JP2019012339A - Car sharing system - Google Patents

Abstract

To provide a car sharing system hardly causing a situation where an immobilizer function of a car share device is disabled even if registration is not yet completed.SOLUTION: A car share device 34 is registered to an electronic key system 4 by registering a car share device ID and a car share device unique key to a collation ECU 9 via an immobilizer communication. After the registration work, when a lock operation is performed to a vehicle door 14 by a mobile terminal 33, a lock request is transmitted to the car share device 34 from the mobile terminal 33. When locking operation of the vehicle door 14 is performed with the lock request as a trigger, if a disabling processing unit 60 receives a transmission radio wave Sr transmitted by an in-vehicle transmitter 17 (e.g. in-cabin smart collation is successful), the disabling processing unit determines that the registration is normally completed, and disables the immobilizer function of the car share device 34.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a car sharing system in which one vehicle is shared by a plurality of people.

  Conventionally, a car sharing system in which one vehicle is shared by a plurality of people is well known (see Patent Documents 1 and 2, etc.). In this type of car sharing system, for example, car share use is registered in advance, for example, a vehicle reservation is made with a mobile terminal (high function mobile phone or the like), and use of the vehicle is permitted within the reservation time. .

JP 2016-115077 A Japanese Patent Laying-Open No. 2006-71834

  By the way, in this type of car sharing system, a car sharing device that can be operated instead of an electronic key is mounted on a vehicle, and the electronic key system is installed by the car sharing device via communication between the portable terminal and the car sharing device. Those that operate and operate on-vehicle equipment are being studied. In the case of this system configuration, it is necessary to register the car sharing device in the electronic key system of the vehicle. This registration work is assumed to be performed through immobilizer communication using, for example, an immobilizer function provided in the car sharing device.

  If the immobilizer function of the car sharing device is left enabled after registering the car sharing device in the electronic key system, this is not good for security. Therefore, it is preferable to disable the immobilizer of the car sharing device after the registration work, but since the car sharing device cannot confirm whether the registration work has been completed normally, it is unconditionally after the registration work. If the immobilizer function is disabled, there is a problem that the re-registration work cannot be executed and the car sharing device is wasted.

  An object of the present invention is to provide a car sharing system that can make it difficult for a situation in which an immobilizer function of a car sharing device is disabled to be disabled even though registration is not completed.

  A car sharing system that solves the above-described problem is a method of authenticating the key information wirelessly between a portable terminal that can operate as a vehicle key of a shared vehicle by registering key information and a car sharing device mounted on the vehicle. When the user operates the in-vehicle device, the car share device that is in the authentication completion state performs communication through ID verification to the in-vehicle electronic key system. An invalidation process that disables the immobilizer function of the car sharing device through a process that can confirm that the registration has been normally completed after the registration work for registering the car sharing device in the electronic key system. With parts.

  According to this configuration, when registering the car sharing device in the electronic key system of the vehicle, the immobilizer function of the car sharing device is invalidated after confirming that this registration has been completed normally. Therefore, it is possible to make it difficult for a situation in which the immobilizer function of the car sharing device is switched to an invalid state even though registration is not completed.

  In the car sharing system, the immobilizer function is preferably used in a registration operation when registering the car share device in the electronic key system. According to this configuration, when the car sharing device is registered in the electronic key system, the registration work can be performed safely through immobilizer communication.

  In the car sharing system, the registration operation registers an electronic key ID and a key unique key used by the car sharing device when communicating with the portable terminal in a verification ECU that controls the operation of the electronic key system through immobilizer communication. It is preferable that the operation. According to this configuration, it is possible to safely register the electronic key ID and the key unique key used at the time of communication when operating the in-vehicle device in the electronic key system.

  In the car sharing system, when a key control request according to an operation at a registration terminal by an operator is transmitted from the registration terminal to the car sharing device, the car sharing device activates the electronic key system. A radio wave confirmation unit for confirming a transmission radio wave transmitted from the electronic key system at the time of ID verification by the system, and the invalidation processing unit performs registration work if the radio wave confirmation unit confirms that the transmission radio wave has been correctly received. It is preferable to invalidate the immobilizer function by determining that the image has been successfully completed. According to this configuration, if the ID verification of the electronic key system is established, it can be reliably determined that the registration has been completed normally, which is more advantageous for correctly disabling the immobilizer function.

  In the car sharing system, the key control request is preferably a lock request for requesting locking of a vehicle door. According to this configuration, the immobilizer function of the car sharing device can be invalidated through a simple operation of performing a lock operation of the vehicle door at the registration terminal.

  In the car sharing system, it is preferable that the electronic key system transmits the transmission radio wave in a manner corresponding to a state of a vehicle power supply. According to this configuration, the transmission radio wave is transmitted from the electronic key system only when the vehicle power supply takes a desired power supply state, and the immobilizer function can be invalidated. Therefore, since the power supply state is also used to determine whether or not to disable the immobilizer function, it is more advantageous to correctly disable the immobilizer function.

  In the car sharing system, it is preferable that a series of processes for monitoring the transmission radio wave and disabling the immobilizer function is performed using an electronic key in-vehicle detection function that the electronic key system has in advance. According to this configuration, it is possible to invalidate the immobilizer function of the car sharing device using the registration terminal without requiring addition of new parts.

  According to the present invention, it is possible to prevent a situation in which the immobilizer function of the car share device is switched to an invalid state even though registration is not completed.

The lineblock diagram of the car sharing system of one embodiment. The sequence diagram of the registration process of a car share apparatus. The sequence diagram of key information authentication. Timing chart when disabling the immobilizer of the car sharing device. The flowchart of the registration work which an operator performs. The flowchart of the operation | movement which the car share apparatus 34 performs at the time of registration work.

Hereinafter, an embodiment of a car sharing system will be described with reference to FIGS.
As shown in FIG. 1, the vehicle (share vehicle) 1 includes an electronic key system 4 that performs ID verification by radio with the electronic key 2 to execute or permit the operation of the in-vehicle device 3. The electronic key system 4 is a key operation-free system that executes ID collation by narrow-band radio in response to communication from the vehicle 1. The key operation free system automatically performs ID verification (smart verification) without directly operating the electronic key 2. The in-vehicle device 3 includes, for example, a door lock device 5 and an engine 6.

  The vehicle 1 includes a verification ECU (Electronic Control Unit) 9 that performs ID verification, a body ECU 10 that manages the power source of the on-vehicle electrical components, and an engine ECU 11 that controls the engine 6. These ECUs are electrically connected via a communication line 12 in the vehicle. The communication line 12 is, for example, a CAN (Controller Area Network) or a LIN (Local Interconnect Network). The electronic key ID of the electronic key 2 registered in the vehicle 1 is registered in the memory 13 of the verification ECU 9. The body ECU 10 controls the door lock device 5 that switches between locking and unlocking the vehicle door 14.

  The vehicle 1 includes an outdoor transmitter 16 that can transmit radio waves outdoors, an indoor transmitter 17 that can transmit radio waves indoors, and a radio receiver 18 that can receive radio waves in the vehicle 1. The outdoor transmitter 16 and the indoor transmitter 17 transmit radio waves in the LF (Low Frequency) band. The radio wave receiver 18 receives radio waves in the UHF (Ultra High Frequency) band. The electronic key system 4 is LF-UHF bidirectional communication. The radio receiver 18 is in a function-on state (can receive radio waves) when the vehicle power is off, and is off (in radio waves) when the vehicle power is on (for example, the ACC on state or the IG on state). (Reception not possible) state.

  The electronic key 2 includes a key control unit 21 that controls the operation of the electronic key 2, a reception unit 22 that receives radio waves in the electronic key 2, and a transmission unit 23 that transmits radio waves in the electronic key 2. The receiving unit 22 can receive LF radio waves. The transmitter 23 can transmit UHF radio waves. In the memory 24 of the key control unit 21, an electronic key ID unique to the electronic key 2 is registered.

  When the vehicle is parked (the vehicle door 14 is locked and the vehicle power supply is turned off), when the wake signal for activating the electronic key 2 is transmitted from the outdoor transmitter 16 by LF radio waves, the electronic key 2 When it enters the communication area and receives it, it starts from a standby state. At this time, the verification ECU 9 starts ID verification (outdoor smart verification) with the activated electronic key 2. This smart collation includes, for example, an electronic key ID collation for confirming whether the electronic key ID is correct or challenge response authentication using a key unique key (encryption key). When these verifications and authentications are established, the verification ECU 9 processes the ID verification as being established, and executes or permits the body ECU 10 to lock and unlock the vehicle door 14.

  The collation ECU 9 transmits a wake signal from the indoor transmitter 17 instead of the outdoor transmitter 16 when the user's boarding is detected by the door courtesy switch 27 or the like, for example. When the electronic key 2 receives this wake signal, ID collation (indoor smart collation) similar to that when outdoors is started. And if collation ECU9 confirms that indoor smart collation is materialized, the transition operation (engine starting operation) of the power supply state by the engine switch 28 provided in the driver's seat will be permitted.

  The electronic key system 4 includes an electronic key in-vehicle detection function that detects whether or not the electronic key 2 is left in the vehicle when the vehicle door 14 is locked. In the case of this example, the body ECU 10 includes a key vehicle interior detection unit 29 that performs an electronic key vehicle interior detection function. The key vehicle interior detection unit 29 performs indoor smart verification when a door lock operation is performed, for example, by operating a lock button provided on a door handle outside the vehicle door 14. When the key interior detection unit 29 confirms that indoor smart verification is established during the door lock operation, the key vehicle interior detection unit 29 determines that the electronic key 2 is misplaced in the vehicle and does not lock the vehicle door 14 and warns that the key is misplaced. To do. The electronic key 2 misplacement alarm is executed by, for example, an in-vehicle alarm unit 30. The alarm unit 30 includes a buzzer or a speaker, for example.

  The vehicle 1 includes a car sharing system 31 that shares one vehicle 1 with a plurality of people. In the car sharing system 31 of this example, the car sharing device 34 having the encryption key (car sharing device unique key) that can register the encrypted key information Kd from the server 32 to the portable terminal 33 and decrypt the key information Kd is provided. Key information Kd is transmitted from the portable terminal 33 that operates as a vehicle key (electronic key) to the mounted vehicle 1 and authenticated by the car sharing device 34. If the authentication is established, the operation of the in-vehicle device 3 is permitted. It is what is done.

  The car sharing device 34 is independent of the hardware configuration of the electronic key system 4 of the vehicle 1 and is retrofitted to the vehicle 1. For example, the car sharing device 34 is positioned as an electronic key that is valid only during a reserved time, and is handled in the same manner as a spare key. The electronic key system 4 (verification ECU 9) of the vehicle 1 recognizes that the electronic key appears or disappears in the vehicle by switching the validity / invalidity of the key function of the car sharing device 34. The car sharing device 34 is supplied with power from the battery + B of the vehicle 1.

  The server 32 includes a server application 37 that manages the operation of the car sharing system 31 in the server 32, and a key information generation unit 38 that generates key information Kd. The key information generation unit 38 is functionally generated by the server application 37, for example. The key information generation unit 38 generates key information Kd when, for example, a vehicle reservation is received from the mobile terminal 33 through network communication. The key information Kd is composed of information that is permitted only for temporary use, and more specifically, is composed of a one-time key that is permitted only once.

  The mobile terminal 33 includes a terminal control unit 42 that controls the operation of the mobile terminal 33, a network communication module 43 that enables network communication of the mobile terminal 33, and short-range wireless that enables short-range wireless communication of the mobile terminal 33. A module 44 and a memory 45 capable of rewriting data are provided. In the memory 45 of the portable terminal 33, a user authentication key used when performing short-range wireless communication with the car sharing device 34 by encrypted communication is registered. The near field communication is preferably, for example, Bluetooth (registered trademark). The user authentication key is made up of a random number whose value changes each time it is generated, for example, and may be registered in advance in the car sharing system 31 or may be generated when the vehicle is used and registered in a necessary member. It may be a thing.

  The mobile terminal 33 includes a user interface application 46 that manages the operation of the car sharing system 31 in the mobile terminal 33 and a share processing unit 47 that executes an operation of sharing the vehicle 1 in the mobile terminal 33. The share processing unit 47 is provided in the terminal control unit 42 and is functionally generated by the user interface application 46, for example.

  The car sharing device 34 includes a controller 50 that controls the operation of the car sharing device 34, a smart communication block 51 that enables smart communication of the car sharing device 34, and a short distance wireless communication that enables the car sharing device 34. The distance wireless module 52, a data rewritable memory 53, and a timer unit 54 that manages date and time in the car sharing device 34 are provided. In the memory 53, a car share device ID and a car share device unique key are written and stored in advance. The timer unit 54 is composed of, for example, a soft timer.

  The car sharing apparatus 34 has key information Kd registered in the memory 53. For example, the key information Kd generated by the server 32 is registered in the car sharing device 34 via the portable terminal 33. The key information Kd is composed of information that is permitted only for temporary use, and more specifically, is composed of a one-time key that is permitted only once.

  The car sharing device 34 includes a key function unit 56 that executes ID verification (in this example, smart verification) via the communication network of the car sharing device 34 through the smart communication block 51. The key function unit 56 is provided in the controller 50. The key function unit 56 makes it possible to operate the in-vehicle device 3 of the vehicle 1 shared by a plurality of people through ID verification that undergoes the same processing as the electronic key 2.

  The car sharing device 34 includes a user authentication function unit 57 that performs communication with the mobile terminal 33 when the on-vehicle device 3 is remotely operated by the mobile terminal 33. The user authentication function unit 57 is provided in the controller 50. The user authentication function unit 57 acquires the key information Kd generated externally (in this example, the server 32) via the mobile terminal 33 when the in-vehicle device 3 is operated on the mobile terminal 33, and the authentication of the key information Kd is performed. If the use is within the reserved time while being established, the key function unit 56 is enabled and the in-vehicle device 3 can be operated.

  The car sharing system 31 includes an immobilizer invalidation function that can invalidate the immobilizer function of the car share device 34. By the way, immobilizer communication is used in registering the car sharing device 34 in the electronic key system 4 (verification ECU 9). However, if the immobilizer function remains valid even after the registration work, this function can be abused. This is not preferable from the viewpoint of security. As a countermeasure, for example, a process of self-invalidating the immobilizer function of the car sharing device 34 after registration work is assumed.

  However, in the case of this countermeasure, if the immobilizer function of the car sharing device 34 is disabled unconditionally even though registration has failed due to noise or the like during registration work, the car sharing device 34 will be re-registered. Cannot be executed, and the car sharing device 34 is wasted. Therefore, in this example, after the registration work for registering the car sharing device 34 in the electronic key system 4, the immobilizer function of the car sharing device 34 is invalidated through a process for confirming that this registration has been completed normally.

  In the case of this example, the car sharing system 31 includes an invalidation processing unit 60 that executes an operation of an immobilizer invalidation function. The invalidation processing unit 60 is provided in the controller 50. The invalidation processing unit 60 of the present example performs an immobilizer function of the car sharing device 34 through a process of confirming that the registration is normally completed after the registration work for registering the car sharing device 34 in the electronic key system 4 (verification ECU 9). Disable.

  The registration operation of the car sharing device 34 is an operation of registering the car sharing device ID and the car sharing device unique key of the car sharing device 34 in the verification ECU 9 using immobilizer communication. Moreover, the disabling work of the immobilizer function is a work of disabling the immobilizer function of the car sharing device 34, and is preferably performed using the registration terminal 61, for example. The registration terminal 61 is preferably a terminal (for example, a high-function mobile phone) managed by a dealer or the like.

  The radio wave receiver 18 of the electronic key system 4 is turned on when the vehicle power is off, and turned off when the vehicle power is on (ACC on, IG on). Based on this, it is determined whether the immobilizer function is invalid by checking whether smart communication between the verification ECU 9 and the car sharing device 34 is established. In particular, the immobilizer invalidation function of this example sets whether or not the immobilizer function is invalid using an electronic key in-vehicle detection function.

  The car sharing system 31 includes a radio wave confirmation unit 62 that confirms the transmission radio wave Sr transmitted from the electronic key system 4 in the course of a series of operations for operating the in-vehicle device 3 using the registration terminal 61. The radio wave confirmation unit 62 is provided in the controller 50. The radio wave confirmation unit 62 of this example transmits a key control request according to an operation on the registration terminal 61 by an operator from the registration terminal 61 to the car sharing device 34 so that the car sharing device 34 operates the electronic key system 4. The transmission radio wave Sr transmitted from the electronic key system 4 (indoor transmitter 17) at the time of ID verification by the electronic key system 4 is confirmed. If the invalidation processing unit 60 can correctly receive the transmission radio wave Sr, the invalidation processing unit 60 determines that the registration work has been completed normally and invalidates the immobilizer function.

  In the case of this example, the key control request is a lock request for requesting locking of the vehicle door 14. The transmission radio wave Sr is a radio wave transmitted from the indoor transmitter 17 in order to confirm whether or not the electronic key 2 exists in the vehicle when the vehicle door 14 is locked. The transmission radio wave Sr is transmitted from the indoor transmitter 17 when the vehicle power source is in the IG off state, and is not transmitted from the indoor transmitter 17 when the vehicle power source is in the ACC state or the IG on state. Specifically, the transmission radio wave Sr is preferably a wake signal that activates the standby car sharing device 34 or a challenge code that is transmitted during challenge response authentication with the car sharing device 34.

  FIG. 2 illustrates a registration process sequence of the car sharing device 34. The registration process of the car sharing device 34 is performed when the car sharing device 34 is mounted on the vehicle 1, and the key registration tool 64 is used. The key registration tool 64 is a dedicated tool used when registering the car sharing device 34 in the vehicle 1 for sharing. During the registration process of the car sharing device 34, the key registration tool 64 is connected to the vehicle 1, and the registration operation is executed by the key registration tool 64, thereby registering the car sharing device 34 in the vehicle 1.

  In step 101, the car sharing device 34, the server application 37, and the key registration tool 64 start registration processing of the car sharing device 34 when a car sharing device registration request is input to the key registration tool 64. In the case of this example, the car sharing device 34, the server application 37, and the key registration tool 64 include the car sharing device ID given to each car sharing device 34 at the time of manufacture, and the vehicle ID of the vehicle 1 that registers the car sharing device 34. Execute the pegging work to link the. The vehicle ID is, for example, a vehicle number.

  In step 102, when the associating operation is completed, the key registration tool 64 executes a registration operation for registering the electronic key ID and the key unique key registered in the verification ECU 9 in the car sharing device 34. This registration operation is preferably executed through, for example, an on-board immobilizer system. The immobilizer system confirms the correctness of the tag (in this example, the car sharing device 34) through short-range wireless communication such as RFID (Radio Frequency IDentification). The electronic key 2 is also registered through the immobilizer communication when registering the electronic key 2 in the verification ECU 9.

  The registration operation of the car sharing device 34 is performed by performing a registration start operation with the key registration tool 64 and holding the car sharing device 34 over a short-range wireless antenna (not shown) of the vehicle 1. In this case, the car sharing device 34 transmits an acquisition request to the verification ECU 9 through the communication network of the immobilizer system. When the verification ECU 9 receives the acquisition request from the car sharing device 34, it returns the electronic key ID and the key unique key registered in itself to the car sharing device 34 through the communication network of the immobilizer system. The car sharing device 34 writes the electronic key ID and the key unique key received from the verification ECU 9 in its own memory 53.

  FIG. 3 illustrates a key information authentication sequence. Here, it is assumed that the electronic key ID and the key unique key are registered in advance in the memory 13 of the verification ECU 9 and the memory 53 of the car sharing device 34, respectively. Further, it is assumed that the key information Kd (one-time key) generated by the key information generation unit 38 is acquired in advance in the memory 45 of the mobile terminal 33 by making an inquiry to the server 32.

  In step 201, the share processing unit 47 and the user authentication function unit 57 perform communication connection in order to establish BLE (Bluetooth Low Energy) communication between the two parties. At this time, when the mobile terminal 33 receives an advertisement periodically transmitted from the car sharing device 34, a communication connection request is transmitted from the mobile terminal 33 to the car sharing device 34. Then, when the car sharing device 34 transmits a communication connection confirmation to the portable terminal 33, BLE communication between the portable terminal 33 and the car sharing device 34 is established.

In step 202, when the communication connection (BLE connection) is completed, the user authentication function unit 57 transmits a key information request for requesting notification of the key information Kd registered in the mobile terminal 33.
In step 203, in response to the key information request received from the car sharing device 34, the share processing unit 47 notifies the car sharing device 34 of the key information Kd (car sharing use start request) registered in itself. Send information notifications. At this time, the key information Kd transmitted to the car sharing device 34 is encrypted by a predetermined encryption key (for example, a car sharing device unique key) registered in the car sharing system 31 and transmitted.

  In step 204, the share processing unit 47 and the user authentication function unit 57 execute an authentication operation using the key information Kd. For example, this authentication work includes not only being able to correctly decrypt the key information Kd, but also being able to confirm whether or not various parameters included in the key information Kd are correct. Then, if this authentication work is established, the processing is continued, and if the authentication work fails, the connection of BLE communication is stopped.

  In step 205, the user authentication function unit 57 switches the key function unit 56 to the key function on state (the key function unit 56 is enabled) after the authentication work is established. As a result, the car sharing device 34 is in a state in which LF-UHF bidirectional communication is possible with the verification ECU 9 mounted on the vehicle.

  In step 206, the user authentication function unit 57 stores the key information Kd in the memory 53 of the car sharing device 34. Then, the user authentication function unit 57 shifts to an authentication completion state. When the car sharing device 34 enters the authentication completion state, the car sharing device 34 sets its own lending flag in use. As described above, the car sharing device 34 is in a state in which operations such as vehicle door locking / unlocking and engine starting can be performed.

  Here, in order to perform a lock operation of the vehicle door 14, after the authentication is completed, a lock button is displayed on the portable terminal 33 and this is selected and operated. When a lock operation is performed on the portable terminal 33, a lock request is transmitted as a key control request from the portable terminal 33 to the car sharing device 34 through short-range wireless communication. When the car sharing device 34 receives the lock request from the portable terminal 33, the car sharing device 34 transmits the lock request (including the electronic key ID) from the smart communication block 51 thereof by UHF.

  When the verification ECU 9 receives the lock request from the car sharing device 34, the verification ECU 9 verifies the electronic key ID included therein, and if the verification is established, causes the body ECU 10 to execute the locking operation of the vehicle door 14. Thereby, the vehicle door 14 is locked. Note that when the vehicle door 14 is unlocked with the portable terminal 33, the “lock” of the lock operation is merely replaced with “unlock”, and thus the description thereof is omitted.

  In order to start the engine 6 of the vehicle 1, the engine switch 28 is pushed and operated while the brake pedal is depressed. When the verification ECU 9 detects the engine start operation described above, the verification ECU 9 performs indoor smart verification with the car share device 34 in the authentication completed state. When the verification ECU 9 confirms that the indoor smart verification is established, the verification ECU 9 permits the engine 6 to be started. Thereby, the engine 6 can be started by operating the engine switch 28.

  Next, operations and effects of the car sharing system 31 (immobilizer function invalidation) which is an embodiment of the present invention will be described with reference to FIGS. Note that the immobilizer function invalidation work of this example is based on the assumption that the vehicle power supply is turned off.

  In step 501, when the registration terminal 61 detects a lock operation by the user at the registration terminal 61, the registration terminal 61 transmits a lock request as a key control request to the car sharing device 34 through short-range wireless communication. The lock operation performed at this time is the same operation as when the user switches the vehicle door 14 to the locked state with the portable terminal 33. The lock request in this example is transmitted from the short-range wireless module 69 of the registration terminal 61 to the car sharing device 34 by Bluetooth communication.

  In step 502, the user authentication function unit 57 receives the lock request transmitted from the mobile terminal 33 by the short-range wireless module 52. Then, the user authentication function unit 57 causes the key function unit 56 to perform a lock operation through the electronic key system 4 when receiving the lock request.

  In step 503, when the key function unit 56 receives the lock request transmitted from the mobile terminal 33 by the car sharing device 34, the key function unit 56 issues a lock request (including the electronic key ID) that requests the verification ECU 9 to start the lock operation. UHF transmission is performed from the smart communication block 51. In addition, after transmitting the lock request from the smart communication block 51, the radio wave confirmation unit 62 monitors whether or not the transmission radio wave Sr transmitted from the indoor transmitter 17 as an LF can be received as a response operation of the lock request. enter.

  In the case of FIG. 4, it is assumed that the vehicle power source is in an off state. Therefore, in step 504, the radio wave receiver 18 is in a function-on state because the vehicle power supply is in an off state, and therefore receives the lock request transmitted from the car sharing device 34.

  In step 505, when the verification ECU 9 receives the lock request transmitted from the car sharing device 34 in the UHF state, the verification ECU 9 executes indoor smart verification according to the electronic key in-vehicle detection function when the vehicle power is off. This indoor smart verification includes ID verification for confirming whether the electronic key ID is correct and challenge response authentication using a key unique key. At this time, the verification ECU 9 transmits the transmission radio wave Sr from the indoor transmitter 17 in order to confirm whether or not the indoor smart verification is established. The transmission radio wave Sr at this time is preferably a wake signal or a challenge response code, for example.

  In step 506, when the transmission radio wave Sr is transmitted from the indoor transmitter 17, the verification ECU 9 performs indoor smart verification based on the transmitted radio wave Sr. At this time, if the indoor smart verification is established, it can be determined that the car sharing device 34 is correctly registered in the verification ECU 9. In other words, it can be considered that the electronic key ID and the key unique key of the verification ECU 9 can be normally registered in the verification ECU 9 in the registration operation in the above-described step 102. Therefore, when the invalidation processing unit 60 transmits a lock request based on the locking operation by the operator, it confirms that the transmission radio wave Sr is correctly received from the indoor transmitter 17 (the indoor smart verification is established) as a response. If possible, the immobilizer function of the car sharing device 34 is invalidated. Therefore, thereafter, the car share device 34 cannot perform immobilizer communication.

FIG. 5 shows a flowchart of the registration work performed by the worker.
In step 601, the worker completes the registration work for registering the car sharing device 34 in the verification ECU 9. That is, immobilizer communication is executed between the vehicle 1 and the car sharing device 34, and the electronic key ID and the key unique key of the verification ECU 9 are registered in the car sharing device 34 through this communication.

In step 602, the worker fully closes the opened vehicle door 14. This is performed as a previous operation for locking the vehicle door 14.
In step 603, the operator performs a lock operation on the vehicle door 14 using the registration terminal 61. That is, the lock button 70 is displayed on the screen of the registration terminal 61, and by operating the lock button 70, a lock request is transmitted from the registration terminal 61 to the car sharing device 34 through short-range wireless communication. When the car sharing device 34 receives the lock request from the registration terminal 61, the car sharing device 34 transmits a lock request (including the electronic key ID) to the verification ECU 9 and locks the vehicle door 14 to the verification ECU 9 (body ECU 10). Detection function).

FIG. 6 shows a flowchart of operations performed by the car sharing device 34 during registration work.
In step 701, the user authentication function unit 57 confirms that the immobilizer communication for the work of registering the car sharing device 34 in the verification ECU 9 has been completed. That is, it is confirmed that the immobilizer communication for registering the electronic key ID and the key unique key of the verification ECU 9 in the car sharing device 34 is completed.

In step 702, the user authentication function unit 57 shifts to a reception waiting state for a lock request transmitted from the registration terminal 61 (lock request standby state).
In step 703, the user authentication function unit 57 determines whether a lock request has been received from the registration terminal 61. At this time, if a lock request is received, the process proceeds to step 704. If no lock request is received, the process returns to step 702.

  In step 704, when the car share device 34 receives the lock request transmitted from the registration terminal 61, the key function unit 56 transmits the lock request to the vehicle 1 (verification ECU 9) via the smart communication block 51. That is, a lock request is transmitted from the car sharing device 34 to the verification ECU 9 via the communication network of the electronic key system 4.

In step 705, the radio wave confirmation unit 62 shifts to a reception waiting state (transmission radio wave standby state) of the transmission radio wave Sr transmitted from the vehicle 1.
In step 706, the radio wave confirmation unit 62 determines whether or not the transmission radio wave Sr has been received from the vehicle 1 in the transmission radio wave standby state. At this time, if the transmission radio wave Sr has been received, the process proceeds to step 707, and if the transmission radio wave Sr has not been received, the process returns to step 705.

  In step 707, the invalidation processing unit 60 invalidates the immobilizer function of the car sharing device 34 on condition that the transmission radio wave Sr can be received from the vehicle 1. Thereby, since immobilizer communication cannot be performed by the car sharing device 34 thereafter, the immobilizer function of the car sharing device 34 is not abused.

  In the case of this example, when registering the car sharing device 34 in the electronic key system 4 (verification ECU 9) of the vehicle 1, it is confirmed that this registration has been completed normally (in this example, indoor smart verification is established). After that, the immobilizer function of the car sharing device 34 is invalidated. Accordingly, it is possible to make it difficult to cause a situation in which the immobilizer function of the car sharing device 34 is disabled even though the registration is not completed.

  The immobilizer function is used in registration work when registering the car sharing device 34 in the electronic key system 4 (verification ECU 9). Therefore, when the car sharing device 34 is registered in the electronic key system 4, the registration work can be performed safely through immobilizer communication.

  The registration work is a work for registering the electronic key ID and the key unique key used when the car sharing device 34 communicates with the portable terminal 33 in the verification ECU 9 that controls the operation of the electronic key system 4 through immobilizer communication. Therefore, the electronic key ID and the key unique key used during communication when operating the in-vehicle device 3 can be safely registered in the electronic key system 4.

  If the radio wave confirmation unit 62 confirms that the transmission radio wave Sr has been correctly received, the invalidation processing unit 60 determines that the registration work has been completed normally and invalidates the immobilizer function. Thus, if the reception of the transmission radio wave Sr can be received correctly, it can be determined that the ID verification of the electronic key system 4 has been established, which is more advantageous for correctly disabling the immobilizer function.

  The key control request is a lock request for requesting locking of the vehicle door 14. Therefore, the immobilizer function of the car sharing device 34 can be invalidated through a simple operation of performing the lock operation of the vehicle door 14 at the registration terminal 61.

  The electronic key system 4 transmits the transmission radio wave Sr in a manner corresponding to the state of the vehicle power supply. In the case of this example, the transmission radio wave Sr is transmitted from the electronic key system 4 (indoor transmitter 17) only when the vehicle power supply takes a desired power supply state (for example, a power-off state), and the immobilizer function is invalidated. It becomes possible. Therefore, since the power supply state is also used to determine whether or not to disable the immobilizer function, it is more advantageous to correctly disable the immobilizer function.

  A series of processes for monitoring the transmission radio wave Sr and invalidating the immobilizer function is executed using an electronic key in-vehicle detection function that the electronic key system 4 has in advance. Therefore, the immobilizer function of the car sharing device 34 can be invalidated using the registration terminal 61 without requiring addition of new parts.

Note that the embodiment is not limited to the configuration described so far, and may be modified as follows.
The disabling of the immobilizer function is not limited to a configuration using communication (indoor smart verification) of the electronic key system 4. For example, the immobilizer function can be disabled as appropriate by operating the door handle outside the vehicle as the in-vehicle device 3 in a predetermined pattern.

  -Invalidation of the immobilizer function is not limited to an aspect using a vehicle-mounted device (equipment). For example, the immobilizer function of the car sharing device 34 can be disabled using a dedicated registration tool.

-The process which can confirm that registration work was completed normally is not limited to smart collation establishment (indoor smart collation) of the electronic key system 4, and can be changed into various aspects.
The registration work can be changed to other modes other than the embodiment as long as it is a work for registering the car sharing device 34 in the existing electronic key system 4.

The registration terminal 61 may be changed to another terminal such as the mobile terminal 33 of the user.
The series of processing for monitoring the transmission radio wave Sr and disabling the immobilizer function is not limited to the configuration using the electronic key in-vehicle detection function that the electronic key system 4 has in advance, and may be independent from this Good.

  The key control request that becomes a trigger when disabling the immobilizer function is not limited to the lock request, and can be changed to another request such as an engine start permission request that requests permission or execution of the engine.

When registering the car sharing device 34 in the verification ECU 9, if this is a process using immobilizer communication, the processing content can be changed as appropriate.
The transmission radio wave Sr is not limited to being transmitted from the indoor transmitter 17 and may be transmitted from an antenna mounted on the vehicle.

The portable terminal 33 and the registration terminal 61 may be the same terminal.
The registration process of the car sharing device 34 is not limited to the process using the key registration tool 64, and may be a process not using this.

The key information Kd is not limited to being given by being encrypted with the car share device unique key, and may be given using another encryption key.
The content included in the key information Kd can be changed to a mode other than the embodiment.

The authentication operation in S204 (authentication using the key information Kd) is not limited to the example described in the embodiment, and can be changed to other modes.
The key information Kd is not limited to being generated by the server, and may be anywhere as long as it is external.

  The operation-free electronic key system 4 is not limited to a system that performs smart verification while arranging the transmitter inside and outside the vehicle and confirming the position of the electronic key 2. For example, a system may be used in which LF antennas are arranged on the left and right sides of the vehicle body and the position of the electronic key inside and outside the vehicle is determined by checking the response of the electronic key 2 to radio waves transmitted from these antennas.

The vehicle-mounted electronic key system 4 may be a wireless key system in which ID collation is executed with communication from the electronic key 2 as an opportunity, for example.
The electronic key 2 is not limited to a smart key (registered trademark), and may be a wireless key.

-Short-range wireless communication is not limited to Bluetooth communication, but can be changed to another communication method.
-The communication system and frequency used for each communication are not limited to the example described in the embodiment, and can be changed to others.

  The ID verification imposed on the electronic key system 4 is not limited to verification including challenge response authentication, and may be any authentication or verification as long as at least electronic key ID verification is performed.

The key information Kd is not limited to a one-time key, and may be information that is restricted in use.
The encryption key used for encryption communication may be any encryption key among, for example, a car sharing device unique key, a user authentication key, and a key unique key. For example, switching the encryption key used in the middle of the process is advantageous for ensuring communication security. Further, the encryption key to be used is not limited to the above-described key, and may be changed to various types.

-The mounting location of the car sharing device 34 is not particularly limited.
The mobile terminal 33 is not limited to a high-function mobile phone, and can be changed to various terminals.
Next, technical ideas that can be grasped from the above-described embodiment and other examples will be described below together with their effects.

  (A) In the car sharing system, the key information preferably includes a one-time key that is permitted to be used only once. According to this configuration, since the key information can be used only once, security against vehicle use can be ensured.

  (B) In the car sharing system, it is preferable that the key information is encrypted with a unique car share device unique key which the car share device has individually. According to this configuration, since the key information is sent by encrypted communication, it is possible to ensure security when assigning the key information.

  (C) In the car sharing system, the key information is preferably generated by a server that manages the share of the vehicle through network communication. According to this configuration, the key information can be generated safely on the server.

  (2) In the car sharing system, the user authentication function unit and the portable terminal perform encryption communication when the key function unit performs ID verification with the electronic key system, and when the vehicle is operated by the portable terminal. It is preferable that the encryption communication is functionally separated. According to this configuration, even if one encryption key of these encryption communications is stolen, this cannot be used for the other encryption communication. Therefore, it is further advantageous to ensure security against vehicle use.

  DESCRIPTION OF SYMBOLS 1 ... Vehicle (share vehicle), 2 ... Electronic key, 3 ... In-vehicle apparatus, 4 ... Electronic key system, 9 ... Verification ECU, 14 ... Vehicle door, 17 ... Indoor transmitter, 31 ... Car sharing system, 33 ... Portable terminal , 34: Car sharing device, 56: Key function unit, 57: User authentication function unit, 60: Invalid processing unit, 61: Registration terminal, 62: Radio wave confirmation unit, Kd: Key information, Sr: Transmission radio wave.

Claims (7)

The key information is registered between the portable terminal operable as a vehicle key of the shared vehicle and the car sharing device mounted on the vehicle, and authentication of the key information is performed wirelessly. When performed, the car sharing device that is in an authentication completed state is a car sharing system in which the in-vehicle device operates by performing communication through ID verification with respect to the in-vehicle electronic key system,
After registration work for registering the car sharing device in the electronic key system, an invalidation processing unit for invalidating the immobilizer function of the car sharing device is provided through a process for confirming that the registration has been normally completed. Car sharing system. The car sharing system according to claim 1, wherein the immobilizer function is used in a registration operation when registering the car sharing device in the electronic key system. The registration operation is an operation of registering an electronic key ID and a key unique key used when the car sharing device communicates with the portable terminal to a verification ECU that controls the operation of the electronic key system through immobilizer communication. Or the car sharing system of 2. When a key control request according to an operation on the registration terminal by an operator is transmitted from the registration terminal to the car sharing device and the car sharing device activates the electronic key system, the ID is checked by the electronic key system. Equipped with a radio wave confirmation unit that confirms the transmission radio wave transmitted from the electronic key system,
The invalidation processing unit determines that the registration operation has been completed normally if the radio wave confirmation unit confirms that the transmission radio wave has been correctly received, and invalidates the immobilizer function. The car sharing system according to any one of the above. The car sharing system according to claim 4, wherein the key control request is a lock request for requesting locking of a vehicle door. The car sharing system according to claim 4 or 5, wherein the electronic key system transmits the transmission radio wave in a manner corresponding to a state of a vehicle power supply. The series of processes for monitoring the transmission radio wave and disabling the immobilizer function is performed using an electronic key in-vehicle detection function that the electronic key system has in advance. The described car sharing system.