JP2020026672A - Portable machine, vehicle control device, and control system - Google Patents

Abstract

To prevent a vehicle control device from being operated illicitly by external tools.SOLUTION: A portable machine (1) includes: a signal generation unit (11) that makes a vehicle control device (2) start measuring time by transmitting a first keyless signal depending on predetermined input operation for an input unit (20); and a timer (12) that measures, only for a first period, a time lapse from when the input unit (20) receives the predetermined input operation or a time lapse from when the signal generation unit (11) transmits a keyless signal. The signal generation unit (11) transmits a second keyless signal including the number of counts as time information to the vehicle control device (2) when receiving the predetermined input operation.SELECTED DRAWING: Figure 1

Description

  The present invention relates to a portable device that transmits a signal to a vehicle control device that operates according to a control request included in a legitimate signal.

  Conventionally, vehicles equipped with a keyless entry (RKE) system have been developed. The keyless entry system includes a remote control possessed by a user, a vehicle control device, and a lock mechanism of the vehicle. The vehicle control device receives a signal (keyless signal) from the remote controller, and controls (unlocks or locks) the locking mechanism according to a request included in the signal. The keyless signal includes various codes for authentication, and the vehicle control device operates only in response to a request for unlocking or locking a signal that has been authenticated based on the code.

  However, in recent years, a crime (so-called "roll jam") has occurred in which a lock mechanism of a vehicle equipped with an RKE system is unlocked illegally and the vehicle is stolen. As a countermeasure against roll jam, for example, techniques described in Patent Document 1 and Patent Document 2 have been developed.

JP-A-2017-145569 (published August 24, 2017) JP-A-2017-128913 (published on July 27, 2017)

  Unauthorized acquisition of a keyless signal due to a roll jam can occur in any scene where a user operates a remote controller. However, the inventions described in Patent Literatures 1 and 2 are effective prevention measures only in limited scenes among scenes in which a roll jam may occur. On the other hand, a method of preventing a roll jam by attaching a time stamp to a keyless signal code has also been developed.

  FIG. 7 is a diagram illustrating a measure for preventing a roll jam using a time stamp. After stopping the vehicle, the user operates the remote controller toward the vehicle (FIG. 7A). In response to the user's operation of the remote controller, the remote controller transmits a keyless signal (first time) to the vehicle (more precisely, a vehicle control device inside the vehicle). The signal is time-stamped. In the figure, the time assigned to the first keyless signal is t2.

  A person who attempts a roll jam illegally acquires the first keyless signal using an external tool. The external tool prevents the vehicle control device from receiving the keyless signal by transmitting the jamming radio wave. Further, the external tool detects and acquires and stores the first keyless signal. Since the vehicle control device has not received the keyless signal, the vehicle is naturally not locked. Apparently, since the illegal acquisition of the keyless signal is not apparent, the user does not notice that the keyless signal has been illegally acquired, and operates the remote controller again to try locking the vehicle.

  FIG. 7B shows the operation of each device when the user operates the remote controller again. As shown, the remote control transmits a keyless signal (second time). The time interval between FIG. 7A and FIG. 7B is considered to be almost non-existent (about several seconds). Therefore, in the example of FIG. 11, the time included in the second keyless signal is also considered to be the same as t2. The external tool also transmits a jamming radio wave for the second keyless signal and acquires the second keyless signal.

  Then, the external tool transmits the first keyless signal acquired last time to the vehicle instead of the second keyless signal. The vehicle control device receives the first keyless signal. The vehicle control device measures the time by itself. As described above, the first keyless signal and the second keyless signal are transmitted at substantially the same time, so that the time (t2) of the first keyless signal and the time measured by the vehicle control device ( t2). Therefore, the vehicle control device authenticates the first keyless signal and locks the vehicle according to the signal.

  FIG. 7C shows the operation of each device when an attempt is made to unlock the vehicle using an external tool after FIG. 7B. After a short time from FIG. 7B, the user of the external tool operates the external tool and transmits the second keyless signal (time: t2) stored in the external tool to the vehicle control device. I do.

  The vehicle control device receives the second keyless signal, and compares the time (t2) included in the signal with the time measured by the own device. Here, unlocking of the vehicle with an external tool is not normally considered to be performed in front of the user. Therefore, a certain period of time (for example, a period of about several minutes for the user to leave) has elapsed from the state of FIG. 7B to the state of FIG. 7C.

  Therefore, the measurement time of the vehicle control device is a time (t3 in the illustrated example) that is earlier than t2. The vehicle control device does not authenticate the second keyless signal received from the external tool because the time measured by the own device does not match the time. Thereby, a roll jam can be prevented.

  However, when the technique shown in FIG. 7 is used, it is necessary to always operate a high-precision clock such as a crystal in order to accurately measure the time with a remote controller. Therefore, when this technique is used, there is a problem that the power consumption of the remote controller increases, and, for example, in the case of a battery-powered remote controller, the life of the battery is shortened.

  On the other hand, when the accuracy of time measurement by the remote controller is reduced due to concern about an increase in power consumption, it is necessary to allow a time error when determining whether the code is correct or not in the vehicle control device. In other words, the vehicle control device has to authenticate as a valid keyless signal if there is a certain time lag. Therefore, when the time difference between the illegally acquired keyless signals is within the error, the vehicle control device may determine that the keyless signal is a legitimate signal.

  In addition, when the technology shown in the figure is used, a time lag may occur between the vehicle control device and the remote control, and therefore, it is necessary to provide the vehicle control device and the remote control with a time synchronization function, which complicates the configuration. was there.

  One embodiment of the present invention has been made in view of the above problems, and has as its object to realize a portable device or the like that can prevent a vehicle control device from being illegally operated by an external tool.

  In order to solve the above problem, a portable device according to one embodiment of the present invention, when time information included in a received signal indicates a time later than a time measured by the own device, corrects the received signal. A portable control unit that transmits a signal to a vehicle control device that controls a vehicle load in accordance with a control request included in a legitimate signal, and a predetermined input to an input unit. A transmitting unit that causes the vehicle control device to start measuring the time by transmitting a first signal in response to the operation; and after the input unit receives the predetermined input operation, or A first timer that measures an elapsed time from the transmission of the signal for a first period, and wherein the transmission unit includes, as the time information, when the input unit receives the predetermined input operation again. Including the elapsed time And transmits it to the second signal to the vehicle controller.

  According to one embodiment of the present invention, it is possible to prevent the vehicle control device from being illegally operated by an external tool.

FIG. 2 is a block diagram illustrating a main configuration of a portable device and a vehicle control device included in the control system according to the first embodiment of the present invention. FIG. 3 is a diagram illustrating an example of a data structure of a signal. 4 is a flowchart illustrating a flow of processing of the portable device. It is a flowchart which shows the flow of a process of the said vehicle control apparatus. It is a flowchart which shows the flow of the authentication processing in the said vehicle control apparatus. FIG. 9 is a sequence diagram illustrating a flow of processing between the portable device and the vehicle control device and an external tool when a roll jam is received. FIG. 6 is a diagram illustrating a roll jam prevention measure using a time stamp.

[Embodiment 1]
Hereinafter, an embodiment of the present invention will be described in detail. A control system according to the present invention includes at least a vehicle load, a vehicle control device that controls the vehicle load, and a portable device that wirelessly communicates with the vehicle control device, and instructs (requests) the vehicle control device. And a portable device for transmitting the information.

  The control system according to the present invention is applicable to, for example, a keyless entry (RKE) system of a lock mechanism of a car. In recent years, crimes caused by so-called roll jam, which illegally unlocks a lock mechanism of a vehicle compatible with the RKE system, by taking advantage of the operation of the RKE system, have occurred. The control system according to the present invention is particularly effective in preventing unauthorized unlocking and locking of the vehicle due to the roll jam. Hereinafter, the configuration and processing of various devices according to an embodiment of the present invention will be described with reference to FIGS.

(Main configuration)
FIG. 1 is a block diagram showing a main configuration of the portable device 1 and the vehicle control device 2 included in the control system 500 according to the present embodiment. FIG. 2 also shows the lock mechanism 3 as an example of the vehicle load.

(Main configuration of portable device 1)
The portable device 1 is a device that transmits a signal to the vehicle control device 2. Specific examples of the portable device 1 include a terminal device that can be carried by a user, such as a remote controller, a mobile phone, a smartphone, and a tablet PC (personal computer). The portable device 1 includes a control unit 10, an input unit 20, a storage unit 30, and a communication unit 40.

  The input unit 20 receives a user's input operation. The input unit 20 is realized by, for example, a physical button of the portable device 1 or a touch panel. The portable device 1 may include a plurality of input units 20 according to the instruction content to the vehicle control device 2. For example, the portable device 1 may include, as the input unit 20, a lock button that is a button for instructing locking and an unlock button that is a button for instructing unlocking. The input unit 20 transmits a user's input operation to the control unit 10. The communication unit 40 transmits the keyless signal received from the signal generation unit 11 (described later) of the control unit 10 to the vehicle control device 2.

  The control unit 10 controls the portable device 1 overall. The control unit 10 specifies an instruction content (for example, a locking instruction or an unlocking instruction) with respect to the user's input operation transmitted from the input unit 20, and controls each unit of the portable device 1 according to the instruction. The control unit 10 includes a signal generation unit (transmission unit) 11, a timer (first timer) 12, a counter 13, and a code update unit 14.

  The signal generator 11 generates and transmits a keyless signal. When the input operation transmitted from the input unit 20 by the control unit 10 is a predetermined input operation (for example, pressing a predetermined button), the control unit 10 instructs the signal generation unit 11 to generate a signal. The signal generation unit 11 reads the rolling code 31 and various data necessary for generating a keyless signal from the storage unit 30, and generates a keyless signal. The signal generation unit 11 transmits the generated signal to the vehicle control device 2 via the communication unit 40. The signal generation unit 11 notifies the timer 12 that the keyless signal has been transmitted.

(Signal data structure)
Here, the data structure of the keyless signal will be described with reference to FIG. FIGS. 2A and 2B are diagrams illustrating an example of the data structure of a keyless signal. The keyless signal includes, for example, a synchronization code, a function code, authentication data, and a rolling code.

  The synchronization code is a code string for synchronizing communication between the portable device 1 and the vehicle control device 2. The function code is a code string indicating a control request (control request) for the portable device 1. Examples of the function code include a lock request and an unlock request.

  The authentication data indicates that the portable device 1 is a legitimate portable device, such as the identifier of the portable device 1 (such as the ID of the device) and the result of a cryptographic operation determined between the portable device 1 and the vehicle control device 2. This is data for confirmation.

  The rolling code is the rolling code 31 read from the storage unit 30. The rolling code 31 is information indicating the time (e.g., time) when the control unit 10 receives a user's predetermined input operation for transmitting a keyless signal, or when the signal generation unit 11 transmits the keyless signal. Time information).

  In the present embodiment, the elapsed time is measured by a timer 12 (described later), converted into a numerical value by a counter 13 (described later), and included in the rolling code 31. In other words, in the present embodiment, the time information is a numerical value (count number) counted by the counter 13.

  The time information need not be a numerical value as long as the time information can indicate the elapsed time. For example, the time information may be characters and symbols, or a code string in which characters, symbols, numerical values, and the like are mixed. For example, the time information may be a code string selected from a list (code string list) in which a predetermined number of code strings including numbers, symbols, and characters are ordered. When the rolling code 31 includes the code string, the storage unit 30 also stores the code string list.

  The timer 12 calculates the time elapsed from the time when the user's predetermined input operation (for example, pressing a button) is received by the control unit 10 or the time when the signal generation unit 11 transmits the keyless signal for the first period. Only measure. The timer 12 is realized by, for example, a control clock of the control unit 10 or the like. The timer 12 notifies the counter 13 of the measurement time. When the first period elapses, the timer 12 stops.

  The counter 13 counts up a numerical value (count number) held by itself at a predetermined cycle (first cycle) during the first period.

  The code updating unit 14 updates the rolling code 31. The code updating unit updates the rolling code 31 with the count of the counter 13 at the timing when the signal generation unit 11 transmits the signal or when the first period which is the measurement period of the timer 12 ends. Hereinafter, counting up the numerical value of the rolling code is referred to as “increment the rolling code”. If the rolling code and the count number are included as separate data in the keyless signal, the code update unit 14 may count up the count number stored in the storage unit 30.

  The storage unit 30 stores various data used by the portable device 1. The storage unit 30 stores at least a rolling code (identification code) 31. The storage unit 30 may store, in addition to the rolling code 31, data necessary for generating various signals. For example, the storage unit 30 may store synchronization codes, function codes, and authentication data of various signals. These data will be described later in detail. When the keyless signal includes the rolling code and the count number as separate data, the storage unit 30 may store the count number separately from the rolling code 31.

(Main Configuration of Vehicle Control Device 2)
The vehicle control device 2 is a device that determines whether a received signal is correct. Further, when the signal determined to be valid includes a function code, the vehicle control device 2 operates according to the function code. The vehicle control device 2 according to the present embodiment is an in-vehicle device mounted on the vehicle 100. The lock mechanism 3 to be controlled by the vehicle control device 2 is a lock mechanism for a door of the vehicle 100. Vehicle control device 2 includes a communication unit 50, a control unit 60, and a storage unit 70.

  The communication unit (receiving unit) 50 receives the keyless signal transmitted by the communication unit 40 of the portable device 1. Although described later in detail, the communication unit 50 can also receive a keyless signal transmitted by a device other than the portable device 1 (for example, an external tool).

  The control unit 60 controls the vehicle control device 2 overall. The control unit 60 includes an authentication unit (authority determination unit) 61, a timer (second timer) 62, a counter 63, and a lock mechanism control unit (control execution unit) 65.

  The authentication unit 61 determines whether the received signal is a legitimate signal, and if the signal is a legitimate signal, authenticates the signal. Specifically, the value of the rolling code included in the received signal (or the location indicating the count number of the rolling code) is stored in the rolling code 71 stored in the storage unit 70 (or the value of the rolling code 71). If the value is equal to or greater than the value indicating the count number, the authentication unit 61 determines that the signal is a valid signal. On the other hand, if the value of the rolling code included in the received signal is smaller than the value of the rolling code 71, the authentication unit 61 determines that the signal is an invalid signal. The authentication unit 61 notifies the lock mechanism control unit 65 of the determination result (that is, whether or not authentication is possible). Details of the authentication processing in the authentication unit 61 will be described later.

  The timer 62 measures the elapsed time from when the communication unit 50 receives the signal for the second period. The code updating unit 64 starts measuring time when the communication unit 50 receives the signal. When the second period has elapsed, the timer 62 stops.

  The counter 63 counts up the count held by itself at predetermined time intervals (second time intervals) during the second period.

  The code updating unit 64 updates the rolling code 71. The code updating unit 64 updates the rolling code 71 with the count number of the counter 63 at the timing when the communication unit 40 receives the signal or at the timing when the second period which is the measurement period of the timer 62 ends. When the keyless signal includes the rolling code and the count number as separate data, the code update unit 64 may update the count number stored in the storage unit 70 separately from the rolling code 71.

  The lock mechanism control unit 65 determines whether the authenticated signal includes a function code, and when the function code is included, controls the lock mechanism 3 according to the function code. For example, when the function code indicates a lock request, the lock mechanism control unit 65 locks the lock mechanism 3. For example, when the function code indicates an unlock request, the lock mechanism control unit 65 unlocks the lock mechanism 3.

  The storage unit 70 stores various data used by the vehicle control device 2. The storage unit 70 stores at least a rolling code 71. The rolling code 71 has the same format as the rolling code 31. When the keyless signal includes the rolling code and the count number as separate data, the storage unit 70 may store the count number separately from the rolling code 71.

(Processing flow of portable device)
FIG. 3 is a flowchart showing the flow of the process of the portable device 1. When input unit 20 of portable device 1 receives an input operation by the user (YES in S10), signal generation unit 11 generates a keyless signal. The signal generation unit 11 transmits the generated keyless signal to the vehicle control device 2 via the communication unit 40 (S12). The code updating unit 14 increments the rolling code 31 (S14). Thus, even when the keyless signal is transmitted for the first time after the timer is started in S16, the rolling code 31 can always be incremented.

  The signal generation unit 11 notifies the timer 12 that the keyless signal has been transmitted. Upon receiving the notification from the signal generation unit 11, the timer 12 starts measuring the elapsed time (S16).

  When the timer 12 starts measuring, the counter 13 counts up in the first cycle. That is, when the first cycle has elapsed (YES in S18), the counter 13 counts up, and the code updating unit 14 increments the rolling code 31 (S20). If the upper limit of the increment has not been reached, that is, if the upper limit of the count has not been reached (NO in S22), the counter 13 waits for the passage of time until the next count-up. On the other hand, when the maximum number of increments has been reached (YES in S22), the timer 12 stops (S24), and the counter 13 also stops counting up.

  On the other hand, when the input unit 20 and the control unit 10 receive a predetermined input operation during the count-up of the counter 13 (NO in S18) (YES in S26), the timer 12 stops measuring the elapsed time (S28). The counter 13 resets the count number. Then, the code updating unit 14 updates the rolling code 31 with the value of the counter 13. That is, the code updating unit 14 resets the number of increments (that is, the count number) of the rolling code 31 (S30). On the other hand, when the predetermined input operation is not received during the count-up of the counter 13 (NO in S18) (NO in S26), and the first cycle has elapsed again (YES in S18), the portable device 1 performs the above-described S20 and subsequent steps. Execute the processing of

(Processing flow of vehicle control device)
FIG. 4 is a flowchart showing the flow of the process of the vehicle control device 2. When communication unit 50 of vehicle control device 2 receives the keyless signal (YES in S40), authentication unit 61 executes an authentication process (S41). When the keyless signal is authenticated as a result of the authentication process (YES in S42), the code updating unit 64 of the control unit 60 sets the rolling code 71 to the value of the rolling code of the received keyless signal (S43), and sets the timer 62 Starts measuring elapsed time (S44). Further, the lock mechanism control unit 65 controls the lock mechanism 3 according to the function code included in the authenticated keyless signal.

  On the other hand, if the keyless signal is not authenticated as a result of the authentication processing (NO in S41), the code updating unit 64, the timer 62, and the lock mechanism control unit 65 do not perform the processing and wait for the reception of the next keyless signal.

  When the timer 62 starts the measurement, the counter 63 counts up in the second cycle. That is, when the second cycle has elapsed (YES in S46), the counter 63 counts up, and the code updating unit 64 increments the rolling code 71 (S48). If the upper limit number of increments, that is, the upper limit of the count number has not been reached (NO in S50), the counter 63 waits for the elapse of time until the next count up. On the other hand, if the maximum number of increments has been reached (YES in S50), the timer 62 stops (S52), and the counter 63 also stops counting up.

  On the other hand, when the keyless signal is received during the count-up of the counter 63 (NO in S46) (YES in S54), the authentication unit 61 executes an authentication process (S56). If the keyless signal is authenticated (YES in S58), the timer 62 stops measuring the elapsed time (S60), and the counter 63 resets the count. Then, the code updating unit 64 updates the rolling code 71 with the value of the counter 63. That is, the code updating unit 64 resets the number of increments (that is, the count number) of the rolling code 71 (S62). On the other hand, if the keyless signal has not been authenticated (NO in S58), the counting time of the timer 62 and the count number of the counter 63 are not reset, and the updating of the rolling code 71 by the code updating unit 64 is not performed. 63 waits for the lapse of time until the next count-up.

  Note that the portable device 1 and the vehicle control device 2 need not reset the number of increments of the rolling code 31 and the rolling code 71, respectively. For example, the portable device 1 may execute the processes of S12 to S14 instead of the processes of S28 to S30 in FIG. In this case, since the timer 12 is not stopped, the portable device 1 executes the subsequent processing without executing the processing of S16.

  Further, for example, the vehicle control device 2 may perform the processing of S43 without performing the processing of S60 to S62. Also in this case, since the timer 62 is not stopped, the vehicle control device 2 does not perform the process of S44, and executes the subsequent processes.

(Authentication process)
FIG. 5 is a flowchart showing a flow of the authentication process (S56 in FIG. 4) in the vehicle control device 2. When the communication unit 50 receives the signal, the authentication unit 61 determines whether the authentication data and the function code of the signal are correct (S561). For example, the authentication unit 61 checks the identifier included in the authentication data, and determines that the authentication code is correct when the identifier is the identifier of the portable device 1 supported by the vehicle control device 2. Further, for example, when the code string of the function code is in a format that can be read and executed by the vehicle control device 2, the authentication unit 61 determines that the function code is correct.

  When the authentication data and the function code of the signal are correct (YES in S561), the authentication unit 61 further stores the rolling code of the received signal into the rolling code 71 stored in the storage unit 70 of the own device (that is, the last reception code). It is determined whether it is equal to or more than the rolling code included in the signal (S62). If the rolling code of the received signal is equal to or greater than the rolling code 71 (YES in S62), the authentication unit 61 further checks the difference between the rolling code of the received signal and the rolling code 71 (that is, the difference in the count number). It is determined whether the value is equal to or less than a predetermined value (S565). If the value is equal to or smaller than the predetermined value (YES in S565), the authentication unit 61 determines that the received signal is a valid signal, and authenticates the signal (authentication OK, S64).

  On the other hand, if the authentication data or the function code of the signal is incorrect (NO in S561), the rolling code of the received signal is less than the rolling code 71 (NO in S563), or When the difference from the rolling code 71 is larger than the predetermined value (NO in S565), the authentication unit 61 determines that the received signal is an improper signal and does not authenticate the signal (authentication NG, S569).

(Process when receiving a roll jam)
Next, a method for preventing unauthorized unlocking when a roll jam is received by an external tool will be described. FIG. 6 is a sequence diagram illustrating a flow of processing between the portable device 1 and the vehicle control device 2 and an external tool when a roll jam is received.

  In the example of FIG. 6, the rolling code 31 of the portable device 1 starts from a predetermined integer K. In the example of FIG. 6, the rolling code 71 of the vehicle control device 2 starts from K−1 which is smaller than the starting value of the rolling code 31 by one. In the example of FIG. 6, the rolling code is also simply referred to as “code”.

  In the example of FIG. 6, it is assumed that the first period> t and the second period> m, and the counter 13 and the counter 63 count up at one second intervals.

  Upon receiving a predetermined input operation (S100), the portable device 1 transmits a keyless signal (rolling code: K) (S102), and starts time measurement by the timer 12 and counting by the counter 13 (S104).

  On the other hand, the external tool detects the keyless signal and transmits an interference wave at the timing when the keyless signal is transmitted (S106). Thereby, reception of the keyless signal by the vehicle control device 2 can be prevented. Then, the external tool illegally acquires the keyless signal (rolling code: K) (S108).

  At the end of step S108, the user apparently performs the operation for locking the lock mechanism 3 but does not lock it. Therefore, the user operates the portable device 1 again to try to lock the lock mechanism 3. Hereinafter, in the portable device 1, the second keyless signal is transmitted by the same processing as S100 to S102 (S106 to S108).

  Here, in the second keyless signal, the rolling code 31 is incremented by the count of the counter 13. For example, if the user operates the portable device 1 again after t seconds, the rolling code 31 of the second keyless signal is K + t.

  The external tool transmits an interference wave as in S106 to S108 (S110), and illegally acquires the second keyless signal (S112). Further, the external tool transmits the first keyless signal acquired and stored in the previous time (S108) to the vehicle control device 2 (S114).

  The vehicle control device 2 receives the keyless signal transmitted by the external tool (S116) and authenticates (S118). Here, the rolling code 71 in the vehicle control device 2 is an initial value K-1 as shown in the figure. On the other hand, the rolling code of the received keyless signal is K. Therefore, the authentication unit 61 determines that the keyless signal is authentication OK (S118). Then, the vehicle control device 2 controls the lock mechanism 3 according to the function code included in the keyless signal (S120). In this example, the vehicle control device 2 controls locking of the lock mechanism 3.

  At substantially the same time as receiving the keyless signal, the vehicle control device 2 starts measuring the elapsed time by the timer 62 and counting up by the counter 63 (S122).

  Here, it is assumed that the user of the external tool executes an operation (transmission instruction operation) for transmitting a signal to the external tool after m seconds. The external tool accepts the operation (S124), and transmits the second keyless signal illegally acquired in S112 to the vehicle control device 2 (S126). As shown, the rolling code of the keyless signal illegally acquired in S112 is K + t. On the other hand, the rolling code 71 of the vehicle control device 2 is K + m, which is larger than the rolling code of the received keyless signal. Therefore, the vehicle control device 2 receives the keyless signal (S128) but does not authenticate (S130).

  According to the above-described processing, the portable device 1 measures the elapsed time only when the user's input operation is received or when the first keyless signal (first signal) is transmitted for the first period. Then, when the second keyless signal (second signal) is transmitted, the count value indicating the elapsed time is included in the signal and transmitted to the vehicle control device 2. In the vehicle control device 2, the elapsed time (count number) included in the second keyless signal matches the time (count number) measured by the vehicle control device 2 from the time of receiving the first keyless signal. Is determined.

  When the second keyless signal is illegally acquired by the external tool, there is a long time between the illegal acquisition and the retransmission of the signal. Therefore, the elapsed time included in the second keyless signal is shorter than the elapsed time measured from the time of receiving the first signal in the vehicle control device.

  In other words, the vehicle control device 2 compares and compares the elapsed time included in the second signal with the elapsed time measured by the own device, and determines that the second keyless signal has not been transmitted from the portable device 1 now. Can be detected. Then, the signal can be determined to be an incorrect signal. Therefore, according to the above processing, it is possible to prevent the vehicle control device 2 and the lock mechanism 3 from being illegally operated by the external tool.

  Note that the portable device 1 measures the time only for the first period. Therefore, there is an advantage that the power consumption of the portable device 1 can be suppressed as compared with the case where the time is always measured. In addition, the portable device 1 and the vehicle control device 2 measure the elapsed time for the first period and the second period, respectively. Therefore, compared with the case where the time is constantly measured by these devices, the difference in the measured time between the two devices can be reduced.

(Timer measurement period and count-up period)
In the portable device 1, the measurement period of the timer 12 and the count-up period of the counter 13 are such that the time information of the rolling code 31 is always equal to the time of the rolling code 71 when the unauthorized acquisition of the keyless signal by the external tool does not occur. It is set to be the same as the information or a value that has advanced.

  Similarly, in the vehicle control device 2, the measurement period of the timer 62 and the count-up period of the counter 63 are such that the time information of the rolling code 31 always indicates that the time information of the rolling code 31 is rolling when no unauthorized acquisition of the keyless signal by an external tool has occurred. The value is set so as to be the same as or ahead of the code 71.

  In this setting condition, for example, when the rolling codes 31 and 71 include a count number as time information, the count number of the rolling code 31 is equal to or larger than the count number of the rolling code 71. Also, for example, when the rolling code 31 and the rolling code 71 include a code sequence ordered as time information, the code sequence of the rolling code 31 is a code whose order is later than the code sequence of the rolling code 71 (that is, the code sequence is earlier). ).

  Further, it is desirable that the maximum value of the time information included in the rolling code 31 is equal to the maximum value of the time information included in the rolling code 71. Specifically, when the rolling code 31 and the rolling code 71 include a count number as time information, the maximum count number of the rolling code 31 is preferably equal to the maximum count number of the rolling code 71. When the rolling code 31 and the rolling code 71 include a code sequence ordered as time information, the maximum order of the code sequence of the rolling code 31 is preferably equal to the maximum order of the code sequence of the rolling code 71.

  When the maximum possible value of the time information is equal between the rolling code 31 and the rolling code 71, the predetermined value in S565 in FIG. 5 can be set to the minimum value. As described in the description of FIG. 5, the predetermined value in S565 is for indicating the allowable range of the deviation of the count number. Thus, it is possible to prevent the keyless signal illegally acquired by the external tool from being erroneously determined to be authentication OK.

  The measurement period of the elapsed time of the timer 12 and the timer 62 (that is, the first period and the second period) in the control system 500 may be appropriately determined according to the usage of the portable device 1 and the vehicle control device 2. For example, the measurement period of the timer 12 is equal to or longer than the time when it is predicted that the user will perform the second input operation after performing the first input operation on the portable device 1 and is as long as possible. It is desirable to have a short period. For example, the measurement time of the timer 12 may be set to about 5 seconds. When the first period is shortened, it is possible to suppress the power consumption of the portable device 1 due to timing and counting up. On the other hand, if the first period is lengthened, it is possible to more reliably prevent the roll jam due to the external tool.

  It is desirable that the measurement period of the timer 12 is the same as the measurement period of the timer 62 or longer than the measurement period of the timer 62. If the measurement period of the timer 12 is set shorter than the measurement period of the timer 62, the period in which the vehicle control device 2 executes the increment of the rolling code 71 becomes longer than that of the portable device 1. Therefore, if the timer of each device is not reset every time a keyless signal is transmitted / received, the authentication unit 61 will not authenticate a legitimate keyless signal (normally transmitted from the portable device 1). By setting the measurement period of the timer 12 to be the same as or longer than the measurement period of the timer 62, the authentication unit 61 can reliably authenticate a legitimate keyless signal.

  Further, the count-up periods of the counter 13 and the counter 63 (that is, the first period and the second period) may be appropriately determined according to the usage of the portable device 1 and the vehicle control device 2. For example, the count-up cycle of the counter 13 is set to be the same as or shorter than the count-up cycle of the counter 63. If the count-up period of the counter 63 is set to be shorter, at least until the measurement period of the timer 62 has passed, the counting by the vehicle control device 2 proceeds earlier than the counting by the portable device 1. Will be. In this case, the vehicle control device 2 does not authenticate the keyless signal from the portable device 1.

  Furthermore, it is preferable that the count-up cycle of the counter 13 and the counter 63 be shorter. When the count-up period is long, the period during which the lock mechanism 3 can be controlled by the same rolling code becomes long. For example, when the count-up cycle of the counter 13 and the counter 63 is set to 30 seconds, if the keyless signal transmitted first is illegally acquired, it can be used for about 30 seconds thereafter. By shortening the count-up cycle of the counter 13 and the counter 63, it is possible to minimize the period in which the illegally acquired signal can be used.

(Modification)
In the embodiment, the prevention of the roll jam in the situation where the locking mechanism 3 is locked has been described. However, the control system 500 can also prevent a roll jam in a situation where the lock mechanism 3 is unlocked.

  For example, the user operates the portable device 1 when using the vehicle 100. The portable device 1 transmits a keyless signal for unlocking to the vehicle control device 2 of the vehicle 100. If the external tool illegally acquires this keyless signal (and the second keyless signal transmitted by the subsequent re-operation), the user of the external tool usually has an opportunity to illegally unlock the vehicle. This is when the user locks the vehicle and leaves after using the unlocked vehicle.

  That is, a certain period of time elapses from the second unauthorized acquisition of the keyless signal to the attempt to unlock the keyless signal using the signal. As described above, when the signal (the second keyless signal) once obtained illegally is transmitted after a lapse of time, the time (and the count) measured by the vehicle control device 2 is earlier than the time. The authentication unit 61 does not authenticate the signal. Therefore, even if the signal held by the external tool is transmitted to the vehicle control device 2, the signal is not authenticated, so that unauthorized unlocking cannot be performed.

  In the above embodiment, the case where the function code (unlock request) for unlocking the lock mechanism 3 and the function code (lock request) for locking the lock mechanism 3 are the same has been described. However, the signal generation unit 11 of the portable device 1 according to the control system 500 may create and transmit different function codes depending on whether the lock mechanism 3 is unlocked or locked.

  As described above, even when the function codes are different between the unlocking and the locking, the method of the roll jam can be used. For example, when the user attempts to unlock the stopped and locked vehicle using the portable device 1, a keyless signal including the function code of the unlock request may be illegally acquired by an external tool. When the keyless signal including the unlocking request is illegally acquired, the user recognizes that the unlocking was not successful, and operates the portable device 1 again to try unlocking. In the conventional RKE system, if the second keyless signal is also illegally acquired, the vehicle is unlocked while the unlocking request is held in the external tool. Therefore, if the user locks the vehicle after using the unlocked vehicle and then leaves, the user of the external tool can later unlock the vehicle illegally.

  On the other hand, in the vehicle control device 2 according to the control system 500, as described above, if the signal (the second keyless signal) that has been illegally acquired is transmitted after a certain time, the time when the vehicle control device 2 measures ( The authentication unit 61 does not authenticate the signal, since (and count) is advanced. Therefore, control system 500 can prevent illegal operation of vehicle control device 2 even when a signal including an unlock request is illegally acquired.

  In the embodiment, the rolling information 31 of the keyless signal includes time information. However, the portable device 1 need not include the time information in the rolling code 31. In this case, the timer 12 of the portable device 1 stores the time information in the storage unit 30 separately from the rolling code 31. Note that, instead of the time information of the timer 12, the count number of the counter 13 may be stored as time information in the storage unit 30 separately from the rolling code 31.

  Then, when generating the keyless signal, the signal generation unit 11 generates a keyless signal that does not include time information and transmits the keyless signal to the vehicle control device 2. Then, the signal generation unit 11 may read out the time information stored in the storage unit 30 and transmit the time information to the vehicle control device 2 immediately after the generation of the keyless signal. At this time, the signal generation unit 11 transmits the time information transmitted later in a state where it can be associated with the keyless signal transmitted immediately before. For example, the signal generation unit 11 transmits the time information to be transmitted later, attaching the identifier of the keyless signal transmitted immediately before, and the like. Note that the keyless signal and the time information may be transmitted by different communication means. For example, the time information may be transmitted using WiFi (registered trademark), Bluetooth (registered trademark), UWB, or the like.

  The control unit 60 of the vehicle control device 2 receives the continuously transmitted keyless signal and time information almost simultaneously. The control unit 60 associates the received keyless signal with the time information before executing the authentication processing by the authentication unit 61. The control unit 60 regards the associated time information as the time information of the keyless signal and executes the subsequent processing.

  The applications of the vehicle control device 2 and the lock mechanism 3 are not limited to the above-described embodiment. For example, the vehicle control device 2 and the lock mechanism 3 need not be in-vehicle devices. For example, the lock mechanism 3 may be a lock mechanism for a building door. A mechanism for controlling on and off of the power of the electronic device may be used. The vehicle control device 2 may be a device that controls these mechanisms.

  Further, the vehicle control device 2 may control a vehicle load other than the lock mechanism 3. For example, the vehicle control device 2 may control a door opening / closing mechanism of the vehicle. In this case, the function code included in the first signal and the second signal includes a request for a control operation for opening or closing the door. Further, for example, the vehicle control device 2 may control the operation and stop of the engine of the vehicle. In this case, the function code included in the first signal and the second signal includes a request for a control operation for operating or stopping the engine. Further, for example, the vehicle control device 2 may control turning on and off of the welcome light of the vehicle. In this case, the function code included in the first signal and the second signal includes a request for a control operation for turning on or off the welcome light.

[Summary]
The portable device (portable device 1) according to the first aspect of the present invention, when the time information included in the received signal indicates a time later than the time measured by the own device, regards the received signal as a valid signal. A vehicle control device (vehicle control device 2) that determines whether or not the vehicle control device controls a vehicle load according to a control request included in a legitimate signal. A transmission unit (communication unit 40) that causes the vehicle control device to start measuring the time by transmitting a first signal in response to a predetermined input operation to the unit 20); Or a first timer (timer 12) for measuring an elapsed time from the transmission of the first signal by the transmission unit for a first period. The input unit performs the predetermined input operation again. If only attached, and transmits a second signal including the elapsed time as the time information to the vehicle control device.

  According to the configuration, the portable device transmits the first signal and the second signal that can specify the transmission order. This is because the first signal does not include time information, and the second signal includes time information according to the transmission timing.

  By the way, when the second signal is illegally acquired by the external tool, there is a time before the second signal is retransmitted from the external tool. According to the above configuration, even if the second signal acquired by the external tool is illegally transmitted after a lapse of time, the time of the time measured by the vehicle control device is larger than the time information attached to the second signal. The vehicle control device determines that the second signal is an incorrect signal because the vehicle is traveling ahead. Therefore, according to the configuration, it is possible to prevent the vehicle control device from being operated improperly.

  In the portable device according to aspect 2 of the present invention, in the aspect 1, the transmitting unit causes the vehicle control device to execute the measurement of the time for a second period by transmitting the first signal, The first timer may measure the elapsed time for a first period that is equal to or longer than the second period.

  According to the above configuration, the vehicle control device can reliably determine that the second signal transmitted from the portable device is a valid signal.

  When the time measured by the vehicle control device (vehicle control device 2) according to the third aspect of the present invention matches the information indicating the time included in the received signal, the received signal is a valid signal. A receiving unit (communication unit 50) for receiving a signal including a control request for a vehicle load (lock mechanism 3) and time information from a portable device (portable device 1); If the signal received by the receiving unit is valid, a second timer (timer 62) for measuring the elapsed time from the reception of the signal for a second period as the time measured by the own device is used. And a control unit that controls the vehicle load in response to the control request included in the signal, when the correctness determination unit (authentication unit 61) determines that the signal is valid. An execution unit (lock mechanism control unit 65). If the elapsed time measured by the second timer is earlier than the time indicated by the time information included in the signal received by the receiving unit, the correctness determination unit determines the received signal. It is determined that the signal is invalid.

  According to the above configuration, the vehicle control device receives a signal including time information. Then, the elapsed time is measured for the second period after receiving the signal. When a signal from the portable device is illegally acquired by the external tool, a time is required before the illegally acquired signal is retransmitted to the vehicle control device.

  According to the above configuration, even if the signal obtained by the external tool is illegally transmitted after a lapse of time, the time measured by the vehicle control device is earlier than the time information attached to the signal. Since the vehicle is traveling, the vehicle control device can determine the signal as an incorrect signal. Therefore, according to the configuration, it is possible to prevent the vehicle control device from being operated improperly.

  The vehicle control device according to a fourth aspect of the present invention is the vehicle control device according to the third aspect, wherein the portable device has received a predetermined input operation for transmitting the signal or has elapsed from the transmission of the signal. Is measured only for the first period, and the second timer measures the elapsed time from the reception of the signal by the second period that is the same as the first period or shorter than the first period. It may be measured.

  According to the above configuration, the vehicle control device can reliably determine that the signal transmitted from the portable device is a valid signal.

  A control system according to a fifth aspect of the present invention includes the portable device according to the first or second aspect, the vehicle control device according to the third or fourth aspect, and a vehicle load controlled by the vehicle control device. . According to the configuration, the same effect as that of the portable device according to the first aspect is obtained.

  In the control system according to a sixth aspect of the present invention, in the fifth aspect, the vehicle load is a lock mechanism of a vehicle door, and the transmission unit of the portable device transmits a request to unlock or lock the lock mechanism to the lock mechanism. The signal included as a control request may be transmitted.

  There has been a crime (so-called roll jam) in which a signal including a request for unlocking or locking an in-vehicle device is illegally acquired using an external tool, and the vehicle door is illegally unlocked using the signal. I do. According to the configuration, the crime can be prevented.

[Example of software implementation]
The control blocks (particularly, the control unit 10 and the control unit 60) of the portable device 1 and the vehicle control device 2 may be realized by a logic circuit (hardware) formed on an integrated circuit (IC chip) or the like, or by software. It may be realized.

  In the latter case, the portable device 1 and the vehicle control device 2 include a computer that executes instructions of a program that is software for realizing each function. This computer includes, for example, one or more processors and a computer-readable recording medium storing the program. Then, in the computer, the object of the present invention is achieved when the processor reads the program from the recording medium and executes the program. As the processor, for example, a CPU (Central Processing Unit) can be used. Examples of the recording medium include “temporary tangible medium” such as a ROM (Read Only Memory), a tape, a disk, a card, a semiconductor memory, and a programmable logic circuit. Further, a RAM (Random Access Memory) for expanding the program may be further provided. Further, the program may be supplied to the computer via an arbitrary transmission medium (a communication network, a broadcast wave, or the like) capable of transmitting the program. Note that one embodiment of the present invention can also be realized in the form of a data signal embedded in a carrier wave, in which the above-described program is embodied by electronic transmission.

  The present invention is not limited to the embodiments described above, and various modifications are possible within the scope shown in the claims, and embodiments obtained by appropriately combining technical means disclosed in different embodiments. Is also included in the technical scope of the present invention.

  Reference Signs List 1 portable device, 10 control unit, 11 signal generation unit, 12 timer (first timer), 13 counter, 14 code update unit, 20 input unit, 30 storage unit, 31 rolling code (identification code), 40 communication unit (transmission Unit), 2 vehicle control device, 50 communication unit (reception unit), 60 control unit, 61 authentication unit (authority determination unit), 62 timer (second timer), 63 counter, 64 code update unit, 65 lock mechanism control unit (Control execution unit), 70 storage unit, 71 rolling code, 3 lock mechanism (vehicle load), 100 vehicle, 500 control system

Claims (6)

If the time information included in the received signal indicates a time later than the time measured by the own device, the vehicle control device determines that the received signal is a valid signal. A portable device that transmits a signal to a vehicle control device that controls a vehicle load according to a request,
A transmitting unit that causes the vehicle control device to start measuring the time by transmitting a first signal in response to a predetermined input operation performed on the input unit;
A first timer that measures an elapsed time from when the input unit receives the predetermined input operation or when the transmission unit transmits the first signal for a first period,
The portable device, wherein, when the input unit receives the predetermined input operation again, the transmitting unit transmits a second signal including the elapsed time as the time information to the vehicle control device. The transmitting unit transmits the first signal to cause the vehicle control device to measure the time for a second period,
2. The portable device according to claim 1, wherein the first timer measures the elapsed time for a first period equal to or longer than the second period. 3. When the time measured by the own device matches the information indicating the time included in the received signal, the vehicle control device determines that the received signal is a valid signal,
A receiving unit that receives a signal including a vehicle load control request and time information from the portable device,
When the signal is received, a second timer that measures an elapsed time from the reception of the signal for a second period as a time measured by the own device,
A right / wrong determining unit that determines whether the signal received by the receiving unit is valid,
When the correctness determination unit determines that the signal is valid, a control execution unit that controls the vehicle load according to the control request included in the signal,
If the elapsed time measured by the second timer is earlier than the time indicated by the time information included in the signal received by the receiving unit, the correctness determination unit determines the received signal. A vehicle control device characterized by determining that the signal is invalid. The portable device, after receiving a predetermined input operation for transmitting the signal, or, measuring the elapsed time since the transmission of the signal for the first period,
The method according to claim 3, wherein the second timer measures an elapsed time after receiving the signal for a second period that is the same as the first period or shorter than the first period. The vehicle control device according to any one of the preceding claims. A portable device according to claim 1 or 2,
A vehicle control device according to claim 3 or 4,
And a vehicle load controlled by the vehicle control device. The vehicle load is a lock mechanism of a vehicle door,
The control system according to claim 5, wherein the transmission unit of the portable device transmits the signal including a request for unlocking or locking the lock mechanism as the control request.

Images