JP2022042102A - Registration device, terminal machine, and registration method - Google Patents

Abstract

To provide a registration device, terminal machine, and registration method that enable both the realization of registration and the suppression of security degradation in a compatible manner.SOLUTION: A first authentication function section 5 causes a device 4 of an operating target 1 to operate by wirelessly authenticating a key 3 and a verification device 6 installed in the operating target 1. A second authentication function section 23 authenticates wirelessly a wireless authentication device 24 installed in the operation target 1 and a terminal 22, and brings the wireless authentication device 24 into a communication with the verification device 6 to cause the verification device 6 to operate the device 4 if the terminal 22 is legitimate. A terminal unit 41 includes a contactless communication unit 42 that communicates with the verification device 6 in a contactless manner, and is capable of conducting a wireless or wired communication with the wireless authentication device 24 and is removable from the wireless authentication device 24. A registration device 44 registers the wireless authentication device 24 in the verification unit 6 via a communication using the contactless communication unit 42 of the terminal unit 41.SELECTED DRAWING: Figure 1

Description

The present invention relates to a registration device, a terminal, and a registration method for registering a wireless authentication device in a collation device.

Conventionally, as a key system in which a high-performance mobile phone can be used as a vehicle key, for example, a vehicle control system disclosed in Patent Document 1 and the like is well known. If a high-performance mobile phone can be used as a vehicle key as in the technology of Patent Document 1, it is not necessary to have a dedicated key for the vehicle, which is convenient.

Japanese Unexamined Patent Publication No. 11-2048919

By the way, a general vehicle is equipped with a smart system that controls the operation of a vehicle door or an engine through smart collation with a key. In the smart collation, for example, a radio wave in the LF (Low Frequency) band is transmitted from the vehicle, and the key receiving the radio wave transmits the radio wave in the UHF (Ultra High Frequency) band to the vehicle to authenticate the key. For example, if the key outside the vehicle and the smart collation are established, the lock / unlock of the vehicle door is permitted or executed, and if the key inside the vehicle and the smart collation are established, the engine is permitted to start.

In a vehicle equipped with a smart system, for example, there is a need to retrofit a function capable of operating the vehicle with a high-performance mobile phone. In this case, for example, a method of attaching a wireless authentication device for authenticating a high-performance mobile phone to the vehicle can be considered. In the case of this configuration, for example, there is a configuration in which a high-performance mobile phone is authenticated by a wireless authentication device, the wireless authentication device is smartly collated with a smart system, and various devices of the vehicle are operated.

In this configuration, it is necessary to smartly collate the wireless authentication device with the vehicle, so it is necessary to register the wireless authentication device in the vehicle. However, if a function is added to the vehicle so that this registration is possible, on the contrary, the security of the vehicle deteriorates, which is not preferable for the user. Therefore, even if the registration of the wireless authentication device can be made possible for the vehicle, there is a strong need to prevent the security from being deteriorated.

An object of the present invention is to provide a registration device, a terminal, and a registration method that enable both realization of registration and suppression of security deterioration.

The registration device for solving the above-mentioned problem wirelessly authenticates the collation device and the key provided in the operation target, and operates the operation target device with the first authentication function unit and the wireless authentication provided in the operation target. It is provided with a second authentication function unit that wirelessly authenticates the device and the terminal, and when the terminal is legitimate, the wireless authentication device communicates with the collation device and the device is operated by the collation device. The configuration used for the operation target includes a non-contact communication unit that performs non-contact communication with the collation device, enables wireless or wired communication with the wireless authentication device, and is removable from the wireless authentication device. It is provided with a provided terminal and a registration unit for registering the wireless authentication device in the collation device via communication using the non-contact communication unit of the terminal device.

The terminal that solves the problem wirelessly authenticates the collation device and the key provided in the operation target, and operates the device to be operated by the first authentication function unit and the wireless authentication provided in the operation target. It is provided with a second authentication function unit that wirelessly authenticates the device and the terminal, and when the terminal is legitimate, the wireless authentication device communicates with the collation device and the device is operated by the collation device. The configuration used for the operation target includes a non-contact communication unit that performs non-contact communication with the collation device, enables wireless or wired communication with the wireless authentication device, and is removable from the wireless authentication device. When the registration device provided and registers the wireless authentication device with the collation device executes the registration, the communication using the non-contact communication unit is executed.

The registration method for solving the above-mentioned problem is to wirelessly authenticate the collation device and the key provided in the operation target, the first authentication function unit for operating the operation target device, and the wireless authentication provided in the operation target. It is provided with a second authentication function unit that wirelessly authenticates the device and the terminal, and when the terminal is legitimate, the wireless authentication device communicates with the collation device and the device is operated by the collation device. A method used for the operation target, wherein a terminal including a non-contact communication unit that performs non-contact communication with the collation device is made to communicate with the wireless authentication device wirelessly or by wire, and the non-contact communication of the terminal device is performed. The wireless authentication device is registered in the collation device via communication using the unit, and the terminal is removed from the wireless authentication device after the registration.

According to the present invention, it is possible to achieve both the realization of registration and the suppression of security deterioration.

The block diagram of the registration apparatus of one Embodiment. The procedure diagram of the authentication of the key information registered in the terminal. Procedure diagram when locking and unlocking the vehicle door with the terminal. Procedure diagram when starting the engine of the vehicle. A concrete diagram when registering a wireless authentication device in a collation device. A concrete diagram when registering a wireless authentication device in a collation device. Explanatory drawing which shows the use example of a terminal.

Hereinafter, an embodiment of a registration device, a terminal, and a registration method will be described.
As shown in FIG. 1, the vehicle 2 as the operation target 1 includes a first authentication function unit 5 that authenticates the key 3 by wireless communication and operates the device 4 of the operation target 1. The first authentication function unit 5 wirelessly authenticates the collation device 6 provided in the operation target 1 and the key 3 to operate the device 4 of the operation target 1. In the case of this example, the first authentication function unit 5 is an electronic key system 7 that mainly authenticates the key 3 having a key function by the collating device 6. The device 4 is, for example, a door lock device, a steering lock device, an engine device, or the like.

The electronic key system 7 includes, for example, a smart system that executes an authentication process triggered by a communication from the vehicle 2, and a wireless key system that executes an authentication process triggered by a communication from the key 3. The smart system uses, for example, smart communication using LF (Low Frequency) band radio waves for communication from the vehicle 2 to the key 3 and UHF (Ultra High Frequency) band radio waves for communication from the key 3 to the vehicle 2. , A system that authenticates the key 3. The wireless key system is a system in which the vehicle 2 is remotely controlled by the key 3, for example, by wireless communication in which a radio wave is transmitted to the vehicle 2 triggered by the operation of the key 3.

Each of the key 3 and the collation device 6 stores the ID information Did (first ID information D1) of the key 3 registered in the vehicle 2. The collation device 6 stores the first ID information D1 in the memory 10. The first ID information D1 includes, for example, a unique ID code possessed by the key 3, an encryption key used for authentication such as challenge response authentication, and the like. The collation device 6 executes the authentication process of the first ID information D1 registered in the key 3 by communicating with the key 3 via the first antenna 11. In the case of this example, the authentication of the first ID information D1 by smart communication is referred to as "smart collation", and the authentication of the first ID information D1 by wireless communication is referred to as "wireless collation". When the first ID information D1 of the key 3 is authenticated, the collation device 6 permits or executes the operation of the device 4.

In the case of this example, when the key 3 outside the vehicle is authenticated via the antenna outside the vehicle as the first antenna 11, the smart collation outside the vehicle is established, and the locking / unlocking of the vehicle door is permitted or executed. Therefore, when the unlock operation unit 13 provided on the vehicle exterior door handle 12 is operated in the door locked state, the vehicle door is unlocked if the vehicle exterior smart collation is established. Further, when the lock operation unit 14 provided on the vehicle exterior door handle 12 is operated in the door unlocked state, the vehicle door is locked if the vehicle exterior smart collation is established. The unlock operation unit 13 and the lock operation unit 14 are preferably touch sensors, for example.

When the key 3 in the vehicle is authenticated via the in-vehicle antenna as the first antenna 11, the collation device 6 establishes the in-vehicle smart collation, and the transition operation of the vehicle power supply by the engine switch 15 is permitted. Therefore, when the smart collation outside the vehicle is established and the engine switch 15 is pushed while the brake pedal is depressed, the engine of the vehicle 2 is started.

The electronic key system 7 includes, for example, an immobilizer system 17 that authenticates the key 3 by contactless communication. The immobilizer system 17 enables the wireless authentication process of the key 3 and the collation device 6 to be executed even if the key 3 runs out of battery, for example. The non-contact communication includes, for example, transponder communication as a kind of RFID (Radio Frequency IDentification).

The collation device 6 includes a non-contact communication unit 18 that executes authentication processing of the immobilizer system 17, and a second antenna 19 that executes non-contact communication. The second antenna 19 is arranged, for example, in the vicinity of the engine switch 15. Each of the key 3 and the non-contact communication unit 18 stores the ID information Did (in this example, the second ID information D2) used in the authentication process of the immobilizer system 17.

When executing the authentication process of the immobilizer system 17, hold the key 3 near the second antenna 19. At this time, the non-contact communication unit 18 executes short-range wireless communication with the key 3 via the second antenna 19, and executes the authentication process of the second ID information D2 of the key 3. When the non-contact communication unit 18 authenticates the second ID information D2, the non-contact communication unit 18 permits the transition operation of the vehicle power supply. Therefore, the engine starting operation using the engine switch 15 becomes possible.

The vehicle 2 as the operation target 1 includes a second authentication function unit 23 that authenticates the terminal 22 by wireless communication and operates the device 4. The second authentication function unit 23 wirelessly authenticates the wireless authentication device 24 and the terminal 22 provided in the operation target 1, and when the terminal 22 is legitimate, causes the collation device 6 and the wireless authentication device 24 to communicate with each other. , The device 4 is operated by the collation device 6. In this way, the second authentication function unit 23 enables the vehicle 2 to be operated by the terminal 22 instead of the key 3. In the case of this example, the second authentication function unit 23 is a terminal key system 25 that authenticates the terminal 22 by short-range wireless communication. The terminal key system 25 downloads the key information Dk required for authentication from the outside to the terminal 22, and enables the terminal 22 to operate the vehicle 2.

The terminal 22 has a main function different from the key function, and the key function is added separately. The terminal 22 is, for example, a high-performance mobile phone. The key information Dk is, for example, a one-time key (one-time password) that is permitted to be used only once or for a certain period of time.

The terminal 22 includes a terminal control unit 26 that controls the operation of the terminal 22, an input unit 27 used when performing an input operation on the terminal 22, a display unit 28 including a display and the like, and a memory 29 that can store data. It includes a network communication unit 30 that communicates with the outside through network communication, and a short-range wireless module 31 that performs short-range wireless communication. The terminal 22 performs network communication with, for example, a server (not shown) via the network communication unit 30, and downloads the key information Dk to the memory 29. The terminal 22 executes short-range wireless communication with the vehicle 2 via the short-range wireless module 31. The display unit 28 is, for example, a touch panel.

In the terminal 22, the application 32 required for operating the terminal 22 as the key of the vehicle 2 is registered in the memory 29. The application 32 is, for example, an application of a car sharing service that enables a vehicle 2 to be shared by a plurality of people as a sharing car. The application 32 is acquired from, for example, a server or the like through network communication, and is written and stored in the memory 29. By registering the application 32 in the terminal 22, the key information Dk can be downloaded to the terminal 22 and the vehicle 2 can be operated on the terminal 22.

The short-range wireless communication may be either PAN (Personal Area Network) communication or short-range wireless communication. Personal area network communication includes, for example, Bluetooth (Bluetooth: registered trademark) communication, UWB (Ultra Wide Band) communication, Wi-Fi (registered trademark) communication, and the like. Further, the Bluetooth communication is preferably BLE (Bluetooth Low Energy). Short-range wireless communication includes, for example, NFC (Near Field Communication) as a kind of RFID.

The wireless authentication device 24 includes an authentication unit 34 that authenticates the terminal 22 by short-range wireless wireless communication. The authentication unit 34 performs short-range wireless communication with the terminal 22 by a short-range wireless antenna 35 provided in the wireless authentication device 24. When the terminal 22 operates the vehicle 2, the authentication unit 34 authenticates the key information Dk through short-range wireless communication with the terminal 22. The authentication of the key information Dk is, for example, authentication of whether or not the key information Dk can be correctly decrypted, authentication of whether or not the key information Dk is within the expiration date, and whether or not the parameters included in the key information Dk are correct. Includes at least one of the certifications.

The wireless authentication device 24 includes a key collation communication control unit 36 that communicates with the collation device 6 when the vehicle 2 is operated by the terminal key system 25. The communication executed by the key collation communication control unit 36 is the same as the communication of the authentication process of the key 3 and the collation device 6 in the electronic key system 7 (in this example, smart communication and wireless communication). As described above, the communication executed between the collation device 6 and the wireless authentication device 24 has the same format as the communication executed by the first authentication function unit 5.

Each of the collation device 6 and the key collation communication control unit 36 has registered ID information Did (in this example, referred to as identification information Dt) used in the authentication process between these two parties. The collation device 6 stores the identification information Dt in the memory 10. The key verification communication control unit 36 stores the identification information Dt in the memory 37 of the wireless authentication device 24. The identification information Dt includes, for example, a unique ID code possessed by the key verification communication control unit 36 (wireless authentication device 24), an encryption key used for authentication such as challenge response authentication, and the like. The key collation communication control unit 36 uses this identification information Dt to execute an authentication process with the collation device 6. In the case of this example, the key collation communication control unit 36 uses the identification information Dt to execute smart communication or wireless communication with the collation device 6. The communication between the collation device 6 and the key collation communication control unit 36 may be either wireless or wired.

FIG. 2 illustrates an example of an authentication procedure for the key information Dk registered in the terminal 22. In step 101 of the figure, the authentication unit 34 of the wireless authentication device 24 periodically and repeatedly transmits advertisements for notifying information related to communication of the own device. The advertisement is, for example, a kind of data related to the information of the wireless authentication device 24.

In step 102, when the terminal 22 receives the advertisement transmitted from the wireless authentication device 24, the terminal 22 executes the scan process if the received signal strength at the time of receiving the advertisement is equal to or higher than the connection threshold value. The scan process is a process in which the terminal 22 requests the wireless authentication device 24 to provide details related to the details of short-range wireless communication and acquires the scan process.

In step 103, after the scan process, the terminal 22 transmits a connection request for connecting the short-range wireless communication to the wireless authentication device 24 through the short-range wireless communication in order to perform pairing with the wireless authentication device 24.

In step 104, when the authentication unit 34 of the wireless authentication device 24 receives the connection request from the terminal 22, the response notification to the connection request is transmitted to the terminal 22 via short-range wireless communication.

In step 105, when the above pairing is correctly executed, the authentication unit 34 of the wireless authentication device 24 and the terminal 22 are in a state of communication connection to which Bluetooth communication is connected.
In step 106, when the Bluetooth is in the communication connection state, the terminal 22 transmits the key information Dk registered in the memory 29 to the wireless authentication device 24 through short-range wireless communication.

In step 107, the authentication unit 34 of the wireless authentication device 24 executes authentication of the key information Dk received from the terminal 22. In the case of this example, when the authentication of the key information Dk is established because the authentication unit 34 can correctly decrypt the key information Dk, for example, the usage time (use start time / use end time) of the reserved vehicle or It is possible to acquire the session key used in the subsequent short-range wireless communication and the terminal ID which is a unique ID of the terminal 22. On the other hand, if the key information Dk is not correct, the authentication unit 34 waits as it is and does not allow the vehicle operation by the terminal 22.

In step 108, when the key information Dk is authenticated, the authentication unit 34 of the wireless authentication device 24 transmits a key information authentication establishment notification to that effect to the terminal 22 via short-range wireless communication.

In step 109, when the terminal 22 receives the key information authentication establishment notification transmitted from the wireless authentication device 24, both the terminal 22 and the wireless authentication device 24 are in the authentication completion state recognizing the authentication establishment. The authentication completion state means a state in which both the terminal 22 and the wireless authentication device 24 know the session key and the terminal ID common to each other. This enables vehicle operation (door lock / unlock operation and engine start operation) using the terminal 22.

When locking / unlocking the vehicle door, the terminal 22 and the wireless authentication device 24 are moved to the authentication completed state, and then the vehicle door is locked / unlocked. For example, when the short-range wireless communication is reconnected after the key information Dk has already been authenticated, the terminal 22 and the wireless authentication device 24 are authenticated by the session key acquired at the time of decrypting the key information Dk. Is preferable. Then, if the authentication by the session key is established, the terminal 22 and the wireless authentication device 24 shift to the authentication completed state.

FIG. 3 illustrates an example of a procedure for locking and unlocking a vehicle door at the terminal 22. In step 201 of the figure, the terminal 22 and the wireless authentication device 24 are shifted to the authentication completed state through short-range wireless communication.

In step 202, when the terminal 22 locks / unlocks the vehicle door, the terminal 22 transmits the operation signal S1 corresponding to the operation to the wireless authentication device 24 by short-range wireless communication. The operation signal S1 is an unlock request signal in the case of unlocking the vehicle door. The operation signal S1 is a lock request signal in the case of a vehicle door lock operation.

When the wireless authentication device 24 receives the operation signal S1 from the terminal 22, the key collation communication control unit 36 transmits the operation signal S1 to the collation device 6 by radio waves in the UHF band. That is, if the wireless authentication device 24 is in the authentication completed state, the key verification communication control unit 36 transmits the operation signal S1 to the verification device 6 by wireless communication. The operation signal S1 includes, for example, a command for requesting the start of the locking / unlocking operation and the identification information Dt stored in the memory 37. The communication for transmitting the operation signal S1 from the wireless authentication device 24 to the collation device 6 is the same communication as the wireless communication executed between the key 3 and the collation device 6.

In step 203, when the collation device 6 receives the operation signal S1 from the wireless authentication device 24, the collation device 6 operates based on the operation signal S1 to lock and unlock the vehicle door. In the case of this example, the collation device 6 authenticates the identification information Dt included in the operation signal S1, and if the identification information Dt is correct, the wireless collation is established and the door is locked and unlocked according to the command. When the collation device 6 receives the unlock request signal as the operation signal S1 from the wireless authentication device 24, the collation device 6 unlocks the vehicle door. When the collation device 6 receives the lock request signal as the operation signal S1 from the wireless authentication device 24, the collation device 6 locks the vehicle door.

FIG. 4 illustrates an example of a procedure for starting an engine with a smart engine start that does not require the operation of the terminal 22 when starting the engine of the vehicle 2. In step 301 of the figure, when the engine is started, the terminal 22 and the wireless authentication device 24 are first moved to the authentication completed state in the same manner as when the vehicle door is locked and unlocked.

In step 302, when the engine start permission operation is performed by the terminal 22, the terminal 22 transmits the permission request signal S2 corresponding to the operation to the wireless authentication device 24 by short-range wireless communication. The permission request signal S2 is a signal requesting the wireless authentication device 24 for permission to start the engine.

In step 303, for example, when the collation device 6 detects that the engine switch 15 has been operated, it executes an authentication process based on smart communication, so-called smart collation, with the key collation communication control unit 36 of the wireless authentication device 24. do. This smart collation is a process of authenticating the identification information Dt, and if the wireless authentication device 24 is in the authentication completed state, it proceeds to the establishment. The collation device 6 permits the power transition operation (engine start operation) by the engine switch 15 if the smart collation is established, and the power transition operation (engine start operation) by the engine switch 15 if the smart collation is not established. Do not allow.

In step 304, the collation device 6 switches the engine to start when the smart collation between the collation device 6 and the key collation communication control unit 36 is established. This makes it possible to drive and drive the vehicle 2.

As shown in FIG. 1, the terminal key system 25 includes a registration device 40 used when registering the wireless authentication device 24 in the vehicle 2. The registration device 40 is used, for example, when the wireless authentication device 24 is retrofitted to the existing vehicle 2. The registration device 40 registers the wireless authentication device 24 in the collation device 6 by using the terminal 41 that can be removed from the wireless authentication device 24. The registration is, for example, an operation of registering the common identification information Dt in the collation device 6 and the wireless authentication device 24. Specifically, the registration is an operation of writing the identification information Dt possessed by the wireless authentication device 24 into the collation device 6.

The terminal 41 includes a non-contact communication unit 42 that performs non-contact communication with the collating device 6. The non-contact communication unit 42 executes non-contact communication with the non-contact communication unit 18 of the collating device 6 via the antenna 43. The terminal 41 is capable of wireless or wired communication with the wireless authentication device 24, and is provided so as to be removable from the wireless authentication device 24. Non-contact communication includes transponder communication as a kind of RFID (Radio Frequency IDentification).

The terminal 41 is a terminal capable of operating the device 4 by being authenticated by the collating device 6 via communication by the non-contact communication unit 42. As described above, the terminal 41 can be used as a key (backup key) of the vehicle 2 when it is removed from the wireless authentication device 24. When the terminal 41 is used as a backup key, for example, the ID information Did (third ID information D3) registered in the terminal 41 is authenticated.

The registration device 40 includes a registration unit 44 that executes a process of registering the wireless authentication device 24 in the collation device 6. The registration unit 44 of this example is provided in, for example, the wireless authentication device 24. The registration unit 44 registers the wireless authentication device 24 in the collation device 6 via communication using the non-contact communication unit 42 of the terminal 41. Specifically, the registration unit 44 collates the identification information Dt of the wireless authentication device 24 with the collating device 6 in the form of passing through the terminal 41 via RFID communication using the non-contact communication unit 42 of the terminal 41. The registration work is executed by writing to the memory 37.

As shown in FIGS. 5 and 6, it is preferable that a connector portion 45 to which the terminal 41 can be detachably attached to the wireless authentication device 24 is provided between the collation device 6 and the wireless authentication device 24. The connector unit 45 includes a first connector 45a of the wireless authentication device 24 and a second connector 45b of the terminal 41. In this case, at the time of registration work, the terminal 41 is connected to the wireless authentication device 24 by the connector unit 45, and after the registration work, the connector unit 45 is removed and the terminal 41 is handled separately from the wireless authentication device 24. ..

The shape of the terminal 41 may be, for example, a card type, a stick type, or a pen type. Further, the connection between the wireless authentication device 24 and the terminal 41 includes a connection by a wire harness, a connection by electrode contact, a connection by wireless communication, and the like. When the terminal 41 is attached to the wireless authentication device 24 via the connector portion 45, it is preferable that the connector portion 45 is provided with a mechanism for connecting the wireless authentication device 24 and the terminal 41.

Next, the operation of the registration device 40 of the present embodiment will be described.
As shown in FIG. 5, when registering the wireless authentication device 24 in the collation device 6, first, the collation device 6 is set to the registration mode. The method of setting to the registration mode is, for example, to switch the collation device 6 from the normal mode to the registration mode by connecting the registration tool 48 to the collation device 6 and inputting a registration start request from the registration tool 48 to the collation device 6. .. As for the setting method other than this, the collation device 6 may be set to the registration mode, for example, by operating the car navigation device mounted on the vehicle.

Subsequently, the terminal 41 is connected to the wireless authentication device 24, and the unit of the wireless authentication device 24 and the terminal 41 is brought closer to the non-contact communication unit 18 of the collation device 6. That is, the terminal 41 integrated with the wireless authentication device 24 is brought close to the second antenna 19 arranged on the engine switch 15 by holding it over. When the terminal 41 is sufficiently close to the second antenna 19, non-contact communication between the non-contact communication unit 42 of the terminal 41 and the non-contact communication unit 18 of the collating device 6 is established.

As shown in FIG. 6, when the collation device 6 establishes non-contact communication with the terminal 41 connected to the wireless authentication device 24, the collation device 6 sends a registration start request acquired from the registration tool 48 to the terminal 41 by non-contact communication. Forward. When the registration start unit 44 receives the registration start request transmitted from the collation device 6 via the non-contact communication unit 42 of the terminal 41, the registration unit 44 executes a process of registering the identification information Dt of the wireless authentication device 24 in the collation device 6. do.

In the case of this example, the registration unit 44 reads out the identification information Dt written in the memory 37 of the wireless authentication device 24, and transmits this to the collation device 6 via the non-contact communication unit 42 of the terminal 41. When the collating device 6 receives the identification information Dt transmitted from the terminal 41, the collating device 6 writes it in the memory 10. This completes the registration of the wireless authentication device 24 in the collation device 6. When the registration is completed, it may be displayed on the screen of the registration tool 48 to that effect, or the registration completion message or sound may be output by the in-vehicle speaker.

As shown in FIG. 7, after the registration is completed, the terminal 41 is removed from the wireless authentication device 24 and stored by the user. Further, the wireless authentication device 24, which is separate from the terminal 41, is attached and fixed at a predetermined position on the vehicle body. The wireless authentication device 24 is preferably mounted in a place that is difficult to see from the inside of the vehicle, such as inside a glove box, under the floor in a vehicle, or inside a steering column.

By the way, for example, when the non-contact communication function still exists in the wireless authentication device 24, a third party may illegally use this non-contact communication function and register another key in the collation device 6. is assumed. This leads to unauthorized use of the vehicle 2. On the other hand, in the case of this example, after the registration is completed, the terminal 41 is removed from the wireless authentication device 24 so that the non-contact communication function does not remain in the wireless authentication device 24. Therefore, from the viewpoint of unauthorized registration of another key, It is possible to improve security.

It is also possible to use the terminal 41 as a backup key. For example, when the terminal 22 is out of battery and does not have the key 3, the terminal 41 operates the vehicle 2. At this time, the terminal 41 is held over the second antenna 19 of the non-contact communication unit 18 of the engine switch 15 to execute immobilizer collation by non-contact communication between the collation device 6 and the terminal 41. At this time, the third ID information D3 registered in the terminal 41 is authenticated. Then, when the third ID information D3 is correct, the transition operation of the vehicle power supply is permitted, so that the engine can be started by operating the engine switch 15.

According to the registration device 40 of the above embodiment, the following effects can be obtained.
(1) The operation target 1 includes a first authentication function unit 5 and a second authentication function unit 23. The first authentication function unit 5 wirelessly authenticates the collation device 6 provided in the operation target 1 and the key 3 to operate the device 4 of the operation target 1. The second authentication function unit 23 wirelessly authenticates the wireless authentication device 24 and the terminal 22 provided in the operation target 1, and when the terminal 22 is legitimate, causes the wireless authentication device 24 to communicate with the collation device 6. The device 4 is operated by the collating device 6. The registration device 40 used for the operation target 1 includes a terminal 41 and a registration unit 44. The terminal 41 includes a non-contact communication unit 42 that performs non-contact communication with the collation device 6, is capable of wireless or wired communication with the wireless authentication device 24, and is provided detachably from the wireless authentication device 24. The registration unit 44 registers the wireless authentication device 24 in the collation device 6 via communication using the non-contact communication unit 42 of the terminal 41.

According to the configuration of the present disclosure, when the wireless authentication device 24 is registered in the collation device 6, the wireless authentication device 24 is communicated with the collation device 6 and the wireless authentication device 24 with a terminal 41 interposed therebetween. Is registered in the collation device 6. After the registration work, the terminal 41 is removed from the wireless authentication device 24 and stored in another place. As a result, it is not necessary to leave the terminal 41 attached to the wireless authentication device 24, so that the security against unauthorized use of the system is maintained. Therefore, it is possible to achieve both the realization of registration and the suppression of security deterioration.

(2) The second authentication function unit 23 is a function of authenticating the key information Dk, which is a one-time key registered in the terminal 22 from the outside, by the wireless authentication device 24. In this case, for example, the terminal 22 is limited in the number of times it can be used, the period of time, and the like. Therefore, it is possible to improve the security against unauthorized use of the operation target 1.

(3) The terminal 22 has a main function different from the key function, and the key function is added separately. In this case, for example, a multifunctional terminal such as a high-performance mobile phone can be used as the key of the operation target 1.

(4) The first authentication function unit 5 is an electronic key system 7 that collates the key 3 by communication having different frequencies between the radio wave transmitted from the collating device 6 and the radio wave transmitted from the key 3. The second authentication function unit 23 is a terminal key system 25 in which the wireless authentication device 24 authenticates the terminal 22 by short-range wireless communication. In this case, the terminal key system 25 can be retrofitted to the operation target 1 on which the electronic key system 7 is mounted, and the security against unauthorized use of the system can be maintained.

(5) Registration is an operation of writing the identification information Dt possessed by the wireless authentication device 24 into the collation device 6. In this case, while the identification information Dt of the wireless authentication device 24 can be registered in the collation device 6, even if this registration is possible, the security against unauthorized use of the system can be maintained.

(6) The communication executed between the collation device 6 and the wireless authentication device 24 is in the same format as the communication executed by the first authentication function unit 5. In this case, since the configuration of the communication infrastructure can be shared, it is possible to avoid complication of the device configuration.

(7) A connector portion 45 is provided between the wireless authentication device 24 and the terminal 41 so that the terminal 41 can be detachably attached to the wireless authentication device 24. In this case, if the wireless authentication device 24 and the terminal 41 are integrated by the connector portion 45, the wireless authentication device 24 and the terminal 41 can be easily handled at the time of registration work. Therefore, the registration work can be facilitated.

(8) The terminal 41 can be authenticated by the collating device 6 via communication by the non-contact communication unit 42 to operate the device 4. In this case, since the terminal 41 can be used as the key of the operation target 1, the convenience can be improved.

In addition, this embodiment can be changed and carried out as follows. The present embodiment and the following modified examples can be implemented in combination with each other within a technically consistent range.
-The terminal 22 is not limited to registering the key information Dk from the server, but may acquire and register the key information Dk from, for example, the main key.

-For the communication of the non-contact communication unit 42, various communication formats, frequencies, and radio wave strengths can be used.
The connector portion 45 may be omitted from the configuration.
The wireless authentication device 24 is not limited to being separate from the collation device 6, and may be integrated with the collation device 6.

-The identification information Dt may be, for example, information having only an ID code or information having only an encryption key.
-The terminal key system 25 may appropriately change the system configuration, communication format, radio wave frequency, and the like as long as it is a system that wirelessly authenticates the terminal 22.

The first authentication function unit 5 is not limited to the electronic key system 7, and may be any system that wirelessly authenticates the key 3.
The second authentication function unit 23 is not limited to the terminal key system 25, and may be a system that authenticates the terminal 22 and operates the device 4 by using the communication infrastructure of the first authentication function unit 5 based on the authentication result. Just do it.

-The key 3 includes various electronic keys such as a smart key (registered trademark), a wireless key, and an immobilizer key.
The operation target 1 is not limited to the vehicle 2, and includes a device or a system operated by the key 3 or the terminal 22.

The registration is not limited to the process of writing the identification information Dt of the wireless authentication device 24 to the collation device 6, and may be, for example, the process of writing the identification information Dt of the collation device 6 to the wireless authentication device 24.
The registration unit 44 may be provided not in the wireless authentication device 24 but in, for example, the terminal 41 or the collation device 6. Further, the registration unit 44 is not limited to being provided only in the wireless authentication device 24, and may be a functional block generated in cooperation with the terminal 41 and the collation device 6.

The registration unit 44 (registration device 40) may be configured by 1) one or more processors operating according to a computer program (software), or 2) such a processor and at least a part of various processes. It may be configured in combination with one or more dedicated hardware circuits such as an application specific integrated circuit (ASIC) that performs processing. The processor includes a CPU and a memory such as a RAM and a ROM, and the memory stores a program code or a command configured to cause the CPU to execute a process. Memory or computer readable media includes any available medium accessible by a general purpose or dedicated computer. Alternatively, instead of the computer including the processor, a processing circuit composed of one or more dedicated hardware circuits that execute all of various processes may be used.

• The present disclosure has been described in accordance with the examples, but it is understood that the present disclosure is not limited to the examples and structures. The present disclosure also includes various variations and variations within a uniform range. In addition, various combinations and forms, as well as other combinations and forms that include only one element, more, or less, are within the scope and scope of the present disclosure.

1 ... Operation target, 3 ... Key, 4 ... Equipment, 5 ... First authentication function unit, 6 ... Verification device, 7 ... Electronic key system, 22 ... Terminal, 23 ... Second authentication function unit, 24 ... Wireless authentication device, 25 ... Terminal key system, 40 ... Registration device, 41 ... Terminal device, 42 ... Non-contact communication unit, 44 ... Registration unit, 45 ... Connector unit, Dk ... Key information, Dt ... Identification information.

Claims (10)

The first authentication function unit that wirelessly authenticates the collation device and the key provided in the operation target to operate the operation target device, and
The wireless authentication device provided in the operation target and the terminal are wirelessly authenticated, and when the terminal is legitimate, the wireless authentication device is communicated with the collation device, and the device is operated by the collation device. 2 A registration device equipped with an authentication function unit and used for the operation target.
A terminal that includes a non-contact communication unit that performs non-contact communication with the collation device, is capable of wireless or wired communication with the wireless authentication device, and is detachably provided from the wireless authentication device.
A registration device including a registration unit for registering the wireless authentication device in the collation device via communication using the non-contact communication unit of the terminal. The registration device according to claim 1, wherein the second authentication function unit is a function of authenticating key information, which is a one-time key registered in the terminal from the outside, by the wireless authentication device. The registration device according to claim 1 or 2, wherein the terminal has a main function different from the key function, and is a terminal to which the key function is separately added. The first authentication function unit is an electronic key system that collates the key by communication having different frequencies between the radio wave transmitted from the collation device and the radio wave transmitted from the key.
The registration device according to any one of claims 1 to 3, wherein the second authentication function unit is a terminal key system in which the wireless authentication device authenticates the terminal by short-range wireless communication. The registration device according to any one of claims 1 to 4, wherein the registration is an operation of writing the identification information of the wireless authentication device to the collation device. The registration device according to any one of claims 1 to 5, wherein the communication executed between the collation device and the wireless authentication device has the same format as the communication executed by the first authentication function unit. The invention according to any one of claims 1 to 6, wherein a connector portion is provided between the wireless authentication device and the terminal so that the terminal can be detachably attached to the wireless authentication device. Registration device. The registration device according to any one of claims 1 to 7, wherein the terminal is authenticated by the collation device via communication by the non-contact communication unit and can operate the device. The first authentication function unit that wirelessly authenticates the collation device and the key provided in the operation target to operate the operation target device, and
The wireless authentication device provided in the operation target and the terminal are wirelessly authenticated, and when the terminal is legitimate, the wireless authentication device is communicated with the collation device, and the device is operated by the collation device. 2 A terminal equipped with an authentication function unit and used for the operation target.
It includes a non-contact communication unit that performs non-contact communication with the collation device, is capable of wireless or wired communication with the wireless authentication device, and is provided detachably from the wireless authentication device.
A terminal that executes communication using the non-contact communication unit when the registration device that registers the wireless authentication device in the verification device executes the registration. The first authentication function unit that wirelessly authenticates the collation device and the key provided in the operation target to operate the operation target device, and
The wireless authentication device provided in the operation target and the terminal are wirelessly authenticated, and when the terminal is legitimate, the wireless authentication device is communicated with the collation device, and the device is operated by the collation device. 2 A registration method used for the operation target equipped with an authentication function unit.
A terminal including a non-contact communication unit that performs non-contact communication with the collation device is made to communicate wirelessly or by wire with the wireless authentication device, and the wireless authentication is performed via communication using the non-contact communication unit of the terminal device. Registering the device with the collation device
A registration method comprising removing the terminal from the wireless authentication device after the registration.

Images