JP2019070258A - Verification system for vehicle and electronic key system for vehicle - Google Patents

Abstract

To provide a verification system for a vehicle that does not require a terminal having a position detection function to suppress illicit permission of an unlocking operation of a door lock of the vehicle.SOLUTION: The verification system for the vehicle comprises: communication parts 120, 140 for receiving a position estimation signal transmitted by an electronic key 2; a position estimation part 151 for estimating a position of the electronic key 2 on the basis of the position estimation signal received by the communication parts 120, 140; a locus decision part 152 for deciding a moving locus of the electronic key 2 on the basis of the position of the electronic key 2 sequentially estimated by the position estimation part 151; a determination part 153 for determining whether or not the moving locus decided by the locus decision part 152 is a normal locus when a user carrying the electronic key 2 approaches the vehicle by walking; and a permission part 154 for permitting an unlocking operation of the door lock of the vehicle 3 on the basis of a successful verification of the electronic key 2 and the determination by the determination part 153 that the moving locus is the normal locus.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a vehicle verification system for verifying electronic keys, and a vehicle electronic key system including a vehicle verification system and an electronic key.

  Although the electronic key and the electronic key and the verification system mounted on the vehicle are relayed, the verification system is relayed, even though the electronic key is not present in the external verification area set around several meters in the vicinity of the vehicle door. In some cases, it may be determined that the verification has been established. If the verification system determines that the verification is established by the relayed radio wave, the lock of the vehicle door is unlocked even though the user of the vehicle is not near the vehicle, and the vehicle is stolen.

  There is known a technique for estimating the position of the electronic key in order to prevent the vehicle theft due to this method. In the technology disclosed in Patent Document 1, the electronic key receives the position of the vehicle from the on-board unit, and transmits the received position to a terminal having a position detection function such as a smartphone carried by the user along with the electronic key. Do.

  The terminal provided with the position detection function estimates the position of the own terminal as the position of the electronic key, and measures the distance between the vehicle and the own terminal from the position of the own terminal and the position of the vehicle. If this distance is equal to or greater than the threshold value, the electronic key is not permitted to send a response signal back to the on-board unit.

JP, 2016-155526, A

  The technology disclosed in Patent Document 1 requires a terminal provided with a position detection function such as a smartphone. Therefore, it becomes a problem how to handle the process when you forget to possess this terminal. Therefore, it is desirable for the vehicle verification system to specify the position of the electronic key using a radio wave emitted by the electronic key without requiring a terminal having a position detection function.

  In the case of specifying the position of the electronic key using the radio wave emitted by the electronic key, there is a possibility that the fraud may be more easily performed than the technique disclosed in Patent Document 1. For example, when using radio wave intensity for position estimation of the electronic key, the relay device adjusts the radio wave intensity to be the same level as the radio wave intensity received by the in-vehicle verification system when the electronic key is located in the external collation area. In some cases, fraud may become possible.

  The present disclosure has been made based on the above circumstances, and the purpose of the present disclosure is to permit unauthorized unlocking operation of a vehicle door lock without requiring a terminal having a position detection function. An object of the present invention is to provide a vehicle verification system and an electronic key system for vehicles that can suppress such a problem.

  The above object is achieved by a combination of the features of the independent claims, and the subclaims define further advantageous embodiments. The reference numerals in parentheses described in the claims indicate the correspondence with specific means described in the embodiments described later as one aspect, and do not limit the disclosed technical scope.

One disclosure for achieving the above object is
A vehicle verification system that communicates with an electronic key (2) carried by a user of a vehicle (3) to determine whether electronic key verification is established,
A communication unit (120, 140) for receiving a position estimation signal transmitted by the electronic key;
A position estimation unit (151) for estimating the position of the electronic key based on the position estimation signal received by the communication unit;
A trajectory determination unit (152) for determining a movement trajectory of the electronic key based on the position of the electronic key sequentially estimated by the position estimation unit;
A determination unit (153) that determines whether the movement trajectory determined by the trajectory determination unit is a normal trajectory when a user carrying an electronic key walks and approaches a vehicle;
And a permission unit (154) for permitting the unlocking operation of the door lock of the vehicle based on the fact that the collation of the electronic key is established and the determination unit determines that the movement trajectory is a normal trajectory.

  The vehicle verification system permits the unlocking operation of the door lock of the vehicle based on the determination that the movement trajectory is a normal trajectory in addition to the verification of the electronic key being established. For those who intend to steal the vehicle, it is more difficult to reproduce a normal movement trajectory determined from a plurality of positions than a position. Therefore, it is suppressed that the unlocking operation of the door lock of the vehicle is illegally permitted by setting the condition that the unlocking operation of the door lock of the vehicle is permitted by determining that the movement locus is the normal trajectory. it can.

BRIEF DESCRIPTION OF THE DRAWINGS It is a whole block diagram of the electronic key system 1 for vehicles of embodiment. It is a block diagram which shows the structure of the electronic key 2 of FIG. It is a flowchart which shows the process which collation ECU150 of the vehicle-mounted collation system 100 performs. It is a figure explaining the method of position estimation performed by S4 of FIG. 5 is a flowchart showing processing executed by the key control unit 24 of the electronic key 2; It is a flowchart which shows the process which collation ECU150 of the vehicle-mounted collation system 100 performs.

Embodiment
Hereinafter, embodiments will be described based on the drawings.

[overall structure]
FIG. 1 is an overall configuration diagram of a vehicle electronic key system 1. The vehicle electronic key system 1 includes an electronic key 2 carried by a user and an on-vehicle verification system 100 mounted on a vehicle 3. The on-vehicle verification system 100 corresponds to the vehicle verification system in the claims.

  Even if the user does not operate the electronic key 2, the electronic key system 1 for vehicle communicates between the electronic key 2 and the in-vehicle verification system 100 to perform code verification, and based on the verification being established. , And a system for permitting operation of a predetermined on-vehicle device. The predetermined on-vehicle device is, for example, a driving force source such as a door lock mechanism provided on the door of the vehicle 3 or an engine.

[Configuration of in-vehicle verification system 100]
The on-vehicle verification system 100 includes a first array antenna 110, a first communication unit 120, a second array antenna 130, a second communication unit 140, a verification ECU 150, an unlock sensor 160, a lock sensor 170, and a push start button 180.

  The first array antenna 110 is an array antenna including three antenna elements 111a, 111b, and 111c. Hereinafter, when the three antenna elements 111a, 111b, and 111c are not distinguished from one another, they are described as the antenna element 111. The antenna element 111 is adjusted to an electrical length for transmitting and receiving radio waves in the RF band. Specifically, the RF band is, for example, 315 MHz or 920 MHz. A dielectric may be disposed at the end of the antenna element 111 to reduce the height.

  The three antenna elements 111a, 111b, and 111c included in the first array antenna 110 are disposed at intervals determined based on the wavelength of radio waves to be transmitted and received. Specifically, the three antenna elements 111a, 111b, and 111c are arranged at equal angular intervals in a circle having a radius determined based on the wavelength of the radio wave to be transmitted and received.

  The first communication unit 120 is a transmitting and receiving circuit that transmits and receives radio waves using the first array antenna 110. The first communication unit 120 includes a modulator, a demodulator, an amplifier, an AD converter, and the like.

  The second array antenna 130 has the same configuration as the first array antenna 110, and includes three antenna elements 131a, 131b, and 131c. Hereinafter, when the three antenna elements 131a, 131b, and 131c are not distinguished from one another, they are described as the antenna element 131. The electrical length and the arrangement of the three antenna elements 131a, 131b, and 131c are the same as the antenna element 111 provided in the first array antenna 110.

  The second communication unit 140 is a transmission / reception circuit that transmits / receives radio waves using the second array antenna 130, and the configuration is the same as that of the first communication unit 120.

  The installation positions of the first array antenna 110 and the second array antenna 130 can be various positions. It is preferable that the first array antenna 110 and the second array antenna 130 be arranged at different positions in the front-rear direction of the vehicle 3. The reason is as follows.

  When the user carrying the electronic key 2 approaches the vehicle 3, the user approaches the vehicle 3 from the side of the vehicle 3. When the positions of the first array antenna 110 and the second array antenna 130 in the front-rear direction of the vehicle 3 are different, when the electronic key 2 is located on the side of the vehicle 3, two array antennas 110 and 130 are used. The difference in the direction of the electronic key 2 to be estimated can be increased. As a result, the positional accuracy of the electronic key 2 estimated from two directions can be increased. Therefore, it is preferable to arrange the first array antenna 110 and the second array antenna 130 at positions different from each other in the front-rear direction of the vehicle 3.

  For example, the first array antenna 110 is disposed on the front side of the vehicle 3 with respect to the center of the vehicle 3 in the front-rear direction, and the second array antenna 130 is disposed on the rear side of the vehicle 3 with respect to the center of the vehicle 3 in the front-rear direction . The first array antenna 110 is disposed on the front side of the vehicle 3 as much as possible. For example, it is disposed on the upper surface of the hood of the vehicle 3. When it is difficult to arrange in the bonnet, the front end of the roof outer surface, or the front end of the roof rear side in the passenger compartment, etc. is an arrangement example of the first array antenna 110.

  On the other hand, the second array antenna 130 is disposed on the rear side of the vehicle 3 as much as possible. For example, it is arranged on the top of the trunk of the vehicle 3. Alternatively, the rear end of the roof outer surface, the rear end of the roof rear side in the vehicle interior, and the like are arrangement examples of the second array antenna 130.

  The unlock sensor 160 is a sensor that is installed at or near the door handle of the vehicle 3 and that the user touches when unlocking the door of the vehicle 3. The lock sensor 170 is installed at or near the door handle of the vehicle 3 and is a sensor that the user touches when the door of the vehicle 3 is locked. The push start button 180 is a button operated by the user when the drive source of the vehicle 3 is turned on, and is disposed in the compartment of the vehicle 3. The drive source of the vehicle 3 is, for example, one or both of an engine and a motor. The on state of the engine is the state in which the engine is driven, and the on state of the motor is the state in which the rotation of the motor is permitted.

  Verification ECU 150 is a computer provided with a CPU, a ROM, a RAM, and the like, and the CPU executes a program stored in a non-transitional tangible storage medium such as a ROM while using a temporary storage function of the RAM. . Thereby, collation ECU150 performs various control.

  The functions executed by the verification ECU 150 include the position estimation unit 151, the trajectory determination unit 152, the determination unit 153, and the permission unit 154 illustrated in FIG. The function executed by the verification ECU 150 will be described later with reference to FIGS. 3, 5 and 6. In addition, that CPU runs the said program means that the method corresponding to a program is performed. Further, part or all of the functions executed by the verification ECU 150 may be configured as hardware by one or more ICs or the like.

[Configuration of electronic key 2]
As shown in FIG. 2, the electronic key 2 includes a communication unit 21, a locking switch 22, an unlocking switch 23, and a key control unit 24. In addition to this, a door open / close switch, a mechanical key or the like may be provided.

  The communication unit 21 is configured to be able to communicate with the first communication unit 120 and the second communication unit 140 included in the in-vehicle verification system 100. Specifically, the communication unit 21 includes an antenna for transmitting and receiving the same frequency as the first array antenna 110 and the second array antenna 130, a modulator, a demodulator, an amplifier, an AD converter, and the like.

  The lock switch 22 and the unlock switch 23 are disposed on the surface of the electronic key 2 and can be pressed by the user. The locking switch 22 is a switch pressed by the user when instructing to unlock the door lock of the vehicle 3. The unlocking switch 23 is a switch pressed by the user when instructing locking of the door lock of the vehicle 3.

  The key control unit 24 is a computer provided with a CPU, a ROM, a RAM, and the like, and the CPU uses a temporary storage function of the RAM and at the same time stores a program stored in a non-transitional tangible storage medium such as a ROM. Run. As a result, the key control unit 24 performs various controls. Execution of the program by the CPU means that a method corresponding to the program is executed. Further, part or all of the functions executed by the key control unit 24 may be configured as hardware by one or more ICs or the like.

  The key control unit 24 analyzes received data, for example. Specifically, the signal demodulated by the communication unit 21 is analyzed, and it is determined whether the signal is a signal transmitted by the in-vehicle verification system 100 or not.

  Further, the key control unit 24 generates a signal to be transmitted, and outputs the generated signal to the communication unit 21. The signal to be generated is, for example, a comparison signal or a position estimation signal. Also, when the locking switch 22 is pressed, a signal instructing locking of the door lock of the vehicle 3 is generated, and when the unlocking switch 23 is pressed, the door lock of the vehicle 3 is unlocked. A signal is generated to indicate that A more detailed description of the process executed by the key control unit 24 will be described later.

Fraud prevention processing
The vehicle electronic key system 1 executes an injustice preventing process to prevent the collation being falsely established even though the person holding the electronic key 2 does not exist near the vehicle 3. Next, the fraud prevention process will be described.

  FIG. 3 shows processing that the verification ECU 150 executes when the electronic key 2 is present outside the vehicle 3. Verification ECU 150 repeatedly executes the process shown in FIG. 3 in a constant cycle when electronic key 2 is present outside vehicle 3. When the electronic key 2 can not be detected in the vehicle 3, the verification ECU 150 determines that the electronic key 2 is outside the vehicle 3.

  In FIG. 3, in step (hereinafter, step is omitted) S1, it is determined whether or not a preset polling cycle has elapsed since the previous execution of FIG. The polling cycle can be the cycle to detect the electronic key 2 and can be set arbitrarily.

  If the determination in S1 is YES, the process proceeds to S2, and if NO, the process proceeds to S3. In S2, polling is performed. Specifically, a polling signal is transmitted from one of the first communication unit 120 and the second communication unit 140. Note that polling signals may be alternately transmitted from the first communication unit 120 and the second communication unit 140.

  Although depending on the reception sensitivity of the electronic key 2, the electronic key 2 can receive the polling signal even if it is several tens of meters away from the vehicle 3. This is because the polling signal is transmitted by radio waves in the RF band. The range in which the electronic key 2 can receive the polling signal is, for example, approximately 50 m to 100 m from the vehicle.

  When the electronic key 2 receives the polling signal, the electronic key 2 sends back a signal for position estimation. The position estimation signal includes the ID of the electronic key 2. At S3, it is determined whether the position estimation signal has been received. If this judgment is YES, it will progress to S4, and if NO, it will progress to S6.

  At S4, the position of the electronic key 2 is estimated based on the position estimation signal. In this S4, first, the arrival direction of the position estimation signal is estimated for each of the array antennas 110 and 130. Various methods can be used for direction of arrival estimation by the array antennas 110 and 130. For example, a method of estimating the arrival direction from the distance between the antenna elements 111 and 131 and the phase difference or arrival time difference of radio waves received by the antenna elements 111 and 131, the MUSIC method, the ESPRIT method or the like can be used. When the array antennas 110 and 130 are adaptive array antennas, beam formers can also be used.

  Subsequently, the incoming direction line L is determined. The direction of arrival line L is a straight line extending from the array antennas 110 and 130 in the direction of arrival of the position estimation signal estimated based on the radio waves received by the array antennas 110 and 130.

  FIG. 4 shows an incoming direction line L 1 corresponding to the first array antenna 110 and an incoming direction line L 2 corresponding to the second array antenna 130. The origin point of the arrival direction line L1 is the center of gravity of the first array antenna 110, and the origin point of the arrival direction line L2 is the center of gravity of the second array antenna 130. Then, it is estimated that the intersection of the arrival direction lines L1 and L2 is the position where the electronic key 2 is present.

  In the subsequent S5, the movement trajectory is updated. The movement trajectory is a combination of the positions estimated in S4 for the same electronic key 2.

  In S6, it is determined whether or not there is an unlocking operation. That is, it is determined whether the unlock sensor 160 has detected the user's operation. If this judgment is YES, it will progress to S7, and if it is NO, it will progress to S11.

  In S7, a collation process is performed. Specifically, a signal requesting a code is transmitted from the communication units 120 and 140 to the electronic key 2, and in response to the signal, the code transmitted from the electronic key 2 is collated. Note that this matching process may be performed when it is determined that the electronic key 2 has entered the outside matching area Ao shown in FIG. The external collation area Ao shown in FIG. 4 is an area set to the side of the vehicle 3. The horizontal shape of the external collation area Ao is a semi-circle having a radius of 1 to several meters in contact with the side surface of the vehicle 3. Note that this shape is an example, and the shape of the external collation area Ao can be set arbitrarily, such as a rectangular shape.

  In S8, it is determined whether the result of the collation process in S7 is that the collation is OK. If the verification is not established, the process proceeds to S11, and if the verification is OK, the process proceeds to S9.

  In S9, it is determined whether or not the movement trajectory is normal. If the movement locus is a locus which approaches the vehicle 3 and reaches the door of the vehicle 3 sequentially from the outside of the external collation area Ao or after entering the external collation area Ao, the movement locus is normal to decide. Naturally, it is also considered that the latest position of the electronic key 2 is within the reach of the unlock sensor 160.

  Furthermore, whether or not the movement trajectory is normal also takes into consideration the movement speed and orientation change amount of one electronic key 2 that can be estimated from the movement trajectory. When the moving speed exceeds the speed that the user who is walking is capable of, it is determined that the moving track is not normal even if the shape of the moving track is normal. Also, when the update length of the movement locus of each time is discontinuous, it is determined that the movement locus is not normal.

Judgment of discontinuity can be set suitably. For example, assuming that the movement amount of the electronic key 2 in each time is d (n) and the movement amounts in the previous and subsequent times are d (n-1) and d (n + 1), either one of equation 1 and equation 2 or When both are not established, it is judged as discontinuous. Here, α is 2, for example.
(Expression 1) (1 / α) <d (n + 1) / d (n) <α
(Expression 2) (1 / α) <d (n) / d (n−1) <α
If the determination in S9 is NO, the process proceeds to S11, and if YES, the process proceeds to S10. At S10, the door lock ECU 5 transmits a signal instructing the door lock ECU 5 to unlock the door lock.

  In S11, it is determined whether the position estimation signal is being received periodically. If the determination in S11 is YES, that is, if the position estimation signal is periodically received, it is not necessary to perform polling, so the process returns to S3. On the other hand, if the determination in S11 is NO, the process of FIG. 3 is ended, and when the execution timing of FIG. 3 comes, S1 is executed again.

  FIG. 5 shows the process executed by the key control unit 24 of the electronic key 2. The key control unit 24 periodically executes the process shown in FIG. 5 at a preset cycle. At S21, it is determined whether a polling signal has been received. If this judgment is YES, it will progress to S22, and if it is NO, it will progress to S28.

  At S22, a position estimation signal is transmitted. In continuing S23, it is judged whether the transmission period passed, after transmitting the signal for position estimation last time. The transmission cycle is a cycle that can determine whether the movement trajectory of the user carrying the electronic key 2 is normal. When trying to unlock the door of the vehicle 3 illegally by using the relay device, the movement locus suddenly shifts to the vicinity of the vehicle 3 from a distance of several tens of meters or more away from the vehicle 3, or a movement locus of a distance In the absence state, a trajectory may occur suddenly in the vicinity of the vehicle 3. The transmission cycle may be set so that such a track can be distinguished from a movement track when a regular user carrying the electronic key 2 approaches the vehicle 3. The transmission cycle is, for example, about several seconds, but may be about 0.3 seconds in accordance with the conventional polling cycle.

  If the determination in S23 is YES, the process proceeds to S24, and if NO, the process proceeds to S25. At S24, the position estimation signal is transmitted again. At S25, it is determined whether the transmission period has ended. If this judgment is NO, it will progress to S26, and if it is YES, it will progress to S28. The transmission period is a period necessary to generate a movement trajectory, and is, for example, 5 to 10 seconds.

  In S26, it is determined whether the collation is required. Specifically, in this determination, the verification process is performed in FIG. 3 to determine whether a signal requesting a code transmitted from the vehicle 3 has been received.

  If the determination in S26 is YES, the process proceeds to S27, transmits a verification signal including a verification code, and then returns to S23. If the determination in S26 is NO, the process returns to S23 without executing S27. By executing S23 to S25 again, the position estimation signal is transmitted for each transmission cycle during the transmission period.

  If the determination in S25 is YES, the process proceeds to S28. The determination in S28 is the same as in S26, and it is determined whether the collation is required. If this determination is YES, the signal for collation is transmitted in S29, and the processing of FIG. 5 is ended. On the other hand, if the determination in S28 is NO, the process in FIG. 5 is ended without executing S29.

  Once the process of FIG. 5 ends, after the execution cycle of FIG. 5 has elapsed, S21 is executed again. Therefore, if the electronic key 2 exists in the range where the polling signal can be received, the position estimation signal is continuously transmitted to the vehicle 3.

  By the processing shown in FIGS. 3 and 5, even if a person who intends to unlock the door of the vehicle 3 illegally using the relay device (hereinafter referred to as an illegal person) operates the unlock sensor 160, It can be suppressed that the door of the vehicle 3 is unlocked. The reason is specifically described.

  There are usually two fraudsters, one located near the vehicle 3 and the other located near the user who held the electronic key 2. A signal transmitted by the vehicle 3 is relayed by a first relay device possessed by a first fraudulent person located near the vehicle 3 and a second relay device possessed by a second fraudulent person located near the user And is received by the electronic key 2 possessed by the user. Since the electronic key 2 receives a signal from the vehicle 3, it sends a signal back.

  When the signal to be sent is directly relayed to the vehicle 3 without being relayed, it is not determined that the movement trajectory is normal because the position of the electronic key 2 is at a distance.

  In addition, when the signal to be sent back is relayed by the second relay device and the first relay device and received by the vehicle 3, the movement trajectory is suddenly generated in the vicinity of the vehicle 3, so the movement trajectory is normal. It will not be judged.

  In addition, even if an unauthorized person who possesses the first relay device moves to approach the vehicle 3 from a relatively long distance from the vehicle 3 in the same manner as a regular user, the movement trajectory is normal due to the following reason It is often not determined that

  That is, while the first relay device is located near the vehicle 3, the signal transmitted by the electronic key 2 relayed by the second relay device to the first relay device is received by the first relay device, but It is rare that 3 is not received. That is, the signal transmitted by the second relay device to the first relay device is likely to be received by the vehicle 3 as well. In addition, due to changes in the radio wave environment due to position and time, there is a high possibility that the position included in the movement locus is the position of the first relay device and the case where the position is the second relay device. . Also in this case, it is not determined that the movement trajectory is normal.

  From these facts, even if an unauthorized person operates the unlock sensor 160, it can be suppressed that the door of the vehicle 3 is unlocked.

  Furthermore, in the present embodiment, when it is determined that the electronic key 2 is present in the vehicle compartment, the verification ECU 150 executes the process shown in FIG. By the process shown in FIG. 6, it is possible to suppress an unauthorized person from traveling the vehicle 3.

  After the verification is established outside the vehicle 3, the verification ECU 150 opens the door of the vehicle 3 and then closes the door, but when the drive source is not in the ON state, the process shown in FIG. To run.

  S31 to S35 are the same as S1 to S5 in FIG. Therefore, polling is performed every polling period, and the position estimation signal is received, and the movement locus is updated every transmission period of the position estimation signal.

  If S35 is executed, or if the determination in S33 is NO, the process proceeds to S36. At S36, it is determined whether the push start button 180 has been pressed. If this judgment is NO, it will progress to S41, and if it is YES, it will progress to S37.

  In S37, the same collation processing as S7 of FIG. 3 is executed. In the following S38, it is determined whether or not the collation is established. The process of S38 is the same as S8. If the determination in S38 is NO, the process proceeds to S41, and if YES, the process proceeds to S39.

  In S39, it is determined whether the movement trajectory is normal. In the state of S39, the electronic key 2 should be in the vehicle. Therefore, in the determination of S39, the movement locus indicating that the electronic key 2 is hardly moved is normal. In addition, the fact that the latest position of the electronic key 2 is in the in-vehicle collation area Ai is also one of the conditions for judging that the movement locus is normal.

  FIG. 4 also shows an in-vehicle verification area Ai. The in-vehicle verification area Ai is set in the vehicle as an area not coming out of the vehicle 3. This in-vehicle verification area Ai corresponds to the conventional in-vehicle verification area, and may be set to an area within the same range as the in-vehicle verification area conventionally formed using the LF antenna installed in the cabin. .

  If the determination in S39 is NO, the process proceeds to S41, and if YES, the process proceeds to S40. At S40, a signal for permitting the turning on of the drive source is transmitted to the power source ECU 6.

  At S41, it is determined whether the position estimation signal is being received periodically. If the determination in S41 is YES, it is not necessary to perform polling, so the process returns to S3. On the other hand, if the determination in S41 is NO, the process of FIG. 6 is ended, and if the execution timing of FIG. 6 is reached, S31 is executed again.

  In the flowcharts shown in FIGS. 3, 5, and 6, S4 and S34 correspond to the position estimation unit 151, S5 and S35 correspond to the trajectory determination unit 152, and S9 and S39 correspond to the determination unit 153, S10 and S40 correspond to the permission unit 154.

[Summary of the embodiment]
As described above, in the on-vehicle verification system 100 according to the embodiment described above, in addition to the verification of the electronic key 2 being established, it is also a condition to permit unlocking of the door of the vehicle 3 that the movement trajectory is a normal trajectory. .

  For fraudsters, it is more difficult to reproduce normal ones of movement trajectories determined from multiple positions than positions. Therefore, the on-vehicle verification system 100 according to the present embodiment can suppress the unauthorized operation of unlocking the door lock of the vehicle.

  Furthermore, in the present embodiment, in addition to the matching of the electronic key 2 being established, the fact that the movement locus is a normal locus is also a condition that permits the turning on of the drive source.

  When a legitimate user carrying the electronic key 2 is out of the vehicle when an unauthorized person presses the push start button, but is located at a distance where the verification processing with the in-vehicle verification system 100 is possible. The latest position of the electronic key 2 indicated by the movement locus is not within the vehicle. Therefore, it is determined that the movement trajectory is not normal. Therefore, the turning on of the drive source is not permitted. Thus, theft of the vehicle 3 by an unauthorized person can be further suppressed.

  Further, in the present embodiment, polling is performed using radio waves in the RF band, and the electronic key 2 receives a signal for position estimation to be transmitted when the polling signal is received, and the in-vehicle verification system 100 receives the signal. Perform position estimation. As a result, since the movement locus can be created from the state where the electronic key 2 is located outside the external collation area Ao, a long movement locus can be created. As the movement locus is longer, it becomes more difficult for an unauthorized person to imitate a normal movement locus. Therefore, it can be further suppressed that an unauthorized person can open the door.

  Further, in the present embodiment, when the electronic key 2 receives the polling signal, the electronic key 2 periodically transmits the position estimation signal for a fixed time, and the on-vehicle verification system 100 periodically transmits the position estimation signal. While receiving, it did not transmit a polling signal. As a result, each time a polling signal is received, the number of times of transmission of the polling signal can be reduced as compared to the case where the position estimation signal is transmitted once. Thus, power consumption can be reduced.

  As mentioned above, although embodiment was described, the disclosed art is not limited to the above-mentioned embodiment, and the following modification is also contained in the range indicated, and also within the range which does not deviate from the gist besides the following. Various modifications can be made.

<Modification 1>
In the embodiment, the radio wave of the RF band is used both for transmitting the radio wave from the in-vehicle verification system 100 to the electronic key 2 and for transmitting the radio wave from the electronic key 2 to the in-vehicle verification system 100. However, as in the conventional case, the radio wave of the LF band may be used to transmit the radio wave from the on-vehicle verification system 100 to the electronic key 2.

<Modification 2>
In the embodiment, when the electronic key 2 receives a polling signal, the electronic key 2 periodically transmits a signal for position estimation for a transmission period (that is, a fixed time) set in advance, and the in-vehicle reference system 100 periodically transmits the signal for position estimation. If it is currently receiving, no polling signal is sent.

  However, the on-vehicle verification system 100 periodically transmits a polling signal regardless of whether or not the position estimation signal is received, and the electronic key 2 transmits the position estimation signal once every time the polling signal is received. It may be transmitted.

<Modification 3>
In the embodiment, the intersection of the incoming direction lines L1 and L2 determined using the two array antennas 110 and 130 is estimated as the position of the electronic key 2. However, the method of estimating the position of the electronic key 2 is not limited to the method using the array antennas 110 and 130. For example, the position measurement technique using UWB may estimate the position of the electronic key 2. Alternatively, the position of the electronic key 2 may be estimated by estimating the direction of arrival of radio waves with one array antenna and estimating the distance by RSSI.

<Modification 4>
In the embodiment, regardless of the distance between the vehicle 3 and the electronic key 2, the movement locus of the electronic key 2 is updated at a constant cycle. However, when the electronic key 2 is far from the vehicle 3, the update cycle of the movement trajectory may be longer than when the electronic key 2 is near the vehicle 3. For example, when the electronic key 2 is out of the external collation area Ao, the update cycle of the movement locus may be longer than when the electronic key 2 is in the external collation area Ao.

<Modification 5>
In the embodiment, when it is determined in S6 of FIG. 3 that the unlocking operation has been performed, it is determined whether the transfer locus created at that time is normal. However, when it is determined that the unlock operation has been performed, position estimation may be further performed, and the movement trajectory may be updated. Then, the movement locus when the unlocking operation is performed, that is, the movement locus including the time before and after the unlocking operation may be determined whether the electronic key 2 is moving or stopping. . In this case, when the movement locus indicates that the electronic key 2 is stopped when the unlocking operation is performed, it is determined that the movement locus is normal. This is because when the unlocking operation is performed, the user carrying the electronic key 2 should have stopped.

  On the other hand, when an unauthorized person relays a radio wave emitted by the electronic key 2 using a relay device, it is conceivable that a user carrying the electronic key 2 is walking. That is, when the unauthorized person relays the radio wave emitted by the electronic key 2 using the relay device, there is a possibility that the electronic key 2 is moving.

  Therefore, when the unlocking operation is performed, it is determined that the movement locus is normal when the movement locus indicates that the electronic key 2 is at a stop, the door of the vehicle 3 is determined by the injustice. It can be further suppressed that the lock is unlocked.

<Modification 6>
In addition, the movement locus may be created at a part of the estimated position without creating the movement locus using all the estimated positions. For example, the movement trajectory may be created using only the estimated position when the vehicle is in the external collation area Ao. Furthermore, the position estimation of the electronic key 2 may be performed for a certain period of time or a certain number of times after entering the vehicle exterior verification area Ao.

<Modification 7>
In the case where the matching process is performed before the unlocking operation is performed, the time for which the unlocking is permitted may be limited to a certain time from the time point when it is determined that the matching is normal and the movement trajectory is normal.

1: Electronic key system for vehicle 2: Electronic key 3: Vehicle 5: Door lock ECU 6: Power supply ECU 21: Communication unit 22: Locking switch 23: Unlocking switch 24: Key control unit 100: Vehicle verification system 110: 1st Array antenna 111: antenna element 120: first communication unit 130: second array antenna 131: antenna element 140: second communication unit 150: verification ECU 151: position estimation unit 152: locus determination unit 153: determination unit 154: permission unit 160: unlock sensor 170: lock sensor 180: push start button Ai: in-vehicle verification area Ao: external verification area L1: arrival direction line L2: arrival direction line

Claims (6)

A vehicle verification system that communicates with an electronic key (2) carried by a user of a vehicle (3) to determine whether the verification of the electronic key is established,
A communication unit (120, 140) for receiving a position estimation signal transmitted by the electronic key;
A position estimation unit (151) for estimating the position of the electronic key based on the position estimation signal received by the communication unit;
A trajectory determination unit (152) for determining a movement trajectory of the electronic key based on the position of the electronic key sequentially estimated by the position estimation unit;
A determination unit (153) that determines whether the movement trajectory determined by the trajectory determination unit is a normal trajectory when the user carrying the electronic key walks and approaches the vehicle;
A permission unit (154) for permitting the unlocking operation of the door lock of the vehicle based on the verification of the electronic key being established and the determination unit determining that the movement trajectory is the normal trajectory Vehicle verification system comprising   The permission unit indicates that the movement locus indicates that the electronic key is moving when a button (180) installed in a vehicle compartment of the vehicle and turning on a drive source of the vehicle is operated. 2. The vehicle verification system according to claim 1, wherein, when the electronic key verification is established, the drive source is not allowed to be turned on.   The permission unit determines that the electronic key has been verified, and the determination unit determines that the movement trajectory is the normal trajectory, and an unlocking operation is performed on the door of the vehicle. The vehicle verification system according to claim 1 or 2, wherein when the movement locus indicates that the electronic key is at a stop, the unlocking operation of the door lock of the vehicle is permitted. . It is a vehicle electronic key system provided with the collation system for vehicles of any one of Claims 1-3, and the said electronic key, Comprising:
The communication unit of the vehicle verification system periodically transmits a polling signal requesting a response to the electronic key by radio waves in an RF band,
The vehicle electronic key system, wherein the electronic key transmits the position estimation signal to the vehicle verification system based on the reception of the polling signal. The electronic key periodically transmits the position estimation signal for a fixed time after receiving the polling signal.
The vehicle electronic key system according to claim 4, wherein the communication unit stops transmission of the polling signal when periodically receiving the position estimation signal. The communication unit periodically transmits the polling signal.
The vehicle electronic key system according to claim 4, wherein the electronic key transmits the position estimation signal when the polling signal is received.

Images