JP2017128207A - Collation system and collation method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a collation system comprising higher security.SOLUTION: A collation system comprises: an RF tag 24 attached to an engine ECU 21 for controlling an engine 22, and sending an RFID response signal containing an RFID unique to itself to an RFID request signal; and an RFID reader/writer 23 attached so as to be spaced apart from the engine ECU 21, and compares the RFID included in the RFID response signal. The engine ECU 21 permits switching from off to on of the engine 22 when RFID comparison on the RFID reader/writer 23 is established.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a verification system and a verification method.

  2. Description of the Related Art Conventionally, a verification system is known in which engine startup is permitted when verification via wireless communication performed between an electronic key and an in-vehicle device is established. In this type of system, there is a concern that the in-vehicle ECU in which information necessary for collation of the electronic key is stored is replaced with the in-vehicle ECU of another vehicle, and the start of the engine is illegally permitted.

  In the system of Patent Document 1, a magnetism detection unit is provided in an in-vehicle ECU, and a magnet is disposed in the vicinity of the in-vehicle ECU. The in-vehicle ECU compares the detection result of the magnetic detection unit when the vehicle is shipped from the manufacturing factory with the detection result of the magnetic detection unit when the start of the engine is input, and both detection results are appropriate. Only start the engine.

JP 2010-120421 A

  In the system of Patent Document 1, since the magnet is set near the vehicle-mounted ECU, it is easy to grasp the positional relationship between the magnet and the vehicle-mounted ECU. For this reason, when replacing the vehicle-mounted ECU, it is easy to adjust the positional relationship with the magnet, and there is a concern about security.

  An object of the present invention is to provide a collation system and a collation method with higher security.

  In order to solve the above-described problem, a verification system is attached to a control unit that controls a control target, and an RF tag that transmits a response signal including its own RFID with respect to a request signal; Is mounted at a separated position, and includes an RFID reader that collates the RFID included in the response signal, and the control unit allows the start of the controlled object when RFID collation in the RFID reader is established. The gist.

  According to this system, RFID verification cannot be established simply by removing the control unit from the original vehicle and attaching it to another vehicle. Therefore, since such an unauthorized means cannot start a control target such as a driving source for traveling, for example, a vehicle employing the system has high security.

  In the above system, the RFID reader performs at least one of the information based on the signal strength and the signal strength of the response signal in addition to the RFID verification, and the control unit performs the verification in addition to the RFID verification. It is preferable to allow the start of the controlled object when at least one of the signal strength of the response signal and the information based on the signal strength is verified.

  According to this system, it is not possible to verify at least one of the signal intensity and the information based on the signal intensity simply by removing the control unit and the RF tag from the original vehicle and attaching them to another vehicle. Therefore, since the control target cannot be started by such unauthorized means, the vehicle employing the system has high security.

  In the system, the RFID reader performs verification of at least one of the signal strength of the response signal and information based on the signal strength in addition to the RFID verification with each of the plurality of RF tags, It is preferable that the control unit allows the controlled object to be started when all verifications performed between the RFID reader and each of the plurality of RF tags are established.

  According to this system, unless all the positional relationships between the control unit and the plurality of RF tags are adjusted, verification of at least one of the signal intensity of the response signal and information based on the signal intensity is not established. Therefore, a vehicle that adopts the system more has high security.

  In the system, the control unit performs the RF tag number verification in addition to the RFID verification, and allows the control target to be started when both the RFID verification and the RF tag number verification are established. It is preferable.

  According to this system, if the controller and the RF tag are removed from the original vehicle, attached to another vehicle, and the other vehicle original controller and the RF tag are not removed, both the RFID verification and the RF tag number verification are performed. Does not hold. Therefore, a vehicle that adopts the system more has high security.

In the above system, the RF tag is preferably a passive type that drives the request signal as an energy source.
According to this system, the RF tag becomes smaller and the degree of freedom of the mounting position increases. Furthermore, the security can be further enhanced by combining with signal strength verification and number verification.

  The system includes a storage unit that stores setting information unique to the control target, and a verification target that can be taken out and has the setting information, and the control unit does not establish RFID verification in the RFID reader It is preferable to request verification of the setting information and allow the control object to be started when the verification is established.

  Since RFID verification uses a radio signal, it is conceivable that the radio signal used for the RFID verification is affected by other signals and the verification is not normally completed. In this respect, according to this system, even if RFID verification is not successfully established, if the authorized user has the verification target, the control target can be started. This improves usability.

  In order to solve the above-described problem, the verification method includes a first step of attaching an RF tag that transmits a response signal including its own RFID to a request signal to a control unit that controls a control target; A second step of attaching an RFID reader for collating the RFID included in the response signal to a position separated from the control unit; and when the RFID collation in the RFID reader is established, the start of the control target is the control unit And a third step allowed by the above.

  A vehicle employing this method has high security.

  The collation system and collation method of the present invention have the effect of higher security.

The block diagram which shows schematic structure of the electronic key system comprised including an electronic key and the vehicle equipment by which the collation system is mounted. (A) is the schematic which shows the case where each structure is mounted in the regular vehicle in 1st Embodiment, (b) is the schematic which shows the case where each structure is mounted in the other vehicle. . (A) is the schematic which shows the case where each structure is mounted in the regular vehicle in 2nd Embodiment, (b) is the schematic which shows the case where each structure is mounted in the other vehicle. .

<First Embodiment>
Hereinafter, a first embodiment of an electronic key system including an electronic key and an in-vehicle device equipped with a verification system will be described with reference to the drawings.

  As shown in FIG. 1, the electronic key system 1 performs various vehicle-mounted controls through wireless communication between the vehicle-mounted device 2 and the electronic key 3. When the electronic key 3 receives a request signal from the in-vehicle device 2 corresponding to itself, the electronic key 3 generates a response signal including a unique ID code and wirelessly transmits the response signal.

  As shown in FIG. 1, the in-vehicle device 2 includes a communication ECU 11, an LF transmission unit 12, and a UHF reception unit 13. The LF transmitter 12 and the UHF receiver 13 are electrically connected to the communication ECU 11.

The LF transmission unit 12 modulates an electrical signal generated by the communication ECU 11 into an LF band radio signal and wirelessly transmits the modulated radio signal toward a predetermined communication area.
The UHF receiving unit 13 receives a UHF band radio signal and demodulates the received signal into an electrical signal.

An ID code common to the electronic key 3 is stored in the memory 11 a of the communication ECU 11.
The communication ECU 11 periodically generates a request signal including information for requesting transmission of the ID code. The request signal is modulated by the LF transmitter 12 and wirelessly transmitted. When the communication ECU 11 receives a response signal as a response to the request signal through the UHF receiver 13, the communication ECU 11 collates the ID code included in the response signal with the ID code stored in the memory 11a. The communication ECU 11 is interconnected with other components (here, an engine ECU 21 and an RFID reader / writer 23 described later) via the bus 4, and outputs the result of ID verification to the bus 4.

The in-vehicle device 2 includes an engine ECU 21, an engine 22, and an RFID reader / writer 23.
The engine 22 is electrically connected to the engine ECU 21 and is turned on and off by the engine ECU 21. The engine 22 is a driving source for traveling and corresponds to a control target.

The memory 23a of the RFID reader / writer 23 stores the RFID of the corresponding RF tag and the signal strength of the signal returned from the RF tag (RFID response signal).
The RFID reader / writer 23 includes an RSSI circuit 23b that detects the signal strength of the RFID response signal.

  In a state where the engine 22 is off, the RFID reader / writer 23 generates an RFID request signal for requesting RFID transmission to the RF tag, triggered by establishment of ID verification in the communication ECU 11, and wirelessly transmits this. When the RFID reader / writer 23 receives an RFID response signal as a response to the RFID request signal, the RFID reader / writer 23 collates the RFID included in the RFID response signal with the RFID stored in the memory 23a. Further, the RFID reader / writer 23 collates the signal strength of the RFID response signal detected through the RSSI circuit 23b with the signal strength stored in the memory 23a. The RFID reader / writer 23 outputs the verification results of these RFIDs and signal strengths to the bus 4. The RFID reader / writer 23 is provided, for example, under the floor of the vehicle. This corresponds to the second step.

  The engine ECU 21 switches the engine 22 from off to on with the operation of an engine switch (not shown) as a trigger in a state where all of collation of ID collation, RFID collation, and signal strength collation is established. This corresponds to the third step. The engine ECU 21 is provided in the vicinity of the engine room, for example, in the front panel.

  An RF tag 24 is attached to the case of the engine ECU 21. This corresponds to the first step. The RF tag 24 includes a passive type IC circuit, and a unique RFID is stored in the IC circuit. The RF tag 24 is driven by using an RFID request signal as an energy source, and transmits an RFID response signal including a unique RFID.

The engine ECU 21 corresponds to a control unit, and the engine ECU 21, the engine 22, the RFID reader / writer 23, and the RF tag 24 constitute a verification system.
Next, the operation and effect of the verification system will be described. As shown in FIG. 2A, it is assumed that “0AF” is stored as the RFID in the memory 23a and the RF tag 24 of the RFID reader / writer 23 of the vehicle A. Also, L1 is stored in the memory 23a of the RFID reader / writer 23 of the vehicle A in association with the RFID as the RSSI intensity. In addition, ID collation between the vehicle equipment 2 and the electronic key 3 shall be materialized.

  As shown in FIG. 2A, in the vehicle A, the RFIDs stored in the memory 23a of the RFID reader / writer 23 and the RF tag 24 are common. Therefore, RFID verification is established. Signal strength verification is also established. For this reason, the engine 22 can be switched from OFF to ON by operating an engine switch (not shown).

  Here, consider the case where the engine ECU 21 of the vehicle A is removed and attached to the vehicle B as shown in FIG. It is assumed that “01B” is stored as the RFID in the memory 23 a and the RF tag 24 of the RFID reader / writer 23 of the vehicle B. The memory 23a of the RFID reader / writer 23 of the vehicle B stores L2 as RSSI intensity in association with the RFID.

  In this case, when the RFID reader / writer 23 of the vehicle B transmits the RFID request signal, the RF tag 24 that should originally be attached to the vehicle A transmits the RFID response signal. That is, the RFID response signal includes “0AF” as the RFID.

  When receiving the RFID response signal, the RFID reader / writer 23 of the vehicle B collates the RFID “0AF” included in the RFID response signal with the RFID “01B” stored in the memory 23a. In this case, since RFID verification is not established, the engine ECU 21 cannot switch the engine from off to on even if ID verification between the in-vehicle device 2 and the electronic key 3 is established.

  Thus, if the collation system of this structure is employ | adopted, the engine of the said other vehicle cannot be driven only by removing engine ECU21 and carrying on illegally the other vehicle.

  Also, consider the case where the engine ECU 21 and the RFID reader / writer 23 of the vehicle A are removed and attached to the vehicle B, as indicated by the one-dot chain line in FIG.

  In this case, in the vehicle B, since the RFID collation is performed between the RFID reader / writer 23 of the vehicle A and the RF tag 24 of the vehicle A, the RFID collation is established. However, since the mounting positions of the engine ECU 21 and the RFID reader / writer 23 are different between the vehicle A and the vehicle B, there is a high possibility that the signal strength verification is not established. This is because the engine ECU 21 needs to be connected to the bus 4 and the engine 22, and the RFID reader / writer 23 needs to be connected to the bus 4.

  Therefore, if the collation system having this configuration is adopted, it is difficult to drive the engine of the other vehicle simply by removing the engine ECU 21 and the RFID reader / writer 23 and illegally transferring them to another vehicle. .

<Second Embodiment>
Next, a second embodiment of the verification system will be described. The main differences between the second embodiment and the first embodiment are that an RF tag is added and that the RFID reader / writer 23 performs the RF tag number verification in addition to the RFID verification and signal strength verification. is there. The RF tag 24 of the first embodiment will be described as the first RF tag 24.

  As indicated by a broken line in FIG. 1, the in-vehicle device 2 includes a passive second RF tag 31 in addition to the first RF tag 24 attached to the case of the engine ECU 21. As shown in FIG. 3A, the second RF tag 31 is attached to, for example, a ceiling portion.

  The memory 23a of the RFID reader / writer 23 stores the RFID of the corresponding RF tag and the signal strength of the signal returned from the RF tag (RFID response signal). That is, in this example, the signal strengths of the RFID and the RFID response signal are stored for each of the two RF tags (the first RF tag 24 and the second RF tag 31). The memory 23a stores the number of RF tags (here, two).

  The RFID reader / writer 23 performs RFID verification and signal strength verification in the same manner as in the first embodiment, and also performs RF tag count verification. Specifically, the RFID reader / writer 23 collates the number of RFID response signals received in response to the RFID request signal with the number of RF tags stored in the memory 23a. The RFID reader / writer 23 outputs a verification result of the number of RF tags to the bus 4 in addition to the verification results of the RFID and the signal strength.

  Note that the engine ECU 21 turns off the engine 22 as a trigger when an engine switch (not shown) is operated in a state in which all verifications of ID verification, RFID verification, signal strength verification, and RF tag number verification are established. Switch from to on.

  Next, the operation and effect of the verification system will be described. As shown in FIG. 3A, the RFID “0AF” of the first RF tag 24 and the RFID “31A” of the second RF tag 31 are respectively stored in the memory 23a of the RFID reader / writer 23 of the vehicle A. It is remembered. Further, the memory 23a of the RFID reader / writer 23 of the vehicle A stores L1 as an RSSI strength associated with the RFID “0AF” and L3 as an RSSI strength associated with the RFID “31A”. Has been.

  Here, consider the case where the engine ECU 21, the RFID reader / writer 23, and the second RF tag 31 of the vehicle A are removed and attached to the vehicle B as indicated by a two-dot chain line in FIG.

  In this case, in the vehicle B, between the RFID reader / writer 23 of the vehicle A and the first RF tag 24 of the vehicle A, and between the RFID reader / writer 23 of the vehicle A and the second RF tag 31 of the vehicle A. , Each performs RFID verification. Therefore, these two RFID verifications are established. However, since the mounting positions of the engine ECU 21, the RFID reader / writer 23, and the second RF tag 31 are different between the vehicle A and the vehicle B, there is a possibility that the signal strength verification cannot be further established as compared with the first embodiment. Is expensive.

  Therefore, if the collation system with this configuration is adopted, simply removing the engine ECU 21, the RFID reader / writer 23, and the second RF tag 31 and illegally transferring them to another vehicle will cause the engine of the other vehicle to operate. It is difficult to drive.

  Further, the RFID reader / writer 23 checks the number of RF tags. For example, as shown in FIG. 3B, when the electrical connection of the engine ECU 21 originally mounted on the vehicle B is disconnected even if the engine ECU 21 remains in the vehicle, the engine ECU 21 is attached to the engine ECU 21. The RF tag 24 (RFID “01B”) receives the RFID request signal from the RFID reader / writer 23. Since the RF tag 24 of the vehicle B is a passive type, the RF tag 24 transmits an RFID response signal triggered by reception of the RFID request signal, as indicated by a broken line in FIG.

  Therefore, the RFID reader / writer 23 illegally attached to the vehicle B from the vehicle A has three RF tags, that is, the first RF tag 24 and the second RF tag illegally attached to the vehicle B from the vehicle A. In addition to 31, an RFID response signal is received from the RF tag 24 originally attached to the vehicle B. Since the number of RFID response signals received by the RFID reader / writer 23 is different from the number of RF tags stored in the memory 23a, the RF tag number verification is not established.

  In this way, since it is necessary to remove all RF tags attached to the original vehicle by performing passive type RF tags and the number comparison of RF tags, it is possible to drive the engine of another vehicle. It becomes difficult.

  Note that passive type RF tags are smaller and less expensive than active type tags. For this reason, the freedom degree of the mounting position in a vehicle increases and security property improves more by combining with signal strength collation and number collation.

In addition, you may change the said embodiment as follows.
In each of the above embodiments, the RSSI circuit 23b may be omitted. In this case, the signal strength information of the memory 23a may be omitted.

  In each of the above embodiments, the passive type is used for the RF tag, but an active type that consumes power from a battery or battery may be used. Note that when an active type RF tag is employed, it is not always necessary to transmit an RFID request signal from the RFID reader / writer 23.

In each of the above embodiments, the RFID reader / writer 23 is adopted, but at least the reader function is sufficient.
In each of the above embodiments, the RFID reader / writer 23 is connected to the bus 4 and can communicate with other ECUs. However, the RFID reader / writer 23 is connected to a specific ECU and communicates with other ECUs via the specific ECU. The verification result may be transmitted.

  In each of the above embodiments, when a plurality of RF tags are employed, a passive type and an active type may be used in combination. When configured in this way, an active type RF tag must be attached to another vehicle and a power source of the RF tag must be secured, so that security is further increased.

-In each said embodiment, there is no restriction | limiting in the number of RF tags. Security increases as the number of RF tags increases.
In each of the above embodiments, in preparation for the case where RFID verification is not established, for example, setting information that is individually set for each engine 22 may be stored in the memory of the engine ECU 21. And when RFID collation is not materialized, engine ECU21 may request collation of setting information, and when the collation is materialized, it may permit starting of engine 22. The setting information here includes, for example, a PIN number, a fingerprint, key mountain information of a mechanical key, and the like.

  Since RFID verification uses a radio signal, it is conceivable that the radio signal used for the RFID verification is affected by other signals and the verification is not normally completed. In this regard, according to this system, even if RFID verification is not successfully established, the engine 22 can be started if a legitimate user has a verification target (PIN number, fingerprint, mechanical key, etc.). It becomes. This improves usability.

  In each of the above embodiments, the driving source for traveling is not limited to the internal combustion engine such as the engine 22. A hybrid system combining a motor or a motor and an engine may be used. Further, the control target is not limited to the driving source for traveling, but can be applied as long as it is mounted on a vehicle.

  In each of the embodiments described above, the electronic key system including the electronic key and the in-vehicle device on which the verification system is mounted can be applied to any vehicle such as a two-wheeled vehicle, a four-wheeled vehicle, a bus, and a truck.

Next, the technical idea conceived from the embodiment and the other examples will be described.
(A) In the above configuration, some of the plurality of RF tags are passive types and others are active types.

  When configured in this way, an active type RF tag must be attached to another vehicle and a power source of the RF tag must be secured, so that security is further increased.

DESCRIPTION OF SYMBOLS 1 ... Electronic key system, 2 ... Vehicle equipment, 3 ... Electronic key, 4 ... Bus, 11 ... Communication ECU, 12 ... LF transmission part, 13 ... UHF reception part, 21 ... Engine ECU (control part), 22 ... Engine ( Driving source for driving, control target), 23... RFID reader / writer, 23 b... RSSI circuit, 24, 31.

Claims (7)

An RF tag that is attached to a control unit that controls a control target and that transmits a response signal including its own RFID in response to a request signal;
An RFID reader that is attached to a position separated from the control unit and that collates the RFID included in the response signal;
The said control part is a collation system which accepts starting of the said control object, when RFID collation in the said RFID reader is materialized. The verification system according to claim 1,
In addition to the RFID verification, the RFID reader performs verification of at least one of information based on signal strength and signal strength of the response signal,
The said control part is a collation system which permits starting of the said control object, when at least one collation among the information based on the signal strength of the said response signal and signal strength is materialized in addition to the said RFID collation. The verification system according to claim 2,
The RFID reader performs verification of at least one of information based on signal strength and signal strength of the response signal in addition to the RFID verification with each of the plurality of RF tags,
The control unit is a verification system that allows the control object to be started when all verifications performed between the RFID reader and each of the plurality of RF tags are established. In the collation system according to any one of claims 1 to 3,
In addition to the RFID verification, the control unit performs a verification of the number of the RF tags, and allows the control target to be started when both the RFID verification and the number verification of the RF tag are established. In the collation system as described in any one of Claims 1-4,
The RF tag is a passive type verification system that drives the request signal as an energy source. In the collation system according to any one of claims 1 to 5,
A storage unit that stores setting information individually set for each control target;
A collation target that can be taken out and has the setting information,
The said control part requests | requires collation of the said setting information when RFID collation in the said RFID reader is not materialized, and when the said collation is materialized, the collation system which permits starting of the said control object. A first step of attaching an RF tag that transmits a response signal including an RFID unique to the request signal to a control unit that controls a control target;
A second step of attaching an RFID reader for collating the RFID included in the response signal to a position separated from the control unit;
A verification method comprising: a third step in which starting of the controlled object is permitted by the control unit when RFID verification in the RFID reader is established.

Images