JP2020127069A - Determination system and determination method - Google Patents

Abstract

To provide a determination system and a determination method that can secure convenience of an authorized user.SOLUTION: A first processing unit 26 acquires a determination result of smart verification as a result of smart communication. A second processing unit 27 acquires a determination result of communication via UWB communication as a result of position detection communication. A permission unit 28 permits use of a vehicle 3 in a restricted state if the smart verification is established although the position detection communication is not completed.SELECTED DRAWING: Figure 1

Description

The present invention relates to a determination system and a determination method for determining whether a terminal is right or wrong.

2. Description of the Related Art Conventionally, a smart collation system that wirelessly collates a vehicle and a terminal to operate an in-vehicle device is known (see Patent Document 1 and the like). Further, an unauthorized communication prevention system that measures the positional relationship between the vehicle and the terminal through communication and determines the validity thereof is also known (see Patent Document 2 and the like). Providing an unauthorized communication prevention system can be used, for example, as a countermeasure against the act of illegally connecting a remote terminal to a vehicle using a repeater or the like to establish a verification.

JP, 2005-262915, A JP, 2007-212420, A

By the way, since the UWB communication used in the position detection communication is easily affected by a human body or the like, there are cases where the communication itself is incomplete, that is, a so-called communication error occurs. At this time, although the authorized user is near the vehicle and the smart verification is established, the communication error of the UWB communication causes a problem that the user is not convenient if the operation of the vehicle is not permitted. was there.

An object of the present invention is to provide a determination system and a determination method capable of ensuring the convenience of an authorized user.

The determination system that solves the above-mentioned problems includes a first processing unit that obtains a result of a first communication that confirms whether the terminal is correct through communication with an operation target, and a second communication that is different from the first communication. A second processing unit that obtains the result of the second communication that confirms the correctness of the terminal with the operation target, and one of the first communication and the second communication has a positive result but the other is incomplete. In this case, a permitting unit that permits the operation of the operation target in a restricted state is provided.

A determination method for solving the problem is a step of acquiring, by a first processing unit, a result of a first communication for confirming the correctness of a terminal through communication with an operation target, and a second communication different from the first communication. The step of acquiring the result of the second communication for confirming the correctness of the terminal with the operation target by the second processing unit, and one of the first communication and the second communication have a positive result. However, when the other is incomplete, the permission unit permits the operation of the operation target in a restricted state.

According to the present invention, it is possible to ensure the convenience of the authorized user.

The block diagram of the determination system of one Embodiment. 6 is a flowchart executed when determining whether the terminal is correct or not.

An embodiment of the determination system and the determination method will be described below with reference to FIGS. 1 and 2.
As shown in FIG. 1, the vehicle 3, which is the operation target 2 of the terminal 1, includes a key system 5 that permits or executes the operation of the vehicle-mounted device 4 by authenticating the terminal 1 wirelessly. The key system 5 of the present example is preferably a smart verification system that executes ID verification by the short-range wireless communication triggered by communication from the vehicle 3. The vehicle-mounted device 4 includes, for example, a door lock device that opens and closes the vehicle door, an engine of the vehicle 3, and the like. The terminal 1 may be either an electronic key mainly having a key function or a high-performance mobile phone in which the key function is registered. In the case of this example, the smart communication, which is communication at the time of smart matching, corresponds to the first communication.

The key system 5 includes a system device 6 that operates the key system 5 in the vehicle 3. The system device 6 uses the electronic key ID and the key unique key stored in the memory of the system device 6 to execute ID verification by the key system 5, that is, smart verification. The system device 6 is provided with an antenna 7 that transmits and receives various radio waves during communication for ID verification with the terminal 1. The antenna 7 includes a transmission antenna that transmits radio waves to the terminal 1 and a reception antenna that receives radio waves from the terminal 1. The transmitting antenna preferably transmits radio waves in the LF (Low Frequency) band. The receiving antenna preferably receives radio waves in the UHF (Ultra High Frequency) band.

The terminal 1 includes a terminal control unit 8 that controls the operation of the terminal 1 and an antenna 9 that transmits and receives radio waves in the terminal 1. A unique key ID and a unique key of each terminal 1 are registered in the terminal control unit 8. The antenna 9 includes a receiving antenna for receiving radio waves in the terminal 1 and a transmitting antenna for transmitting radio waves in the terminal 1.

When the vehicle 3 is parked, the system device 6 transmits the wake signal from the outdoor transmission antenna as the antenna 7 by LF. When the system device 6 receives the UHF band response to the wake signal from the terminal 1, the system device 6 executes outdoor smart verification. In outdoor smart verification, key ID verification and challenge response authentication using a key unique key are executed. The establishment of the outdoor smart verification is one condition for permitting or executing the door locking/unlocking. Further, when the system device 6 receives from the terminal 1 a UHF band response to the wake signal LF-transmitted from the indoor transmission antenna as the antenna 7, the system device 6 executes indoor smart verification. The indoor smart verification is the same process as the outdoor smart verification. The establishment of the indoor smart verification is one condition for permitting the transition operation of the vehicle power supply. The transition operation of the vehicle power supply is, for example, an engine start operation.

The vehicle 3 secures security against unauthorized use of the operation target 2 from the distance between the terminal 1 and the operation target 2 measured through position detection communication which is a communication different from the smart communication between the terminal 1 and the vehicle 3. It has a function to perform, that is, an unauthorized communication prevention system 12. The operation target 2 in this example is the vehicle 3 that is operated with the terminal 1 as the vehicle key. The unauthorized communication prevention system 12 measures the distance between the terminal 1 and the operation target 2 through communication, and determines the mutual positional relationship based on the measured value. The unauthorized communication prevention system 12 is installed in the vehicle 3 by illegally connecting the terminal 1 located at a distant place to the vehicle 3 through a relay device or the like, and allowing the smart verification to be established without the user's intention. This is to prevent the accident. In the case of this example, the position detection communication corresponds to the second communication.

The unauthorized communication prevention system 12 includes a communication device 13 that performs a ranging operation on the vehicle 3 side, and a wireless unit 14 that performs a ranging operation on the terminal 1 side. A plurality of communication devices 13 are provided on the vehicle body so that communication is established regardless of the position of the terminal 1 on the vehicle 3. The communication device 13 and the wireless unit 14 transmit and receive radio waves in the UWB (Ultra Wide Band) band and measure the position between the two. If UWB radio waves are used as the radio waves for distance measurement, the distance between the communication device 13 and the wireless unit 14 can be measured with high resolution (for example, at intervals of several tens of cm).

The communication device 13 is provided with an antenna 15 for transmitting and receiving UWB radio waves. In the communication device 13, an identification ID is written and stored in a memory or the like as unique ID information of each communication device 13. The identification ID is used to specify which communication device 13 and the terminal 1 are to communicate. The communication device 13 is connected to the system device 6 by wire. The wireless unit 14 is provided with an antenna 16 for transmitting and receiving UWB radio waves. In the wireless unit 14, the identification ID of each communicating device 13 is written and stored in a memory or the like. The wireless unit 14 is connected to the terminal control unit 8 by wire.

The unauthorized communication prevention system 12 includes a measurement unit 22 that measures a measurement value according to the positional relationship between the communication device 13 and the wireless unit 14. The measurement unit 22 of this example includes “22a” provided on the communication device 13 side and “22b” provided on the wireless unit 14 side. The measurement unit 22 of this example executes position detection communication for transmitting and receiving UWB radio waves between the communication device 13 and the wireless unit 14, obtains the propagation time required for communication at this time, and determines the mutual positional relationship from this propagation time. As a parameter for confirming, the measured value according to the distance between the two is measured. The measuring unit 22 executes communication for transmitting and receiving UWB radio waves via encrypted communication using a predetermined encryption key. It is preferable that the measurement value is a distance measurement value that represents the distance between the communication device 13 and the wireless unit 14.

The unauthorized communication prevention system 12 includes a distance determination unit 23 that determines the validity of the positional relationship between the communication device 13 and the wireless unit 14 based on the measurement value obtained by the measurement unit 22. The distance determination unit 23 is provided in each communication device 13. The distance determination unit 23 compares the measured value obtained by the measurement unit 22 with a preset threshold value to perform the position determination for confirming the validity of the positional relationship between the communication device 13 and the wireless unit 14. .. If the measured value is less than the threshold value, the distance determination unit 23 determines that the positional relationship between the communication device 13 and the wireless unit 14 is appropriate, and if the measured value is greater than or equal to the threshold value, the communication device 13 and the wireless unit 14 are determined. It is determined that the positional relationship with is not appropriate.

The unauthorized communication prevention system 12 has a function of permitting operation of the vehicle 3 in a restricted state even if the position detection communication is incomplete due to a communication error or the like, if smart communication verification, that is, smart verification is established. , Determination system 25. By the way, if the smart matching is established and the position detection communication causes a communication error and the operation of the vehicle 3 is not permitted, it is expected that the convenience is reduced. Therefore, in the determination system 25 of the present example, when the position detection communication results in a communication error and the smart collation is established, the use of the vehicle 3 is restricted, that is, conditionally permitted, thereby making it convenient. Secure the sex.

The determination system 25 includes a first processing unit 26 that obtains the result of the first communication that confirms the correctness of the terminal 1 through the communication with the operation target 2. The first processing unit 26 is provided in the system device 6. In the case of this example, it is preferable that the first communication is a communication for confirming whether the key ID registered in the terminal 1 is correct. In particular, the first communication of this example is smart communication in which the key ID of the terminal 1 is authenticated by bidirectional communication triggered by communication from the vehicle 3.

The determination system 25 includes a second processing unit 27 that acquires the result of the second communication that confirms the correctness of the terminal 1 by the second communication that is different from the first communication. The second processing unit 27 is provided in the system device 6. In the case of the present example, it is preferable that the second communication is a communication of auxiliary positioning of the authentication by the first communication. In particular, the second communication of this example is position detection communication that determines the adequacy of the positional relationship between the terminal 1 and the vehicle 3.

The determination system 25 includes a permission unit 28 that sets permission for the operation of the operation target 2 based on the communication results of the first communication and the second communication. The permission unit 28 is provided in the system device 6. When one of the first communication and the second communication has a positive result but the other is incomplete, the permitting unit 28 permits the operation of the operation target 2 in a restricted state. For example, when the smart communication is established but the position detection communication is not completed, the permission unit 28 of the present example permits only the unlocking operation of the vehicle door and prohibits the engine start. Note that the position detection communication is not completed means that the second communication cannot be completed to the end.

Next, the operation and effect of the determination system 25 of this embodiment will be described with reference to FIG.
In S101 (“S” is an abbreviation for step, the same applies hereinafter), the system device 6 acquires the result of each communication performed between the terminal 1 and the vehicle 3. In the present case, these communications are smart communications and location detection communications. If the location communication is performed after the smart communication, the communication result of both the smart communication and the location communication can be obtained at the completion of these communication.

At this time, the first processing unit 26 acquires the result of the smart communication when the smart communication is completed. The first processing unit 26 acquires “correct” as the result of the smart communication if the smart verification is established, and acquires “no” as the result of the smart communication if the smart verification is not established.

In addition, the second processing unit 27 acquires the result of the position detection communication when the position detection communication is completed. The second processing unit 27 acquires "positive" as the result of the position detection communication if the position detection determination is established, and acquires "no" as the result of the position detection communication if the position detection determination is not established. Further, if the position detection communication cannot be completed within the time, the second processing unit 27 acquires “uncompleted” as the communication result of the position detection communication.

In S102, the permission unit 28 determines whether or not the result of the smart communication is “correct”. If the result of the smart communication is “correct”, the process proceeds to S104, and if the result of the smart communication is “no”, the process proceeds to S103.

In S103, the permission unit 28 sets the correctness determination of the terminal 1 to "not established" because the result of the smart communication is "no". That is, since the smart verification is not established, the operation of the vehicle 3 is not permitted. Therefore, illegal use of the vehicle 3 by another terminal is prevented.

In S104, the permission unit 28 determines whether the position detection communication is incomplete. At this time, if the position detection communication is not completed, the process proceeds to S107. If the position detection communication is not completed, that is, if the position detection communication is completed, the process proceeds to S105.

In S105, the permission unit 28 determines whether or not the result of the position detection communication is “correct”. When the result of the position detection communication is “positive”, the process proceeds to S106. On the other hand, when the result of the position detection communication is “No”, the process proceeds to S103, and the correctness determination of the terminal 1 is set to “not permitted”. Therefore, for example, even if the terminal 1 existing at a position far away from the vehicle 3 is illegally connected to the vehicle 3 with a repeater or the like, it is not necessary to shift the success/failure determination of the terminal 1 to success. Therefore, security against unauthorized use of the vehicle 3 is ensured.

In S106, the permission unit 28 determines that the correctness of the terminal 1 is “established” because the results of both the smart communication and the position detection communication are “positive”. As a result, the use of the vehicle 3 is permitted. Therefore, for example, when the outdoor smart verification is established, locking/unlocking of the vehicle door is permitted or executed. Further, when the indoor smart verification is established, the transition operation of the vehicle power supply is permitted, and the engine is started by operating the engine switch in the driver's seat with the brake pedal depressed.

In S107, the permission unit 28 sets the correctness determination of the terminal 1 to "temporary establishment" because the result of the smart communication is "correct" but the position detection communication is incomplete. This provisional establishment is a state in which the use of the vehicle 3 is permitted in a restricted state. For example, even if the position detection communication is not completed, only this is permitted if the outdoor smart verification is established. That is, only unlocking the vehicle door is permitted and engine starting is not permitted. Therefore, for example, even if the position detection communication is incomplete due to the influence of the communication environment, the vehicle door can be unlocked if the outdoor smart collation is established, so that the passenger can get in the vehicle. Therefore, the convenience for the user is secured.

When the user gets on the vehicle and operates the engine switch, for example, indoor smart communication and position detection communication are executed. At this time, since the position of the terminal 1 with respect to the communication device 13 is different from that when it is outdoors, there is a high possibility that the position detection communication between the terminal 1 and the communication device 13 will be executed without delay. Therefore, since both the indoor smart communication and the position detection communication shift to “positive”, an authorized user can start the engine as usual.

As described above, according to the present example, when one of the first communication and the second communication is established but the other is not completed, the use of the operation target 2 is permitted in the restricted state. In the case of the present example, even if the position detection communication is not completed, if the result of the smart communication is “positive”, the operation of the vehicle 3 as the operation target 2 is permitted in the restricted state. Therefore, for example, even if the position detection communication cannot be completed normally due to a temporary communication environment problem or the human body, etc., the result of the smart communication is “positive”. Thus, the use of the vehicle 3 is permitted although it is in a restricted state. Therefore, the convenience of the authorized user can be secured.

The first communication is authentication communication for confirming whether the key ID registered in the terminal 1 is correct. In this case, when the use of the vehicle 3 is permitted in a restricted state, at least the authentication communication is established. Therefore, it is possible to ensure the security related to the use of the vehicle 3.

The second communication is position detection communication that determines the validity of the positional relationship between the terminal 1 and the vehicle 3 through communication. Here, for example, even if the UWB communication that is easily affected by the human body is used as the position detection communication, even if the UWB communication, which is the second communication, is not completed when the smart verification is established, the vehicle Use of 3 is permitted in a restricted state. Therefore, even if the UWB communication is used as the position detection communication, it can be said that the effect is particularly high in that the convenience for the user can be secured.

The operation target 2 is the vehicle 3. If the result of one of the smart communication and the position detection communication is positive but the other is not completed, the permission unit 28 permits only the unlocking operation of the vehicle door and prohibits the engine start. In this way, even when the use of the vehicle 3 is permitted in the restricted state, the permission is only until the vehicle door is unlocked, and not until the engine is started. Therefore, security against vehicle theft can be secured.

The present embodiment can be modified and implemented as follows. The present embodiment and the following modified examples can be implemented in combination with each other within a technically consistent range.
[About the first processing unit 26]
The first processing unit 26 may acquire the result of the first communication at any timing.

The result of the first communication acquired by the first processing unit 26 is not limited to whether the determination of the first communication is correct or not, and whether the result is the first communication such as a specific situation of the first communication. It may be a result that shows how the communication was.

The first processing unit 26 is not limited to being provided in the system device 6, and may be provided in another device or ECU.
-The 1st process part 26 can also acquire the result of 1st communication from another apparatus and ECU.

[About the second processing unit 27]
The second processing unit 27 may acquire the result of the second communication at any timing.
The result of the second communication acquired by the second processing unit 27 is not limited to whether the determination of the second communication is correct or uncompleted, and may be the second status such as a specific situation of the second communication. It may be a result that shows how the communication was.

The second processing unit 27 is not limited to being provided in the system device 6, and may be provided in another device or ECU.
The second processing unit 27 may be provided at a location different from that of the first processing unit 26.

-The second processing unit 27 can also obtain the result of the first communication from another device or the ECU.
[About incomplete communication]
-Communication is incomplete, for example, that the communication cannot be completed within the specified time and the time is up. As described above, the uncompleted communication includes a communication error in which the communication cannot be completed to the end.

-Communication may be incomplete, for example, by checking whether or not noise is present in the radio wave environment, and determining that communication is incomplete when noise is detected.
-When the result of the second communication is positive and the first communication is incomplete, the operation of the operation target 2 may be permitted in a restricted state.

[Permitting operation of operation target 2 in restricted state]
When permitting the operation of the operation target 2 in a restricted state, it is preferable to permit the operation of the operation target 2 that does not suffer damage caused by being taken away. As described above, when the operation target 2 is permitted to operate in the restricted state, it is preferable that the operation target 2 is permitted to operate without being expected to be stolen.

The operation permitted under the limitation is not limited to unlocking the vehicle door, and may be, for example, both operations of locking and unlocking the vehicle door, or unlocking the glove box.
The operation permitted under the limitation may be, for example, the vehicle power supply. In this case, the operation permitted under the limitation may be, for example, operating the vehicle power supply to the ACC position.

The use restriction of the vehicle 3 may be, for example, the number of times the engine is started, the traveling distance of the vehicle 3, the speed of the vehicle 3, the moving range of the vehicle 3, or the like.
[About first communication]
The first communication is not limited to smart communication, and may be any communication that authenticates whether the terminal 1 is right or wrong through ID information.

The first communication is not limited to the authentication communication for confirming the ID information of the terminal 1, and can be changed to another mode such as authentication for confirming whether the encrypted communication with the terminal 1 is established.
[About second communication]
The second communication is not limited to the position detection communication and may be any communication that confirms whether the terminal 1 is correct.

The second communication may be a communication using a characteristic, a field, or a method different from the first communication when confirming whether the terminal 1 is right or wrong.
The second communication is not limited to be executed at the same timing as the first communication, but may be executed in different time zones.

[About Key System 5]
The smart verification system, which is an example of the key system 5, is not limited to a mode in which radio waves having different frequencies are transmitted and received on the outward and return paths of communication, and may be a mode in which radio waves having the same frequency are transmitted and received in both round trips.

The frequency of the radio wave used in the smart matching system is not limited to the LF band and the UHF band, and other frequencies may be used.
The smart verification system may be, for example, short-range wireless communication such as Bluetooth (registered trademark) or RFID (Radio Frequency IDentification), or communication using infrared rays.

The smart verification system is not limited to the one in which the individual LF antennas are arranged inside and outside the vehicle to determine whether the terminal 1 is inside or outside the vehicle. It may be a system that determines whether the terminal 1 is located inside or outside the vehicle based on the combination of the response results.

The key system 5 is not limited to the smart verification system, and may be, for example, a wireless key system that authenticates the terminal 1 upon communication from the terminal 1 side or an immobilizer system that authenticates the terminal 1 using short-range wireless communication. ..

The key system 5 may have a configuration in which the unauthorized communication prevention system 12 is shared. In this case, the distance measurement determination is also performed while collating the terminal 1 by UWB communication.
[Unauthorized communication prevention system 12]
The distance determination unit 23 for position detection may be provided in the terminal 1 and the validity of the measured value may be determined on the terminal 1 side.

-In the case where a plurality of communication devices 13 are mounted on the vehicle body, the unauthorized communication prevention system 12 preferably communicates with each communication device 13 to measure the distance. In this case, it is preferable to determine whether or not the positional relationship is appropriate by checking each of these distances.

The position measurement is not limited to the format using UWB communication, and may be the format using Bluetooth communication, for example. In this case, the received signal strength of the radio wave may be measured for each channel of the radio wave transmitted by Bluetooth communication, and the position of the terminal 1 with respect to the communication device 13 may be determined from these received signal strengths.

-Distance measurement communication is not limited to be performed at a timing different from smart communication, and may be simultaneous.
In the distance measurement communication, for example, the UWB radio wave may be transmitted from only one of the terminal 1 and the vehicle 3, and the position may be measured from the propagation time of the UWB radio wave reflected by the object and returned to the transmission source.

In the case of a method using radio waves of UWB communication, the distance measuring method includes, for example, a method of estimating from the time required for transmission/reception of radio waves and a method of estimating from the arrival direction of radio waves. In the case of a method using radio waves of Bluetooth communication, for example, a method of estimating from propagation characteristics, a method of estimating from received signal strength of radio waves, a method of estimating from time required for transmission and reception of radio waves, a method of estimating from arrival direction of radio waves , There is a method using an array antenna.

-A specific one of the plurality of communication devices 13 may be the master and the other plurality may be the slaves. In this case, the slave-positioned communication device 13 may operate to communicate with the system device 6 via the master-positioned communication device 13.

[Other]
The terminal 1 is not limited to an electronic key or a high-performance mobile phone, and may be any key that can be the key of the operation target 2.

The operation target 2 is not limited to the vehicle 3, and various devices and equipment can be applied.

1... Terminal, 2... Operation target, 3... Vehicle, 25... Judgment system, 26... 1st process part, 27... 2nd process part, 28... Permit part.

Claims (5)

A first processing unit that obtains a result of first communication for confirming whether the terminal is correct through communication with an operation target;
A second processing unit that is different from the first communication and that acquires a result of second communication that confirms whether the terminal is correct with the operation target;
A determination system comprising: a permission unit that permits the operation of the operation target in a restricted state when one of the first communication and the second communication has a positive result but the other is incomplete. The determination system according to claim 1, wherein the first communication is authentication communication for confirming whether the key ID registered in the terminal is correct. The determination system according to claim 1, wherein the second communication is position detection communication that determines the validity of a positional relationship between the terminal and the operation target through communication between the terminal and the operation target. The operation target is a vehicle,
The permission unit permits only the unlocking operation of the vehicle door and disallows the engine operation when one of the first communication and the second communication has a positive result but the other is incomplete. The determination system according to any one of Items 1 to 3. A step of acquiring, by a first processing unit, a result of first communication for confirming whether the terminal is correct through communication with an operation target;
A step of acquiring, by a second processing unit, a result of second communication for confirming the correctness of the terminal with the operation target by the second communication different from the first communication;
When one of the first communication and the second communication has a positive result but the other is incomplete, the permitting unit permits the operation of the operation target in a restricted state.