensor is invalidated,
Alternatively, the in-vehicle device control system is characterized in that the motion sensor is validated when a locking operation is performed by the door operation unit. In the in-vehicle device control system according to claim 2 or claim 3,
The portable device is
If the motion sensor is valid, only when the motion sensor detects movement, perform wireless communication with the in-vehicle control device,
When the motion sensor is invalid, wireless communication with the vehicle-mounted control device is executed regardless of the detection result of the motion sensor. In the in-vehicle device control system according to any one of claims 2 to 4,
The portable device is
When the motion sensor in the valid state does not detect movement, stop the portable device signal receiving unit for receiving a radio signal from the in-vehicle control device,
An in-vehicle device control system, wherein when the motion sensor in an effective state detects movement, the portable device signal receiving unit is activated. In the in-vehicle device control system according to claim 3 or claim 4,
After the control of the in-vehicle device is requested, the in-vehicle control device permits the control of the in-vehicle device if the authentication of the portable device is successful based on a wireless signal received from the portable device, and the portable device If the authentication of the machine is not successful, control of the in-vehicle device is prohibited. A portable device that has a motion sensor that detects its own movement and transmits and receives radio signals to and from a vehicle-mounted control device that controls a vehicle-mounted device mounted on a vehicle.
Based on the detection result of the motion sensor and the wireless signal, it is incorporated into an in-vehicle device control system in which control of the in-vehicle device is permitted or prohibited,
When the door of the vehicle is in a locked state, if the motion sensor detects a movement when the control of the in-vehicle device is requested, the wireless signal for permitting or prohibiting the control of the in-vehicle device is transmitted. Transmitting / receiving to / from the in-vehicle control device, if the motion sensor does not detect movement, the radio signal is not transmitted / received to / from the in-vehicle control device so that control of the in-vehicle device is not permitted,
When the vehicle door is in an unlocked state, when the control of the in-vehicle device is requested, the wireless signal is transmitted to and received from the in-vehicle control device regardless of the detection result of the motion sensor. A portable machine characterized by The portable device according to claim 7,
When the wireless signal indicating that the door of the vehicle is locked is received from the in-vehicle control device, the motion sensor is activated,
When a wireless signal indicating that the vehicle door is unlocked is received from the in-vehicle control device, the motion sensor is invalidated,
If the motion sensor is valid, only when the motion sensor detects movement, perform wireless communication with the in-vehicle control device,
When the motion sensor is invalid, wireless communication with the in-vehicle control device is executed regardless of the detection result of the motion sensor. The portable device according to claim 8,
A door operation unit operated to lock or unlock the vehicle door;
When the unlocking operation is performed by the door operation unit, the motion sensor is invalidated, or when the locking operation is performed by the door operation unit, the motion sensor is validated. Portable machine. The portable device according to claim 8 or 9,
When the motion sensor in the valid state does not detect movement, stop the portable device signal receiving unit for receiving a radio signal from the in-vehicle control device,
When the motion sensor in the valid state detects movement, the portable device signal receiving unit is activated.

Images