JP2018141263A - Keyless entry system for vehicle - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent illegal unlocking of a vehicle door and to improve security.SOLUTION: A keyless system K has a portable machine 10 and an on-vehicle machine 20. The portable machine 10 includes: a storage part 103 for storing counter codes A, B; an RF transmission part 105 for transmitting an operation signal including the counter codes A, B; and an update part 102 for updating the portable machine side counter code A after transmitting the operation signal of locking or unlocking of a vehicle. The on-vehicle machine 20 includes: a storage part 204 for storing counter codes C, D; and an update part 203 which, in the case where the counter codes A, B which the operation signal includes are collated with the counter codes C, D, updates the on-vehicle side counter code C. In passive communication between the portable machine 10 and the on-vehicle machine 20, the update part 102 and the update part 203 update the portable machine side counter code B and the on-vehicle side counter code D.SELECTED DRAWING: Figure 5

Description

  The present invention relates to a vehicle keyless entry system.

  The vehicle keyless entry system includes a portable device possessed by a user of the vehicle and an in-vehicle device mounted on the vehicle. When the user presses the operation button on the portable device, the portable device transmits an operation signal to the portable device. The in-vehicle device that has received the operation signal locks or unlocks the vehicle door. The operation signal includes an ID code. The in-vehicle device collates whether the ID code included in the operation signal matches the ID code assigned to the portable device. As a result, the vehicle door can be locked and unlocked only by the portable device possessed by the user.

  However, if a relay device that can intercept operation signals is used, even a third party can unlock the door illegally. In order to prevent such an unauthorized unlocking by a third party, a vehicular keyless entry system uses a counter code (also referred to as a rolling code) that varies in response to transmission of an operation signal.

  Specifically, each of the portable device and the in-vehicle device holds a portable device-side counter code and an in-vehicle device-side counter code. The portable device updates the counter code after transmitting the portable device-side counter code included in the operation signal. The in-vehicle device that has received the operation signal compares the portable device side counter code included in the operation signal with the in-vehicle device side counter code, and if the operation signal is recognized as being from the portable device as a comparison result, Locking or unlocking is performed, and the in-vehicle device side counter code is updated (for example, see Patent Document 1). Even if the operation signal intercepted by the relay device is transmitted to the in-vehicle device later, the in-vehicle device side counter code has already been updated, so the door of the vehicle is not unlocked.

JP 2007-224663 A

  However, a repeater called Rolljam has been developed. Rolljam performs unauthorized unlocking by intercepting operation signals multiple times while generating jamming radio waves. Specifically, when the user presses the operation button of the portable device, Rolljam intercepts the operation signal transmitted from the portable device and simultaneously generates jamming radio waves. The operation signal does not reach the in-vehicle device due to the interference wave, and the vehicle door is not unlocked. Since the door of the vehicle has not been unlocked, the user presses the operation button of the portable device again. Thereby, the portable device transmits a second operation signal. Rolljam also intercepts the second operation signal. Although the second operation signal does not reach the in-vehicle device due to the generation of jamming waves, Rolljam immediately sends the first operation signal intercepted first to the in-vehicle device.

  Since neither the first operation signal nor the second operation signal has reached the in-vehicle device, the in-vehicle device side counter code is not updated. Therefore, the vehicle door is unlocked by the first operation signal sent by Rolljam. It seems to the user that the door is unlocked by pressing the operation button for the second time. Therefore, the user thinks that the door was not unlocked in the first operation only because the communication state was temporarily bad, and does not notice the presence of the repeater. Thereafter, when the user leaves the vehicle, the third party can unlock the door by transmitting the second operation signal stored from Rolljam to the in-vehicle device. That is, by using Rolljam, there is a risk that illegal acts such as vehicle theft will be carried out.

  In a keyless entry system for vehicles, it is required to prevent fraud by Rolljam and improve security.

The present invention includes a portable device carried by a user;
A vehicle-less keyless entry system having an in-vehicle device mounted on a vehicle and performing communication control with the portable device and controlling operation of the in-vehicle equipment,
The portable device is
An operation unit for accepting an operation request for locking or unlocking the vehicle by a user;
A portable device storage unit for storing the first and second counter codes on the portable device side;
When the operation unit accepts the operation request, a portable device transmission unit that transmits an operation signal including first and second counter codes on the portable device side to the in-vehicle device;
A portable device updating unit that updates the first counter code on the portable device side when transmitting the operation signal,
The in-vehicle device is
An in-vehicle device storage unit for storing the first and second counter codes on the in-vehicle device side;
A collation unit that collates the first and second counter codes on the portable device side included in the operation signal with the first and second counter codes on the vehicle unit stored in the vehicle unit storage unit;
When verification of the verification unit is established, a control unit that controls the operation of locking or unlocking the door of the vehicle;
When the collation of the collation unit is established, the in-vehicle device update unit that updates the first counter code on the on-vehicle device side;
An in-vehicle device transmission unit that transmits a response request signal to the portable device during a predetermined operation of the vehicle;
With
In the passive communication between the portable device and the in-vehicle device that is started by the transmission of the response request signal, the portable device updating unit and the in-vehicle device updating unit are respectively a second counter code on the portable device side and the in-vehicle device. The second counter code on the machine side is updated.

  ADVANTAGE OF THE INVENTION According to this invention, the fraudulent act with respect to the vehicle of the third party using Rolljam can be prevented, and security can be improved.

It is a figure showing the schematic structure of the keyless entry system for vehicles concerning an embodiment. It is a block diagram which shows the structure of a portable device. It is a schematic diagram which shows the structure of an operation signal. It is a block diagram which shows the structure of a vehicle equipment. It is a flowchart which shows the outline of a process of the keyless entry system for vehicles which concerns on embodiment. (A) is a flowchart which shows the process of the portable device in a RKE process, (b) is a flowchart which shows the process of the vehicle equipment in a RKE process. (A) is a flowchart which shows the process of the portable device in passive communication, (b) is a flowchart which shows the process of the vehicle equipment in passive communication. It is a figure which shows the example which applied the keyless entry system for vehicles which concerns on embodiment to the scene where the third party who tries the fraudulent act to a vehicle exists. It is a sequence chart which shows communication of the portable device in a comparative example, vehicle equipment, and Rolljam. It is a sequence chart which shows the communication of the portable device, vehicle equipment, and Rolljam in an application example. (A) is a flowchart which shows the process of the portable device in the passive communication of the modification 1, (b) is a flowchart which shows the process of the vehicle equipment in the passive communication of the modification 1. 10 is a flowchart illustrating processing of a portable device in passive communication according to Modification 3. 10 is a flowchart illustrating processing of an in-vehicle device in passive communication according to Modification 3; It is a block diagram which shows the structure of the portable device of the modification 4.

Hereinafter, a keyless entry system for a vehicle according to an embodiment of the present invention will be described with reference to the drawings.
FIG. 1 is a block diagram showing a configuration of a vehicle keyless entry system (hereinafter referred to as a keyless system K) according to an embodiment of the present invention.

[Keyless system]
As shown in FIG. 1, the keyless system K includes a portable device 10 and an in-vehicle device 20. The portable device 10 is carried by a user of the vehicle and can be carried inside and outside the vehicle. The in-vehicle device 20 is disposed inside the vehicle. In the keyless system K, the portable device 10 communicates with the in-vehicle device 20 in response to a user operation request. Based on the communication result between the portable device 10 and the vehicle-mounted device 20, the vehicle-mounted device 20 locks or unlocks the door of the vehicle. This door locking / unlocking process is hereinafter referred to as RKE (Remote Keyless Entry) process. The in-vehicle device 20 is connected to various in-vehicle equipment other than the door actuator, and also controls the operation of the in-vehicle equipment. The in-vehicle device 20 communicates with the portable device 10 to confirm the location of the portable device 10 when the vehicle performs a predetermined operation in addition to locking and unlocking the door. Communication between the portable device 10 and the in-vehicle device 20 for confirming the location of the portable device 10 is referred to as passive communication. The predetermined operation of the vehicle means the operation of the on-vehicle equipment and the opening / closing operation of the vehicle door.

[Portable machine]
A lock button 11 and an unlock button 12 are provided on one surface of the casing of the portable device 10. The lock button 11 and the unlock button 12 function as an operation unit that receives a user operation request. When the user presses the lock button 11 or the unlock button 12, an operation request for locking or unlocking is input to the portable device 10, and the portable device 10 and the vehicle-mounted device 20 start the RKE process.

FIG. 2 is a block diagram illustrating a configuration of the portable device.
As shown in FIG. 2, the portable device 10 includes a CPU (central processing unit) 100, a storage unit 103 (portable device storage unit), an LF receiver 104, an RF transmitter 105, and an input I / F 106. CPU100 is provided with the control part 101 and the update part 102 (mobile device update part) as a function structure. The storage unit 103 includes an information storage medium such as a flash memory and a ROM (read-only memory) which are nonvolatile memories, and a RAM (random-access memory) which is a volatile memory. The CPU and the information storage medium are installed inside the casing of the portable device 10. The storage unit 103 stores a control program for the portable device 10. The CPU 100 reads out and executes the control program stored in the storage unit 103, thereby realizing the functional configuration described above. Although not specifically described, each unit of the CPU 100 temporarily stores a processing result in the storage unit 103, reads necessary data and a processing target from the storage unit 103, and resets the temporarily stored data after the processing is completed.

  The storage unit 103 also stores various information necessary for communication with the in-vehicle device 20. In the embodiment of the present invention, the storage unit 103 includes, for example, an ID code, a function code, a portable device side counter code A (first counter code on the portable device side), and a portable device side counter code B (on the portable device side). Second counter code), reference value A, reference value B, counter value A, counter value B, keys for encryption and decryption, and the like. These pieces of information will be described in detail together with descriptions of each part of the portable device 10.

The input I / F 106 is connected to the lock button 11 and the unlock button 12. When the user presses the lock button 11, the input I / F 106 inputs an operation request for locking the vehicle to the control unit 101. When the user presses the unlock button 12, the input I / F 106 inputs an operation request for unlocking the vehicle to the control unit 101.
Note that the lock button 11 and the unlock button 12 do not necessarily need to be configured as separate buttons, and may be configured as an integral button. In that case, for example, the control unit 101 may determine an operation request for unlocking and locking according to the number of times the button is pressed. Specifically, for example, the control unit 101 may determine that the request is an unlocking operation request when the number of times the button is pressed is an odd number, and the locking operation request is when the number of button presses is an even number. .

  The LF receiving unit 104 is connected to the LF receiving antenna 104a. The LF reception antenna 104a receives the LF signal transmitted by the in-vehicle device 20. The LF receiving unit 104 inputs the received LF signal to the control unit 101.

The control unit 101 controls the overall operation of the portable device 10. As will be described in detail later, the control unit 101 generates a command to be input to each unit of the portable device 10 and a signal to be transmitted to the in-vehicle device 20 in accordance with inputs from the LF receiving unit 104 and the input I / F 106. Do.
When the input I / F 106 inputs an operation request, the control unit 101 generates an operation signal to be transmitted to the in-vehicle device 20 as an operation signal generation unit.
FIG. 3 is a schematic diagram showing the configuration of the operation signal. As shown in FIG. 3, the operation signal includes a portable device counter code A, a function code, and an ID code.
The ID code is a unique identification code given to the portable device 10 possessed by the user.
The function code is a code that defines the content of the operation instructed to the in-vehicle device 20. In the example of the embodiment, in order to instruct the vehicle-mounted device 20 to lock and unlock the door of the vehicle, unique function codes are assigned to the locking and unlocking, respectively.
The portable device side counter code A is a code obtained by encrypting a reference value A added with a counter value A using a key. The portable device side counter code B is a code obtained by encrypting a fixed reference value B with the counter value B added thereto using a key. By counting up the counter values A and B, the counter codes A and B on the portable device side are also counted up and updated. Separate reference values A and B and counter values A and B are provided for the portable device side counter codes A and B, respectively. The counter values A and B are both set to 1, for example, in the initial state, but are counted up at different timings. That is, the portable device side counter codes A and B are counted up and updated at different timings. The portable device side counter code A is updated when the operation signal is transmitted, that is, when the RKE process is performed. The portable device side counter code B is updated during passive communication.

  When the input I / F 106 inputs an operation request for locking or unlocking, the control unit 101 acquires the corresponding function code, ID code, and portable device side counter codes A and B from the storage unit 103, and performs operations. Generate a signal. The control unit 101 outputs the generated operation signal to the RF transmission unit 105. After outputting the operation signal, the control unit 101 generates an update command for instructing update of the portable device side counter code A and outputs the update command to the update unit 102.

  The RF transmission unit 105 is connected to an RF transmission antenna 105 b for transmitting a signal to the portable device 10. The RF transmission unit 105 modulates the operation signal input by the control unit 101 and transmits it to the in-vehicle device 20 as an RF signal.

When the control unit 101 inputs an update command, the update unit 102 updates the mobile device side counter code A by counting it up. As a specific process, the update unit 102 first acquires the counter value A from the storage unit 103 and increments it. For example, the updating unit 102 increments the counter value A, which was 1 in the initial state, to 2. The updating unit 102 overwrites the existing counter value A with the counted up counter value A. Further, the updating unit 102 encrypts a value obtained by adding the overwritten counter value A to the reference value A using a key, and generates a new portable device side counter code A. As a result of counting up the counter value A, the newly generated portable device side counter code A is a result of counting up the existing portable device side counter code A as a result. That is, in the present embodiment, updating of the portable device side counter code A means a count-up process of the portable device side counter code A. The update unit 102 stores the newly generated portable device side counter code A in the storage unit 103 in the form of overwriting the existing portable device side counter code A.
Here, the case where the control unit 101 outputs the update command to the update unit 102 after outputting the operation signal has been described, but the update command may be output before the operation signal is output. That is, the update of the portable device side counter code A may be performed at the time of transmission of the operation signal, and it does not matter before and after the transmission of the operation signal.

  The processing of the control unit 101 when the LF receiving unit 104 inputs an LF signal to the control unit 101 differs depending on the type of the LF signal. The LF signal transmitted by the in-vehicle device 20 includes a response request signal and an authentication signal. Although details will be described later together with the description of the in-vehicle device 20, the in-vehicle device 20 transmits a response request signal and an authentication signal in the passive communication described above.

  Passive communication starts when a response request signal is transmitted from the in-vehicle device 20, and is established when the portable device 10 receives an authentication signal from the in-vehicle device 20. The response request signal is a content for requesting the portable device 10 to transmit a response signal. The authentication signal is a signal for notifying that the response signal transmitted by the portable device 10 has been authenticated. In the embodiment of the present invention, the authentication signal includes a counter code update request (hereinafter also simply referred to as “update request”). The update request is a request for causing the update unit 102 of the mobile device 10 to update the mobile device side counter code B. Similar to the updating of the portable device side counter code A, the updating of the portable device side counter code B is a count-up process of the portable device side counter code B. Therefore, the update request is specifically a count-up request that causes the update unit 102 of the portable device 10 to perform the count-up process of the portable device-side counter code B.

  When the LF receiving unit 104 receives a response request signal, the control unit 101 acquires an ID code from the storage unit 103 and generates a response signal including the ID code. The control unit 101 outputs the generated response signal to the RF transmission unit 105. The RF transmitter 105 modulates the response signal and transmits it to the in-vehicle device 20 as an RF signal.

  When the LF reception unit 104 receives an authentication signal including an update request, the control unit 101 generates an update command and outputs the update command to the update unit 102 in the same manner as after the operation signal is output. The update unit 102 performs the same process as the update of the mobile device side counter code A to update the mobile device side counter code B. Specifically, the update unit 102 acquires the counter value B from the storage unit 103, for example, increments the counter value B that was 1 in the initial state to 2, and uses the counted up counter value B as an existing value. The counter value B is overwritten. Further, the update unit 102 encrypts a value obtained by adding the counter value B overwritten on the reference value B using a key, and generates a new portable device side counter code B. The update unit 102 overwrites the portable device counter code B stored in the storage unit 103 with the newly generated portable device counter code B.

  When the update of the portable device side counter code B by the update unit 102 is completed, the control unit 101 generates an update completion notification and inputs it to the RF transmission unit 105. The RF transmission unit 105 modulates the update completion notification into an RF signal, and transmits the RF signal to the in-vehicle device 20 via the RF transmission antenna 105b.

[In-vehicle device]
FIG. 4 is a block diagram showing the configuration of the in-vehicle device.
As shown in FIG. 4, the in-vehicle device 20 includes a CPU 200, a storage unit 204 (on-vehicle device storage unit), an RF reception unit 205, an input I / F 206, an LF transmission unit 209, a door lock I / F 210, a horn I / F 211, A hazard I / F 212 and a communication I / F 213 are provided. CPU200 is provided with the control part 201, the collation part 202, and the update part 203 (vehicle equipment update part) as a function structure. The control part 201, the collation part 202, and the update part 203 are comprised including CPU, a timer, etc. which are arithmetic devices. The storage unit 204 is configured by an information storage medium such as a flash memory and a ROM that are nonvolatile memories, and a RAM that is a volatile memory. The storage unit 204 stores a control program for the in-vehicle device 20. The CPU 200 reads and executes the control program stored in the storage unit 204, thereby realizing the functional configuration described above. Although not particularly described, each unit of the CPU 200 temporarily stores the processing result in the storage unit 204, reads out necessary data and a processing target from the storage unit 204, and resets the temporarily stored data after the processing is completed.

  The storage unit 204 also stores information necessary for communication with the portable device 10 and information necessary for controlling the on-vehicle equipment. In the embodiment of the present invention, the storage unit 204 includes, for example, an ID code, a function code, an on-vehicle device side counter code C (first counter code on the on-vehicle device side), an on-vehicle device side counter code D (on-vehicle device side). The second counter code) stores a reference value C, a reference value D, a counter value C, a counter value D, a key for encryption and decryption, and the like. The ID code, function code, and encryption / decryption key are the same as those stored in the storage unit 103 of the portable device 10.

  The counter value C is set to be smaller than the counter value A stored in the storage unit 103 of the portable device 10. In the initial state, for example, the counter value C is set to 0. The counter value D is set to be the same number as the counter value B stored in the storage unit 103 of the portable device 10. In the initial state, for example, the counter D value is set to 1.

  The on-vehicle device side counter code C is a code obtained by encrypting a reference value C added with a counter value C using a key. The in-vehicle device side counter code D is a code obtained by encrypting a reference value D added with a counter value D using a key. The reference value C of the in-vehicle device 20 is the same as the reference value A of the portable device 10, and the in-vehicle device side counter code C is paired with the portable device side counter code A. The reference value D of the in-vehicle device 20 is the same as the reference value B of the portable device 10, and the in-vehicle device side counter code D is paired with the portable device side counter code B.

  When the counter values C and D are counted up, the on-vehicle device side counter codes C and D are also counted up. The counter value C of the in-vehicle device 20 is set to be smaller than the counter value A of the portable device 10. Therefore, the in-vehicle device side counter code C is smaller than the portable device side counter code A. On the other hand, the counter value C of the in-vehicle device 20 is set to be the same number as the counter value B of the portable device 10. Therefore, the in-vehicle device side counter code D is the same number as the portable device side counter code B.

  The setting of the number of counter values A, B, C, and D described here is merely an example. For example, the counter value C and the counter value A may be set to the same number, or the counter value D may be set to a number smaller than the counter value B.

  Similarly to the portable device side counter codes A and B, the onboard device side counter codes C and D are also updated at different timings. The in-vehicle device side counter code C is updated during the RKE process, like the paired portable device side counter code A. However, as the update process, the on-vehicle device side counter code C is not counted up, but the on-vehicle device side counter code C is overwritten with the portable device side counter code A. On the other hand, the in-vehicle device side counter code D is updated in the case of passive communication in the same manner as the paired portable device side counter code B. As with the portable device side counter code B, the onboard device side counter code D is updated by counting up. Details of the update process will be described later together with a description of the process of the control unit 201.

  The LF transmission unit 209 is connected to the LF transmission antenna 209a. The door lock I / F 210 is connected to the door lock actuator 214. The horn I / F 211 is connected to the horn 215. The hazard I / F 212 is connected to the hazard lamp 216. The communication I / F 213 is connected to various other in-vehicle facilities 217. The various in-vehicle facilities 217 are, for example, an air conditioner unit, an audio device, an engine controller, and the like.

  The RF receiving unit 205 is connected to the RF receiving antenna 205a. The RF receiving unit 205 receives the RF signal transmitted from the portable device 10 via the RF receiving antenna 205a. The RF receiving unit 205 performs amplification, conversion, and demodulation of the received RF signal, and outputs the demodulated signal to the control unit 201. As described above, the RF signal transmitted by the portable device 10 is the door unlocking or locking operation signal in the RKE process, the response signal in the passive communication, and the update completion notification.

  The input I / F 206 is connected to various switches 207 and a door opening / closing sensor 208. Various switches 207 connected to the input I / F 206 are, for example, an engine switch, an audio operation switch, and an air conditioner operation switch. When the user operates various switches 207, the input I / F 206 generates operation signals corresponding to the various switches 207 and outputs them to the control unit 201. The input I / F 206 generates a detection signal and outputs the detection signal to the control unit 201 when the door opening / closing sensor 208 detects opening / closing of the door.

The control unit 201 controls the overall operation of the in-vehicle device 20. For example, the control unit 201 generates a command to be input to each unit of the in-vehicle device 20 and a signal to be transmitted to the portable device 10 in accordance with inputs from the RF receiving unit 205 and the input I / F 206.
When the RF reception unit 205 inputs an operation signal, the control unit 201 acquires the ID code and the portable device side counter codes A and B included in the operation signal and outputs them to the verification unit 202. The collation unit 202 acquires the ID code and the in-vehicle device side counter codes C and D from the storage unit 204. The collation unit 202 first collates the ID code of the operation signal with the ID code of the storage unit, and determines whether or not the collation is established. Specifically, the control unit 201 determines that the verification is established when the ID code included in the operation signal matches the ID code of the storage unit 204, and determines that the verification is not established when the ID code does not match.

  The collation unit 202 performs counter code collation when ID code collation is established. The verification unit 202 performs counter code verification in two stages. The collation unit 202 determines whether i) the mobile device side counter code A is larger than the in-vehicle device side counter code C, and then ii) the mobile device side counter code B matches the in-vehicle device side counter code. Determine whether or not. The collation unit 202 performs the determination of ii) only when the portable device side counter code A is larger than the in-vehicle device side counter code C in the determination of i). If the portable device side counter code A is equal to or smaller than the in-vehicle device side counter code C, the verification process is terminated without proceeding to ii). When the portable device side counter code B matches the in-vehicle device side counter code D in the determination of ii), the collation unit 202 determines that the counter code has been collated. The establishment of the collation means that the operation signal can permit the locking or unlocking of the vehicle door.

  In the determination of i), even when the portable device side counter code A is larger than the in-vehicle device side counter code C, if the difference between the two is larger than the preset allowable value, the collation unit 202 ends the collation process. Also good. For example, when the portable device 10 and the vehicle-mounted device 20 cannot communicate with each other, the door may not be locked or unlocked, and the user may press the lock button 11 or the unlock button 12 of the portable device 10 many times. In this case, only the portable device side counter code A is updated, and the difference between the portable device side counter code A and the in-vehicle device side counter code C tends to increase. In consideration of such a case, the difference between the portable device side counter code A and the in-vehicle device side counter code C may be allowed to some extent. However, if the divergence between the portable device side counter code A and the in-vehicle device side counter code C is allowed without limitation, there is a possibility of affecting security. The allowable value can be set as appropriate from the viewpoint of the number of times the user presses and the security point of view.

  The criteria for the determinations in i) and ii) are not limited to the examples described here, and can be changed as appropriate according to the setting of the counter value. Here, since the counter value C is set to be smaller than the counter value A, and the counter value D is set to be the same as the counter value B, the two judgment criteria are different. For example, when the relationship between the counter values A and C and the counter values B and D is the same, the two determination criteria may be the same.

  When verification of the counter code of the verification unit 202 is established, the control unit 201 sends a lock command or unlock command that is a command for locking or unlocking the door according to a function code indicating locking or unlocking included in the operation signal. Generate. The control unit 201 inputs the generated lock command or unlock command to the door lock I / F 210. The door lock I / F 210 drives the door lock actuator 214 in accordance with the input command to lock or unlock the vehicle door.

  When collation of the counter code of the collation unit 202 is established, the control unit 201 outputs an update command that instructs the update unit 203 to update the on-vehicle device side counter code C. The update command is an instruction to overwrite the on-vehicle device side counter code C with the portable device side counter code A. The control unit 201 outputs the update command including the portable device side counter code A of the operation signal.

  When the control unit 201 inputs an update command, the update unit 203 updates the in-vehicle device side counter code C. Specifically, the update unit 203 first obtains a key from the storage unit 204, and decrypts the portable device side counter code A using the key. The update unit 203 acquires the counter value A from the decrypted mobile device side counter code A. The update unit 203 overwrites the existing counter value C stored in the storage unit 204 with the acquired counter value A. For example, the updating unit 203 overwrites the counter value C, which is 0 in the initial state, with 1 which is the counter value A of the portable device side counter code.

  The updating unit 203 encrypts a value obtained by adding the overwritten counter value C to the reference value C acquired from the storage unit 204 using a key, and generates a new on-vehicle device side counter code C. The update unit 203 overwrites the in-vehicle device side counter code C stored in the storage unit 204 with the newly generated in-vehicle device side counter code C. Since the counter value C of the in-vehicle device 20 is overwritten with the counter value A constituting the mobile device-side counter code A, the newly generated in-vehicle device-side counter code C is the same as the mobile device-side counter code A. The same thing. That is, overwriting the newly generated in-vehicle device side counter code C with the existing in-vehicle device side counter code C means overwriting the in-vehicle device side counter code C with the portable device side counter code A.

  As described above, the counter value A stored in the storage unit 103 of the portable device 10 is counted up to 2, for example, in the update process after transmission of the operation signal. C is smaller than the counter code A on the portable device side.

  When the ID code verification of the verification unit 202 is not established and when the counter code verification is not established, the control unit 201 does not lock or unlock the door of the vehicle. Further, when the counter code verification is not established, the control unit 201 outputs an alarm command, which is a warning notification command, to the horn I / F 211 and the hazard I / F 212. This is because if the collation of the counter codes A, B, C, and D on the portable device side and the on-vehicle device side is not established, a relay device that attempts to unlock such as Rolljam may have transmitted an operation signal. Specifically, when the portable device side counter code A is equal to or smaller than the on-vehicle device side counter code C in the determination of i), the alarm command is output without proceeding to ii). In addition, even when the portable device side counter code A is larger than the in-vehicle device side counter code C and the determination proceeds to ii), the portable device side counter code B does not match the in-vehicle device side counter code D. , Output an alarm command.

  The horn I / F 211 generates a drive signal for sounding the horn 215 according to the alarm command, and outputs it to the horn 215. Thereby, the horn 215 outputs a ringing sound based on the input drive signal. When an alarm command is input, the hazard I / F 212 generates a blink signal that causes the hazard lamp 216 to blink, and outputs the blink signal to the hazard lamp 216. The hazard lamp 216 blinks based on the inputted blink signal. That is, in the embodiment of the present invention, the horn I / F 211 and the horn 215, and the hazard I / F 212 and the hazard lamp 216 function as an in-vehicle device notification unit that notifies a warning.

  When the operation signals of the various switches 207 and the detection signals of the door opening / closing sensor 208 are input from the input I / F 206, the control unit 201 generates a response request signal to start passive communication. The response request signal is a content for requesting the portable device 10 to transmit a response signal. As described above, the predetermined operation of the vehicle means the operation of the on-vehicle equipment and the opening / closing operation of the door. Input of operation signals of various switches 207 means that the on-vehicle equipment is operated, and input of detection signals of the door open / close sensor 208 means that the door is opened / closed. Therefore, passive communication is performed at the timing when the operation signal and the detection signal are input.

  The control unit 201 outputs the generated response request signal to the LF transmission unit 209. The LF transmission unit 209 modulates the response request signal input from the control unit 201 into an LF signal, and transmits the LF signal to the portable device 10 via the LF transmission antenna 209a.

  As described above, the portable device 10 transmits a response signal as a response to the response request signal. When the RF reception unit 205 inputs a response signal from the portable device to the control unit 201, the control unit 201 acquires the ID code included in the response signal and outputs the ID code included in the response unit 202. The collation unit 202 acquires the ID code from the storage unit 204 and collates it with the ID code of the response signal. If the ID codes match, the control unit 201 generates an authentication signal including an update request and outputs the authentication signal to the LF transmission unit 209.

  When the control unit 201 inputs a response signal, the LF transmission unit 209 modulates the authentication signal into an LF signal and transmits the LF signal to the portable device 10 via the LF transmission antenna 209a.

  As described above, when the update unit 102 of the portable device 10 updates the portable device side counter code B in response to the update request, an update completion notification is transmitted from the portable device 10. When an update completion notification is input from the RF reception unit 205, the control unit 201 outputs an update command to the update unit 203. The update command output in the passive communication instructs a process for counting up the in-vehicle device side counter code D.

  When the control unit 201 inputs an update command, the update unit 203 updates the in-vehicle device side counter code D stored in the storage unit 204 by a count-up process. As a specific process, the update unit 203 acquires the counter value D from the storage unit 204 and counts up. For example, the updating unit 203 increments the counter value D, which was 1 in the initial state, to 2. The update unit 203 overwrites the existing counter value D with the counter value D counted up. Further, the update unit 203 encrypts a value obtained by adding the overwritten counter value D to the reference value D using a key, and generates a new on-vehicle device side counter code D. The update unit 203 overwrites the in-vehicle device side counter code D stored in the storage unit 204 with the newly generated in-vehicle device side counter code D.

  As described above, the update unit 102 of the portable device 10 increments the counter value B of the portable device 10 to 2, for example, before transmitting the update completion notification. Therefore, by updating the in-vehicle device side counter code D, the in-vehicle device side counter code D becomes the same number as the portable device side counter code B.

  When communication I / F inputs the operation signal by operation of various switches 207 to the control part 201, the control part 201 not only produces | generates a response request signal, but controls operation | movement of vehicle equipment according to an operation signal. For example, a control signal is transmitted to the air conditioner unit via the communication I / F 213 in response to an operation signal generated by operating the air conditioner operation switch. The air conditioner unit performs air conditioning by changing various settings of the air conditioner based on the control signal.

  For example, the control unit 201 transmits a control signal to the audio device in response to an operation signal generated by operating an audio operation switch. The audio device operates based on the control signal.

  Further, for example, the control unit 201 transmits a control signal to the engine controller in response to an operation signal generated by operating an engine switch. The engine controller controls the engine according to the control signal.

Hereinafter, processing executed in the keyless system K will be described.
When power is supplied to the in-vehicle device 20 and the portable device 10, initial processing is executed. In the initial process, an initialization process of parameters used for the processes in the control units 101 and 201 of the portable device 10 and the in-vehicle device 20 is performed. For example, the counter value of the in-vehicle device 20 is initialized to 1, and the counter value of the portable device 10 is initialized to 0.

FIG. 5 is a flowchart showing an outline of processing in the keyless system K after the initial processing.
As shown in FIG. 5, when the user presses the lock button 11 or the unlock button 12 of the portable device 10 (step S01: Yes), the keyless system K performs the RKE process (step S02). In this RKE process, the keyless system K updates the portable device side counter code A and the in-vehicle device side counter code C.

  During the predetermined operation of the vehicle (step S01: No, step S03: Yes), the keyless system K performs passive communication (step S04). In this passive communication, the keyless system K updates the portable device side counter code B and the in-vehicle device side counter code D.

  As described above, the keyless system K has two sets of counter codes, the portable device side counter code A and the onboard device side counter code C, and the portable device side counter code B and the onboard device side counter code D, RKE processing and passive communication. Update at different timings.

  In addition, in the state where the lock button 11 or the unlock button 12 is not pressed (step S01: No) and the predetermined operation of the vehicle is not performed (step S03: No), the portable device 10 and the vehicle-mounted device 20 save power. Therefore, it shifts to the sleep mode. However, even in the sleep mode, the portable device 10 and the vehicle-mounted device 20 can intermittently cancel the sleep state and receive signals from each other.

Next, details of the RKE process in step S02 of FIG. 5 will be described.
6A is a flowchart showing the process of the portable device 10 in the RKE process, and FIG. 6B is a flowchart showing the process of the in-vehicle device 20 in the RKE process.

  As shown in FIG. 6A, when the lock button 11 or the unlock button 12 of the portable device 10 is pressed, the control unit 101 generates an operation signal for locking or unlocking, and sends it to the RF transmission unit 105. An operation signal is transmitted (step S211). After the operation signal is transmitted, the update unit 102 updates the portable device side counter code A by a count-up process (step S212).

  As shown in FIG. 6B, when the in-vehicle device 20 receives the operation signal for locking or unlocking from the portable device 10 (step S251: Yes), the verification unit 202 performs ID code verification and counter code verification. This is performed (step S252). When the ID code included in the operation signal matches the ID code stored in the storage unit 204 (step S253: Yes), the verification unit 202 proceeds to verification of the counter code. In the verification of the counter code, the collation unit 202 has the portable device side counter code A larger than the in-vehicle device side counter code B (step S254: Yes), and the portable device side counter code B matches the in-vehicle device side counter code D. In the case of (Step S255: Yes), the control unit 201 drives the door lock actuator 214 to lock or unlock the door (Step S256). In addition, the update unit 203 updates the in-vehicle device side counter code C by overwriting processing (step S257).

  In the collation performed by the collation unit 202, if the ID codes do not match (step S253: No), the control unit 201 ends the process without locking or unlocking the door. When the portable unit side counter code A is equal to or smaller than the vehicle unit counter code C (No in step S254), the portable unit counter code B matches the vehicle unit counter code D. If not (step S255: No), the controller 201 does not lock or unlock the door, outputs a ringing sound to the horn 215, and blinks the hazard lamp 216 to notify the warning (step S258). .

Next, details of the passive communication process in step S04 of FIG. 5 will be described.
FIG. 7A is a flowchart showing processing of the portable device 10 in passive communication, and FIG. 7B is a flowchart showing processing of the in-vehicle device 20 in passive communication.

  As shown in FIG. 7B, when a predetermined operation of the vehicle, that is, when an operation signal of various switches 207 or a detection signal of the door opening / closing sensor 208 is input from the input I / F 206 of the in-vehicle device 20, the control is performed. The unit 201 generates a response request signal and causes the LF transmission unit 209 to transmit the response request signal (step S451).

  As shown in FIG. 7A, when a response request signal is received from the in-vehicle device 20 (step S411: Yes), the control unit 101 of the portable device 10 generates a response signal and transmits it to the RF transmission unit 105 ( Step S412).

  As shown in FIG. 7B, when the response signal is received from the portable device 10 (step S452: Yes), the collation unit 202 of the in-vehicle device 20 stores the ID code included in the response signal in the storage unit 204. The ID code is collated (step S453). When the ID codes match as a collation result of the collation unit 202 (step S454: Yes), the control unit 201 generates an authentication signal and transmits the authentication signal to the LF transmission unit 209 (step S455). This authentication signal includes a request for updating the portable device side counter code B.

  As shown in FIG. 7A, when the authentication signal is received from the in-vehicle device 20 (step S413: Yes), the update unit 102 of the portable device 10 updates the portable device-side counter code B by the count-up process ( Step S414). When the update unit 102 completes the update, the control unit 101 generates an update completion notification and causes the RF transmission unit 105 to transmit the notification (step S415).

  As shown in FIG. 7B, when the update completion notification is received from the portable device 10 (step S456: Yes), the update unit 203 of the in-vehicle device 20 updates the in-vehicle device side counter code D by the count-up process. (Step S457).

  In step S452, when the response signal cannot be received from the portable device 10 even after a predetermined time has elapsed (step S452: No), the process returns to step S451, and the control unit 201 of the in-vehicle device 20 retransmits the response request signal. . If the ID codes do not match in step S454 (step S454: No), the process returns to step S451, and the control unit 201 of the in-vehicle device 20 retransmits the response request signal.

  In step S413, if the authentication signal is not received from the in-vehicle device 20 even after a predetermined time has elapsed (step S413: No), the process returns to step S412 and the control unit 101 of the portable device 10 retransmits the response signal.

  In step S456, when the update completion notification is not received from the portable device 10 even after a predetermined time has passed (step S456: No), the process returns to step S455, and the control unit 201 of the in-vehicle device 20 retransmits the authentication signal. .

  Note that if the signal cannot be received from the other party even if the re-transmission of each signal is repeated a certain number of times, the control unit 201 of the portable device 10 and the in-vehicle device 20 may end the process.

  Although illustration is omitted, when passive communication is started by operation of various switches 207, the control unit 201 of the in-vehicle device 20 performs operation control of the in-vehicle equipment corresponding to the operation signal after step S457. Do.

[Application example]
An application example of the keyless system K according to the embodiment of the present invention will be described.
FIG. 8 is a diagram illustrating an example in which the keyless system K is applied to a scene where there is a third party who attempts an illegal act such as vehicle theft. As shown in FIG. 8, the third party has Rolljam as a repeater. Rolljam has a function of intercepting RF signals and a function of generating strong interference radio waves. For example, in a place where an unspecified number such as a parking lot can go in and out, a third party is lurking on the user's vehicle side. When the user approaches the vehicle and presses the unlock button 12 of the portable device 10 to unlock the door, the third party operates Rolljam. As a result, Rolljam can intercept the unlocking operation signal transmitted by the portable device 10 and inhibit the operation signal from reaching the in-vehicle device 20 due to the jamming radio wave.

  Here, a comparative example is shown first, and the situation where fraud is possible by Rolljam is explained. The difference between the comparative example and the embodiment is that the keyless system of the comparative example has only one set of counter codes (the portable device side counter code A and the in-vehicle device side counter code C). That is, the comparative example does not have the portable device side counter code B and the in-vehicle device side counter code D, and does not update the counter code in passive communication. In the RKE process, the portable device side counter code A and the in-vehicle device side counter code C are updated as in the embodiment.

  FIG. 9 is a sequence chart showing communication between the portable device 10, the vehicle-mounted device 20, and the Rolljam in the comparative example. As shown in FIG. 9, the reference values A and C constituting the portable device side counter code A and the in-vehicle device side counter code C are X, and the initial values of the counter values A and C are 1 and 0, respectively. As described above, the counter codes A and C on the portable device side and on-vehicle device side are encrypted, but in the example of FIG. 9, the reference values A and C and the counter values A and C are simply added for convenience. Are handled as portable device side and on-vehicle device side counter codes A and C. That is, the initial value of the mobile device side counter code A is X + 1, and the initial value of the on-vehicle device side counter code C is X + 0.

  The third party sees the user approaching the vehicle and activates Rolljam to generate jamming. When the user presses the unlock button 12, the portable device 10 transmits an initial operation signal. This first operation signal includes the portable device side counter code A (X + 1). After transmitting the first operation signal, the portable device 10 updates the portable device side counter code A from X + 1 to X + 2.

  Rolljam intercepts the first operation signal transmitted by the portable device 10 and stores it in the memory. Due to the jamming wave, the first operation signal does not reach the vehicle-mounted device 20 and the vehicle door is not unlocked. Therefore, the user presses the unlock button 12 again. When the unlock button 12 is pressed, the portable device 10 transmits a second operation signal. The second operation signal includes the portable device side counter code A (X + 2). After transmitting the second operation signal, the portable device 10 updates the portable device side counter code A from X + 2 to X + 3.

  Rolljam intercepts the second operation signal and stores it in memory. Similarly to the first operation signal, the second operation signal does not reach the vehicle-mounted device 20 due to the jamming radio wave. However, Rolljam stores the second operation signal in the memory, stops the generation of the jamming electric wave, and transmits the first operation signal stored previously to the in-vehicle device 20.

  The in-vehicle device 20 collates the counter code of the received first operation signal. In the comparative example, only one set of the portable device side counter code A and the in-vehicle device side counter code C is collated. It is determined whether the portable device side counter code A of the first operation signal transmitted by Rolljam is larger than the in-vehicle device side counter code C. In addition, although the vehicle equipment 20 is collating ID code, since it is a premise that ID code corresponds, description is abbreviate | omitted. As a result of the collation, since the portable device side counter code A is larger than the onboard device side counter code C (X + 1> X + 0), the onboard device 20 unlocks the door of the vehicle. After unlocking, the in-vehicle device overwrites and updates the in-vehicle device side counter code A + 0 with the portable device side counter code A + 1 included in the operation signal.

  In this way, the door of the vehicle is unlocked by Rolljam. At this time, since the user is near the vehicle, a third party cannot perform illegal acts such as vehicle theft. However, since the door of the vehicle is unlocked after the user presses the unlock button 12 for the second time, the possibility that the user notices that the operation signal has been intercepted by a third party is not high. The user simply opens and closes the door of the vehicle and operates various switches. That is, a predetermined operation of the vehicle is performed. Passive communication is performed between the in-vehicle device 20 and the portable device 10 during a predetermined operation of the vehicle. Although passive communication may be performed a plurality of times, an example in which the passive communication is performed only once is shown here. When the in-vehicle device 20 transmits a response request signal, the response request signal reaches the portable device 10 because no interference wave has already been generated. The portable device 10 transmits a response signal to the in-vehicle device 20, and the in-vehicle device 20 collates the ID code included in the response signal and transmits an authentication signal to the portable device 10. In the comparative example, the authentication signal does not include an update request. Therefore, the passive communication process is terminated by transmitting the authentication signal.

  After the passive communication, the third party transmits a second operation signal stored in Rolljam to the in-vehicle device 20 when the user leaves the vehicle. The in-vehicle device 20 collates the counter code of the second operation signal. Since the portable device side counter code A is larger than the onboard device side counter code C (X + 2> X + 1), the onboard device 20 unlocks the door of the vehicle. Unlike the initial unlocking, since the user is away from the vehicle at this time, it becomes possible for a third party to perform an illegal act such as vehicle theft.

  As in this comparative example, when only a set of counter codes is provided and the counter codes are updated by RKE processing, by using a repeater that intercepts operation signals while generating jamming radio waves such as Rolljam, There is a risk that fraud against third-party vehicles cannot be prevented.

Next, an application example of the embodiment will be described. FIG. 10 is a sequence chart showing communication between the portable device 10, the in-vehicle device 20, and the Rolljam in the application example of the embodiment.
As described above, the application example of the embodiment includes another set of counter codes (the portable device side counter code B and the in-vehicle device side counter code D), and the update of the other set of counter codes is passively communicated. This is different from the comparative example in that

  As shown in FIG. 10, the reference values B and D constituting the portable device side counter code B and the in-vehicle device side counter code D are Y, and the initial values of the counter values B and D are 1, respectively. Although the portable device side and in-vehicle device side counter codes B and D are encrypted, in the example of FIG. 10, for convenience, the reference values B and D and the counter values B and D are simply added to the portable device. Side and in-vehicle device side counter codes B and D. That is, the initial value of the portable device side counter code B is Y + 1, and the initial value of the onboard device side counter code D is Y + 1. Since the portable device side and on-vehicle device side counter codes A and C are the same as those in the comparative example, detailed description thereof is omitted.

  The general flow of communication between the portable device 10, the Rolljam, and the in-vehicle device 20 in the RKE process is the same between the application example and the comparative example. However, in the application example, the operation signal transmitted by the portable device 10 includes not only the portable device side counter code A but also the portable device counter code B. The first operation signal includes a portable device side counter code A (X + 1), B (Y + 1). After transmitting the first operation signal, the portable device 10 updates only the portable device side counter code A from X + 1 to X + 2. The second operation signal includes the portable device side counter code A (X + 2), B (Y + 1). Similarly to the comparative example, Rolljam intercepts the first operation signal and the second operation signal transmitted by the portable device 10 and obstructs arrival at the in-vehicle device 20 by the jamming radio wave. Thereafter, Rolljam transmits the first operation signal to the in-vehicle device 20. The in-vehicle device 20 collates the counter code included in the first operation signal. In the application example, the counter code is collated by the portable device side counter code A (X + 1), the onboard device side counter code C (X + 0), the portable device side counter code B (Y + 1), and the onboard device side counter code D (Y + 1). The two sets are performed. Since the portable device side counter code A is larger than the in-vehicle device side counter code C (X + 1> X + 0) and the portable device side counter code B and the in-vehicle device side counter code D match (Y + 1 = Y + 1), the verification is established. The in-vehicle device 20 unlocks the vehicle door. The in-vehicle device 20 updates the in-vehicle device side counter code C (X + 0) by overwriting with the portable device side counter code A (X + 1) included in the first operation signal.

  Thereafter, passive communication is performed between the in-vehicle device 20 and the portable device 10 by a predetermined operation of the vehicle. The in-vehicle device 20 transmits a response request signal to the portable device 10, and the portable device 10 transmits a response signal to the in-vehicle device 20. The in-vehicle device 20 collates the ID code included in the response signal and transmits an authentication signal to the portable device 10. In the application example, the authentication signal includes an update request. Therefore, the portable device 10 that has received the authentication signal updates the portable device-side counter code B from Y + 1 to Y + 2. After completion of the update, the portable device 10 transmits an update completion notification to the in-vehicle device 20. When receiving the update completion notification, the in-vehicle device 20 updates the in-vehicle device side counter code D from Y + 1 to Y + 2.

  After the passive communication, the third party transmits a second operation signal stored in Rolljam to the in-vehicle device 20 when the user leaves the vehicle. The in-vehicle device 20 collates the counter code included in the second operation signal. The first set of the portable device side counter code A is larger than the in-vehicle device side counter code C (X + 2> X + 1), but the second set of the portable device side counter code B and the in-vehicle device side counter code D do not match (Y + 1 < Y + 2) Therefore, counter code verification is not established.

  Since the verification is not established, the in-vehicle device 20 does not unlock the vehicle door. The in-vehicle device 20 further issues a warning by causing the horn 215 to output a ringing sound and causing the hazard lamp 216 to blink. As described above, in the application example of the present embodiment, in addition to the RKE process, the counter code of the third party using Rolljam is prevented by updating the counter code on the mobile device side and the in-vehicle device side even in the subsequent passive communication. . Furthermore, since the warning is notified by the in-vehicle device 20, the possibility that the user who has left the vehicle notices the existence of a third party who attempts to cheat is increased.

As described above, the keyless system K according to the embodiment is
(1) a portable device 10 possessed by a user, and an in-vehicle device 20 that is mounted on a vehicle and performs communication with the portable device 10 and operation control of in-vehicle equipment,
The portable device 10 includes a lock button 11 or an unlock button 12 (operation unit) that accepts an operation request for locking or unlocking the vehicle by a user, and portable device side counter codes A and B (first and second on the portable device side). Storage unit 103 (portable device storage unit) that stores the operation code and the RF transmission unit 105 that transmits an operation signal including the mobile device side counter codes A and B to the in-vehicle device 20 when the operation unit accepts the operation request. (Mobile device transmission unit) and an update unit 102 (mobile device update unit) that updates the mobile device side counter code A when the operation signal is transmitted,
The in-vehicle device 20 includes a storage unit 204 (on-vehicle device storage unit) that stores on-vehicle device side counter codes C and D (first and second counter codes on the on-vehicle device side), and a portable device-side counter included in the operation signal. When the collation by the collation unit 202 for collating the codes A and B with the vehicle-mounted device side counter codes C and D stored in the storage unit 204 and the collation by the collation unit 202 are established, the operation of locking or unlocking the door of the vehicle is performed. When the control unit 201 to be controlled and the collation of the collation unit 202 are established, an update unit 203 (on-vehicle unit update unit) that updates the on-vehicle device side counter code A and a response to the portable device 10 during a predetermined operation of the vehicle LF transmission unit 209 (on-vehicle device transmission unit) for transmitting a request signal,
The updating unit 102 and the updating unit 203 are configured to update the portable device side counter code B and the onboard device side counter code D, respectively, in the passive communication between the portable device 10 and the onboard device 20 that is started by transmission of a response request signal. did.

  Rolljam, which is a relay machine, intercepts the operation signal transmitted from the portable device 10 and simultaneously generates an interference radio wave to block the operation signal from reaching the in-vehicle device 20 and prevent the door from being unlocked. When Rolljam prevents the door from being unlocked, the user presses the operation button of the portable device 10 twice or more, and the first operation signal and the second operation signal transmitted from the portable device 10 are stored. Rolljam records the second operation signal and transmits the first operation signal to the in-vehicle device 20 to unlock the door so that the user does not doubt the presence of the relay device. When the user leaves the vehicle, the third party sends a second operation signal from Rolljam and tries to unlock the door.

  In the keyless system K according to the embodiment of the present invention, two sets of counter codes are collated at the time of RKE processing, and the update timings of the two sets of counter codes are different. The first set of counter codes (portable device side counter code A, in-vehicle device side counter code C) is updated during the RKE process. The second set of counter codes (portable device side counter code B, in-vehicle device side counter code D) is updated in passive communication after locking or unlocking the door of the vehicle. Therefore, even if the user receives a second operation signal from Rolljam after the passive communication, the second counter code is updated, so verification is not established and the door is unlocked. Never happen. That is, even if Rolljam intercepts the first set of updated counter codes and performs an unlocking action, the door will unlock unless the second updated counter code is also intercepted in parallel. It will never be done. This can prevent third party fraud using Rolljam and improve vehicle security.

(2) The collation unit 202 determines that the collation has been established based on the determination as to whether the portable device side counter code B matches the in-vehicle device side counter code D.

The second set of counter codes that are not updated in the RKE process is not updated by the idle pressing of the lock button 11 or the unlock button 12. Therefore, it is possible to set so that the collation is established only when the portable device side counter code B and the in-vehicle device side counter code D match. Security can be improved by allowing the door to be locked or unlocked only when they match.
(3) When the portable device side counter code A is larger than the in-vehicle device side counter code C, the collation unit 202 determines whether the second set of counter codes matches.

  When the lock button 11 or the unlock button 12 of the portable device 10 is idled due to communication failure between the portable device 10 and the vehicle-mounted device 20, the portable device-side counter code A and the vehicle-mounted device-side counter code C may be separated. is there. Therefore, with respect to the first set of counter codes, if the portable device side counter code A is larger than the on-vehicle device side counter code C, the door can be locked or unlocked even when there is an empty push. it can.

(4) The storage unit 103 and the storage unit 204 store the ID code assigned to the portable device 10. In passive communication, the RF transmission unit 105 transmits a response signal including an ID code in response to the response request signal transmitted from the in-vehicle device 20, and the verification unit 202 of the in-vehicle device 20 includes an ID code included in the response signal. Is compared with the ID code stored in the storage unit 204, and if the ID code included in the response signal matches the ID code stored in the storage unit 204, the LF transmission unit 209 sends an authentication signal to the portable device 10. Send. In the passive communication, the LF transmission unit 209 includes a counter code update request for the update unit 102 in the authentication signal. The updating unit 102 updates the portable device side counter code B based on the counter code update request. After the update of the mobile device side counter code B, the RF transmission unit 105 transmits an update completion notification to the in-vehicle device 20, and when the update unit 203 of the in-vehicle device 20 receives the update completion notification, the RF transmission unit 105 receives the in-vehicle device side counter code D. Update.

  By including the counter code update request in the signal exchanged between the portable device 10 and the in-vehicle device 20 in the passive communication, only the counter code update request is not transmitted, and the timing for updating the counter code is set to the third timing. Hard to grasp.

(5) The LF transmission unit 209 is configured to transmit a count-up request that causes the update unit 102 to count up the counter code on the portable device side as a counter code update request. Further, the RF transmission unit 105 transmits an update completion notification to the in-vehicle device 20 after the update unit 102 updates the portable device side counter code B. When receiving the update completion notification, the update unit 203 updates the vehicle-mounted device side counter code D by counting it up.

  The mobile unit side or the in-vehicle device side counter codes B and D themselves are not transmitted, and the update units 102 and 203 on the mobile device side and the in-vehicle device side count up by receiving the update request and receiving the update completion notification, respectively. Update. As a result, the possibility of intercepting the portable device side or on-vehicle device side counter codes B and D is reduced, and security is improved. In passive communication, if the amount of transmission data increases, it takes time to complete transmission. Accordingly, for example, depending on the operation of the vehicle such as operation of the engine start button, the user may affect the responsiveness to the operation. By not transmitting the mobile device side or on-vehicle device side counter codes B and D themselves, it is possible to reduce the amount of transmission data and reduce the influence on responsiveness.

  In the embodiment, the example in which the update request is included in the authentication signal has been described. However, when the passive communication is started, the update request is included in the response request signal transmitted from the in-vehicle device 20 to the portable device 10. Also good. Also in this case, the portable device 10 updates the portable device side counter code B after receiving the authentication signal for establishing the passive communication.

(6) The in-vehicle device 20 includes a horn I / F 211 and a horn 215 or a hazard I / F 212 and a hazard lamp 216 as an in-vehicle device notification unit that notifies a warning. When the collation of the collation unit 202 is not established, that is, when the portable device side counter code A is the same as or smaller than the in-vehicle device side counter code C or when the portable device side counter code B does not coincide with the in-vehicle device side counter code D, The horn 215 or the hazard lamp 216 notifies the warning.

  When the collation of the collation unit 202 is not established, there is a high possibility that a third party who intercepts the operation signal using the relay machine is trying to cheat on the vehicle. In that case, it is possible to improve security by notifying the user or people around the vehicle of the possibility of fraud by notifying the warning.

(7) The horn I / F 211 or the hazard I / F 212 blinks the hazard lamp 216 or causes the horn 215 to output an alarm sound as a warning notification. As a warning notification, the use of a hazard lamp 216 that appeals visually or a warning sound that appeals to auditory sense can promptly notify the possibility of fraud.

[Modification 1]
In the above-described embodiment, the update request is included in the authentication signal transmitted from the in-vehicle device 20 to the portable device 10. That is, the vehicle-mounted device 20 requests the portable device 10 to update the portable device-side counter code, and the vehicle-mounted device 20 updates the vehicle-mounted device-side counter code after receiving an update completion notification from the portable device 10. However, the update request is not limited to the request made from the in-vehicle device 20 to the portable device 10, and may be made from the portable device 10 to the in-vehicle device 20. In Modification 1, an example in which an update request is included in a response signal transmitted from the portable device 10 to the in-vehicle device 20 in passive communication will be described.

  FIG. 11A is a flowchart showing processing of the portable device 10 in the passive communication of the first modification, and FIG. 11B is a flowchart showing processing of the in-vehicle device 20 in the passive communication of the first modification. is there. The description of the same parts as those in FIGS. 7A and 7B is omitted or simplified.

  As illustrated in FIG. 11B, the control unit 201 of the in-vehicle device 20 generates a response request signal and transmits the response request signal to the LF transmission unit 209 (step S461). As illustrated in FIG. 11A, when a response request signal from the in-vehicle device 20 is received (step S <b> 421: Yes), the control unit 101 of the portable device 10 generates a response signal and transmits the response signal to the RF transmission unit 105. (Step S422). This response signal includes an update request. In Modification 1, the update request is a request for updating the in-vehicle device side counter code D to the update unit 203 of the in-vehicle device 20. More specifically, the update request causes the update unit 203 of the in-vehicle device 20 to increment the counter value D constituting the in-vehicle device side counter code D and generate a new in-vehicle device side counter code D. It is a request.

  Steps S462 to S465 from when the response signal in FIG. 11B is received until the authentication signal is transmitted are the same as steps S452 to S455 in FIG. However, the update request is not included in the authentication signal transmitted by the control unit 101 of the portable device 10 in step S465. When the authentication signal is transmitted, the updating unit 203 of the in-vehicle device 20 updates the in-vehicle device side counter code D by the count-up process (step S466). When the update unit 203 completes the update, the control unit 201 of the in-vehicle device 20 generates an update completion notification and causes the LF transmission unit 209 to transmit the notification (step S467).

  As shown in FIG. 11A, when the portable device 10 receives the authentication signal from the in-vehicle device 20 (step S423) and further receives an update completion notification (step S424: Yes), the portable device 10 is updated. The unit 102 updates the portable device side counter code B by the count-up process (step S425).

  In step S424, the portable device 10 waits for an update completion notification from the in-vehicle device 20, but if it has not been received even after a predetermined time has elapsed (step S424: No, step S426: Yes), the process proceeds to step S425 and updated. The unit 102 updates the portable device side counter code B and ends the process.

As described above, in the first modification,
(8) In passive communication, the RF transmitter 105 (portable device transmitter) of the portable device 10 includes a counter code update request in the response signal transmitted to the vehicle-mounted device 20, and the update unit 203 (vehicle device update) of the vehicle-mounted device 20 Part) updates the on-vehicle device side counter code D based on the counter code update request. The LF transmission unit 209 of the in-vehicle device 20 transmits an update completion notification to the portable device 10 after the in-vehicle device side counter code D is updated. When receiving the update completion notification, the update unit 102 (mobile device update unit) of the mobile device 10 updates the mobile device side counter code B.

  As in the embodiment, by including an update request in a signal transmitted in passive communication, the update request is not transmitted alone, and it is difficult for a third party to grasp the timing for updating the counter code.

[Modification 2]
In the above-described embodiment, in the passive communication, the in-vehicle device 20 updates the in-vehicle device side counter code D by the count-up process after receiving the update completion notification. However, the present invention is not limited to this, and the update may be performed by overwriting the in-vehicle device side counter code D with the portable device side counter code B, similarly to the update in the RKE process. In this case, the control unit 101 of the portable device 10 includes the updated portable device-side counter code B in the update completion notification and causes the RF transmission unit 105 to transmit the update completion notification. The update unit 203 of the in-vehicle device 20 performs the update by overwriting the in-vehicle device side counter code D with the portable device side counter code B included in the update completion notification.

As described above, in Modification 2,
(9) The RF transmitting unit 105 (portable device transmitting unit) updates the updated portable device side counter code B after the updating unit 102 (portable device updating unit) of the portable device 10 updates the portable device side counter code B. The update completion notification including this is transmitted to the update unit 203 of the in-vehicle device 20. When receiving the update completion notification, the update unit 203 of the in-vehicle device 20 overwrites the in-vehicle device side counter code D with the updated mobile device side counter code B included in the update completion notification.

  When the collation by the collation unit 202 of the RKE process is based on the fact that the portable device side counter code B matches the in-vehicle device side counter code D, the in-vehicle device side counter code D is used as the in-vehicle device side counter code D. By overwriting and updating, the portable device side counter code B and the in-vehicle device side counter code D can be reliably matched.

  The second modification can also be applied to the first modification. When applied to the first modification, the control unit 201 of the in-vehicle device 20 includes the updated in-vehicle device side counter code D in the update completion notification transmitted to the portable device 10 after the in-vehicle device side counter code D is updated. . When receiving the update completion notification, the update unit 102 of the portable device 10 overwrites and updates the portable device side counter code B with the updated onboard device side counter code D included in the update completion notification.

[Modification 3]
In the above-described embodiment, the example in which the mobile device side and the vehicle-mounted device side counter codes B and D are always updated in the passive communication has been described, but the case where the update is performed may be limited. In the third modification example, after the locking or unlocking of the door of the vehicle, that is, after the RKE process, only in the passive communication when the door closing operation is performed as the predetermined operation of the vehicle, the portable device side and the in-vehicle device The side counter codes B and D are updated. In other words, updating is performed only when passive communication is performed in response to the input of the door closing detection signal from the door opening / closing sensor 208.

  In the third modification, the storage unit 204 of the in-vehicle device 20 stores an update flag. The update flag is a flag that indicates whether or not the mobile device side and the in-vehicle device side counter codes need to be updated. If the update flag is 1, an update is required, and if the update flag is 0, an update is not necessary. The initial state of the update flag is 0.

  After the RKE process, that is, the door lock actuator 214 is driven to lock or unlock the door (step S256 in FIG. 6B), and the updating unit 203 updates the on-vehicle device side counter code (FIG. 6). After step S255) of (b), the control unit 201 of the in-vehicle device 20 changes the update flag to 1. When the operation of closing the door is performed as a predetermined operation of the vehicle, the control unit 201 of the in-vehicle device 20 refers to the update flag, and performs update in passive communication if the update flag is 1. Further, after the update is completed, the update flag is returned to 0.

Hereinafter, the process in the case of the passive communication in the modification 3 is demonstrated using a flowchart.
FIG. 12 is a flowchart showing the processing of the portable device 10 in the passive communication of the third modification.
FIG. 13 is a flowchart showing processing of the in-vehicle device 20 in the passive communication of the third modification.

  Steps S441 to S443 and S445 to S446 in FIG. 12 are the same as steps S411 to S413 and S414 to S415 in FIG. Steps S491 to S494 and S499 to S500 in FIG. 13 are the same as steps S451 to S454 and S456 to S457 in FIG.

  First, the processing of the in-vehicle device 20 will be described. As shown in FIG. 13, after collating the ID code of the response signal (step S494), the control unit 201 refers to the update flag in the storage unit 204. When the update flag is 1 (step S495: Yes) and the passive communication is started by the operation of closing the vehicle door (step S496: Yes), the control unit 201 includes an update request as in the embodiment. An authentication signal is generated and transmitted to the LF transmission unit 209 (step S498). When the update completion notification is received from the portable device 10 (step S499: Yes), the update unit 203 of the in-vehicle device 20 updates the in-vehicle device side counter code D (step S500). After completion of the update, the control unit 201 of the in-vehicle device 20 changes the update flag to 0 (step S501).

  On the other hand, if the answer is No in step S495 or step S496, the mobile device side and the in-vehicle device side counter codes are not updated. In step S497, the control unit 201 of the in-vehicle device 20 generates an authentication signal that does not include an update request, transmits the authentication signal to the LF transmission unit 209, and ends the process.

  Next, processing of the portable device 10 will be described. As shown in FIG. 12, when the update request is included in the authentication signal received from the in-vehicle device 20 (step S444: Yes), the update unit 102 of the portable device 10 updates the portable device side counter code B (step). S445). When the update unit 102 completes the update, the control unit 101 generates an update completion notification and causes the RF transmission unit 105 to transmit it (step S446). On the other hand, if an update request is not included in the authentication signal (step S444: No), the update unit 102 of the portable device 10 ends the process without updating.

  Note that the update of the on-vehicle device side counter code D in step S500 may be performed by the count-up process described in the embodiment, or may be performed by the overwrite process described in the second modification. When overwriting is performed, the updated portable device counter code B is included in the update completion notification transmitted by the portable device 10.

As described above, in Modification 3,
(10) The update unit 102 (portable device update unit) of the portable device 10 and the update unit 203 (vehicle device update unit) of the in-vehicle device 20 close the door as a predetermined operation of the vehicle after locking or unlocking the door of the vehicle. In the passive communication when the operation is performed, the mobile device side counter code B and the in-vehicle device side counter code D are updated.

  When a counter code update request is transmitted in passive communication, the amount of transmission data increases. When the predetermined operation of the vehicle causing the passive communication is, for example, an operation of an engine start button or the like, there is a possibility that the response to the user's operation may be affected by an increase in the amount of transmission data. In addition, an increase in the total amount of transmission data may affect the memory life of the portable device 10. By limiting the timing of updating, the amount of transmission data can be reduced, and the influence on the responsiveness and the influence on the memory life can be reduced.

  In addition, as the predetermined operation of the vehicle, the operation of closing the door is not caused by the operation of the various switches 207 by the user, so even if the transmission data amount increases, the responsiveness to the operation of the user is small. Therefore, it is possible to further reduce the influence on the responsiveness by limiting the update timing to the passive communication in the operation of closing the door.

  In Modification 3, the example in which the timing of updating is limited to the operation of closing the door as the predetermined operation of the vehicle has been described. However, the present invention is not limited to this, and other predetermined operations that have little influence on the responsiveness to the user's operation. It may be limited to operation. For example, the timing for updating may be limited in the operation of opening the door.

  Here, the example in which the third modification is applied to the embodiment has been described. However, the third modification may be applied to the first modification. When applied to the first modification, the update flag is stored in the storage unit 103 of the portable device 10. The control unit 101 of the portable device 10 changes the update flag to 1 after transmitting an operation signal to the in-vehicle device 20 in the RKE process. In addition, after updating in passive communication, the update flag is returned to 0.

[Modification 4]
In the above-described embodiment, when the collation unit 202 of the in-vehicle device 20 does not collate the mobile device side and the in-vehicle device side counter codes A, B, C, D, the horn 215 and the hazard lamp 216 serve as a warning notification. An example in which a sound is output and the hazard lamp 216 is blinked has been described. This notifies the user of the presence of a relay device such as Rolljam that has transmitted an unauthorized operation signal.

  In Modification 4, an example will be described in which the warning is notified not only to the in-vehicle device 20 but also to the portable device 10 possessed by the user. FIG. 14 is a block diagram illustrating a configuration of the mobile device 10 according to the fourth modification. As shown in FIG. 14, the portable device 10 includes an output I / F 107 and an alarm lamp 13 as a portable device notification unit in addition to the configuration described in the embodiment. For example, the alarm lamp 13 is installed on the surface of the casing of the portable device 10 on which the lock button 11 and the unlock button 12 are provided. The alarm lamp 13 is connected to the control unit 101 via the output I / F 107. The control unit 101 controls turning on and off of the alarm lamp 13. The control unit 101 blinks the alarm lamp 13 when notifying the warning.

  Since the configuration of the in-vehicle device 20 is not changed from the embodiment, it will be described with reference to FIG. The collation unit 202 of the in-vehicle device 20 collates the portable device-side counter code included in the received operation signal with the in-vehicle device-side counter code stored in the storage unit 204. When the collation of the collation unit 202 is not established, that is, when the portable device side counter code is equal to or smaller than the in-vehicle device side counter code, the control unit 201 generates an alarm signal and transmits the alarm signal from the LF transmission unit 209 to the portable device. 10 to send.

  When the warning signal is received, the control unit 101 of the portable device 10 generates an alarm command that is a warning notification command and outputs the alarm command to the warning lamp 13 via the output I / F 107. The warning lamp 13 blinks the warning lamp 13 in accordance with the inputted alarm command.

  Here, an example of the alarm lamp 13 has been described as the portable device notification unit, but the present invention is not limited to this. For example, the portable device 10 may be provided with a buzzer that generates an alarm sound, and this may be used as a portable device notification unit. Further, for example, another terminal capable of communicating with the portable device 10 such as a smartphone owned by the user may be used as the portable device notification unit. In that case, the control unit 101 transmits the generated alarm command to the terminal via the RF transmission unit 105. The terminal that has received the alarm command may display, for example, an alarm that notifies the presence of the relay device on the display screen in characters.

As described above, in Modification 4,
(11) When the collation of the collation unit 202 is not established, that is, when the portable device side counter code is the same as or smaller than the in-vehicle device side counter code or when the portable device side counter code B does not coincide with the in-vehicle device side counter code D The LF transmission unit 209 (on-vehicle device transmission unit) transmits an alarm signal to the portable device 10 possessed by the user. The portable device 10 includes an alarm lamp 13 (portable device notification unit) that notifies a user who has the portable device 10 of a warning in response to an alarm signal transmitted from the in-vehicle device 20.

  When an unauthorized operation signal is transmitted from a relay machine such as Rolljam, the user may be away from the vehicle. Even in such a case, by notifying the warning from the portable device 10, it is possible to increase the possibility that the user will notice a third party's fraud.

K keyless entry system for vehicles (keyless system)
10 Mobile device 20 On-vehicle device 11 Lock button (operation part)
12 Unlock button (operation unit)
13 Alarm lamp (portable device alarm section)
100 CPU
101 Control unit 102 Update unit (portable device update unit)
103 storage unit (mobile device storage unit)
104 LF reception unit 104a LF reception antenna 105 RF transmission unit (portable device transmission unit)
105b RF transmitting antenna 106 Input I / F
107 Output I / F (portable device notification unit)
200 CPU
201 Control Unit 202 Verification Unit 203 Update Unit (In-vehicle Device Update Unit)
204 Storage unit (onboard unit storage unit)
205 RF receiving unit 205a RF receiving antenna 206 Input I / F
207 Various switches 208 Door open / close sensor 209 LF transmitter (on-vehicle device transmitter)
209a LF transmitting antenna 210 Door lock I / F
211 Horn I / F (in-vehicle device notification unit)
212 Hazard I / F (in-vehicle device notification unit)
213 Communication I / F
214 Door lock actuator 215 horn (in-vehicle device notification unit)
216 Hazard lamp (in-vehicle device notification unit)
217 Various in-vehicle equipment

Claims (13)

A portable device owned by the user;
A vehicle-less keyless entry system having an in-vehicle device mounted on a vehicle and performing communication control with the portable device and controlling operation of the in-vehicle equipment,
The portable device is
An operation unit for accepting an operation request for locking or unlocking the vehicle by a user;
A portable device storage unit for storing the first and second counter codes on the portable device side;
When the operation unit accepts the operation request, a portable device transmission unit that transmits an operation signal including first and second counter codes on the portable device side to the in-vehicle device;
A portable device updating unit that updates the first counter code on the portable device side when transmitting the operation signal,
The in-vehicle device is
An in-vehicle device storage unit for storing the first and second counter codes on the in-vehicle device side;
A collation unit that collates the first and second counter codes on the portable device side included in the operation signal with the first and second counter codes on the vehicle unit stored in the vehicle unit storage unit;
When verification of the verification unit is established, a control unit that controls the operation of locking or unlocking the door of the vehicle;
When the collation of the collation unit is established, the in-vehicle device update unit that updates the first counter code on the on-vehicle device side;
An in-vehicle device transmission unit that transmits a response request signal to the portable device during a predetermined operation of the vehicle;
With
In the passive communication between the portable device and the in-vehicle device that is started by the transmission of the response request signal, the portable device updating unit and the in-vehicle device updating unit are respectively a second counter code on the portable device side and the in-vehicle device. A keyless entry system for a vehicle, wherein the second counter code on the aircraft side is updated.   The collation unit determines that collation has been established based on a determination as to whether or not the second counter code on the portable device side matches the second counter code on the vehicle-mounted device side. The keyless entry system for vehicles according to claim 1.   3. The vehicle keyless according to claim 2, wherein the collating unit executes the determination when the first counter code on the portable device side is larger than the first counter code on the vehicle-mounted device side. Entry system.   Either one of the portable device and the vehicle-mounted device includes a counter code update request for the other update unit in a signal transmitted in the passive communication, and the other update unit is based on the counter code update request. The keyless entry system for vehicles according to any one of claims 1 to 3, wherein the updating is performed.   5. The vehicle keyless entry system according to claim 4, wherein the one transmission unit transmits a count-up request for counting up the other second counter code to the other update unit as the counter code update request. The other transmission unit transmits an update completion notification to the one after the other update unit updates the other second counter code,
5. The vehicle keyless entry system according to claim 4, wherein when the one update unit receives the update completion notification, the one update unit performs the update by counting up the one second counter code. The other transmitter transmits an update completion notification including the updated second counter code to the one update unit after the other update unit has updated the other second counter code. Send
When the one update unit receives the update completion notification, the one update unit overwrites the one second counter code with the updated second counter code included in the update completion notification. The vehicle keyless entry system according to claim 4.   The portable device update unit and the in-vehicle device update unit are respectively connected to the portable device side in passive communication when an operation of closing the door as a predetermined operation of the vehicle is performed after locking or unlocking the door of the vehicle. The keyless entry system for vehicles according to any one of claims 1 to 7, wherein the second counter code and the second counter code on the in-vehicle device side are updated. The portable device storage unit and the in-vehicle device storage unit store an ID code given to the portable device,
In the passive communication,
The portable device transmission unit transmits a response signal including the ID code in response to the response request signal transmitted from the in-vehicle device,
The collation unit of the in-vehicle device collates the ID code included in the response signal with the ID code stored in the in-vehicle device storage unit,
When the ID code included in the response signal matches the ID code stored in the in-vehicle device storage unit, the in-vehicle device transmission unit transmits an authentication signal to the portable device,
In the passive communication,
The in-vehicle device transmission unit includes a counter code update request in the response request signal or the authentication signal,
The portable device update unit updates the second counter code on the portable device side based on the counter code update request,
The portable device transmission unit transmits an update completion notification to the in-vehicle device after updating the second counter code on the portable device side,
3. The keyless entry system for a vehicle according to claim 1, wherein the in-vehicle device update unit updates the second counter code on the in-vehicle device side when receiving the update completion notification. The portable device storage unit and the in-vehicle device storage unit store an ID code given to the portable device,
In the passive communication,
The portable device transmitting unit transmits a response signal including the ID code in response to a response request signal transmitted from the in-vehicle device,
The collation unit of the in-vehicle device collates the ID code included in the response signal with the ID code stored in the in-vehicle device storage unit,
When the ID code included in the response signal matches the ID code stored in the in-vehicle device storage unit, the in-vehicle device transmission unit transmits an authentication signal to the portable device,
In the passive communication,
The portable device transmitter includes a counter code update request in the response signal, and the in-vehicle device update unit updates the second counter code on the in-vehicle device side based on the counter code update request,
The in-vehicle device transmission unit transmits an update completion notification to the portable device after updating the second counter code on the in-vehicle device side,
3. The keyless entry system for a vehicle according to claim 1, wherein the portable device updating unit updates the second counter code on the portable device side when receiving the update completion notification. 4. The in-vehicle device includes an in-vehicle device notification unit that notifies a warning,
11. The vehicle keyless entry system according to claim 1, wherein the in-vehicle device notification unit issues a warning when the verification of the verification unit is not established.   12. The vehicle keyless entry system according to claim 11, wherein the in-vehicle device notification unit blinks a hazard lamp or outputs a warning sound to a horn as the warning notification. When the verification of the verification unit is not established, the in-vehicle device transmission unit transmits an alarm signal to the portable device possessed by the user,
The portable device is
The vehicle according to any one of claims 1 to 12, further comprising a portable device notifying unit that notifies a user having the portable device of a warning in response to an alarm signal transmitted from the in-vehicle device. Keyless entry system.

Images