JP2017115439A - On-vehicle device and authentication system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an on-vehicle device and an authentication system capable of causing a user to recognize that an unauthorized authentication has been made on an own vehicle using radio communication.SOLUTION: The on-vehicle device used on a vehicle includes: a first authentication section 714 that performs authentication by means of code collation via radio communication with an electronic key; a second authentication section 715 that performs fingerprint authentication using a piece of fingerprint information which is acquired by a sensor disposed on an outer door handle; and a notification indication section 719 that, when the authentication has been established by the first authentication section 714 but the authentication has not been established by the second authentication section 715, sends a notification to a personal mobile unit 3 of the user of the vehicle that an unauthorized authentication was made on the vehicle using radio communication.SELECTED DRAWING: Figure 4

Description

  The present invention relates to an in-vehicle device that performs authentication using wireless communication with a portable device carried by a user, and an authentication system including the in-vehicle device.

  2. Description of the Related Art Conventionally, there is known an authentication system that enables vehicle control such as locking / unlocking of a vehicle door and engine starting based on the fact that code verification by wireless communication is established between an in-vehicle device and a portable device such as an electronic key. . Since the distance range in which wireless communication is possible is limited to a short distance around the vehicle, authentication using wireless communication is normally possible only when the portable device is located in the vicinity of the vehicle.

  However, in such an authentication system, there is a concern about a relay attack in which a malicious third party indirectly establishes authentication by indirectly realizing communication between the portable device and the in-vehicle device using a repeater. . In the relay attack, although it is not intended by a legitimate user, authentication is established and vehicle control such as unlocking the vehicle door and starting the engine becomes possible.

  On the other hand, for example, in Patent Document 1, the strength of the request signal transmitted from the in-vehicle device is changed halfway, and the portable device responds only when this change in strength is detected, so that the relay attack is performed. A technique for preventing the above is disclosed.

JP 2010-185186 A

  However, with the technique disclosed in Patent Document 1, even if it becomes possible to prevent relay attack, the user cannot recognize whether or not relay attack has been performed on the vehicle. When the user cannot recognize that the relay attack is being performed on the own vehicle, the user cannot recognize that the own vehicle is the target of theft, and cannot strengthen the crime prevention against the own vehicle theft.

  The present invention has been made in view of the above-described conventional problems, and an object of the present invention is to provide a vehicle-mounted device that allows a user to recognize that unauthorized authentication using wireless communication has been performed on the vehicle. And providing an authentication system.

  The above object is achieved by a combination of the features described in the independent claims, and the subclaims define further advantageous embodiments of the invention. Reference numerals in parentheses described in the claims indicate a correspondence relationship with specific means described in the embodiments described later as one aspect, and do not limit the technical scope of the present invention. .

  In order to achieve the above object, the in-vehicle device of the present invention is used in a vehicle and performs first authentication by code verification through wireless communication with a portable device (2) used as an electronic key. A second authentication unit (715) that performs authentication by a method other than code verification via wireless communication used in the first authentication unit, and authentication is established in the first authentication unit. However, if the authentication is not established in the second authentication unit, a notification instruction for notifying the user's communication terminal (3) of the vehicle that the unauthorized authentication using the wireless communication has been performed on the vehicle. Part (719).

  In order to achieve the above object, an authentication system according to the present invention performs authentication by code verification via wireless communication between a portable device used as an electronic key and a vehicle used in a vehicle. An in-vehicle apparatus including a first authentication unit, wherein a second authentication unit that performs authentication by a method other than code verification via wireless communication used in the first authentication unit, and authentication is established by the first authentication unit, 2. A vehicle-mounted device comprising: a notification instructing unit for notifying a communication terminal of a user of the own vehicle that unauthorized authentication using wireless communication has been performed on the own vehicle when the authentication is not established by the authentication unit Including.

  If authentication is established by code verification via wireless communication used in the first authentication unit, but authentication is not established in the second authentication unit by any other method, wireless communication in the first authentication unit is used. It can be said that the authenticated authentication was illegally established. Therefore, the notification instruction | indication part can notify this to the communication terminal of the user of the own vehicle, when the unauthorized authentication via wireless communication is performed with respect to the own vehicle. In addition, since the communication terminal of the user of the own vehicle is notified that the unauthorized authentication via the wireless communication has been performed on the own vehicle, the user automatically performs the unauthorized authentication via the wireless communication from the communication terminal. You can recognize what happened to the car.

1 is a diagram illustrating an example of a schematic configuration of an authentication system 1. FIG. 2 is a diagram illustrating an example of a schematic configuration of an electronic key 2. FIG. It is a figure which shows an example of schematic structure of authentication ECU7. It is a figure which shows an example of the schematic structure of the main control part 71 of authentication ECU7. It is a flowchart which shows an example of the flow of the authentication related process in the main control part 71 of authentication ECU7. It is a figure which shows an example of the correspondence of the combination of the authentication result of the 1st authentication part 714 and the 2nd authentication part 715, and the process corresponding to it. It is a figure which shows an example of a schematic structure of the authentication system 1a. It is a figure which shows an example of schematic structure of authentication ECU7a. It is a flowchart which shows an example of the flow of the authentication relevant process in the main control part 71a of authentication ECU7a. It is a figure which shows an example of schematic structure of authentication ECU7b. It is a figure which shows an example of schematic structure of authentication ECU7c.

  A plurality of embodiments and modifications for disclosure will be described with reference to the drawings. For convenience of explanation, among the plurality of embodiments and modifications, portions having the same functions as those shown in the drawings used in the previous description are denoted by the same reference numerals and description thereof is omitted. There is a case. For the portions with the same reference numerals, the description in other embodiments and modifications can be referred to.

(Embodiment 1)
<Schematic configuration of authentication system 1>
Embodiment 1 of the present invention will be described below with reference to the drawings. An authentication system 1 shown in FIG. 1 includes an electronic key 2 and a personal portable device 3 carried by a user, a sensor 5 used in a vehicle HV, a DCM (Data Communication Module) 6, and an authentication ECU 7. The configuration including at least the electronic key 2 and the authentication ECU 7 in the authentication system 1 corresponds to the authentication system of the claims.

  The authentication system 1 performs biometric authentication based on the user's biometric information acquired by the sensor 5 and permits the unlocking of the door of the vehicle HV when the biometric authentication is established. Further, when code verification is performed by wireless communication between the electronic key 2 and the authentication ECU 7 and authentication by code verification via wireless communication is established, and when biometric authentication is established, the vehicle HV In addition to locking and unlocking the door, the vehicle HV is allowed to start. The electronic key 2 and the authentication ECU 7 will be described in detail later.

  The personal portable device 3 is a communication terminal that a user carries or wears, and communicates with the DCM 6 via a public communication network. Examples of the personal portable device 3 include a multi-function mobile phone and a wearable communication terminal. In the first embodiment, the case where the personal portable device 3 is a multi-function mobile phone will be described as an example.

  The sensor 5 is a contact-type biometric sensor that is provided on the outer door handle 4 of the vehicle HV and acquires biometric information from a user who holds the outer door handle 4. Examples of the sensor 5 include a contact light emission type fingerprint sensor and a vein recognition sensor. In the first embodiment, the sensor 5 is a contact light emission type fingerprint sensor, and the biological information acquired by the sensor 5 is fingerprint information. An example will be described.

  The sensor 5 may be configured to be provided on all outer door handles 4 of the driver's seat door, the passenger seat door, the rear seat door, and the trunk room door of the vehicle HV, or may be configured to be provided on some outer door handles 4. Good. When it is provided on some of the outer door handles 4, for example, it may be configured to be provided on the outer door handle 4 of the driver's seat door.

  The DCM 6 is an in-vehicle communication module used for a telematics service, and communicates with a personal portable device via a public communication line network.

<Schematic configuration of electronic key 2>
Next, a schematic configuration of the electronic key 2 will be described with reference to FIG. As shown in FIG. 2, the electronic key 2 includes a main control unit 21, an LF reception unit 22, and a UHF transmission unit 23. This electronic key 2 corresponds to the portable device of the claims.

  The LF receiver 22 has an LF antenna provided on the outer door handle 4 and receives an LF band request signal transmitted from the authentication ECU 7 via the LF antenna. The LF receiving unit 22 is connected to the main control unit 21 and outputs a request signal received by the LF antenna to the main control unit 21.

  The UHF transmission unit 23 has a UHF antenna, and transmits a response signal by radio waves in the UHF band to the authentication ECU 7 via the UHF antenna. The UHF transmission unit 23 is connected to the main control unit 21 and transmits the response signal output from the main control unit 21 from the UHF antenna.

  The main control unit 21 includes a CPU, a volatile memory, a non-volatile memory, an I / O, and a bus connecting them, and executes various processes by executing a control program stored in the non-volatile memory. For example, the main control unit 21 executes response-related processing such as transmitting a response signal corresponding to the request signal transmitted from the authentication ECU 7.

  In the main control unit 21, a vehicle identification code for identifying a legitimate user's vehicle HV is registered in an electrically rewritable nonvolatile memory. The main control unit 21 performs code verification to determine whether the vehicle HV on which the authentication ECU 7 that is the transmission source of the request signal received by the LF receiving unit 22 is a legitimate user's vehicle. The code verification is performed between the vehicle identification code included in the request signal received from the authentication ECU 7 and the vehicle identification code registered in the nonvolatile memory of the main control unit 21.

  When the code verification is established, the main control unit 21 returns a response signal including an electronic key identification code for identifying the own device. What is necessary is just to set it as the structure which reads and uses what was stored in the non-volatile memory of the main control part 21 for an electronic key identification code.

<Schematic configuration of authentication ECU 7>
Next, a schematic configuration of the authentication ECU 7 will be described with reference to FIG. As shown in FIG. 3, the authentication ECU 7 is connected to the sensor 5, the DCM 6, the body ECU 8, and the power unit control ECU 9. As an example, the sensor 5, the DCM 6, the body ECU 8, the power unit control ECU 9, and the authentication ECU 7 may be connected by an in-vehicle LAN. This authentication ECU 7 corresponds to the in-vehicle device in the claims.

  The body ECU 8 locks and unlocks each vehicle door by outputting a drive signal for controlling locking and unlocking of each vehicle door of the vehicle HV to a door lock motor provided in each vehicle door. The body ECU 8 is connected to a touch sensor provided on the outer door handle 4 of each vehicle door, and detects that the user touches the outer door handle of each vehicle door.

  The power unit control ECU 9 controls the travel drive source of the vehicle HV. Examples of the driving source include an engine and a motor. When the power unit control ECU 9 obtains the start permission signal for the travel drive source from the authentication ECU 7, the power unit control ECU 9 enters a start standby state in which the travel drive source can be started. For example, taking the case where the traveling drive source is an engine as an example, an engine start standby state in which a starter motor or the like can be started is set.

  As shown in FIG. 3, the authentication ECU 7 includes a main control unit 71, an LF transmission unit 72, and a UHF reception unit 73.

  The LF transmission unit 72 transmits a request signal to the electronic key 2 using an LF band radio wave via an LF antenna such as the door antenna 10 of each vehicle door. The LF band is a frequency band of 30 kHz to 300 kHz, for example. The range in which signals can be transmitted from the LF antenna using radio waves in the LF band corresponds to the short-range wireless communication area in which short-range wireless communication is possible. The request signal is a signal for requesting transmission of an electronic key identification code for code verification, and includes a vehicle identification code for identifying the vehicle HV. The door antenna 10 is provided on a door handle of a vehicle door of the vehicle HV.

  The LF transmission unit 72 may be configured to transmit a request signal using radio waves in the LF band to the vehicle interior via an indoor antenna provided in the vehicle interior. However, for convenience, the first embodiment will be described only when a request signal is transmitted to the outside of the passenger compartment via the door antenna 10.

  The UHF receiving unit 73 has a UHF antenna 11 and receives a response signal transmitted from the electronic key 2 by radio waves in the UHF band by the UHF antenna 11. The UHF band is a frequency band of 300 MHz to 3 GHz, for example. The response signal is a signal returned from the electronic key 2 in response to a request signal transmitted from the authentication ECU 7.

  The main control unit 71 includes a volatile memory, a non-volatile memory, an I / O, and a bus connecting them, and executes various processes by executing a control program stored in the non-volatile memory. The main control unit 71 executes processing related to authentication (hereinafter, authentication-related processing). The main controller 71 will be described in detail later. Note that some or all of the functions executed by the main control unit 71 may be configured in hardware by one or a plurality of ICs.

<Detailed Configuration of Main Control Unit 71>
As shown in FIG. 4, the main control unit 71 includes a transmission processing unit 711, a reception processing unit 712, a registration unit 713, a first authentication unit 714, a second authentication unit 715, an authentication result integration unit 716, and an unlocking / unlocking permission unit 717. A start permission unit 718 and a notification instruction unit 719 are provided.

  The transmission processing unit 711 transmits a request signal including the vehicle identification code of the vehicle HV from the door antenna 10 via the LF transmission unit 72. As an example, the transmission of the request signal may be performed intermittently while the vehicle HV is parked. The vehicle identification code may be the device ID of the authentication ECU 7 mounted on the vehicle HV or the vehicle ID of the vehicle HV. What is necessary is just to set it as the structure which reads and uses what was stored in the non-volatile memory of authentication ECU7 for vehicle identification code. The reception processing unit 712 receives a response signal transmitted from the electronic key 2 in the UHF band in response to the request signal via the UHF reception unit 73.

  The registration unit 713 is, for example, an electrically rewritable nonvolatile memory, and the electronic key identification code of the authorized user's electronic key 2 is registered among the electronic key identification codes. In addition, the biological information of the legitimate user is also registered. In the example of the first embodiment, fingerprint information (hereinafter, regular fingerprint information) acquired by a sensor 5 from a regular user is registered.

  The first authentication unit 714 verifies whether the electronic key 2 that is the transmission source of the response signal received by the reception processing unit 712 is the electronic key 2 of the authorized user. The code verification is performed between the electronic key identification code included in the response signal received from the electronic key 2 and the electronic key identification code registered in the registration unit 713. And when both correspond, the authentication by the code collation via wireless communication shall be materialized. If they do not match, the authentication is not established.

  The second authentication unit 715 performs fingerprint authentication for checking whether the fingerprint information acquired by the sensor 5 matches the regular fingerprint information. Fingerprint authentication is performed between the fingerprint information acquired by the sensor 5 and the regular fingerprint information registered in the registration unit 713. It is assumed that fingerprint authentication is established when the two match. If they do not match, the authentication is not established.

  The authentication result integration unit 716 integrates the authentication result from the first authentication unit 714 and the authentication result from the second authentication unit 715 and outputs the result to the locking / unlocking permission unit 717, the start permission unit 718, and the notification instruction unit 719. .

  When either one of the first authentication unit 714 and the second authentication unit 715 is authenticated, the locking / unlocking permission unit 717 sends a signal permitting locking / unlocking of the vehicle door to the body ECU 8. This locking / unlocking permission unit 717 corresponds to the unlocking permission unit in the claims. When the locking / unlocking of the vehicle door is permitted, the body ECU 8 starts energizing the touch sensor provided on the outer door handle 4 of the vehicle door, and enters a standby state in which the user can detect the outer door handle operation. When the body ECU 8 detects that the user has touched the touch sensor, the body ECU 8 outputs a drive signal to the door lock motor to lock and unlock the vehicle door.

  When the sensor 5 is configured to be provided on each vehicle door of the vehicle HV, the vehicle door that is locked and unlocked by the locking / unlocking permission unit 717 may be limited to the vehicle door that has detected the outer door handle operation. According to this, it becomes possible to lock / unlock only the vehicle door touched by the user on the outer door handle 4.

  When the sensor 5 is configured to be provided only in the vehicle door of the driver's seat of the vehicle HV, the vehicle door that is locked and unlocked by the locking / unlocking permission unit 717 may be configured as all the vehicle doors of the vehicle HV. . Locking and unlocking all the vehicle doors of the vehicle HV by touching the outer door handle 4 of the vehicle door of the driver's seat is the same as the function of the existing electronic key system. good. Therefore, according to the above configuration, it is possible to reduce the cost by reducing the number of sensors 5 provided on the vehicle HV while maintaining good convenience for the user.

  In addition, although the structure which the locking / unlocking permission part 717 performs both locking and unlocking here was shown, it does not necessarily restrict to this. For example, it is good also as a structure which performs only locking or unlocking.

  The start permission unit 718 sends a start permission signal of the travel drive source to the power unit control ECU 9 when both the first authentication unit 714 and the second authentication unit 715 are authenticated. The power unit control ECU 9 that has acquired the start permission signal sets the travel drive source in the start standby state as described above. The locking / unlocking permission unit 717 and the start permission unit 718 correspond to a permission unit in the claims.

  The notification instruction unit 719 has been authenticated by the first authentication unit 714, but if the authentication has not been established by the second authentication unit 715, unauthorized authentication using wireless communication has been performed on the vehicle. This is notified from the DCM 6 to the personal portable device 3.

<Authentication-related processing in the main control unit 71>
Here, an example of the flow of authentication-related processing in the main control unit 71 of the authentication ECU 7 will be described using the flowchart of FIG. The flowchart of FIG. 5 is started when the vehicle door of the vehicle HV is locked.

  First, in step S1, when the 2nd authentication part 715 acquires fingerprint information via the sensor 5 (it is YES at S1), it moves to step S2. On the other hand, if fingerprint information has not been acquired (NO in S1), the process of S1 is repeated. In step S <b> 2, the second authentication unit 715 performs fingerprint authentication that checks whether the fingerprint information acquired via the sensor 5 matches the regular fingerprint information.

  In step S <b> 3, the transmission processing unit 711 transmits a request signal including the vehicle identification code from the door antenna 10 via the LF transmission unit 72. In step S4, if the reception processing unit 712 has received a response signal transmitted in response to the request signal from the electronic key 2 via the UHF reception unit 73 (YES in S4), the process proceeds to step S5. Move. On the other hand, if it cannot be received (NO in S4), the process proceeds to step S10.

  In the process of S4, when the electronic key 2 does not exist within the communication range of the door antenna 10, or when the code verification of the vehicle identification code is not established with the electronic key 2, the response signal from the electronic key 2 can be received. Disappear.

  The reception processing unit 712 may determine whether or not the response signal has been received depending on whether or not the response signal is received within a predetermined time after the request signal is transmitted. The predetermined time is longer than the time until the electronic key 2 that has sent the request signal transmits the response signal, and can be arbitrarily set. In addition, the reception processing unit 712 may determine that the response signal is not received when the response signal is not received despite the request signal being transmitted a plurality of times periodically such as every 100 msec. .

  In step S <b> 5, the first authentication unit 714 performs authentication by code verification between the electronic key identification code included in the response signal received by the reception processing unit 712 and the electronic key identification code registered in the registration unit 713.

  In step S6, when the authentication by the code verification in the first authentication unit 714 is established (YES in S6), the process proceeds to step S7. On the other hand, if authentication by code verification is not established (NO in S6), the process proceeds to step S10.

  In step S7, when fingerprint authentication is established in the second authentication unit 715 in S2 (YES in S7), the process proceeds to step S8. On the other hand, if fingerprint authentication has not been established (NO in S7), the process proceeds to step S9.

  In step S8, the locking / unlocking permission unit 717 permits the unlocking of the vehicle HV, and the start permission unit 718 permits the starting of the vehicle HV, and the authentication-related processing ends. In step S9, it is assumed that an unauthorized authentication such as a relay attack has been performed on the own vehicle, the locking / unlocking permission unit 717 does not permit the unlocking of the vehicle HV, and the start permission unit 718 does not permit the starting of the vehicle HV. In addition, the notification instruction unit 719 notifies the personal portable device 3 from the DCM 6 that unauthorized authentication using wireless communication has been performed on the vehicle. Then, the authentication related process ends.

  In the personal portable device 3 that has received the notification, by performing display and / or voice output indicating that unauthorized authentication using wireless communication has been performed on the vehicle, unauthorized authentication using wireless communication is performed. Let the user know what has been done to the vehicle. An example of the notification may be text display or icon display as long as it is a display. As long as it is an audio output, text may be read out or a buzzer sound may be output.

  If the response signal cannot be received in S4, or if authentication by code verification is not established in S6, in step S10, fingerprint authentication is established in the second authentication unit 715 in S2 (YES in S10) ) Go to Step S11. On the other hand, if fingerprint authentication has not been established (NO in S10), the process proceeds to step S12.

  In step S11, the locking / unlocking permission unit 717 permits the unlocking of the vehicle HV, while the start permission unit 718 does not permit the starting of the vehicle HV and ends the authentication-related processing. In step S12, the locking / unlocking permission unit 717 does not permit the unlocking of the vehicle HV, and the start permission unit 718 does not permit the starting of the vehicle HV, and the authentication-related processing ends.

  Here, FIG. 6 is used to summarize an example of a correspondence relationship between a combination of authentication results of code verification by wireless communication in the first authentication unit 714 and fingerprint authentication in the second authentication unit 715 and processing corresponding thereto. .

  As shown in FIG. 6, when both code verification and fingerprint authentication by wireless communication are established, both unlocking and starting of the vehicle HV are permitted. If code verification by wireless communication is established but fingerprint authentication is not established, both the unlocking and starting of the vehicle HV are not permitted, and unauthorized authentication using wireless communication is applied to the vehicle. The personal portable device 3 is notified that this has been done. Code verification by wireless communication is not established, but when fingerprint authentication is established, starting of the vehicle HV is not permitted, but unlocking is permitted. When neither the code verification by wireless communication nor the fingerprint authentication is established, neither unlocking nor starting of the vehicle HV is permitted.

<Summary of Embodiment 1>
If authentication is established by code verification via wireless communication in the first authentication unit 714, but fingerprint authentication is not established in the second authentication unit 715, wireless communication in the first authentication unit 714 is used. It can be presumed that the authenticated authentication was illegally established by a relay attack or the like. On the other hand, according to the configuration of the first embodiment, when authentication is established by code verification via wireless communication in the first authentication unit 714, but fingerprint authentication is not established in the second authentication unit 715. In this case, the personal portable device 3 is notified that unauthorized authentication via wireless communication has been performed on the vehicle. Therefore, the user can recognize from this personal portable device 3 that unauthorized authentication via wireless communication has been performed on the vehicle. Therefore, the user can recognize that the vehicle HV is the target of theft, and can enhance crime prevention against the vehicle theft, for example, by locking the anti-theft on the wheel of the vehicle HV.

  Further, according to the configuration of the first embodiment, authentication is not established by code verification via wireless communication in the first authentication unit 714, but when fingerprint authentication is established in the second authentication unit 715, The vehicle HV is not allowed to start but is allowed to unlock. According to this, when a legitimate user does not need to start the vehicle HV and loads and unloads the luggage, the vehicle HV can be unlocked without having the electronic key 2, which is convenient. improves.

  Furthermore, according to the configuration of the first embodiment, the vehicle HV is started unless both authentication by code verification through wireless communication in the first authentication unit 714 and fingerprint authentication in the second authentication unit 715 are not established. Therefore, the anti-theft effect is enhanced by double authentication.

  In addition, since the sensor 5 is provided on the outer door handle 4 of the vehicle HV, fingerprint authentication can be performed by the second authentication unit 715 only by the user performing an operation at the time of boarding. Therefore, it is not necessary to force the user to perform an extra operation for authentication in the second authentication unit 715, and convenience is not impaired.

(Embodiment 2)
In Embodiment 1, although the structure which provides the sensor 5 in the outer door handle 4 was shown, it does not necessarily restrict to this. For example, the sensor 5 may be provided on the start / stop button 12 (hereinafter, a second embodiment).

<Schematic Configuration of Authentication System 1a, Authentication ECU 7a, Main Control Unit 71a>
As shown in FIG. 7, the authentication system 1 a according to the second embodiment is provided with a sensor 5 provided on the start / stop button 12 instead of the outer door handle 4 and a point including the authentication ECU 7 a instead of the authentication ECU 7. This is the same as the authentication system 1 of the first embodiment. As shown in FIG. 8, the authentication ECU 7 a is the same as the authentication ECU 7 of the first embodiment except that a main control unit 71 a is provided instead of the main control unit 71.

  The main control unit 71a is the same as the main control unit 71 of the first embodiment except that the processing procedure of authentication-related processing is different. Similar to the main control unit 71, the main control unit 71 a includes a transmission processing unit 711, a reception processing unit 712, a registration unit 713, a first authentication unit 714, a second authentication unit 715, an authentication result integration unit 716, a locking / unlocking permission unit. 717, a start permission unit 718, and a notification instruction unit 719 are provided.

  The start / stop button 12 is a button operated by the user to start the travel drive source of the vehicle HV, and is provided in the passenger compartment. The start / stop button 12 corresponds to a start input unit in claims. In the second embodiment, the sensor 5 acquires biological information from the user who operates the start / stop button 12. Also in the second embodiment, the case where the sensor 5 is a contact light emission type fingerprint sensor and the biological information acquired by the sensor 5 is fingerprint information will be described as an example.

  In the LF transmission unit 72 according to the second embodiment, the short-range wireless communication area includes a driver seat of the vehicle HV. In the second embodiment, the reason why the sensor 5 is provided on the start / stop button 12 is that the number of required sensors 5 can be reduced as compared with the configuration in which the sensor 5 is provided on all vehicle doors of the vehicle HV. .

<Authentication-related processing in the main control unit 71a>
Here, an example of the flow of authentication-related processing in the main control unit 71a of the authentication ECU 7a will be described using the flowchart of FIG. The flowchart of FIG. 9 is started when the start / stop button 12 is operated after the vehicle door of the driver's seat of the vehicle HV is unlocked and the vehicle door is opened. For example, unlocking may be permitted when code verification by wireless communication in the first authentication unit 714 is established.

  First, in step S21, similarly to S3, the transmission processing unit 711 transmits a request signal including a vehicle identification code. In step S22, in the same manner as in S4, when the reception processing unit 712 has received a response signal (YES in S22), the process proceeds to step S23. On the other hand, if it cannot be received (NO in S22), the process proceeds to step S33.

  In step S23, the first authentication unit 714 performs authentication by code verification in the same manner as in S5. In step S24, when the authentication by the code verification in the first authentication unit 714 is established (YES in S24), the process proceeds to step S25. On the other hand, if the authentication by code verification is not established (NO in S24), the process proceeds to step S33.

  In addition, when it is set as the structure which permits unlocking by the code verification by the radio | wireless communication in the 1st authentication part 714, you may abbreviate | omit the process of S21-S24 and below-mentioned step S33.

  In step S25, the main control unit 71a enables the power transfer of the vehicle HV, and proceeds to step S26. The power transfer mentioned here is a power transfer from turning off the vehicle HV to turning on the accessory (ie, ACC) and turning on the ignition (ie, IGN), and excluding permission to start the vehicle HV. And

  In step S26, when the 2nd authentication part 715 acquires fingerprint information via the sensor 5 (it is YES at S26), it moves to step S27. On the other hand, if fingerprint information has not been acquired (NO in S26), the process proceeds to step S31. In step S27, as in S2, the second authentication unit 715 performs fingerprint authentication.

  In step S28, when fingerprint authentication is established in the second authentication unit 715 (YES in S28), the process proceeds to step S29. On the other hand, if fingerprint authentication has not been established (NO in S28), the process proceeds to step S30.

  In step S29, the start permission unit 718 permits the start of the vehicle HV and ends the authentication-related processing. In step S30, it is assumed that an unauthorized authentication such as a relay attack has been performed on the host vehicle, the start permission unit 718 does not permit the vehicle HV to start, and the notification instruction unit 719 performs an unauthorized authentication using wireless communication. The personal digital assistant 3 is notified from the DCM 6 that it has been performed on the car. Then, the authentication related process ends.

  In step S31 when fingerprint information is not acquired in S26, the start permission unit 718 does not permit the start of the vehicle HV, and the process proceeds to step S32. In step S32, if it is the end timing of the authentication related process (YES in S32), the authentication related process is ended. On the other hand, if it is not the end timing of the authentication related process (NO in S32), the process returns to S26 and is repeated. The end timing of the authentication-related processing here is when the user gets off the vehicle HV. The main controller 71a may determine that the user has exited the vehicle HV from the detection result of the seating sensor of the vehicle HV, the presence or absence of a response of the electronic key 2 to the request signal transmitted from the indoor antenna of the vehicle HV, and the like.

  In step S33 when the response signal cannot be received in S22, or in the case where authentication by code verification is not established in S24, the start permission unit 718 does not permit the start of the vehicle HV, and the authentication related process is ended.

  In the second embodiment, instead of the configuration in which the sensor 5 of the first embodiment is provided in the outer door handle 4, a configuration in which the sensor 5 is provided in the start / stop button 12 in the vehicle interior is employed. Even when such a configuration is adopted, the same effects as in the first embodiment can be obtained except that the vehicle HV can be unlocked without having the electronic key 2. Can do.

  In addition, since the sensor 5 is provided on the start / stop button 12 of the vehicle HV, the user can perform fingerprint authentication at the second authentication unit 715 only by performing an operation at the time of starting. Therefore, it is not necessary to force the user to perform an extra operation for authentication in the second authentication unit 715, and convenience is not impaired.

(Modification 1)
When a contact-type biometric sensor is used as the sensor 5, the sensor 5 is provided on a member other than the outer door handle 4 and the start / stop button 12 as long as the user touches the vehicle HV when getting on or starting the vehicle. It is good also as a structure.

(Modification 2)
The configuration using a contact-type biometric sensor as the sensor 5 is not necessarily limited. For example, a configuration using a non-contact type biometric sensor may be used. As an example, a configuration using a non-contact type fingerprint sensor or a vein recognition sensor may be used. In addition, it is good also as a structure which uses the imaging device used with the apparatus which performs a personal authentication from the captured image which imaged the user as the sensor 5. FIG.

(Modification 3)
The authentication performed by the second authentication unit 715 is not necessarily biometric authentication as long as the authentication is performed by a method other than code verification via wireless communication used by the first authentication unit 714. For example, authentication via wireless communication with the personal portable device 3 may be used. For example, when Bluetooth (registered trademark) is used as a wireless communication standard, the second authentication unit 715 may perform authentication by collating a PIN code used during pairing. When the second authentication unit 715 performs authentication via wireless communication with the personal portable device 3, a communication unit for mediating communication between the personal portable device 3 and the main control unit 71 is provided. What is necessary is just to set it as the structure with which authentication ECU7 is further provided.

  Even if the authentication performed by the second authentication unit 715 is not biometric authentication, the same effect as that of the first embodiment can be obtained as long as authentication is performed by a method other than code verification via wireless communication used by the first authentication unit 714. it can.

(Modification 4)
In addition, a display and / or audio output indicating that unauthorized authentication using wireless communication has been performed on the own vehicle, which is performed by the personal portable device 3 that is notified from the notification instruction unit 719 via the DCM 6, It may be immediately after the notification or may not be immediately after. As a configuration not immediately after, there is a configuration in which the notification is received by the personal portable device 3 and the user confirms the content of the notification at an arbitrary timing.

(Modification 5)
In the first and second embodiments, the configuration in which the personal portable device 3 such as a multi-function mobile phone is used as the communication terminal in the claims has been described. For example, it is good also as a structure which uses PC in a user's home, a home security terminal, etc. as a communication terminal of a claim.

(Modification 6)
In the first and second embodiments, the configuration in which the notification instruction unit 719 notifies the personal portable device 3 from the DCM 6 that unauthorized authentication using wireless communication has been performed on the own vehicle has been described. Not exclusively. For example, when the user gets on the vehicle HV, the notification instructing unit 719b notifies the display device 13 mounted on the own vehicle that the unauthorized authentication using wireless communication has been performed on the own vehicle. It is good also as a structure (henceforth modification 6) to be made.

  Hereinafter, Modification 6 of the present invention will be described with reference to the drawings. As shown in FIG. 10, the authentication ECU 7b of Modification 6 includes a notification instruction unit 719b instead of the notification instruction unit 719, and notifies the display device 13 instead of notifying the mobile terminal 3 via the DCM 6. Except for the point to perform, it is the same as the authentication ECU 7 of the first embodiment.

  The display device 13 is a display device mounted on the vehicle HV. Examples of the display device 13 include a combination meter, a CID (Center Information Display), and a HUD (Head-Up Display).

  The notification instructing unit 719b is authenticated by the first authenticating unit 714, but when the authentication is not established by the second authenticating unit 715, unauthorized authentication using wireless communication is performed on the own vehicle. This is notified to the display device 13 when the user gets on the vehicle HV. The display device 13 that has received the notification causes the display device 13 to display that unauthorized authentication using wireless communication has been performed on the vehicle.

  When the user's vehicle HV is on board, the notification instruction unit 719b may determine from the vehicle door opening / closing signal obtained from the body ECU 8, the signal from the seating sensor, and the like.

  According to the configuration of the modified example 6, the user can recognize that unauthorized authentication via wireless communication has been performed on the host vehicle when the vehicle HV is boarded. In the sixth modification, the notification instruction unit 719b may also notify the personal portable device 3 from the DCM 6.

(Modification 7)
In the first and second embodiments, the configuration in which the body ECU 8 that locks and unlocks the vehicle door is provided separately from the authentication ECUs 7 and 7a is shown, but the configuration is not necessarily limited thereto. For example, the body ECU 8 that locks and unlocks the vehicle door may be configured to be integrated with the authentication ECUs 7 and 7a (hereinafter, modified example 7).

  Hereinafter, Modification 7 of the present invention will be described with reference to the drawings. As shown in FIG. 11, the authentication ECU 7 c of the modification 7 is the same as the authentication ECU 7 of the first embodiment, except that it includes a locking / unlocking control unit 720.

  The locking / unlocking control unit 720 performs the same processing as that of the body ECU 8 described in the first embodiment, thereby outputting a drive signal to the door lock motor 14 and locking / unlocking the vehicle door. The locking / unlocking control unit 720 corresponds to the unlocking control unit in the claims.

  The present invention is not limited to the above-described embodiments, and various modifications can be made within the scope of the claims, and the technical means disclosed in different embodiments can be appropriately combined. Such embodiments are also included in the technical scope of the present invention.

1, 1a authentication system, 2 electronic key (mobile device), 3 personal mobile device (communication terminal), 4 outer door handle, 5 sensor, 6 DCM (vehicle communication module), 7, 7a, 7b, 7c authentication ECU (vehicle mounted) Device), 12 start / stop button (starting input unit), 13 display device, 14 door lock motor, 71, 71a main control unit, 714 first authentication unit, 715 second authentication unit, 717 unlocking / unlocking permission unit (unlocking) Permission section), 718 start permission section, 719, 719b notification instruction section, 720 locking / unlocking control section (unlocking control section)

Claims (12)

Used in vehicles,
An in-vehicle device including a first authentication unit (714) for performing authentication by code verification via wireless communication with a portable device (2) used as an electronic key,
A second authentication unit (715) that performs authentication by a method other than code verification via wireless communication used in the first authentication unit;
If the authentication is established in the first authentication unit, but the authentication is not established in the second authentication unit, the user of the vehicle is informed that unauthorized authentication using wireless communication has been performed on the vehicle. Vehicle-mounted apparatus provided with the notification instruction | indication part (719,719b) which notifies to the communication terminal (3). In claim 1,
A start permission unit (718) that permits the start of the host vehicle;
The start permission unit is an in-vehicle device that does not permit start of the own vehicle unless authentication is established in both the first authentication unit and the second authentication unit. In claim 2,
An unlocking permission unit (717) that permits unlocking of the door of the host vehicle;
The unlocking permission unit is an in-vehicle device that permits unlocking of the door of the host vehicle if authentication is established by the second authentication unit. In claim 3,
An in-vehicle device further comprising an unlock control unit (720) for unlocking the door of the host vehicle. In any one of Claims 1-4,
The second authentication unit is an in-vehicle device that performs authentication by biometric authentication. In claim 5,
The second authentication unit is an in-vehicle device that performs biometric authentication using the biometric information of the user acquired by the sensor (5) that the user contacts. In claim 6,
The second authentication unit is an in-vehicle device that performs biometric authentication using user's biometric information acquired by the sensor provided on the outer door handle (4) of the host vehicle. In claim 6,
The second authentication unit performs biometric authentication using the user's biometric information acquired by the sensor provided in the start input unit (12) operated by the user to start the traveling drive source of the host vehicle. apparatus. In any one of Claims 1-8,
The notification instructing unit is an in-vehicle device that notifies the user of the own vehicle that the unauthorized authentication using the wireless communication has been performed on the own vehicle to the communication terminal carried or attached to the user. In any one of Claims 1-9,
The notification instructing unit (719) communicates that the unauthorized authentication using the wireless communication has been performed on the vehicle through the in-vehicle communication module (6) used for the telematics service. In-vehicle device to notify In any one of Claims 1-9,
The notification instructing unit (719b) indicates that an unauthorized authentication using wireless communication has been performed on the host vehicle when the user of the host vehicle gets on the host vehicle. 13) In-vehicle device to be displayed. A portable device (2) used as an electronic key;
An in-vehicle device including a first authentication unit (714) used in a vehicle and performing authentication by code verification via wireless communication with the portable device,
A second authentication unit (715) that performs authentication by a method other than code verification via wireless communication used in the first authentication unit;
If the authentication is established in the first authentication unit, but the authentication is not established in the second authentication unit, the user of the vehicle is informed that unauthorized authentication using wireless communication has been performed on the vehicle. An in-vehicle device (7, 7a, 7b, 7c) provided with a notification instructing unit (719, 719b) for notifying the communication terminal (3).

Images