JP2018003437A - Authentication system for vehicle - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide an authentication system for a vehicle which can suppress a relay attack without being affected by a radio wave environment.SOLUTION: An authentication system for a vehicle includes an on-vehicle device for transmitting a request signal, and a portable machine for transmitting a response signal in response to the request signal. The on-vehicle device comprises permission parts (S5, S7) for permitting the unlock of the door of the vehicle on the basis of the establishment of a collation using an ID code included in the response signal, the on-vehicle device and the portable machine comprise atmospheric pressure sensors, a first device being either of the on-vehicle device and the portable machine transmits an atmospheric pressure signal indicating atmospheric pressure which is detected by the atmospheric pressure sensor to a second device being the other of the on-vehicle device and the portable machine, the second device comprises an atmospheric pressure comparison part (S6) for determining whether or not the atmospheric pressure of the first device is at the same level of the atmospheric pressure of the second device, and the permission parts permit the unlock on the basis of the determination by the atmospheric pressure comparison part that the atmospheric pressure of the first device is at the same level of the atmospheric pressure of the second device, and on the basis of the establishment of the collation based on the response signal.SELECTED DRAWING: Figure 4

Description

  The present invention relates to a vehicle authentication system that performs code verification using wireless communication between a portable device carried by a user and an in-vehicle device mounted on the vehicle.

  2. Description of the Related Art Conventionally, there is known a vehicle authentication system that enables vehicle control such as locking / unlocking of a vehicle door and starting of an engine based on the fact that code verification by wireless communication is established between an in-vehicle device and a portable device. Since the distance range in which this wireless communication is possible is limited to a short distance in the vehicle or around the vehicle, the code verification using the wireless communication is usually performed in the vehicle or in the vicinity of the vehicle. This is possible only when

  However, there is concern about a third party having malicious intent to establish code verification by indirectly realizing communication between the portable device and the in-vehicle device using a repeater called a relay attack device. .

  In order to prevent this relay attack, in Patent Document 1, a plurality of antennas that output request signals are arranged at different positions on the vehicle body. And when the request switch installed in the vehicle is operated, the output order of these output antennas is changed for every operation of the request switch. The portable device includes the reception intensity information of the request signal in the answer signal transmitted in response to the request signal. The vehicle-side device that has received the answer signal performs door lock driving after confirming that the received intensity information corresponds to the reference data based on the output order of the output antennas.

Japanese Unexamined Patent Publication No. 2016-35133

  Since the technique disclosed in Patent Document 1 uses a change in reception strength, there is a possibility that code verification may not be established when the radio wave environment is bad.

  The present invention has been made based on this situation, and an object of the present invention is to provide a vehicle authentication system capable of suppressing a relay attack without being affected by a radio wave environment.

  The above object is achieved by a combination of the features described in the independent claims, and the subclaims define further advantageous embodiments of the invention. Reference numerals in parentheses described in the claims indicate a correspondence relationship with specific means described in the embodiments described later as one aspect, and do not limit the technical scope of the present invention. .

The present invention for achieving the above object is used in a vehicle (4), and an in-vehicle device (1) for transmitting a request signal for requesting transmission of an ID code for code verification by wireless communication;
A portable device (2) that transmits a response signal including an ID code when it is carried by a user and receives a request signal;
The in-vehicle device permits the vehicle door to be unlocked based on the fact that the code verification using the ID code included in the response signal transmitted from the portable device is established (S5, S7, S25, S26). A vehicle authentication system comprising:
The in-vehicle device and the portable device are each provided with an atmospheric pressure sensor (18, 23),
The first device, which is either an in-vehicle device or a portable device,
A first device transmitting unit (25, 121) that transmits a barometric pressure signal that is a signal representing a barometric pressure detected by a barometric sensor included in the first device to a second device that is the other of the in-vehicle device and the portable device;
The second device is
A second device receiver (124, 21) for receiving the atmospheric pressure signal transmitted by the first device;
The atmospheric pressure comparison unit (S6) that determines whether the atmospheric pressure of the first device represented by the atmospheric pressure signal received by the second device reception unit is at the same level as the atmospheric pressure of the second device detected by the atmospheric pressure sensor included in the second device. , S6A, S33)
The permission unit determines that the atmospheric pressure comparison unit determines that the atmospheric pressure of the first device and the atmospheric pressure of the second device are at the same level, and permits the unlocking of the vehicle door based on the fact that the code verification is established. .

  According to this invention, both the in-vehicle device and the portable device include the atmospheric pressure sensor, and the first device transmits an atmospheric pressure signal, which is a signal representing the atmospheric pressure detected by the atmospheric pressure sensor included in the first device, to the second device. Accordingly, the second device can compare the atmospheric pressure of the first device with the atmospheric pressure of the second device. Therefore, the atmospheric pressure comparison unit included in the second device has the atmospheric pressure of the first device equal to that of the second device. It is judged whether it is the same level as the atmospheric pressure.

  Then, the permission unit permits unlocking of the vehicle door on the condition that not only the code verification is established but also that the pressure of the first device and the pressure of the second device are determined to be the same level.

  If code verification is established by the relay attack device, the portable device is located away from the in-vehicle device, typically the vehicle is in the garage of the house while the portable device is in the house . In addition to the fact that the house is often built higher than the garage, and because the house is under the floor, if the portable device is stored in the house, the portable device is higher than the in-vehicle device Often in position. On the other hand, when the user who has the portable device unlocks the door of the vehicle, the portable device and the vehicle-mounted device are at similar heights.

  Therefore, the permission unit allows not only the code verification to be established but also allows the unlocking on the condition that the pressure of the first device and the pressure of the second device are at the same level. It can suppress that the malicious third party establishes collation. Moreover, since the relay attack is suppressed using atmospheric pressure, it is not affected by the radio wave environment.

It is a figure explaining the composition of authentication system 3 for vehicles of a 1st embodiment. It is a figure which shows the structure of the vehicle-mounted collation unit 1 of FIG. It is a figure which shows the structure of the portable device 2 of FIG. It is a flowchart explaining the unlocking process which collation ECU14 of FIG. 2 performs. It is a flowchart which shows the process which the control part 26 of FIG. 3 performs. It is an example of the sequence diagram in case the lock | rock of the door of the vehicle 4 will be in an unlocked state. It is an example of a sequence diagram when a relay attack device RA is interposed. It is a flowchart which shows the process which collation ECU14 performs in place of FIG. 4 in 2nd Embodiment. It is a flowchart which shows the process which the control part 26 of the portable device 2 performs instead of FIG. 5 in 2nd Embodiment. In 2nd Embodiment, it is an example of the sequence diagram in case the lock | rock of the door of the vehicle 4 will be in an unlocked state. In 2nd Embodiment, it is an example of the sequence diagram when the relay attack apparatus RA intervenes. In 3rd Embodiment, it is a flowchart which shows the process which collation ECU14 performs instead of the process shown in FIG. FIG. 13 is a flowchart illustrating processing executed by the verification ECU 14 together with the processing illustrated in FIG. 12 in the third embodiment.

<First Embodiment>
Hereinafter, embodiments will be described with reference to the drawings. First, the first embodiment will be described. As shown in FIG. 1, the vehicle authentication system 3 is used in a vehicle 4 and includes an in-vehicle verification unit 1 corresponding to the in-vehicle device in the claims and a portable device 2 carried by the user. Moreover, in 1st Embodiment, the vehicle-mounted collation unit 1 functions as a 1st apparatus of a claim, and the portable device 2 functions as a 2nd apparatus of a claim.

  The vehicle authentication system 3 performs communication between the portable device 2 and the in-vehicle verification unit 1 without performing operation of the portable device 2 and performs code verification. It is a system that permits the operation of equipment. The predetermined in-vehicle device is determined by the condition for code verification. For example, when the unlock sensor 15 provided on the door of the vehicle 4 is operated, the predetermined in-vehicle device becomes a door lock mechanism, and the door unlock mechanism is operated. Lock is allowed. Further, when a start button provided in the vehicle interior is operated, the predetermined in-vehicle device becomes a prime mover such as an engine or a motor.

[Configuration of in-vehicle verification unit 1]
As shown in FIG. 2, the in-vehicle verification unit 1 includes a transmission signal generation unit 11, a communication unit 12, a reception data analysis unit 13, a verification ECU 14, an unlock sensor 15, a lock sensor 16, a push start button 17, and an atmospheric pressure sensor 18. Prepare.

  The transmission signal generation unit 11 generates a signal to be transmitted to the portable device 2. This signal is, for example, a request signal for requesting a response from the portable device 2. The signal generated by the transmission signal generation unit 11 is supplied to the communication unit 12.

  The communication unit 12 includes an LF transmission unit 121, a vehicle exterior antenna 122, a vehicle interior antenna 123, and an RF reception unit 124. The LF transmission unit 121 modulates a signal such as a request signal generated by the transmission signal generation unit 11 with a carrier wave in the LF band (for example, 135 kHz) and transmits the modulated signal from the outside antenna 122 or the in-vehicle antenna 123. Whether the signal is transmitted from either the vehicle exterior antenna 122 or the vehicle interior antenna 123 is determined by what trigger the transmission signal generation unit 11 generates a signal. For example, the outside antenna 122 is used when the unlock sensor 15 or the lock sensor 16 detects a user operation, and the inside antenna 123 is used when the push start button 17 is operated.

  The unlock sensor 15 is a sensor that is installed at or near the door handle of the vehicle 4 and is touched by the user when unlocking the door of the vehicle 4. The lock sensor 16 is a sensor that is installed at or near the door handle of the vehicle 4 and is touched by the user when the door of the vehicle 4 is locked. The push start button 17 is a button operated by the user when the drive source of the vehicle 4 is set to the drive state or the drive permission state, and is disposed in the vehicle compartment of the vehicle 4. The drive source of the vehicle 4 is, for example, one or both of an engine and a motor.

  The outside antenna 122 is provided in the door handle of the vehicle 4 and transmits radio waves to the outside of the vehicle 4. The vehicle interior antenna 123 is provided in a vehicle interior or the like and transmits radio waves to the inside of the vehicle 4.

  When a request signal is transmitted from the outside antenna 122 to the outside of the vehicle 4, the range in which the request signal can be received is about 1 m around the vehicle 4. When the portable device 2 receives the request signal, the portable device 2 returns a response signal using radio waves in the RF band.

  The RF receiver 124 receives and demodulates the signal transmitted by the portable device 2. In the first embodiment, the RF receiving unit 1224 corresponds to the second device receiving unit and the in-vehicle device receiving unit of the claims.

  The reception data analysis unit 13 analyzes the signal demodulated by the RF reception unit 124. Specifically, the demodulated signal is a signal transmitted by the portable device 2, and the signal includes an ID code, and whether or not the ID code matches a regular ID code ( That is, it is determined whether or not collation is established. Then, the determination result is output to the verification ECU 14.

  The verification ECU 14 is a computer including a CPU, a ROM, a RAM, and the like, and the CPU executes a program stored in a substantial recording medium such as a ROM while using a temporary storage function of the RAM. Thereby, collation ECU14 performs processing shown in Drawing 4 mentioned below. Since the process shown in FIG. 4 is a process when the unlock sensor 15 is turned on, it may be described as an unlock process below. When the lock sensor 16 is turned on, or when it is detected that the push start button 17 has been pressed, the verification ECU 14 executes a process different from the unlock process. Further, the verification ECU 14 may also execute processing executed by the transmission signal generation unit 11 and the reception data analysis unit 13.

  When the CPU executes the program, it means that a method corresponding to the program is executed. Further, a part or all of the functions executed by the verification ECU 14 may be configured in hardware by one or a plurality of ICs.

  The verification ECU 14 is connected to the door lock ECU 5 and the power supply ECU 6, and either unlock processing, processing when the lock sensor 16 is turned on, processing when detecting that the push start button 17 is pressed, or any processing. Also, code verification is performed.

  The door lock ECU 5 detects whether the door locking mechanism of the vehicle 4 is in a locked state or an unlocked state. Further, the lock motor and the unlock motor included in the lock mechanism are driven to switch the lock mechanism from the locked state to the unlocked state, or from the unlocked state to the locked state. The power supply ECU 6 transmits a start request signal to an ECU that controls a drive source such as an engine.

  When the code verification executed based on the lock sensor 16 being turned on is established, the verification ECU 14 outputs a signal instructing the door lock ECU 5 to lock the door lock mechanism of the vehicle 4. When the code collation executed based on the push start button 17 being pressed is established, the collation ECU 14 outputs a signal instructing the power source ECU 6 to start the drive source.

  The atmospheric pressure sensor 18 is fixed to the vehicle 4 and detects the atmospheric pressure at the place where the atmospheric pressure sensor 18 is fixed. The place where the atmospheric pressure sensor 18 is fixed is any part of the vehicle 4 and there is no other limitation as long as it is not a sealed space. For example, the atmospheric pressure sensor 18 is installed in a vehicle interior. Hereinafter, the atmospheric pressure detected by the atmospheric pressure sensor 18 fixed to the vehicle 4 is referred to as a vehicle atmospheric pressure Pc.

[Configuration of portable device 2]
As shown in FIG. 3, the portable device 2 includes an LF receiver 21, a received data analyzer 22, an atmospheric pressure sensor 23, a transmission signal generator 24, an RF transmitter 25, a controller 26, and a mechanical key 27. The configuration of the portable device 2 is the same as that of a known portable device that may be referred to as an electronic key or a smart key, except for the control using the atmospheric pressure sensor 23 and the atmospheric pressure sensor 23 of the control unit 26.

  The LF receiver 21 is configured to demodulate the request signal transmitted from the in-vehicle verification unit 1, receives the LF band radio wave, demodulates the radio wave, and extracts the request signal. The LF receiver 21 corresponds to the portable device receiver of the claims.

  The reception data analysis unit 22 analyzes the signal demodulated by the LF reception unit 21 and determines whether the signal is a request signal. If the request signal is determined, a signal indicating that the request signal has been received is output to the control unit 26.

  The atmospheric pressure sensor 23 is accommodated in the housing of the portable device 2 and detects the atmospheric pressure at the position where the atmospheric pressure sensor 23 exists. The atmospheric pressure detected by the atmospheric pressure sensor 23 means the atmospheric pressure at the position where the portable device 2 is present. When the atmospheric pressure sensor 23 is arranged to detect the atmospheric pressure inside the casing of the portable device 2, a hole for communicating the inside of the casing with the outside of the casing may be provided in the casing. Hereinafter, the atmospheric pressure detected by the atmospheric pressure sensor 23 is referred to as a key atmospheric pressure Pk.

  When the transmission signal generation unit 24 acquires a signal instructing generation of a transmission signal from the control unit 26, the transmission signal generation unit 24 generates a signal determined based on the instruction, and outputs the generated signal to the RF transmission unit 25. The signal to be generated is, for example, a response signal that is transmitted in response to the request signal. The response signal includes an ID code stored in advance and a key atmospheric pressure signal representing the key atmospheric pressure Pk detected by the atmospheric pressure sensor 23.

  The RF transmission unit 25 modulates a signal such as a request signal generated by the transmission signal generation unit 24 with an RF band carrier wave (for example, 315 MHz) and transmits the modulated signal. In the first embodiment, the RF transmitter 25 corresponds to the first device transmitter and the portable device transmitter of the claims.

  The control unit 26 is a computer including a CPU, a ROM, a RAM, and the like, and the CPU executes a program stored in a substantial recording medium such as a ROM while using a temporary storage function of the RAM. Thereby, the control part 26 performs the process shown in FIG. Note that some or all of the functions executed by the control unit 26 may be configured by hardware using one or a plurality of ICs.

  The mechanical key 27 is accommodated in the casing of the portable device 2 and can be taken out from the casing. The mechanical key 27 is inserted into a key cylinder provided on the door of the vehicle 4 and then rotated around the axis of the key cylinder, thereby bringing the door locking mechanism into an unlocked state or a locked state.

[Unlock processing]
Next, the unlocking process executed by the verification ECU 14 will be described with reference to FIG. The process shown in FIG. 4 is executed when power is supplied to the verification ECU 14. In step (hereinafter, step is omitted) S1, it is determined whether or not the unlock sensor 15 is turned on. If the determination in S1 is NO, the determination in S1 is repeated, and if YES, the process proceeds to S2.

  In S <b> 2, the transmission signal generation unit 11 is instructed to generate a request signal, and the generated request signal is transmitted from the vehicle exterior antenna 122. In S <b> 3, the vehicle pressure Pc is acquired from the pressure sensor 18.

  In S4, it is determined based on the analysis result by the reception data analysis unit 13 whether or not a response signal has been received. If this determination is NO, the determination in S4 is performed again. Although illustration is omitted, when a response signal is not received within a certain time, the processing in FIG. 4 is once ended and S1 is executed again. On the other hand, if the determination in S4 is YES, the process proceeds to S5.

  In S5, code verification is performed between the ID code included in the response signal and the ID code stored in advance in the in-vehicle verification unit 1, and it is determined whether verification is established. If the verification is not established, the process in FIG. 4 is terminated. When the process of FIG. 4 is completed, the process is executed again from S1.

  Further, even if the determination in S5 is YES, that is, it is determined that the code verification is established, in this embodiment, the door of the vehicle 4 is not unlocked by itself. In S6 executed when the determination in S5 is YES, the key atmospheric pressure Pk represented by the key atmospheric pressure signal included in the response signal is compared with the vehicle atmospheric pressure Pc acquired in S3, and both atmospheric pressures are determined. It is determined whether or not the level is the same. For example, the same level means that one of the vehicle atmospheric pressure Pc and the key atmospheric pressure Pk is used as a reference, and the other atmospheric pressure is within a certain ratio of the reference atmospheric pressure. The constant ratio is, for example, 90% to 110%. Another specific example of being at the same level is that the difference between the vehicle pressure Pc and the key pressure Pk is within a certain pressure. The constant ratio and the constant pressure are set in advance. S6 corresponds to an atmospheric pressure comparison unit in the claims.

  If the determination in S6 is YES, the process proceeds to S7. In S7, an unlock signal is output to the door lock ECU 5. The output of the unlock signal means that the lock of the door of the vehicle 4 is permitted to be unlocked, and S5 and S7 correspond to a permission unit in the claims.

  Upon receiving this unlock signal, the door lock ECU 5 controls the door lock mechanism to bring the lock mechanism into an unlocked state. On the other hand, if the determination in S6 is NO, the process in FIG. 4 ends without proceeding to S7. Therefore, in this embodiment, when it is determined that the vehicle pressure Pc and the key pressure Pk are not at the same level, the door of the vehicle 4 is not unlocked.

[Processing of the control unit 26 of the portable device 2]
Next, processing of the control unit 26 of the portable device 2 will be described with reference to FIG. The control unit 26 periodically executes the process shown in FIG. In S11, it is determined whether a request signal has been received. If this determination is NO, the process of FIG. 5 is terminated, and if YES, the process proceeds to S12.

  In S12, the key atmospheric pressure Pk is acquired from the atmospheric pressure sensor 23. This S12 is a process corresponding to the portable device pressure obtaining unit of the claims. S13 includes processing as a response signal generation unit in claims. The transmission signal generation unit 24 is instructed to generate a response signal including the ID code and the key atmospheric pressure Pk acquired in S12, and the RF transmission unit 25. To output. Thereby, a response signal is transmitted to the in-vehicle verification unit 1.

[Unlock sequence]
Next, a sequence when the door of the vehicle 4 is unlocked will be described with reference to FIG. In FIG. 6, the unlock sensor 15 is turned on at time t1. As a result, the verification ECU 14 determines YES in S1 and executes S2, and transmits a request signal at time t2. Subsequently, since S3 is executed, the vehicle pressure Pc is acquired at time t3.

  When the portable device 2 receives the request signal, the determination in S11 becomes YES and executes S12, and thus acquires the key atmospheric pressure Pk at time t4. Then, at time t5, a response signal is transmitted by executing S13.

  When the RF receiving unit 124 of the in-vehicle verification unit 1 receives the response signal, the determination in S4 becomes YES, so the process of S5 is executed from time t6 to determine whether verification is established. If collation is established, the key atmospheric pressure Pk and the vehicle atmospheric pressure Pc are compared in S6 to determine whether or not both atmospheric pressures are at the same level.

  When the unlock sensor 15 is turned on when the user who has the regular portable device 2 touches the unlock sensor 15, the portable device 2 and the vehicle 4 are at the same level. Therefore, it is determined that the key atmospheric pressure Pk and the vehicle atmospheric pressure Pc are at the same level. Of course, code verification is also established.

  Therefore, an unlock signal is output to the door lock ECU 5 as shown at time t7. When acquiring the unlock signal, the door lock ECU 5 drives the unlock motor at time t8. As a result, the door of the vehicle 4 is unlocked.

[Sequence when relay attack device RA is interposed]
Next, a sequence when the relay attack device RA is interposed will be described with reference to FIG. In FIG. 7, the unlock sensor 15 is turned on at time t11. Thereby, collation ECU14 transmits a request signal in time t12. Subsequently, since S3 is executed, the vehicle pressure Pc is acquired at time t15.

  In the example of FIG. 7, this request signal is received by the relay attack device RA. The relay attack device RA that has received the request signal transmits the request signal at time t13, and the portable device 2 receives the request signal.

  The portable device 2 that has received the request signal executes S12 at time t14 to acquire the key atmospheric pressure Pk. At time t16, a response signal including the key atmospheric pressure Pk is transmitted. The relay attack device RA receives the response signal. Then, at time t17, a response signal is transmitted. This response signal is received by the RF receiving unit 124 of the in-vehicle verification unit 1, and the verification ECU 14 acquires the response signal from the RF receiving unit 124 via the received data analysis unit 13.

  Therefore, code collation and atmospheric pressure comparison are performed at time t18. Although it is via the relay attack device RA, the ID code included in the request signal is a regular ID code. Therefore, code verification is established.

  However, since the relay attack device RA is a device used by a malicious third party, the portable device 2 is not located near the vehicle 4 in a situation where the relay attack device RA is used. Typically, in a situation where the relay attack device RA is used, the portable device 2 is in the house. In addition to the fact that the house is often built at a higher position than the garage, and because the house has an underfloor, when the portable device 2 is stored in the house, the portable device 2 is more than the vehicle 4. Are often in high positions.

  If the key atmospheric pressure Pk and the vehicle atmospheric pressure Pc are not at the same level due to the difference between the height at which the portable device 2 is placed and the height at which the vehicle 4 is parked, the determination in S6 is NO, so unlocking is performed. No signal is output. Thereby, it is suppressed by the relay attack apparatus RA that the lock | rock of the door of the vehicle 4 will be in an unlocked state illegally.

[Summary of First Embodiment]
As described above, in the first embodiment described above, both the in-vehicle verification unit 1 and the portable device 2 include the atmospheric pressure sensor 18, and the portable device 2 sends a response signal including the key atmospheric pressure signal indicating the key atmospheric pressure Pk to the in-vehicle verification unit. Send to 1. As a result, the in-vehicle verification unit 1 can compare the key atmospheric pressure Pk and the vehicle atmospheric pressure Pc, and in S6, determines whether the key atmospheric pressure Pk is at the same level as the vehicle atmospheric pressure Pc.

  The door of the vehicle 4 is allowed to be unlocked on condition that not only the code verification is established but also that the vehicle pressure Pc and the key pressure Pk are at the same level. As a result, when the portable device 2 is not at the same level as the vehicle 4, the door of the vehicle 4 is not unlocked, so that a malicious third party establishes a collation by the relay attack device RA. This can be suppressed. Moreover, since the relay attack is suppressed using atmospheric pressure, it is not affected by the radio wave environment.

  In the first embodiment, the request signal is the same as that of the prior art, and the response signal includes a key atmospheric pressure signal representing the key atmospheric pressure Pk. Since the response signal is transmitted by radio waves in the RF band, it is easier to increase the amount of data than a signal transmitted by radio waves in the LF band. Therefore, including the key atmospheric pressure signal in the response signal has an advantage that it is easy compared to the case where the request signal transmitted by the LF band radio wave includes the signal representing the vehicle atmospheric pressure Pc.

Second Embodiment
Next, a second embodiment will be described. In the following description of the second embodiment, elements having the same reference numerals as those used so far are the same as elements having the same reference numerals in the previous embodiments unless otherwise specified. Further, when only a part of the configuration is described, the above-described embodiment can be applied to the other parts of the configuration.

  The vehicular authentication system of the second embodiment has the same hardware configuration as that of the first embodiment, and the processing executed by the verification ECU 14 of the in-vehicle verification unit 1 and the processing executed by the control unit 26 of the portable device 2 are the first. This is different from the first embodiment.

  A specific difference is that in the first embodiment, the in-vehicle verification unit 1 compares the key atmospheric pressure Pk and the vehicle atmospheric pressure Pc, whereas in the second embodiment, the portable device 2 compares the key atmospheric pressure Pk and the vehicle atmospheric pressure. This is a point to compare Pc. Therefore, in 2nd Embodiment, the vehicle-mounted collation unit 1 functions as a 1st apparatus, and the portable device 2 functions as a 2nd apparatus.

[Processing of collation ECU 14]
In the second embodiment, the verification ECU 14 executes a process shown in FIG. 8 instead of the process shown in FIG. The process of S21 is the same as S1, and it is determined whether or not the unlock sensor 15 is turned on. If the determination in S21 is NO, the determination in S21 is repeated, and if the determination is YES, the process proceeds to S22.

  In S22, the vehicle pressure Pc is acquired from the pressure sensor 18. The process of S22 corresponds to the in-vehicle device atmospheric pressure acquisition unit in the claims. In S 23, the transmission signal generation unit 11 is instructed to generate a request signal, and the generated request signal is output to the LF transmission unit 121 and transmitted from the vehicle exterior antenna 122.

  The request signal generated in the second embodiment includes a vehicle pressure signal representing the vehicle pressure Pc acquired in S22. Therefore, in 2nd Embodiment, the LF transmission part 121 which transmits a request signal corresponds to a 1st apparatus transmission part and a vehicle-mounted apparatus transmission part, and the process of S23 corresponds to the request signal generation part of a claim. The transmission signal generation unit 11 may execute the process of S22.

  In S24, it is determined whether a response signal is received. If the response signal is not received within a certain time, the processing of FIG. 8 is once ended and S1 is executed again. On the other hand, if the determination in S24 is YES, the process proceeds to S25.

  In S25, the ID code included in the response signal is collated with the ID code stored in advance in the in-vehicle collation unit 1, and it is determined whether or not the collation is established. If the determination in S25 is NO, that is, if the collation is not established, the process in FIG. 8 is terminated. When the process of FIG. 8 is completed, the process is executed again from S1.

  If the determination in S25 is YES, that is, if it is determined that the code verification has been established, the process proceeds to S26, and an unlock signal is output to the door lock ECU 5. In the second embodiment, the portable device 2 does not transmit a response signal unless it is determined that the vehicle pressure Pc and the key pressure Pk are at the same level. That is, when the response signal is received, it is already determined that the vehicle pressure Pc and the key pressure Pk are at the same level.

  Therefore, when it is determined that the code verification is established, the vehicle pressure Pc and the key pressure Pk are at the same level, and the code verification is established. Therefore, if the verification ECU 14 determines that the code verification is established, the verification ECU 14 outputs an unlock signal to the door lock ECU 5 without determining whether the vehicle pressure Pc and the key pressure Pk are at the same level. To do. In the second embodiment, S25 and S26 correspond to a permission unit in the claims.

[Processing of the control unit 26 of the portable device 2]
In the second embodiment, the control unit 26 of the portable device 2 executes the process shown in FIG. 9 instead of FIG. In S31, it is determined whether or not the LF receiver 21 has received a request signal. If this determination is NO, the process of FIG. 9 is terminated, and if YES, the process proceeds to S32. In the second embodiment, the LF receiving unit 21 functions as a second device receiving unit and a portable device receiving unit.

  In S32, the key atmospheric pressure Pk is acquired from the atmospheric pressure sensor 23. This S32 is a process corresponding to the portable device pressure obtaining unit of the claims.

  In S33, it is determined whether or not the vehicle atmospheric pressure Pc represented by the vehicle atmospheric pressure signal included in the request signal and the key atmospheric pressure Pk acquired in S32 are at the same level. The determination of whether or not the level is the same is the same as in the first embodiment. The process of S33 is a process as an atmospheric pressure comparison unit.

  If judgment of S33 is YES, it will progress to S34. In S <b> 34, the transmission signal generation unit 24 is instructed to generate a response signal and output it to the RF transmission unit 25. As a result, a response signal is transmitted from the RF transmitter 25. In the second embodiment, the RF transmitter 25 corresponds to the portable device transmitter of the claims.

  Unlike the first embodiment, this response signal does not include the key atmospheric pressure Pk. This is because the portable device 2 has already determined whether or not the vehicle pressure Pc and the key pressure Pk are at the same level.

  If the determination in S33 is NO, the process of FIG. 9 ends without proceeding to S34. Therefore, when it is determined that the vehicle pressure Pc and the key pressure Pk are not at the same level, the response signal is not transmitted.

[Unlock sequence]
Next, a sequence when the door of the vehicle 4 is unlocked in the second embodiment will be described with reference to FIG. In FIG. 10, the unlock sensor 15 is turned on at time t21, whereby the verification ECU 14 executes S22, and thus acquires the vehicle pressure Pc at time t22. Subsequently, since S23 is executed, a request signal including a vehicle atmospheric pressure signal representing the vehicle atmospheric pressure Pc is transmitted at time t23.

  When the portable device 2 receives the request signal, the determination in S31 becomes YES and executes S32. Therefore, the key pressure Pk is acquired at time t24, and S33 is executed at time t25, so that the vehicle pressure Pc and the key pressure Pk are obtained. It is determined whether or not they are the same. When it is determined that the vehicle pressure Pc and the key pressure Pk are the same, S34 is executed at time t26 to generate and transmit a response signal.

  The verification ECU 14 that has received this response signal performs code verification at time t27. When this code verification is established, at time t28, S26 is executed to output an unlock signal to the door lock ECU 5. When acquiring the unlock signal, the door lock ECU 5 drives the unlock motor at time t29. As a result, the door of the vehicle 4 is unlocked.

[Sequence when relay attack device RA is interposed]
Next, a sequence when the relay attack device RA is interposed in the second embodiment will be described with reference to FIG. In FIG. 11, the unlock sensor 15 is turned on at time t31. Thereby, collation ECU14 acquires vehicle pressure Pc at time t32, and transmits a request signal containing vehicle pressure signal showing vehicle pressure Pc at time t33.

  In the example of FIG. 11, this request signal is received by the relay attack device RA. The relay attack device RA that has received the request signal transmits the request signal at time t34, and the portable device 2 receives the request signal.

  The portable device 2 that has received the request signal executes S32 at time t35 to acquire the key atmospheric pressure Pk. Then, at time t36, it is determined whether or not the vehicle atmospheric pressure Pc included in the request signal and the key atmospheric pressure Pk acquired at time t35 are at the same level. When a request signal is transmitted via the relay attack device RA, the height at which the vehicle 4 is parked and the height at which the portable device 2 is placed are often not the same level. If the key pressure Pk and the vehicle pressure Pc are not at the same level due to the difference between the height at which the portable device 2 is placed and the height at which the vehicle 4 is parked, the determination in S33 is NO, so the response signal Is not output.

[Summary of Second Embodiment]
In the second embodiment, the in-vehicle verification unit 1 transmits the vehicle pressure Pc, and the portable device 2 compares the key pressure Pk and the vehicle pressure Pc. Even if it does in this way, when the key atmospheric pressure Pk and the vehicle atmospheric pressure Pc are not at the same level, it is the same as the first embodiment in that the door of the vehicle 4 is not unlocked. Therefore, also in 2nd Embodiment, the lock of the door of the vehicle 4 will be prevented from being in an unlocked state by the relay attack device RA.

<Third Embodiment>
In the third embodiment, the verification ECU 14 executes a process shown in FIG. 13 instead of the process shown in FIG. Moreover, the process shown in FIG. 12 is also performed. FIG. 12 is periodically executed when power is supplied to the verification ECU 14.

  In FIG. 12, in S41, it is determined whether or not the push start button 17 has been pressed. If this determination is NO, the process of FIG. 12 is terminated. If judgment of S41 is YES, it will progress to S42.

  In S42, the transmission signal generation unit 11 is instructed to generate a request signal, and the generated request signal is transmitted from the in-vehicle antenna 123. When the portable device 2 receives this request signal, the process of FIG. 5 is executed and a response signal is transmitted as in the first embodiment. Therefore, the response signal includes a key atmospheric pressure signal representing the key atmospheric pressure Pk.

  In S43, it is determined whether a response signal has been received. If this determination is NO, the determination in S43 is performed again. If the response signal is not received within a certain time, the processing in FIG. 12 is terminated. If the determination in S43 is YES, the process proceeds to S44.

  In S44, it is determined whether or not code verification is established. When it is determined that the code verification is established, the code verification is established in the vehicle interior, that is, the portable device 2 exists in the vehicle interior. If judgment of S44 is YES, it will progress to S45, and if it is NO, the process of FIG. 12 will be complete | finished. In S45, a signal instructing start of the drive source is output to the power supply ECU 6.

  In subsequent S46, the vehicle pressure Pc is acquired from the pressure sensor 18. In S47, a pressure difference ΔP between the vehicle pressure Pc acquired in S46 and the key pressure Pk represented by the key pressure signal included in the response signal is calculated and stored in a predetermined memory. This atmospheric pressure difference ΔP is, for example, Pc−Pk, and is a correction value used in S5A of FIG. S47 corresponds to a correction value determination unit in claims. If the atmospheric pressure difference ΔP is already stored in the memory, the value of the atmospheric pressure difference ΔP stored in the memory is updated to a newly calculated value.

  Next, FIG. 13 will be described. In FIG. 13, S1 to S5 are the same as FIG. If it is determined in S5 that collation is established, the process proceeds to S5A. In S5A, the atmospheric pressure is corrected. In the atmospheric pressure correction, a predetermined side of the key atmospheric pressure Pk and the vehicle atmospheric pressure Pc is corrected using the atmospheric pressure difference ΔP stored in the memory. The correction calculation is, for example, Pc−ΔP. By performing this correction, the difference between the vehicle atmospheric pressure Pc and the key atmospheric pressure Pk caused by the individual difference between the atmospheric pressure sensor 18 and the atmospheric pressure sensor 23 can be reduced. If the atmospheric pressure difference ΔP is not stored in the memory, the process proceeds to S6A without performing atmospheric pressure correction.

  In S6A, one of the key atmospheric pressure Pk and the vehicle atmospheric pressure Pc uses the atmospheric pressure corrected in S5A to determine whether the vehicle atmospheric pressure Pc and the key atmospheric pressure Pk are at the same level. The process of S6A is the same as S6 except that the atmospheric pressure corrected in S5A is used.

  If the determination in S6A is YES, the process proceeds to S7 as in the first embodiment. On the other hand, the determination in S6A proceeds to S8. In S8, it is determined whether or not the mechanical key 27 is unlocked within a predetermined time. For a certain period of time, after the user carrying the portable device 2 notices that the door lock of the vehicle 4 is not unlocked despite touching the unlock sensor 15, the mechanical key 27 unlocks the door. It is set assuming the time required to lock. Specifically, the fixed time is, for example, about 1 minute. If this determination is NO, the process of FIG. 13 is terminated as it is.

  On the other hand, if judgment of S8 is YES, it will progress to S9. S9 corresponds to a determination criterion update unit in the claims, and relaxes the criterion for determining the same level as before. For example, a constant ratio or a constant pressure that is determined to be the same level is increased by a predetermined value than before. When S9 is executed, the processing in FIG. 13 is terminated.

[Summary of Third Embodiment]
In the third embodiment, when it is determined in S44 that the code verification is established in the vehicle interior, the vehicle pressure Pc is acquired in S46, and the key pressure Pk represented by the key pressure signal included in the response signal is determined in S47. Is calculated. When it is determined that the code verification is established in the vehicle interior, the relay attack device RA is not interposed, and there is a high possibility that the portable device 2 actually exists in the vehicle interior. In the present embodiment, the atmospheric pressure difference ΔP is calculated and stored in the memory at this time.

  When comparing the vehicle pressure Pc with the key pressure Pk in S6A, S5A is executed to correct a predetermined side of the vehicle pressure Pc and the key pressure Pk with the pressure difference ΔP stored in the memory. To do. Thereby, the atmospheric pressure of the vehicle 4 and the atmospheric pressure of the portable device 2 can be compared more accurately.

  Further, in this embodiment, when the key pressure Pk and the vehicle pressure Pc are determined not to be at the same level and then unlocked by the mechanical key 27, the determination criterion for determining the same level is more relaxed than before. To do.

  When unlocked by the mechanical key 27, it is not unlocked by the relay attack device RA. As a situation where the mechanical key 27 is unlocked, it is determined that the key atmospheric pressure Pk and the vehicle atmospheric pressure Pc are not at the same level even though the authorized portable device 2 is used. A situation where the vehicle is unlocked at 27 is conceivable. Therefore, in the present embodiment, when the mechanical key 27 is unlocked, the criterion for determining the same level is relaxed more than before. As a result, it is possible to reduce the situation where the unlock signal is not output even though the regular portable device 2 is used.

  As mentioned above, although embodiment of this invention was described, this invention is not limited to the above-mentioned embodiment, The following modification is also contained in the technical scope of this invention, Furthermore, the summary other than the following is also included. Various modifications can be made without departing from the scope.

<Modification 1>
In the third embodiment, the verification ECU 14 calculates the atmospheric pressure difference ΔP and corrects the atmospheric pressure. And collation ECU14 also performed the atmospheric pressure comparison. However, as in the fourth embodiment, when the portable device 2 performs the atmospheric pressure comparison, the control unit 26 of the portable device 2 may perform the calculation of the atmospheric pressure difference ΔP and the atmospheric pressure correction.

<Modification 2>
Even when the verification ECU 14 performs the atmospheric pressure comparison, the control unit 26 of the portable device 2 may perform the calculation of the atmospheric pressure difference ΔP and the atmospheric pressure correction. In this case, the vehicle pressure Pc is transmitted to the portable device 2 when the vehicle interior verification is established. Further, when the control unit 26 of the portable device 2 performs the atmospheric pressure comparison, the verification ECU 14 may perform the calculation of the atmospheric pressure difference ΔP and the atmospheric pressure correction.

<Modification 3>
In the first embodiment, after determining whether or not the code verification is established, it is determined whether or not the vehicle pressure Pc and the key pressure Pk are at the same level, but first, the vehicle pressure Pc and the key pressure are determined. It may be determined whether or not the atmospheric pressure Pk is at the same level.

<Modification 4>
In the third embodiment, the correction value is calculated when code verification is established in the passenger compartment after the push start button 17 is pressed. However, the correction value may be calculated at other timing when code verification is established in the passenger compartment. For example, the request signal may be transmitted from the vehicle interior antenna 123 even when the door of the vehicle 4 is opened. In this case, the correction value may be calculated when code verification is established in the passenger compartment after the door of the vehicle 4 is opened.

<Modification 5>
In the above embodiment, the response signal and the request signal are transmitted by including the atmospheric pressure signal. However, the atmospheric pressure signal may be transmitted as a signal independent of the response signal and the request signal.

1: vehicle verification unit 2: portable device 3: vehicle authentication system 4: vehicle 5: door lock ECU 6: power supply ECU 11: transmission signal generation unit 12: communication unit 13: received data analysis unit 14: verification ECU 15: un Lock sensor 16: Lock sensor 17: Push start button 18: Barometric pressure sensor 21: LF receiver 22: Received data analyzer 23: Barometric pressure sensor 24: Transmission signal generator 25: RF transmitter 26: Controller 27: Mechanical key 121 : LF transmitter 122: Outside antenna 123: In-vehicle antenna 124: RF receiver 1224: RF receiver

Claims (6)

An on-vehicle device (1) used in the vehicle (4) for transmitting a request signal for requesting transmission of an ID code for code verification by wireless communication;
A portable device (2) that, when carried by a user and receives the request signal, transmits a response signal containing the ID code;
The in-vehicle device is configured to permit the unlocking of the vehicle door based on the fact that the code verification using the ID code included in the response signal transmitted from the portable device is established (S5, S7). , S25, S26), a vehicle authentication system comprising:
Each of the in-vehicle device and the portable device includes an atmospheric pressure sensor (18, 23),
The first device, which is one of the in-vehicle device and the portable device,
A first device transmission unit (25, 121) for transmitting a barometric pressure signal, which is a signal representing a barometric pressure detected by the barometric sensor included in the first device, to a second device that is the other of the in-vehicle device and the portable device; Prepared,
The second device includes:
A second device receiver (124, 21) for receiving the atmospheric pressure signal transmitted by the first device;
It is determined whether or not the atmospheric pressure of the first device represented by the atmospheric pressure signal received by the second device receiving unit is the same level as the atmospheric pressure of the second device detected by the atmospheric pressure sensor included in the second device. An atmospheric pressure comparison unit (S6, S6A, S33),
The permission unit determines that the atmospheric pressure comparison unit determines that the atmospheric pressure of the first device and the atmospheric pressure of the second device are at the same level, and that the code verification is established, the door of the vehicle Authentication system for vehicles that allows unlocking. In claim 1,
The portable device is the first device, and the in-vehicle device is the second device;
The portable device is
A portable receiver (21) for receiving the request signal;
Based on the fact that the portable device receiver has received the request signal, a portable device pressure acquisition unit (S12) that acquires the pressure of the portable device from the pressure sensor provided in the portable device;
A response signal generation unit (S13) that generates the response signal including the atmospheric pressure signal representing the atmospheric pressure acquired by the portable device atmospheric pressure acquisition unit;
And as said 1st apparatus transmission part, the portable machine transmission part (25) which transmits the said response signal is provided,
The vehicle-mounted device includes a vehicle-mounted device receiving unit (124) that receives the response signal as the second device receiving unit. In claim 1,
The in-vehicle device is the first device, and the portable device is the second device;
The in-vehicle device is
An in-vehicle device atmospheric pressure acquisition unit (S22) for acquiring an atmospheric pressure from the atmospheric pressure sensor included in the in-vehicle device;
A request signal generation unit (S23) that generates the request signal including the atmospheric pressure signal representing the atmospheric pressure acquired by the in-vehicle device atmospheric pressure acquisition unit;
And as said 1st apparatus transmission part, the vehicle-mounted apparatus transmission part (121) which transmits the said request signal is provided,
The portable device is
A portable device receiver (21) for receiving the request signal as the second device receiver; and
Based on the fact that the portable device receiving unit has received the request signal, a portable device pressure obtaining unit (S32) that obtains the atmospheric pressure from the atmospheric pressure sensor included in the portable device;
The atmospheric pressure of the in-vehicle device, which is the atmospheric pressure of the first device, and the atmospheric pressure of the portable device acquired by the portable device atmospheric pressure acquisition unit, which is the atmospheric pressure of the second device, are the same level. An authentication system for vehicles provided with a portable machine transmission part (25) which transmits the response signal based on having judged. In any one of Claims 1-3,
When the code verification is established in the interior of the vehicle, the atmospheric pressure of the first device detected by the atmospheric pressure sensor provided in the first device and the second atmospheric pressure detected by the atmospheric pressure sensor provided in the second device. A correction value determining unit (S47) for determining a correction value based on the difference in pressure of the apparatus;
The atmospheric pressure comparison unit (S6A) corrects the atmospheric pressure on the predetermined side of the atmospheric pressure of the first device and the atmospheric pressure of the second device based on the correction value determined by the correction value determination unit, A vehicle authentication system for making the determination. In claim 4,
The vehicle authentication system, wherein the second device includes the correction value determination unit. In any one of Claims 1-5,
The portable device includes a mechanical key (27) that is inserted into a key cylinder provided in a door of the vehicle and unlocks the door,
In the second device, the permission unit determines that the code verification is successful, but the pressure of the first device and the pressure of the second device are not at the same level, and permits the unlocking of the door of the vehicle. After that, a vehicle provided with a judgment reference updating unit (S9) that relaxes the standard for judging that the door is at the same level on the basis of the unlocking of the door by the mechanical key within a predetermined time. Authentication system.

Images