JP2024052217A - Security system, program, and the like - Google Patents

Abstract

To provide a mechanism that is more superior than a conventional mechanism, such as a mechanism that requests at least one time of input operation by a user for execution of transition operation and skips a request of input operation or reduces the number of requests when a predetermined condition is satisfied.SOLUTION: Provided is a security system of a vehicle that includes a function of performing transition operation to at least one of an unlock state and a travel standby state of the vehicle with respect to an input of first information. A security control unit of a security device requests at least one time of input operation by a user for execution of the transition operation and skips a request of the input operation or reduces the number of requests when a predetermined condition is satisfied.SELECTED DRAWING: Figure 8

Description

The present invention relates to a security system and a program.

JP 2019-073206 A (Patent Document 1) and the like are examples of background technology in this technical field. This publication states, for example, that "a system is retrofitted to a vehicle system that has a function of performing a smart operation, which is at least one of unlocking the vehicle and starting the engine, based on a response signal from the smart key in response to a request signal sent from the vehicle to the smart key. This system has at least one of a function of prohibiting a smart operation in the vehicle system and a function of notifying when part of the smart operation has been performed" (see abstract).

JP 2019-073206 A

The above-mentioned Patent Document 1 has various problems with conventional systems, such as the fact that it does not consider a mechanism for requesting at least one input operation by the user to execute a transition operation and skipping the request for an input operation or reducing the number of requests when a certain condition is met.

In view of the above-mentioned problems, one of the objects of the present invention is to provide a security system that is superior to conventional systems, such as a mechanism that requires at least one input operation by the user to execute a transition operation, and skips the input operation request or reduces the number of requests when certain conditions are met.

The object of the present invention is not limited to this, and the applicant intends to obtain rights to configurations that aim to obtain effects from parts of the configurations disclosed in this specification and drawings, etc., by filing a divisional application, amendment, etc. For example, this specification discloses problems in which the phrases "can" and "is possible" are read as "the problem is". Each problem is described as being independent, and the applicant intends to obtain rights to the configurations for solving each problem separately by filing a divisional application, amendment, etc. Even if the problem is implicitly understood from the description in the specification, the applicant intends to include part of the configurations described in this specification in the scope of the patent claim by amendment or divisional application. The applicant has also disclosed a configuration that solves a problem that combines these independent problems, and the applicant intends to obtain rights to it.

In order to solve the above problems, for example, the configurations described in the claims are adopted.
The present application includes multiple means for solving the above problems, and one example is a security control unit of a security device that requests at least one input operation by the user to execute a transition operation, and is characterized in that, when certain conditions are met, the request for the input operation is skipped or the number of requests is reduced.

According to the present invention, it is possible to provide a mechanism that differs from the conventional mechanism, for example, a mechanism that requests at least one input operation by the user to execute a transition operation, and skips the request for the input operation or reduces the number of requests if certain conditions are met.
Problems, configurations and effects other than those described above will become apparent from the following description of the embodiments.
This security system, which is superior to conventional systems, will be referred to simply as the security system hereinafter.

Note that the effects of the invention of this application are not limited to these, and effects achieved from the configuration parts disclosed in this specification and drawings, etc. are also disclosed, and it is our intention to obtain rights to the configuration that achieves said effects through divisional applications, amendments, etc. For example, in this specification, statements such as "can do" and "is possible" are statements that clearly indicate the effect that is achieved, and there are also parts that show the effect even without statements such as "can do" and "is possible." Also, there are effects that can be understood from the configuration even without such statements.

FIG. 1 is an example of an explanatory diagram illustrating an in-vehicle security device 1 connected to a network 6 according to an embodiment. FIG. 2 is a schematic diagram illustrating an example of a security system. FIG. 3 is a schematic diagram illustrating another example of a security system. FIG. 4 shows an example of the hardware configuration of the vehicle-mounted security device 1. As shown in FIG. FIG. 5 is a diagram showing an example of the hardware configuration of the security remote control 3. As shown in FIG. FIG. 6 is an example of the hardware configuration of the monitoring device 5 . FIG. 7 shows an example of the hardware configuration of the user terminal 4. FIG. 8 is an example of a control flow by the security system. FIG. 9 is an example of a sequence diagram showing signal transmission and reception in a first security control by the security system. FIG. 10 is an example of a sequence diagram showing signal transmission and reception in the second security control by the security system. FIG. 11 is an example of a sequence diagram showing signal transmission and reception in the third security control by the security system. FIG. 12 is an example of a sequence diagram showing signal transmission and reception in the fourth security control by the security system. FIG. 13 is an example of a sequence diagram showing signal transmission and reception in the fifth security control by the security system. FIG. 14 is an example of a sequence diagram showing signal transmission and reception in the sixth security control by the security system. FIG. 15 is an example of a sequence diagram showing signal transmission and reception in the seventh security control by the security system. FIG. 16 is an example of an explanatory diagram for explaining a security system that utilizes received signal strength. FIG. 17 is an example of an explanatory diagram illustrating another security system that utilizes received signal strength. FIG. 18 is a schematic diagram illustrating an example of an overview of a security system having a monitoring device.

Below, a description will be given of a mode for carrying out the present invention with reference to the drawings. Note that the embodiment shown below is one embodiment of the present invention, and the contents of the present invention should not be interpreted as being limited based on the following description.

FIG. 1 is an example of an explanatory diagram illustrating an in-vehicle security device 1 connected to a network 6 according to an embodiment.
Moreover, the "in-vehicle security device 1" is an example of a "security device." The "security device" may be, for example, a device that controls unlocking of the front door of the user 200's home, such as a smart lock device.
In the embodiment of FIG. 1, the vehicle security device 1 is connected to a vehicle key 2, a security remote control 3, a user terminal 4, a monitoring device 5, a backup siren 7, electronic equipment 8, a sensor 9, and a vehicle 10 via a network 6.

In the following explanation, the vehicle-mounted security device 1, security remote control 3, user terminal 4, and monitoring device 5 are each described as separate components, but the functions and modules described for these components can also be combined in whole or in part and executed by a single device.

Therefore, in the following description, for example, the functions described as functions of the security remote control 3 may be executed by the monitoring device 5, and the functions described for each of the in-vehicle security device 1, the security remote control 3, the user terminal 4, and the monitoring device 5 may be executed by a single device.

Furthermore, a function described as a function of any one of the in-vehicle security device 1, the security remote control 3, the user terminal 4, and the monitoring device 5 can be executed in cooperation with other components. For example, a function described as a function of the in-vehicle security device 1 can be executed in cooperation with the security remote control 3, the user terminal 4, and the monitoring device 5.

In such a configuration, the combination of the security remote control 3, the user terminal 4 and the surveillance device 5 may be considered as one device.
In such a combination, for example, a user terminal 4, such as a smartphone 4a, which is unable to receive information specific to the vehicle 10, can receive information specific to the vehicle 10 from a monitoring device 5 manufactured as a receiving-capable device capable of receiving information specific to the vehicle 10, thereby providing a function that links an application of the user terminal 4 with information specific to the vehicle 10.

The vehicle-mounted security device 1 may be configured to utilize the functions of the user terminal 4 and electronic device 8, such as display functions, output functions, and security functions.

The in-vehicle security device 1 may be a device that is equipped on the vehicle 10 from the manufacturing stage of the vehicle 10, but it is better if it is a device that is selected and purchased, for example, by the user 200 himself after the vehicle 10 is manufactured, and then retrofitted to the vehicle 10 by a so-called professional shop.
In a configuration in which the in-vehicle security device 1 is a security device that is retrofitted to the vehicle 10, it is possible to install a security system in the vehicle 10 that is different from the security system provided by the manufacturer of the vehicle 10.

Generally, malicious third parties who intend to steal a vehicle tend to prioritize finding ways to penetrate or circumvent the security system provided by the manufacturer of the vehicle 10, so installing a security system different from the security system provided by the manufacturer of the vehicle 10 is an effective way for the user 200 to protect his or her own vehicle 10.

The vehicle key 2 is a key for the vehicle 10, also referred to as an original key, a smart key, or simply a key.
In the following explanation, the vehicle key 2, security remote control 3, user terminal 4, and monitoring device 5 will be described as separate components, but for example, the vehicle key 2 may be configured to be able to execute at least some or all of the functions of the security remote control 3, user terminal 4, and monitoring device 5 described below on its own.

The security remote control 3 is an example of a "remote control" and has a function of receiving signals related to various information from the in-vehicle security device 1 and notifying the user 200 by, for example, sound, video, images, light, or the like.
The security remote control 3 has a function of transmitting and receiving information using, for example, a low-power radio. The security remote control 3 may also be configured to be replaceable with a user terminal 4 (described later) such as a smartphone that transmits and receives information using Wi-Fi (registered trademark) or Bluetooth (registered trademark).

The user terminal 4 is a terminal owned by a user 200 who uses the vehicle 10, in particular, a terminal owned by a user 200 who is registered as an “authorized user” of the vehicle 10.
In Figure 1, a smartphone 4a, a tablet terminal 4b, and a wearable terminal 4c are illustrated as user terminals 4, but the user terminals 4 may also be other portable terminals (mobile terminals) such as personal digital assistants (PDAs), stationary or portable computers, etc.

The monitoring device 5 is a portable, e.g., key holder-type, device that has a monitoring function described below. The functions and configuration described for the monitoring device 5 can also be integrated into the security remote control 3.

The backup siren 7 is a device that has the function of outputting a warning sound from the vehicle-mounted security device 1. It is particularly preferable that the backup siren 7 is configured to be able to output a warning sound using a power source inside the backup siren 7 even when the connection to the battery of the vehicle 10 is cut off.

The electronic device 8 is various electronic devices installed in the vehicle 10 .
In FIG. 1, a car navigation device 8a, a drive recorder 8b, and a camera 8c are shown as the electronic devices 8, but the electronic devices 8 may also be radar detectors, monitors, speakers, music players, video players, stationary or portable computers, etc.
The drive recorder 8b and the camera 8c are examples of an "imaging device mounted on a vehicle."

The sensor 9 is a sensor device of various types attached to the vehicle 10 .
In Figure 1, the sensors 9 are illustrated as a triple sensor 9a that detects sound, impact, air movement, etc., which are retrofitted to the vehicle 10 together with the in-vehicle security device 1, an inclination sensor 9b that detects the inclination of the vehicle 10, an IR sensor 9c that detects the intrusion of a person into the vehicle 10, and a microwave sensor 9d that detects the approach of a person to the vehicle 10, but the sensors may also be sensor devices that are equipped to the vehicle 10 during the manufacturing stage, for example.

The sensor 9 may have, for example, an acceleration sensor, a gyro sensor, a pressure sensor, a temperature sensor, a humidity sensor, an illuminance sensor, a sound pressure sensor, etc. The acceleration sensor is, for example, a three-axis acceleration sensor that detects the acceleration of the vehicle 10 in the forward/backward, left/right, and up/down directions. The gyro sensor is a sensor that detects tilt. The acceleration sensor and the gyro sensor may be used to estimate the position of the vehicle 10 by autonomous navigation, for example, when signals from GNSS satellites cannot be received. The acceleration sensor and the gyro sensor are also used for processing of predetermined events such as a fall. The pressure sensor measures air pressure. The pressure sensor is used, for example, to detect differences in elevation and determine whether the road is a highway or an ordinary road. The temperature sensor detects temperature. The humidity sensor detects humidity. The illuminance sensor is a sensor that detects illuminance indicating the brightness inside the vehicle cabin. The sound pressure sensor is a sensor that detects sound pressure inside the vehicle cabin of the vehicle 10 and around it.

The vehicle 10 is exemplified as a four-wheeled passenger car, but the vehicle 10 may be any vehicle or moving body capable of mounting the vehicle-mounted security device 1 .
For example, the vehicle may be a large vehicle with four or more wheels, such as a bus (e.g., shuttle bus, tourist bus, long-distance bus, articulated bus, etc.) or a truck, or a two- or three-wheeled vehicle such as a motorcycle or buggy, or it may be a welfare vehicle, an ambulance vehicle, a disaster response vehicle, or other specialized vehicle operated by local governments or ministries and agencies, or a crane truck, a trailer hitch, or construction machinery such as heavy equipment or earthmoving machinery.

In addition, the drive system of the vehicle 10 may be an internal combustion engine, but an electric motor or the like, particularly an xEV vehicle, is preferable in terms of ease of electrification of the vehicle 10.
Note that xEV is a general term for electrified vehicles such as BEV (Battery Electric Vehicle), HEV (Hybrid Electric Vehicle), PHEV/PHV (Plug-in Hybrid Electric Vehicle/Plug-in Hybrid Vehicle), and FCEV/FCV (Fuel Cell Electric Vehicle/Fuel Cell Vehicle).

Each terminal and server of the security system may be, for example, a portable terminal (mobile terminal) such as a smartphone, tablet, mobile phone, or personal digital assistant (PDA), or a wearable terminal such as glasses, wristwatch, or clothing. They may also be stationary or portable computers, or servers located on the cloud or network. In terms of functionality, they may be a VR (Virtual Reality) terminal, an AR (Augmented Reality) terminal, or an MR (Mixed Reality) terminal. Or they may be a combination of multiple of these terminals. For example, a combination of one smartphone and one wearable terminal can logically function as one terminal. They may also be other information processing terminals.

Each terminal and server in the security system includes a processor that executes an operating system, applications, programs, etc.; a main memory device such as a RAM (Random Access Memory); an auxiliary memory device such as an IC card, a hard disk drive, an SSD (Solid State Drive), or a flash memory; a communication control unit such as a network card, a wireless communication module, or a mobile communication module; input devices such as a touch panel, keyboard, mouse, voice input, and input based on motion detection from image capture by the camera unit; and an output device such as a monitor or display. The output device may be a device or terminal that transmits information to be output to an external monitor, display, printer, or device.

The main memory stores various programs, applications, etc. (modules), and the processor executes these programs and applications to realize each functional element of the overall system. Each of these modules may be implemented in hardware, for example by integration. Each module may be an independent program or application, or may be implemented as a subprogram or function within a single integrated program or application.

In this specification, each module is described as an entity (subject) that performs processing, but in reality, the processing is carried out by a processor that processes various programs, applications, etc. (modules).
Various databases (DB) are stored in the auxiliary storage device. A "database" is a functional element (storage unit) that stores a data set so that it can handle any data operation (e.g., extraction, addition, deletion, overwriting, etc.) from a processor or an external computer. The method of implementing the database is not limited, and may be, for example, a database management system, spreadsheet software, or a text file such as XML or JSON.

FIG. 2 is a schematic diagram illustrating an example of a security system.
FIG. 2A is an example of an explanatory diagram illustrating a state in which a vehicle 10 equipped with a security system and a user 200 thereof are in close proximity to each other.
FIG. 2B is an example of an explanatory diagram illustrating a state in which a vehicle 10 equipped with a security system and a user 200 thereof are close to each other and apart from each other.

In the embodiment of FIG. 2(a), the security system is composed of at least an in-vehicle security device 1, a vehicle key 2, a security remote control 3, a user terminal 4, a vehicle 10, and a vehicle control device 210.

A transceiver 220 is provided near an outer handle 230 of the vehicle 10. The transceiver 220 may be configured as an antenna device, for example.
The transceiver 220 is an example of a "vehicle receiver."

When a user 200 having a vehicle key 2 approaches the vehicle 10 or touches the outer handle 230, the vehicle control device 210 of the vehicle 10 has a smart function that, in response to a signal from the vehicle key 2, transitions the vehicle 10 from a locked state to an unlocked state or from a driving-prohibited state to a driving-permitted state without the user 200 operating the vehicle key 2 himself/herself.

The in-vehicle security device 1 has the above-mentioned smart function, for example, of requesting a specified input operation by the user 200 before transitioning the vehicle 10 from a driving-prohibited state to a driving-permitted state, and transitioning the vehicle 10 to a driving-permitted state when the specified input operation is performed.
The driving permitted state is an example of a "driving standby state."

The specified input operation is an example of "at least one input operation by the user for executing the transition operation," and may be, for example, an input operation of information known only to the user 200, such as inputting a PIN number using an input unit attached to the vehicle 10 or a button switch on the security remote control 3.
The predetermined input operation may be performed via the security remote control 3 or a touch display of the user terminal 4 .

By installing an in-vehicle security device 1 in a vehicle 10 and introducing a security system, the vehicle 10 can be effectively protected from crimes such as relay attacks, code grabbers, and CAN invaders.

This will contribute to preventing theft of the vehicle 10 and realize the creation of a town where people can continue to live safely and securely.
In addition, the system can effectively and cleanly utilize energy and is designed to be in keeping with the SDGs. There is no need to operate the controls with wet hands when it is raining.
For example, theft can be prevented without being affected by weather changes such as rain.
It will also help prevent theft in workplaces and other places of work, helping to maintain a healthy economic growth order.

In addition, vehicles 10 stolen through such crimes may be sold as is, but more often than not, they are disassembled into the individual parts that make up the vehicle 10 and then sold. In such cases, parts that are difficult to sell or damaged body parts are often discarded.

As described above, the introduction of a security system can help prevent theft and vandalism of the vehicle 10, and can also prevent the waste of the Earth's limited resources that would otherwise be caused by the destruction of a vehicle 10 that is still perfectly usable.

In the following explanation, "user 200" may also be referred to as "true user 200," "legitimate user 200," "regular user 200," "configured user 200," etc.

Furthermore, the connection state between the in-vehicle security device 1 and the vehicle control device 210, etc. shown in Figure 2 (a) is only shown diagrammatically, and therefore, for example, the connection line between the in-vehicle security device 1 and the vehicle control device 210 is not limited to one.
Furthermore, the mounting position of the vehicle-mounted security device 1 within the vehicle 10 may be different depending on the model of the vehicle 10 and on the vehicle-mounted security device 1 and the installation company that installs it.

For example, the vehicle security device 1, such as the main unit 310 and genuine keyless adapter (MC adapter) 320 of the vehicle security device 1 described using Figure 3, should be installed by a professional shop certified by the company that manufactures and sells the vehicle security device 1.
Depending on the know-how of the professional shop or other entity that installs the vehicle security device 1, the security system can function in the same way even if the connection state between the vehicle security device 1 and the vehicle control device 210, etc., and the installation position of the vehicle security device 1 within the vehicle 10, etc., differ.

As described below, the in-vehicle security device control unit 403 of the in-vehicle security device 1 has a function of detecting that the vehicle has been locked or unlocked with the vehicle key (genuine key) 2 in conjunction with, for example, the genuine keyless adapter 320, and arming or disarming the security functions of the security system. Depending on the settings, it may also be possible to disarm against attacks such as the relay attack described above, for example allowing the vehicle 10 to be driven.

To prevent this, the in-vehicle security device control unit 403 of the in-vehicle security device 1 has a security function that, when the device is released (disarmed) using the original keyless entry, extends the disarming period until any switch operation (PIN code) is entered.
This makes it possible to effectively protect the vehicle 10 from crimes such as relay attacks, code grabbers, and CAN invaders, as described above.

However, the user 200 may find this switching operation troublesome, and in some cases, such security functions are often turned off.
The security system can improve the everyday comfort of the user 200 by skipping operations that are troublesome for the user 200, such as switch operations, or reducing the number of such operations, based on judgment conditions such as the legitimacy of the user 200, while maintaining security functions such as countermeasures against relay attacks.

For example, in a security system, assuming that vehicles 10 are of the same model, equipped with the same grade of security device, and configured with the same security functions, and are in a similar security environment, traditionally, distinctions between individual users 200 and between legitimate users 200 and suspicious individuals have often been made based on authentication procedures performed by the users 200 themselves, such as inputting a PIN number or biometric information.

In the security system, as a measure to eliminate the trouble, hassle, and inconvenience of the authentication procedure by the user 200 himself while maintaining a high level of security, the input of detection results of physical quantities, etc., which differ according to the behavioral habits, lifestyle, etc., of each individual user 200, is used instead of the authentication procedure by the user 200 himself to disable security functions, etc.

As a result, the security system can easily resolve the conventional trade-off relationship in which improving security effectiveness also increases the burden on the user 200.

Therefore, in the security system, the user 200 is less likely to feel the trouble or hassle of switching operations while still having security functions such as countermeasures against relay attacks, and this increases the prevention effect of turning off security functions that are effective from a security standpoint because they are inconvenient.

Furthermore, since the physical quantities that differ according to the behavioral habits and lifestyle habits of each individual user 200 cannot be known in advance by the perpetrator of a relay attack or the developer of a device used in a relay attack, it is effective as a preventive measure against attacks such as relay attacks.

In addition, by detecting physical quantities, etc., which differ according to the behavioral habits and lifestyle habits of each individual user 200 from the naturally inconspicuous behavior of the user 200 in their daily lives, as described below, it is not easy for a perpetrator of a relay attack or the like to detect these physical quantities, etc., even if he or she were to target the vehicle 10 of the user 200 and observe the behavior of the user 200.

In addition, in the security system, when the user 200 or a family member of the user 200 is unable to perform a specified input operation because, for example, they have forgotten the valet switch number, the in-vehicle security device control unit 403 of the in-vehicle security device 1 etc. switches to an authentication process that can be performed by the user himself/herself, for example, input processing with higher security strength such as biometric authentication such as fingerprint authentication, vein authentication, iris authentication, etc., thereby avoiding a situation in which the registered legitimate user 200 or his/her family member is unable to use the vehicle 10 and achieving a balance between security and convenience.

Figure 2(b) illustrates a state in which a user 200a is in a first area 250 where short-range communication is established between the vehicle 10 and the vehicle key 2, and a state in which a user 200b is in a second area 260 where long-range communication is established between the vehicle 10 and the security remote control 3.

The first area 250 is an area where wireless communication with a vehicle key (genuine key) 2 is possible, and the second area 260 is an area where wireless communication with a security remote control 3 is possible.
The wireless output of the security remote control 3 is greater than the wireless output of the vehicle key (genuine key) 2 , and accordingly the second area 260 is greater than the first area 250 .

The in-vehicle security device 1 has the function of transmitting security-related information about the vehicle 10 to the user 200b at home 240, and the user 200b can check for abnormalities in the vehicle 10, such as the approach or contact of a person with the vehicle 10, from the output information from the security remote control 3.

Furthermore, user 200b at home 240 can use the security remote control 3 to transition vehicle 10 from an unlocked state to a locked state, from a driving permitted state to a driving prohibited state, or from an alarm output state to an alarm stopped state.
Also, the user 200b at home 240 can use the security remote control 3 to perform the reverse transition operation to that described above.

As described above, the security system should maintain strong security functions while being able to skip or reduce, depending on the situation, the troublesome operations that have traditionally been associated with them for the user 200. In addition, it should have the function of outputting to the user 200 information that will increase the security awareness of the user 200 and encourage the user 200 to take actions that will make the user less likely to be the target of information relay attacks, etc., as well as related educational information.

As a result, the user 200 will not easily turn off safer security functions and will be more likely to take actions that make relay attacks and the like less likely to be carried out, thereby helping to keep the vehicle 10 safer.

The vehicle security device control unit 403 of the vehicle security device 1 may have a function to output the above-mentioned information from the security remote control 3 or the user terminal 4 when the doors of the vehicle 10 are locked or at a predetermined timing after the doors are locked, for example, at a point between the time of locking and 60 seconds later.

As shown in FIG. 2(b), in the security system, when the user 200b is at the user 200's home 240, the security remote control unit 503 of the security remote control 3 and the processor 703 of the user terminal 4 may be configured to output to the user 200b information regarding the safe storage of the vehicle key 2, such as audio information or image information such as "Put it in the case."

The security remote control unit 503 of the security remote control 3 and the processor 703 of the user terminal 4 may have a function to reduce the frequency of outputting the above-mentioned audio information and image information or to stop outputting the information when it is determined that the vehicle key 2 is being placed in the case more frequently.

Conversely, the security remote control unit 503 of the security remote control 3 and the processor 703 of the user terminal 4 may have a function to increase the frequency of outputting the above-mentioned audio information and image information or to resume outputting the information when it is determined that the opportunities for inserting the vehicle key 2 have decreased or disappeared.

When the vehicle key 2 and security remote control 3 are placed together at the front door, etc., the security remote control 3 can determine whether the vehicle key 2 is in the case or not based on the reception status of the wireless signal from the vehicle key 2.

The security remote control unit 503 of the security remote control 3 and the processor 703 of the user terminal 4 may have a function to output information to educate users not to leave the vehicle key 2 near the entrance, etc.

The security remote control unit 503 of the security remote control 3 and the processor 703 of the user terminal 4 may have a function to output alarm information from the security remote control 3 or the user terminal 4 such as a smartphone if it detects that the vehicle key 2 is placed in an inappropriate location after locking.

The security remote control control unit 503 of the security remote control 3 and the processor 703 of the user terminal 4 may have a function to output an alarm if the vehicle key 2 is not placed in the case within a set predetermined time, for example, when getting off the vehicle 10 or after the doors of the vehicle 10 are locked.
The above-mentioned set predetermined time is an example of "a set time from the time of getting off the vehicle."

The specified time period can be determined by the security remote control unit 503 of the security remote control 3 or the processor 703 of the user terminal 4, or can be set by the user 200, for example, between 120 seconds from the time the vehicle key 2 is stopped.

In a configuration in which the security remote control unit 503 of the security remote control 3 or the processor 703 of the user terminal 4 determines the specified time, the security remote control unit 503 of the security remote control 3 or the processor 703 of the user terminal 4 may determine the specified time as a fixed length of time, but may also learn the time from the time of locking until the vehicle key 2 is placed in a place where it is left, such as at the front door, and determine the specified time based on, for example, past history, such as the average or maximum time of that time.

The security remote control unit 503 of the security remote control 3 and the processor 703 of the user terminal 4 may have a function to output alarm information when it detects that the vehicle key 2 is in a location where radio waves may be picked up from outside the user's 200 home 240, such as at the front door, after locking.

When the security remote control unit 503 of the security remote control 3 or the processor 703 of the user terminal 4 detects, for example, that the security remote control 3 is located relatively close to the vehicle-mounted security device 1, it determines that the vehicle key 2 is located in a place where radio waves may be picked up from outside the house.

The security remote control unit 503 of the security remote control 3 and the processor 703 of the user terminal 4 may have a function to output alarm information if, for example, after locking, it is determined that the vehicle key 2 and security remote control 3 have not moved for a certain period of time (which may be rephrased as a predetermined period of time) and that the security remote control 3 is close to the in-vehicle security device 1, for example close enough that a relay attack could be performed from outside the user's 200 home 240.

The security remote control unit 503 of the security remote control 3 and the processor 703 of the user terminal 4 may have a function to output alarm information based on the length of the above-mentioned fixed period of time when the user 200 places the vehicle key 2 in the vehicle key 2 storage location.

The security remote control unit 503 of the security remote control 3 and the processor 703 of the user terminal 4 may routinely record and learn the time from when the vehicle 10 is locked to when the vehicle key 2 is placed in a stationary state.

The security remote control unit 503 of the security remote control 3 or the processor 703 of the user terminal 4 may output video information or audio information such as, "Keep it in a room away from the entrance or on the second floor."

As described below, the processor 703 of the user terminal 4 may have a function to output the warning information in cooperation with an application stored in the user terminal 4, such as a music application, as a melody, music, or a favorite sound of the user 200, or to display a message indicating the warning superimposed on a favorite image of the user 200 in cooperation with, for example, a photo application.

The security remote control unit 503 of the security remote control 3 or the processor 703 of the user terminal 4 may output the above-mentioned alarm information when the vehicle 10 is locked or a predetermined time after the vehicle is locked.

The security remote control unit 503 of the security remote control 3 or the processor 703 of the user terminal 4 may output the above-mentioned alarm information when it detects that the radio wave intensity of the radio waves received from the vehicle 10 has decreased by a predetermined amount or a predetermined percentage at the time of the locking operation of the vehicle 10.

FIG. 3 is a schematic diagram illustrating another example of a security system.
In the embodiment of FIG. 3, the vehicle-mounted security device 1 is made up of a main unit 310 and a genuine keyless adapter 320 , and the main unit 310 and the genuine keyless adapter 320 are connected via a communication line 330 .
In another configuration of the in-vehicle security device 1, the main unit 310 and the genuine keyless adapter 320 may be integrally configured.

In the embodiment of FIG. 3, the security system can execute the ARM operation and the DISARM operation of the vehicle-mounted security device 1 without using the security remote control 3.
The ARM operation (also referred to as an "arm operation") of the vehicle-mounted security device 1 is an operation for turning on at least one security function of the vehicle-mounted security device 1.
The DISARM operation (also referred to as a "disarm operation") of the in-vehicle security device 1 is an operation for turning off at least one security function of the in-vehicle security device 1.

The genuine keyless adapter 320 determines the locking and unlocking operations based on a signal 370 from the actuator motor M and hazard (buzzer) of the vehicle 10, for example, and performs ARM operation when locked and DISARM operation when unlocked.
When the smart and manual buttons are operated using the vehicle key 2, also called the original remote control, the actuator operates and the hazard lights flash or the buzzer sounds, and under this condition, the ARM and DISARM operations are performed.
This makes it possible to realize an advantageous configuration in which ARM and DISARM can be performed with the vehicle key 2 without using the security remote control 3, by the operation of the genuine keyless adapter (MC adapter) 320.

It is preferable that a security system having the vehicle-mounted security device 1 of the embodiment of Figure 3 has a function of transmitting information indicating that the security function has been disarmed to a security remote control (two-way remote control) 3 (not shown) when the security function is deactivated via the original keyless adapter (MC adapter) 320.
9 to 15, when the security remote control (two-way remote control) 3 and the vehicle key (genuine key) 2 are carried together, this function is used to reduce the troublesome operations for the user 200 described above, by detecting the reception level (RIIS) of the security remote control (two-way remote control) 3 or the reception level (RSSI) of the vehicle two-way unit to determine whether the security remote control (two-way remote control) 3 is nearby, and if it is nearby, the troublesome operations for the user 200 described above are canceled. Note that this reception level (RSSI) may be set by the user 200 depending on the conditions of use.

Each of the components and modules of the devices and the like described below with reference to FIGS. 4 to 7 can be added, omitted, integrated, or substituted depending on the embodiment.
Furthermore, each of the components and modules of the devices and the like described with reference to Figures 4 to 7 may be configured to exist in a distributed arrangement or stored state throughout the entire system for control and processing.
Furthermore, Figures 4 to 7 are schematic examples of hardware configurations, and the components and modules described therein do not mean that all of them are essential components for each terminal or server.

FIG. 4 shows an example of the hardware configuration of the vehicle-mounted security device 1. As shown in FIG.
The vehicle-mounted security device 1 has the functions described with reference to FIGS.
The vehicle-mounted security device 1 is an example of a "security device."

The main memory device 401 of the in-vehicle security device 1 stores programs and applications such as a security module 410, a judgment module 411, an alert module 412, a learning module 413, a vehicle key linkage module 415, a security remote control linkage module 416, a user terminal linkage module 417, and a monitoring device linkage module 418. The in-vehicle security device control unit 403 executes these programs and applications to execute each functional element of the in-vehicle security device 1.

The security module 410 controls each of the security functions of the in-vehicle security device 1 .
It is preferable that the security module 410 is configured to be able to control the security state of the vehicle 10 by individually setting the multiple security functions of the in-vehicle security device 1 to on/off.

The determination module 411 executes various determinations required to execute the security functions of the in-vehicle security device 1. For example, based on the detection value by the sensor 9, the determination module 411 determines the presence or absence of a person approaching the vehicle 10, the received signal strength of a received signal, and the like.
The determination module 411 may be configured to use a Received Signal Strength Indicator (RSSI) as the received signal strength of the received signal.
In the following description, "received signal strength" may also be referred to as "signal strength,""receptionlevel,""RSSI," etc.

A specific example of the determination performed by the determination module 411 will be described in more detail with reference to FIG.
As described later, the above determination can also be performed using the determination modules 511, 611, and 711. In such a configuration, it is preferable that the determination modules 411, 511, 611, and 711 cooperate with each other to perform determination, or perform separate determinations in parallel.

The alert module 412 controls the execution of an alarm output and the like when an abnormality occurs in the vehicle 10 .
The alert module 412 may be configured to execute alarm output, etc., from an alarm in the input/output unit 404 of the vehicle-mounted security device 1, a backup siren 7 connected to the vehicle-mounted security device 1, or an alarm that is originally equipped on the vehicle 10.

The alert module 412 may further be configured to control alarm output, etc., from the vehicle-mounted security device 1 so that the alarm output, etc., is output from the security remote control 3 or the user terminal 4.

The learning module 413 performs various learning operations related to the security functions of the vehicle-mounted security device 1 .
For example, the learning module 413 may be configured to learn, for example, signal strength thresholds or threshold ranges related to the execution of ARM operation or DISARM operation of the vehicle security device 1, the time points at which ARM operation or DISARM operation is executed, etc., based on detection values by the sensor 9.

A specific example of the learning performed by the learning module 413 will be described in more detail with reference to FIG.
The vehicle key linkage module 415 controls the linkage between the in-vehicle security device 1 and the vehicle key 2 .

The security remote control cooperation module 416 controls the cooperation between the in-vehicle security device 1 and the security remote control 3 .
The user terminal cooperation module 417 controls the cooperation between the in-vehicle security device 1 and the user terminal 4 .
The monitoring device cooperation module 418 controls the cooperation between the in-vehicle security apparatus 1 and the monitoring device 5 .

The cooperation modules 415 to 418 may be configured as one cooperation module, or in some cases, may be omitted or integrated.
Moreover, each of the link modules 514 to 518, 614 to 617, and 714 to 718 shown in FIGS. 5 to 7 functions similarly to the above description, so a description of the corresponding modules will be omitted.

The auxiliary storage device 402 of the in-vehicle security device 1 stores setting information 420, user information 421, signal strength information 422, learning information 423, and the like.
The vehicle security device control unit 403 uses at least a portion of this information and the above-mentioned modules 415 to 418 to execute various security functions of the security system.

The in-vehicle security device control unit 403 is an example of a "security control unit." The in-vehicle security device control unit 403 can also function as a "security control unit" in cooperation with the above-mentioned security remote control control unit 503, monitoring device control unit 603, and processor 703.

The in-vehicle security device 1 may have a function to execute communication via the network 6 for mobile phone lines or data communication lines using the communication control unit 406. Alternatively, the vehicle 10 may have a function to execute similar communication.

In the above configuration, it would be better if the vehicle 10 could make a phone call or app call to a user terminal 4 (described below), such as a smartphone 4a, to inform the user 200 of the situation inside the vehicle 10 via videophone.

In such a configuration, the vehicle security device 1 may work in conjunction with the electronic device 8 and the sensor 9 to initiate a phone call or app call when an impact or motion of the vehicle 10 is detected as a trigger.

As a result, the vehicle security device control unit 403 of the vehicle security device 1 can transmit video and audio from the drive recorder 8b and camera 8c to a user terminal 4 such as a smartphone.

The vehicle security device control unit 403 may be configured to accept the setting of the above-mentioned trigger by the user 200. This allows for flexible management of the power consumption involved in the execution of the above-mentioned communication, and makes it possible to configure the vehicle 10 and the vehicle security device 1 so that the batteries are less likely to run out.

FIG. 5 is a diagram showing an example of the hardware configuration of the security remote control 3. As shown in FIG.
The security remote control 3 is an example of a "remote control".
Regarding the components constituting the security remote control 3, those that function similarly to the components of the above-described vehicle-mounted security device 1 will not be described.

For example, the in-vehicle security device linkage module 514 controls the linkage between the in-vehicle security device 1 and the security remote control 3, and the user terminal linkage module 517 controls the linkage between the security remote control 3 and a user terminal 4 such as a smartphone.

The input/output unit 504 is an example of a "remote control receiver" and is an input/output unit provided in the security remote control 3, but like the in-vehicle security device 1, it may also be configured as an interface or terminal unit for connecting to various input/output devices.

Furthermore, the components shown in FIG. 5 may be integrated or omitted as appropriate.
FIG. 6 is an example of the hardware configuration of the monitoring device 5 .
Regarding the components constituting the monitoring device 5, those that function similarly to the components of the in-vehicle security apparatus 1 and the security remote control 3 described above will not be described.

The input/output unit 604 is an input/output unit provided in the monitoring device 5, similar to the input/output unit 504 of the security remote control 3, but may also be configured as an interface or terminal unit for connecting to various input/output devices, similar to the in-vehicle security device 1.

Furthermore, the components shown in FIG. 6 may be integrated or omitted as appropriate.
FIG. 7 shows an example of the hardware configuration of the user terminal 4.
The user terminal 4 is a terminal owned by a legitimate user 200 of the vehicle 10, such as the driver of the vehicle 10 or a passenger of the vehicle 10, and may be a wireless communication terminal such as a smartphone 4a, a tablet terminal 4b, a wearable terminal 4c, a notebook PC, or a desktop PC.

It is more preferable that the security system is configured to be able to individually identify the terminals of different users 200 as the user terminals 4 .
The user terminal 4 may further be multiple terminals owned by one user 200 .

In the following description, the configuration related to the security system among the components of the user terminal 4 will be specifically described.
Regarding the components constituting the user terminal 4, those that function similarly to the components of the in-vehicle security device 1, the security remote control 3, and the monitoring device 5 described above will not be described.

The main memory device 701 stores programs and applications such as a security module 710, a judgment module 711, and an alert module 712, similar to those of the in-vehicle security device 1, the security remote control 3, and the monitoring device 5. The processor 703 executes these programs and applications, enabling the user terminal 4 to execute each functional element of the security system.

In the security system, it is preferable to be able to utilize functions specific to the user terminal 4, such as a smartphone, that are stored in the main memory device 701 of the user terminal 4.
In the security system, it is further preferable to be able to utilize a music playback module 730 and a video playback module 731 stored in the main memory device 701 of the user terminal 4 .

The music playback module 730 and the video playback module 731 work in conjunction with the security module 710 and the alert module 712 to play the user's personal favorite music, video, or image stored in the user terminal 4 from the output device 705 when notification information or warning information related to the security system is output.

The processor 703, input device 704, output device 705, camera unit 706, and communication control unit 707 of the user terminal 4 are components that are originally equipped in the user terminal 4, but in some cases may be configurations that the user 200 added later.

In a configuration in which the user terminal 4 is incorporated into a security system, it would be better if the configuration and functions that the user terminal 4 has independently of the security system could be used as extended configurations and functions for the security system.

For example, the security system may utilize as extended functions the following functions provided in the user terminal 4: a fingerprint authentication function, a QR code (registered trademark) creation and authentication function, a biometric information monitoring function, such as a function for monitoring information such as heart rate, blood oxygen concentration, respiratory rate, brain waves, bioelectric potential, and calories burned, a movement monitoring function, such as a function for measuring speed and a function for measuring steps, and a motion detection function, such as a function for monitoring eye movement, blinking, and the movement, shape, and posture of the wrist, fingers, and arms.

The communication control unit 707 controls communication between the user terminal 4 and each component of the security system, such as the in-vehicle security device 1, the vehicle key 2, the security remote control 3, etc., via the network 6.
The communication control unit 707 may further be configured to control wireless communication using Wi-Fi, Bluetooth, other wireless LAN (Local Area Network) communication, short-range wireless communication, mobile phone communication via a mobile communication network, etc.

Furthermore, the processor 703 of the user terminal 4 may display information based on the detection results of the sensor 9, such as Doppler or impact information, on the output device 705 using the security module 710 and each of the linking modules 714, 715, 717, 719, etc. This allows the user 200 to easily check information with a more visually superior display compared to the security remote control 3.
The user terminal 4 may also be configured to be able to accept an input from the user 200 to set whether the above display should be displayed on the user terminal 4 or on the security remote control 3 .

The processor 703 of the user terminal 4 may be able to turn on the speaker and microphone on the vehicle 10 side using the security module 710 and each of the linkage modules 714, 715, 717, 719, etc.
This allows the user 200 to check the state of the interior of the vehicle 10 through video and audio on a user terminal 4, for example a smartphone 4a, even if the user 200 is located far away from the vehicle 10.

Note that each of the control units 403, 503, 603 and the processor 703 shown in Figures 4 to 7 may function as a "security control unit" or as part of a "security control unit." Also, each of the control units 403, 503, 603 and the processor 703 may cooperate to execute one function of the "security control unit."

FIG. 8 is an example of a control flow 800 through a security system.
In the control flow 800, the in-vehicle security device control unit 403 of the in-vehicle security device 1 cooperates with the vehicle control device 210 to protect the vehicle 10 with various security functions (S810).

8, maintaining the vehicle 10 in a locked state and maintaining a driving-prohibited state are described as specific examples of security functions, but the security system can also execute other security functions, which will be described later.
In addition, the driving-disallowed state is a state in which the vehicle 10 is not permitted to drive, but may also be understood as a state in which the vehicle 10 is not ready to drive or a state in which operation of at least some of the equipment of the vehicle 10, such as the center console, is not accepted.

At least one of the vehicle control device 210 of the vehicle 10 and the in-vehicle security device control unit 403 of the in-vehicle security device 1 (in the following explanation, for the sake of simplicity, these will be referred to as the "vehicle control device 210 or the in-vehicle security device control unit 403") has a function of detecting the first information.

If the vehicle control device 210 or the in-vehicle security device control unit 403 does not receive the first information (No in S820), it continues executing the security function being executed in S810 and maintains the protected state of the vehicle 10.

The first information is, for example, information that serves as a trigger for executing a smart operation. Specific examples of the first information include information for transitioning the vehicle 10 from a locked state to an unlocked state, information for transitioning from a driving-unauthorized state to a driving-prepared state, information for executing both of the above two state transitions, etc.

When the vehicle control device 210 or the in-vehicle security device control unit 403 receives the first information (Yes in S820), the in-vehicle security device control unit 403 of the in-vehicle security device 1 determines whether a predetermined condition is satisfied (S830).

The “specified conditions” will be explained in more detail using a control example described below, but for example, the conditions may be such that it is possible to determine the likelihood that the output of the first information is from a legitimate user 200.
The "predetermined condition" is, for example, a condition indicating that the vehicle-mounted security device 1 or the vehicle 10 is close to the security remote control 3, and that there is a low possibility of unauthorized access such as a relay attack.

For example, it is advisable to set certain conditions assuming that the vehicle key 2, security remote control 3, smartphone or other user terminal 4 is in the possession of the true user 200, and that the perpetrator of unauthorized access using a relay attack, code grabber, CAN invader, etc. does not actually possess these items.

The predetermined condition may be one condition or a combination of a plurality of selectable conditions.
Furthermore, the security system should have the functionality to accept input from a user 200, a sales company or a manufacturer of the in-vehicle security device 1 to determine which of a number of conditions to apply, and to perform setting changes or updates.

Examples of combinations of predetermined conditions include whether the vehicle 10 is in a predetermined location, such as a dealer, a professional shop certified by a company that provides security systems, or a certified or designated factory that performs vehicle inspections, and whether the signal was input using CAN.

As a result, when the vehicle 10 is operated using CAN during inspection at a designated factory or the like, the request for input operation by the user 200 is skipped, allowing the mechanic or inspector to carry out his or her work smoothly, while when input is performed using CAN at other locations, a request for input operation by the user 200 is made, allowing for more reliable and highly secure measures to be taken against any risk that may occur.

In an embodiment other than that shown in FIG. 8, it is more preferable that at least one of the security remote control unit 503 of the security remote control 3, the monitoring device control unit 603 of the monitoring device 5, and the processor 703 of the user terminal 4 is configured to be able to execute the determination of the specified condition in S830 using the respective determination modules 511, 611, 711.

When the in-vehicle security device control unit 403 of the in-vehicle security device 1 determines that the specified condition is not satisfied (No in S830), it executes a request to the user 200 for a specified input operation based on the security function provided to the vehicle 10 by the security system (S840).

For example, when the vehicle 10 is within a specified safety range, such as a home 240, workplace, dealer, professional shop, certified or designated factory that performs vehicle inspections, or the like that is protected against intrusion by an unspecified number of people and that an unspecified number of people cannot easily enter or exit (condition Yes in S830), the in-vehicle security device control unit 403 of the in-vehicle security device 1 determines that the specified condition is met (condition Yes in S830) and skips the request for the specified input operation (S850).
The safety range is an example of a "set range."

For example, if the vehicle 10 is in a specified alert area, such as a home 240 or workplace that is not protected against intrusion by an unspecified number of people, a department store or other public place, an area where thefts are common, a shopping mall, a parking lot, or other location where an unspecified number of people may enter or exit and where parking times tend to be long (condition No in S830), the in-vehicle security device control unit 403 of the in-vehicle security device 1 determines that the specified condition is not met (condition No in S830) and executes a request for a specified input operation (S840).

The "predetermined input operation" will be described in more detail below using a control example.
The predetermined input operation may be one type of input operation, or may be a combination of a plurality of selectable types of input operations.

The in-vehicle security device control unit 403 of the in-vehicle security device 1 determines whether the specified input operation requested in S840 has been performed (S850), and if the specified input operation has not been performed (No in S850), the in-vehicle security device control unit 403 of the in-vehicle security device 1 executes the request for the specified input operation again (S840).

In another embodiment, the vehicle security device control unit 403 of the vehicle security device 1 can also execute processing such as applying a security function with a higher security level to the vehicle 10 if a specified input operation is not performed (No in S850).

When a specified input operation is performed (Yes in S850), the in-vehicle security device control unit 403 of the in-vehicle security device 1 executes a smart operation (S870).

The "smart operation" in the embodiment of Figure 8 is an example of a "transition operation," such as an operation to transition the vehicle 10 from a locked state to an unlocked state by remote operation, wireless operation, or non-contact operation with the vehicle 10, an operation to transition the vehicle 10 from a driving-prohibited state to a driving-ready state or a driving-enabled state, or an operation to perform both of these.
It should be noted that the "transition action" may be any other action that transitions the vehicle from one state to another, but is more preferably a transition action from a state of higher security strength to a state of lower security strength.

When the in-vehicle security device control unit 403 of the in-vehicle security device 1 determines that the specified conditions are met (Yes in S830), it skips the process of requesting the user 200 to perform a specified input operation based on the security function provided to the vehicle 10 by the security system (S840) and executes a smart operation (S870).

A specific example of control executed by the security system will now be described.
The security system, vehicle protection, smart operations, predetermined conditions, and input operations exemplified below can be combined in any manner or multiple applications can be applied to execute security functions on the vehicle 10.

In addition, the in-vehicle security device control unit 403, the security remote control control unit 503, the monitoring device control unit 603, or the processor 703 of the user terminal 4 can control the security functions provided by the security system.

In a security system having such a configuration, it is preferable that the main control entity for each security function be different.
This eliminates the need for the security system to fix the location of the controller of the security functions, making it possible to avoid restrictions caused by fixing the location of the controller of the security functions.

Furthermore, the security system can also provide security functions in cooperation with an external server, such as a server operated by a company that develops, manufactures, sells, etc., the in-vehicle security device 1.

Examples of vehicle protection and security features include:
- Maintaining a locked state, e.g., a state in which the door cannot be opened;
- Maintaining a state where operation is not permitted, for example, maintaining a state where a power source such as an engine or a motor is not turned on;
Maintaining the DISARM state, e.g., maintaining the monitoring state of at least one monitored object;
- Maintaining a state that resists at least one of relay attacks, code grabbers, and CAN invaders.

Examples of transition actions include, for example:
- Transition operation from a locked state, e.g., a state in which the door cannot be opened, to an unlocked state, e.g., a state in which the door can be opened;
A transition operation from an operation-unpermitted state, for example, a state in which a power source such as an engine or a motor is not turned on, to an operation-permitted state, for example, a state in which a power source such as an engine or a motor is turned on;
- transition from an ARM state, e.g., a state in which at least one monitored object is not monitored, to a DISARM state, e.g., a state in which at least one monitored object is monitored;
A transition operation from a security state assigned to user 200 to a security state assigned to a family member of user 200.

Examples of the first information include the following:
- Information for unlocking the doors of the vehicle 10;
- Information for turning on the drive for the vehicle 10;
Information for unlocking the vehicle 10 doors and turning on the traction drives;
- Information transmitted and received using wireless communication, such as low-power radio, Wi-Fi, Bluetooth, mobile communication networks, wireless base stations, etc.;
- Information sent and received using wires, such as CAN;
- Information sent and received using the user terminal 4 owned by the legitimate user 200.

Examples of the predetermined conditions are as follows:
Detects information that has a received signal strength (RSSI) within a set range;
Detect information having a received signal strength (RSSI) below a set lower limit;
Detect information having a received signal strength (RSSI) greater than a set upper limit;
- Recognize registered people from images and videos;
The vehicle 10 is in a predetermined safety area, such as a dealer, a pro shop, or a certified or designated workshop that performs repairs, vehicle inspections, etc.
The vehicle 10 is located outside a predetermined alert area, such as a department store, a public place, an area where thefts are common, a shopping mall, a parking lot, or other area where relay attacks may be performed or where there is a record of relay attacks being performed in the past;
The time is outside a predetermined first time period, such as a time other than nighttime;
The time is a time in a predetermined second time period, for example, a time period during which a person commutes to work or school;
- there is no unregistered person in the video captured by the electronic device 8 of the vehicle 10;
The vehicle-mounted security device 1 and the security remote control 3 are in the same place or in close proximity to each other;
- Before opening the door of the vehicle 10, a predetermined input, such as a set number of touches or taps, a set direction swipe, etc., was performed on a vehicle part such as the outer handle 230;
- The cargo side door of the vehicle 10 is opened before the driver's side door of the vehicle 10 is opened;
- Luggage was loaded into the bed of the vehicle 10 before the driver's door of the vehicle 10 was opened;
- The rear seat of the vehicle 10 was accessed before the driver's door of the vehicle 10 was opened;
- The user 200 performs a predetermined action, such as a hand signal, a wink, a head shake, etc.;
The user 200 wears the seat belt by stretching it out by a predetermined set amount, for example, a length corresponding to the body type of the regular user 200;
- The user 200 has installed or used a baby seat or child seat;
- The user 200 inputs a predetermined location as a destination, such as work or home;
- A certain number or more of security features are set to ON;
- A certain type of security feature is set to ON;
・A destination was entered in autonomous driving mode;
The destination in the autonomous driving mode is the user's 200 home, work, or school;
- A communication input was made with the virtual character;
- Does not detect moving objects around the vehicle 10.

Examples of the predetermined input operation are as follows.
(The following is an example of an "input operation")
- inputting a PIN number using an input device, such as a valet switch, for example, inputting a PIN number using a valet switch;
(The following example is an example of "another input operation")
- Input operations using hidden switches, such as starting the engine while pressing the air conditioning button;
・QR code input operation;
Input operations using the security remote control 3 or the user terminal 4;
Input operation of biometric information of the registered user 200, such as fingerprint information, vein information, iris information, etc.

In any of the control examples described below, the security system protects the vehicle 10 with security functions of high security strength against attacks such as relay attacks, and when certain conditions are met, it skips the input operation to disable the security function or reduces the number of times it is requested, thereby preventing the user 200 from having to perform the input operation to disable the security function every time.
This reduces the desire of the user 200 to avoid using security functions with high security strength, for example, due to the hassle of having to perform input operations every time.

First control example Input example: Received signal strength information of the first information.
Output example: A command to skip entering a PIN number.

In a security system that executes a security function that unlocks the doors of the vehicle 10 in response to input of unlock information, but requires the user 200 to input a PIN number to start the drive unit for driving the vehicle 10, the in-vehicle security device control unit 403 of the in-vehicle security device 1 skips the process of requesting the user 200 to input a PIN number and executes the process of starting the drive unit for driving the vehicle 10 if the received signal strength information of the first information is within a set range.

This allows the security system to use received signal strength information generated in the everyday usage environment of the legitimate user 200 as an authentication target for disabling security functions.
If the user 200 has the actual vehicle key 2 or security remote control 3 in his/her possession, the user 200 can save the trouble of inputting information.

Second control example Input example: received signal strength information of the first information.
Output example: A command to reduce the number of times a PIN entry is required.

In a security system that executes a security function that requires two input operations by the user 200, that is, inputting a first PIN and then inputting a second PIN, in order to unlock the doors of the vehicle 10 in response to input of unlock information while starting the drive unit for driving the vehicle 10, the in-vehicle security device control unit 403 of the in-vehicle security device 1 executes start-up processing for the drive unit for driving the vehicle 10 by only requesting input of the first or second PIN when the received signal strength information of the first information is within a set range, thereby reducing the number of input operations required to one.

This allows the security system to use received signal strength information generated in the everyday usage environment of the legitimate user 200 as an authentication target for disabling security functions.
If the user 200 has the actual vehicle key 2 or security remote control 3 in his/her possession, the effort required for inputting information can be reduced.

Third control example Input example: received signal strength information of the first information.
Output example: A command to reduce the number of input operations required.

In a security system that executes a security function that unlocks the doors of the vehicle 10 in response to input of unlock information, but requires two types of input operations by the user 200, namely, inputting a PIN number and disabling security via the user terminal 4, to start the drive unit for driving the vehicle 10, the in-vehicle security device control unit 403 of the in-vehicle security device 1 skips the request process for inputting the PIN number and reduces the number of input operation requests to one, and executes the start-up process for the drive unit for driving the vehicle 10, if the received signal strength information of the first information is within a set range.

This allows the security system to use received signal strength information generated in the everyday usage environment of the legitimate user 200 as an authentication target for disabling security functions.
If the user 200 has the actual vehicle key 2 or security remote control 3 in his/her possession, the effort required for inputting information can be reduced.

Fourth control example Input example: Information regarding loading of luggage onto the loading platform.
Output example: A command to skip entering a PIN number.

In a security system that executes a security function that unlocks the doors of the vehicle 10 in response to input of unlock information, but requires the user 200 to input a PIN number to start the drive unit for driving the vehicle 10, if the in-vehicle security device control unit 403 of the in-vehicle security device 1 detects that luggage has been loaded onto the cargo bed before the user 200 gets into the driver's seat, it skips the process of requesting the user to input the PIN number and executes the process of starting up the drive unit for driving the vehicle 10.

This allows the security system to use the typical and everyday behavior of the legitimate user 200 as an authentication target for disabling security functions.
Furthermore, a user 200 who is engaged in the transportation business or the like can save the trouble of inputting information when loading luggage into the vehicle 10 as part of the daily work routine.

Fifth control example Input example: Information regarding installation of a baby seat.
Output example: A command to skip entering a PIN number.

In a security system that executes a security function that unlocks the doors of the vehicle 10 in response to input of unlock information, but requires the user 200 to input a PIN number to start the drive unit of the vehicle 10, when the in-vehicle security device control unit 403 of the in-vehicle security device 1 detects that the user 200 has brought and attached a portable baby seat to the vehicle 10, it skips the process of requesting the user 200 to input the PIN number and executes the process of starting up the drive unit of the vehicle 10.

This allows the security system to use typical everyday behavior of the legitimate user 200 as an authentication target for disabling security functions.
Furthermore, when the user 200 gets into the vehicle 10 with an infant using a baby seat, the user 200 can save the trouble of performing input operations.

Sixth control example: Input example: swipe operation on outer handle 230.
Output example: a command to skip the security deactivation operation via the security remote control 3 or the user terminal 4.

In a security system that executes a security function that requests a security release operation via a user-owned security remote control 3 or user terminal 4 to unlock the doors of a vehicle 10 in response to input of unlock information, if the in-vehicle security device control unit 403 of the in-vehicle security device 1 detects a swipe operation in a specific direction on the outer handle 230, such as a swipe operation from the front to the rear of the vehicle, before detecting an operation such as grabbing the outer handle 230 to open the door or an operation to open the door by a touch operation, the in-vehicle security device control unit 403 skips the request process for the security release operation via the security remote control 3 or user terminal 4 and executes the process of unlocking the doors of the vehicle 10.

This allows the security system to incorporate an input operation for disabling the security function into the range of normal actions of the user 200 when opening the door of the vehicle 10.
A relay attack perpetrator or the like who attempts to open the door of the vehicle 10 immediately after inputting the unlock information will not be able to open the door and enter the vehicle 10, and the user 200 can open the door by simply adding a simple swipe operation to a normal door opening operation.

Seventh control example Input example: Information that the time is within a predetermined set period.
Output example: A command to skip entering a PIN number.

In a security system that executes a security function that unlocks the doors of the vehicle 10 in response to input of unlock information, but requires the user 200 to input a PIN number to start the drive unit for driving the vehicle 10, if the time at which the input of the first information is received is within a predetermined set period, the in-vehicle security device control unit 403 of the in-vehicle security device 1 skips the process of requesting the user 200 to input the PIN number and executes the process of starting up the drive unit for driving the vehicle 10.

A specified set period is, for example, a time other than a specified first time period, such as a time other than nighttime, or a time during a specified second time period, such as the time periods for commuting to work, school, or pick-up and drop-off.
The above-mentioned non-nighttime hours and work/school commute times are examples of "set periods."

As a result, the security system skips input operations when the legitimate user 200 uses the vehicle 10 for daily routine activities such as commuting to work or school or for picking up or dropping off passengers, and can omit operations that may be considered troublesome by such a user 200 during his or her usual, routine use of the vehicle 10.

Eighth control example: Input example: video information captured by the electronic device 8 of the vehicle 10.
Output example: A command to skip entering a PIN number.

In a security system that executes a security function that unlocks the doors of the vehicle 10 in response to input of unlock information, but requires the user 200 to input a PIN number to start the drive unit for driving the vehicle 10, the vehicle security device control unit 403 of the vehicle security device 1 executes a process to request the user 200 to input a PIN number if it detects a person other than the registered user 200, for example a person unknown to the user 200, in at least one of the areas of the windshield, rear window, and window in the video information captured by the electronic device 8 of the vehicle 10, for example a drive recorder 8b or camera 8c, captured from the rear of the vehicle interior of the vehicle 10. Conversely, if it detects only the registered user 200, it skips the process to request the user 200 to input a PIN number and executes the start-up process of the drive unit for driving the vehicle 10.

In the above configuration, the electronic device 8 of the vehicle 10, such as the drive recorder 8b or the camera 8c, may have or be a camera that takes pictures of the interior of the vehicle from the rear. In this case, if a person is captured through the front or rear side windows, or in front of or to the side of the vehicle, a switch operation may be required.

By using image data captured by a "camera filming the interior from the rear of the vehicle" and "through the front and rear side windows," it is possible to obtain and analyze data containing more information and greater value than ever before, including what is happening inside and outside the vehicle.

The registered user 200 is an example of a "registered user." In addition to the user 200 who actually drives the vehicle 10 or who possesses the vehicle key 2 or security remote control 3, the registered user may be a family member of the user 200 or an employee of the company that owns the vehicle 10.

This allows the security system to use video information to determine the authenticity of user 200, improving the accuracy of the determination.

The following describes a specific example of control when a security system is installed in a vehicle 10 in which, when the vehicle control device 210 receives unlock information output from the vehicle key 2, the vehicle control device 210 executes both processes of transitioning the vehicle 10 from a locked state to an unlocked state, and transitioning the vehicle 10 from a driving-prohibited state to a driving-permitted state.

In the security systems according to the embodiments described below with reference to Figs. 9 to 15, an example will be described in which RSSI is used as a parameter for determining a predetermined condition.
Moreover, in the embodiments shown in FIG. 9 to FIG. 15, description of common contents will be omitted or simplified.

In the following explanation, the term "RSSI" may be read as "physical quantity obtained from a signal" or "parameter for determining a specified condition" as long as there is no technical inconsistency.

FIG. 9 is an example of a sequence diagram showing signal transmission and reception in a first security control by the security system.
The security system of the embodiment of FIG. 9 is configured such that the security remote control 3, for example a two-way remote control, determines the RSSI.

When the RSSI is determined using a remote control, when the user 200 approaches or comes into contact with the vehicle 10 at time T0, for example when the user 200 comes into contact with the outer handle 230 of the vehicle 10, request information is transmitted from the vehicle 10, for example from the vehicle bidirectional antenna unit, to the vehicle key 2.

The request information is information that requests the vehicle key 2 to transmit unlock information A for executing a predetermined smart operation. The request information is also called a response signal.
"Unlock information A" is an example of "first information" or "a signal received by at least one of the remote control receiver and the vehicle receiver."

In addition, a specified smart operation is, for example, an operation of transitioning the vehicle 10 from a locked state to an unlocked state, an operation of transitioning the vehicle 10 from a driving-prohibited state to a driving-prepared state or a driving-permitted state, or an operation of performing both of these.

The driving-unpermitted state is a state in which the vehicle 10 cannot be driven because, for example, the engine or motor for driving the vehicle 10 is not started.
The driving preparation state is, for example, a state in which the engine and the motor for driving the vehicle 10 are running and the vehicle 10 is ready to be driven.
The traveling permitted state is, for example, a state in which the engine and the motor for driving the vehicle 10 are running and the vehicle 10 can be driven.
The travel preparation state and the travel permission state are examples of a "travel standby state."

When the vehicle key 2 receives the request information, it transmits unlock information A to the vehicle 10 at time T1.
When the vehicle 10 receives the unlock information A, the vehicle 10 unlocks the doors of the vehicle 10.

The in-vehicle security device 1 may be configured to monitor the state of the vehicle 10 and detect, as unlock information B, that the doors of the vehicle 10 have been unlocked.
For example, when the genuine keyless adapter 320 described using Figure 3 receives unlock information B at time T2, the in-vehicle security device 1, for example the genuine keyless adapter 320, transmits an RSSI request to the security remote control 3 at time T3.

The unlock information B may be the same as the unlock information A at time T1.
Moreover, the RSSI request is an example of the "second information."

The security system can also use the unlock transmission (disarm) signal generated by the in-vehicle security device 1, for example the genuine keyless adapter 320, as an RSSI request.

When the security remote control 3 receives an RSSI request, it detects the reception level (RSSI) of the RSSI request signal, and if the detected reception level (RSSI) is higher than the set level, at time T4, the security remote control 3 notifies the in-vehicle security device (in-vehicle device) 1 of the reception level of the RSSI request as return information (received RSSI data).

This return information in the embodiment of FIG. 9 is an example of the "third information."
In addition, the setting level is an example of an "intensity setting value" and may be stored, for example, as signal strength information 422, 522, 622, etc. in the auxiliary memory device 402 of the in-vehicle security device 1, the auxiliary memory device 502 of the security remote control 3, or the auxiliary memory device 602 of the monitoring device 5.

Note that the transmission of the RSSI request or return signal, or the transmission and reception of other information, may be performed multiple times. This also applies to the following examples of Figures 10 to 15.

The security remote control 3 may transmit, as return information based on the RSSI, to the vehicle 10, for example, to the vehicle bidirectional antenna unit, information indicating that the switch operation (PIN code input operation) may be skipped or canceled.
As mentioned above, "reception level" may be read as "signal strength."

Conversely, if the reception level is low, the security remote control 3 does not transmit anything and the vehicle two-way antenna does not receive a cancellation transmission from the security remote control 3, so the switch operation (PIN code input operation) is not skipped or canceled.

When a switch operation (PIN code input operation) is required, if a buzzer is sounded from the unit on the vehicle 10 to warn the user 200 that a switch operation is required, this is even better, as it allows the user 200 to easily recognize whether the switch operation (PIN code input operation) has been skipped or canceled, or whether a switch operation (PIN code input operation) is required.

The above warning is an example of "notification information regarding a request for input operation," and may be, for example, audio or video information such as "Please enter your PIN code," a flashing light, a beep or buzzer sound, etc.

As another example, the security remote control 3 may receive unlock information A for the vehicle 10 from the vehicle key 2 at time T1 as a trigger signal similar to the RSSI request.
In such a configuration, the security remote control 3 may perform the same determination as above regarding the signal strength of the unlock information A from the vehicle key 2 .

Furthermore, the security remote control 3 may be configured to detect and compare the reception levels of the unlock information A, the unlock information B, and the RSSI request.
In such a configuration, by adding a judgment condition based on multiple detection results, it is possible to more reliably judge whether the person using the vehicle 10 is a legitimate user 200.

FIG. 10 is an example of a sequence diagram showing signal transmission and reception in the second security control by the security system.
The security system of the embodiment of FIG. 10 is configured such that an in-vehicle security device 1, for example a vehicle bidirectional antenna unit, determines the RSSI.

The vehicle two-way antenna unit may be a unit that is retrofitted to the vehicle 10 together with the vehicle-mounted security device 1, but at least a portion of the vehicle two-way antenna unit may be a component that is pre-installed on the vehicle 10.

When determining the RSSI using the vehicle bidirectional antenna unit, from time T0 to time T2, the vehicle 10, the vehicle key 2, and the in-vehicle security device 1 transmit and receive information and signals in the same manner as in the embodiment of FIG. 9.

When the security remote control 3 receives the unlock information A at time T1 or the unlock information B at time T2, it transmits return information (return (ACK) signal) to the vehicle 10, for example, to the vehicle bidirectional antenna unit, at time T5.
In particular, when the security remote control 3 receives unlock information A at time T1 or unlock information B at time T2, it is preferable that the security remote control 3 transmits return information (return (ACK) signal) to the vehicle 10 without fail, or regardless of the reception level of that information.

The return information at time T5 in the embodiment of FIG. 10 does not need to include RSSI information, unlike the return information at time T4 in the embodiment of FIG.
This return information in the embodiment of FIG. 10 is an example of the "fourth information".

The vehicle bidirectional antenna unit detects the reception level (RSSI) of this return signal, and if the reception level is higher than a set level, skips or cancels the switch operation (personal identification code).
Conversely, if the reception level is lower than the set level or if no signal is received, the switch operation (personal identification code) is not skipped or canceled.

It would be better if the in-vehicle security device 1 was configured to be able to adjust the relationship between the reception level and the skip or cancel process of the switch operation, since this would allow a more appropriate judgment to be made for each user 200.

For example, in contrast to the above example, the vehicle bidirectional antenna unit may be configured to detect the reception level (RSSI) of this return signal, and skip or cancel the switch operation (PIN code) if the reception level is lower than the set level or if the signal is not received, and not skip or cancel the switch operation (PIN code) if the reception level is higher than the set level or if the signal is not received.

In particular, it would be better if the vehicle security device 1 had the function of adjusting the setting level or the range of the setting level, or the function of changing the setting level or the range of the setting level to be applied for each user 200.

As with the embodiment of FIG. 9, when a switch operation (PIN code input operation) is required, it is preferable that a buzzer be sounded from the vehicle unit to warn the user 200 that a switch input is required.

FIG. 11 is an example of a sequence diagram showing signal transmission and reception in the third security control by the security system.
The security system of the embodiment of FIG. 11 is configured such that both the vehicle-mounted security device 1, for example a vehicle bidirectional antenna unit, and the security remote control 3 determine the RSSI.

When both the in-vehicle security device 1, e.g., a vehicle bidirectional antenna unit, and the security remote control 3, e.g., a bidirectional remote control, determine the RSSI, from time T0 to time T4, the vehicle 10, the vehicle key 2, the in-vehicle security device 1, and the security remote control 3 transmit and receive information and signals in the same manner as in the embodiments of Figures 9 and 10.

In the embodiment of Figure 11, when the security remote control 3 receives an RSSI request from the vehicle-mounted security device 1 at time T3, it transmits return information to the vehicle-mounted security device 1, for example, a vehicle two-way antenna unit, and in addition transmits data information on the reception level (RSSI) of the RSSI request signal received by the security remote control 3.
The security remote control 3 may be configured to transmit a combination of the return information and data information on the reception level (RSSI) of the RSSI request signal received by the security remote control 3 .

In the embodiment of FIG. 11, the return information is an example of the "second information", similar to the embodiment of FIG.
Moreover, data information on the reception level (RSSI) of the RSSI request signal received by the security remote control 3 is an example of the "fifth information".

The in-vehicle security device 1, for example a vehicle bidirectional antenna unit, further detects the reception level (RSSI) of this return signal. The in-vehicle security device control unit 403 of the in-vehicle security device 1 compares the reception level of the return information received from the security remote control 3 with the set RSSI level setting value stored as signal strength information 422 in the auxiliary storage device 402 of the in-vehicle security device 1 to make a judgment.

Similar to the "setting level" in the embodiments of Figures 9 and 10, the RSSI level setting value is also an example of an "intensity setting value" and may be stored as signal strength information 422, 522, 622, etc., for example, in the auxiliary storage device 402 of the in-vehicle security device 1, the auxiliary storage device 502 of the security remote control 3, or the auxiliary storage device 602 of the monitoring device 5.

If the result of the determination is that the RSSI level is within the set range, the security will be set to DISARM state. If it is outside the range, a preliminary alarm will sound and the vehicle will remain in ARM state, preventing the engine from starting.

The comparison may be performed in the same manner as in the embodiments of FIGS. 9 and 10 depending on whether the average value of both reception levels (RSSI) is high or low.
Incidentally, even if the return signal of the security remote controller 3 cannot be received, the same operation as in the embodiment of FIG. 10 is executed.

As with the embodiments of Figures 9 and 10, when a switch operation (PIN code input operation) is required, it is preferable that a buzzer be sounded from the vehicle unit to warn the user 200 that a switch input is required.

FIG. 12 is an example of a sequence diagram showing signal transmission and reception in the fourth security control by the security system.
The security system of the embodiment in FIG. 12 is configured such that the security remote control 3 transmits return information in response to request information from the vehicle 10.

Unlike the embodiments of FIGS. 9 to 11, the security system of the embodiment of FIG.
The security remote control 3 receives a request signal sent by the vehicle 10 to the vehicle key 2 at time T0 when the user 200 approaches or comes into contact with the vehicle 10, and at time T5, triggered by the reception of the request signal from the vehicle 10, transmits return information to the in-vehicle security device 1.

In the embodiment of FIG. 12, the vehicle security device 1 executes the same process as in the embodiment of FIG. 10 for the return information at time T5.
In another embodiment, the return information at time T5 may comprise data regarding the reception level (RSSI) of the request signal from the vehicle 10 at time T0.
In such a configuration, it is also possible to execute processes similar to those described with reference to FIG. 9 and FIG.

The time intervals T (T1-4, T1-5) shown in Figures 9 to 12 may be at most a few seconds, and are preferably approximately zero. In the examples of Figures 14 and 15 described below, the time intervals T (T1-4, T1-5) can be made shorter.

FIG. 13 is an example of a sequence diagram showing signal transmission and reception in the fifth security control by the security system.
The security system of the embodiment of FIG. 13 has a monitoring device 5 that monitors at least a signal output from the vehicle key 2 .

The monitoring device 5 is a device that monitors, for example, at least one of the request information output by the vehicle 10 at time T0, the unlock information A output by the vehicle key 2 at time T1, the unlock information B output by the in-vehicle security device 1 at time T2, and the return information output by the security remote control 3 at time T5.

The monitoring device 5 may in particular be arranged to monitor the reception of signals output by the vehicle key 2 and similar signals.
A monitoring device 5 configured in this manner can output warning information to a user 200 when an attack such as a relay attack is carried out against the user 200, as described in relation to FIG. 18, for example.

The user 200 also recognizes the buzzer sound when he or she gets into the vehicle 10. If the user 200 is accustomed to such a buzzer sound and recognizes the familiar buzzer sound while away from the vehicle 10, for example while heading from a parking lot to a store, the user will feel uneasy and will be able to proactively pay attention to any abnormalities in the surroundings, such as the presence of an attacking company approaching in a relay attack.

In the embodiment of FIG. 13, the monitoring device 5 detects the reception level (RSSI) of the received signal, and outputs warning information according to the detection result.
In another embodiment, the monitoring device 5 may simply output an alert message in response to receiving a signal.

The monitoring device 5 may be, for example, a device manufactured as a relay attack (smart key operation detector) detection key holder, which has excellent portability.
When the vehicle key 2 operates as a smart key at time T0 and time T1, an LF signal (for example, 134 kHz and 124 kHz) and a 300 MHz band (weak radio) are transmitted.
The LF signal is an example of the "sixth information."

If the monitoring device 5 is formed as a key holder like a charm that detects this (either one or both) and sounds a buzzer, it is convenient because it can be attached to the vehicle key 2 (genuine key) and easily carried around.
The buzzer sound is an example of "notification information."

The monitoring device 5 may be configured to receive an LF signal emitted by the vehicle 10 while the vehicle 10 is moving. In such a configuration, the warning sound is emitted even while the vehicle 10 is moving, but the monitoring device 5 may have a function of stopping the warning sound (a function of switching to a warning sound stop mode) when the LF signal is received for a certain amount of time continuously for a first period that can be set by the user 200, for example, 10 seconds, 20 seconds, etc.
The first period that can be set by the user 200 is an example of a "first set period."

After transitioning to this warning sound stop mode, the monitoring device 5 may have a function of exiting the warning sound stop mode and transitioning back to warning mode (a function of returning to alert mode) if the LF signal is no longer received continuously for a second period that can be set by the user 200, for example 60 seconds, 120 seconds, etc.
The second period that can be set by the user 200 is an example of a "second set period."

The monitoring device 5 can be even more accurate if it is configured to store the data transmitted when detecting LF signals and 300 MHz for each vehicle. This can help reduce reactions to vehicles other than the user's 200 vehicle 10.

For example, when the monitoring device 5 is placed on a desk in an office, restaurant, or the user's 200 home (stationary state), the user (owner) 200 may not be nearby. Therefore, it is preferable for the monitoring device 5 to have a function of increasing the sound pressure of a buzzer to notify the user 200 when the device is stationary using a vibration sensor.
The above-described functions of the monitoring device 5 may be incorporated in the security remote control 3 (security remote control).

FIG. 14 is an example of a sequence diagram showing signal transmission and reception in the sixth security control by the security system.
The security system of the embodiment of FIG. 14 comprises an in-vehicle security device 1 which includes or controls a microwave unit.

The in-vehicle security device 1 may be configured as a security device having or controlling a microwave unit that detects the approach of a person or the like to the vehicle 10, and may be configured to detect the approach of a person or the like, particularly an unregistered person other than a person registered as a user 200, to the vehicle 10, and transmit the detection result to the security remote control 3 or output a warning sound or the like from the vehicle 10.

The microwave unit is an example of a "device that outputs microwaves."
In addition, the microwave unit may be a device separate from a device that detects the positional relationship between the vehicle key 2 and the vehicle 10 , for example, the approach of the vehicle key 2 to the vehicle 10 .

In such a configuration, even when a legitimate user 200 or a registered user 200 approaches the vehicle 10, various information is communicated between the vehicle 10, the in-vehicle security device 1, and the security system (in-vehicle system) that combines them, and the security remote control 3.

At time T0 when the user 200 approaches the vehicle 10 or touches the outer handle 230 of the vehicle 10 to open the door, the security (microwave detection) function that uses the microwave unit is set to ON. Then, when the microwave unit detects a person, security information is reported or transmitted to the security remote control 3.

Note that various communications involving the actual security remote control 3, etc., are carried out taking into consideration various related regulations, such as the fact that, for example, in the case of low-power radio, transmission is prohibited during transmission pauses and when a carrier is present. As a result, it may be difficult to transmit information frequently at will, or transmission may be delayed.

Therefore, in the embodiment of FIG. 14, the vehicle security device 1 receives unlock information A from the vehicle key 2 at time T1, and when the reception level (RSSI) of the unlock information A is a predetermined value, the detection function of the microwave unit is at least temporarily stopped.

This stops the output of microwaves from the microwave unit.
Time point T1 in the embodiment of FIG. 14 is an example of the "time point at which the first information is input."
The specified value of the reception level (RSSI) of unlock information A that at least temporarily stops the detection function of the microwave unit may be set, for example, based on the reception level received during a normal unlocking operation by user 200.

In particular, the above settings should distinguish between the reception level during operation by the legitimate user 200 and the reception level during an attack, for example, a relay attack.
For example, the reception level during a relay attack is relatively high compared to the reception level during normal operation by a legitimate user 200, so when the reception level is unnaturally high, it is advisable to continue to perform the detection function of the microwave unit.

In the embodiment of FIG. 14, if the vehicle door is unlocked between time T1 and time T2, the output process of the microwave signal may be stopped.
When the control unit 403 of the in-vehicle security device 1 determines based on the reception level (RSSI) of the unlocking information A that the unlocking operation was performed based on the actions of the legitimate user 200, the control unit 403 masks the security function related to approach detection based on the idea that the person approaching the vehicle 10 is the legitimate user 200 because the unlocking was performed by someone holding the vehicle key 2 (genuine key).

In such a configuration, when a legitimate user 200 is near the vehicle 10 and unlocks it, it is possible to avoid outputting unnecessary warning sounds, such as a buzzing sound.

Furthermore, when the user 200 goes to touch the outer handle (doorknob) 230, the microwave unit detects the person and transmits the detection result to the security remote control 3, which receives it. Also, when the user 200 touches the lock knob, the microwave unit (Doppler) is activated and attempts to transmit the detection result to the security remote control 3, making it easier to avoid signal congestion.

In particular, in the embodiment of FIG. 14, the microwave output that occurs during communication is stopped before the RSSI request from the vehicle-mounted security device 1 at time T3 and the return information (RSSI) is transmitted from the security remote control 3 at time T4, thereby improving response.

Therefore, although a signal that the vehicle 10 is unlocked is eventually sent to the remote control, if microwave detection continues, the signal cannot be sent, making it easier to avoid problems such as inability to DISARM, poor response, and no DISARM even when the vehicle is in the vehicle.

Note that, although the embodiment of FIG. 14 describes at least a temporary suspension of the security function using the microwave unit, it would be better if the in-vehicle security device 1 alternatively or additionally has a function for at least a temporary suspension of other security functions.

For example, the vehicle security device 1 may have the ability to individually set on and off multiple different security functions, allowing for flexible settings such as cutting out only microwaves and not cutting out other detection results, such as the detection results of impacts, etc.

Instead of turning off the detection function of the microwave unit as described above, in another embodiment, the microwave unit may continue to detect people and record the logs, but stop transmitting information to the security remote control 3. Alternatively, the configuration may be such that these functions can be switched.

In such a configuration, it is possible to reduce the frequency of communication with the security remote control 3, thereby improving response.
For example, it is preferable that communication of information regarding security (detection by the security function) is reduced in relation to unlocking using the vehicle key 2 (genuine key).

The above explanation details the communication conditions and response improvements related to the microwave output of the microwave unit, but similar operations can also be performed in devices other than low-power radio to achieve the same effect, such as reducing the frequency of communication.

The vehicle-mounted security device 1 may store an RSSI threshold at which the microwave unit for approach detection produces a Doppler response as signal strength information 422 in its auxiliary storage device 402. If the detected RSSI is lower than the stored RSSI threshold, or if no RSSI is detected, it is reasonable to assume that the legitimate user 200 is far away, and it can be determined that the device is under attack, such as a relay attack.

When a Doppler reaction occurs due to the microwave unit, the vehicle-mounted security device 1 sends a signal to the security remote control 3, and the security remote control 3 includes RSSI data (RSSI value) in the return information (reply).

When the user 200 approaches the vehicle 10, information is sent to the security remote control 3 in either case, so the above operation does not worsen the congestion of the communication situation.

In the embodiments of Figures 9, 11, and 14, the trigger for checking the RSSI (RSSI request) is issued in response to receiving unlock information, but it would be better if the in-vehicle security device 1 had the function of outputting an RSSI request in response to a trigger other than the unlock operation, such as the activation of microwaves or the activation of individual security functions.

FIG. 15 is an example of a sequence diagram showing signal transmission and reception in the seventh security control by the security system.
The security system of the embodiment of FIG. 15 has an in-vehicle security device 1 that has or controls a microwave unit, similar to the embodiment of FIG.

In the embodiment of Figure 15, based on the microwave unit's detection of the approach of a person or the like to the vehicle 10, the in-vehicle security device 1 transmits approach detection information and an RSSI request to the security remote control 3 at time T6, and the security remote control 3 transmits return information (RSSI data) to the in-vehicle security device 1 at time T7.
In the embodiment of FIG. 15, time T6 is an example of the "security device output time point".

In response to this, the vehicle security device control unit 403 of the vehicle security device 1 at least temporarily stops the detection function of the microwave unit, for example, before time T0 when the user 200 contacts the outer handle 230 of the vehicle 10, and stops the output of microwaves from the microwave unit or changes the operation timing of the microwave unit.

In the embodiment of FIG. 15, instead of stopping the microwave output from the microwave unit, the operation timing of the microwave unit may be changed.

Thereby, it becomes possible to at least temporarily stop the detection function using the microwave unit before time T0, for example, before the vehicle control device 210 detects the approach of the vehicle key 2 to the vehicle 10, or before time T1, for example, before the user 200 touches the outer handle 230 of the vehicle 10.

As a result, operations related to detection by the microwave unit and operations related to unlocking the vehicle 10 do not interfere or are less likely to interfere with each other, at least in relation to the transmission and reception of radio waves, thereby stabilizing the response of operations related to unlocking the vehicle 10 and the associated communications.

In order to ensure the above-mentioned effect, it is preferable that the detection range of the microwave unit for detecting a moving object is larger than the detection range for detecting the approach of the vehicle key 2 to the vehicle 10 .
Furthermore, in the embodiment of FIG. 15, an approach detection function using the security remote control 3 or the user terminal 4 may be used in addition to or instead of the moving object detection function using the microwave unit.

Approach detection using the security remote control 3 or the user terminal 4 can be performed using any approach detection technology, such as an approach detection technology using GPS or an approach detection technology based on image analysis of real-time footage captured by an in-vehicle camera, and is preferably a technology that can detect people and the like from a greater distance than the approach detection technology that uses the microwave unit described above.

In the embodiments of Figures 14 and 15, the vehicle security device control unit 403 of the vehicle security device 1 has the function of detecting the received signal strength of at least one of the signals output from the vehicle key 2, the security remote control 3, and the microwave unit, and stopping the operation of the approach detection function by the microwave unit or changing the operation timing based on the detected signal strength or based on the result of comparing the signal strengths.

The embodiments of FIGS. 9 to 15 may further include a user terminal 4 as an extension.
When a predetermined condition is met, for example when the received signal strength (radio wave strength) of a signal transmitted and received in the security system is within a set range, the processor 703 of the user terminal 4, for example the smartphone 4a owned by the user 200, uses the security module 710 and each of the linking modules 714, 715, 716, 718 to output a notification as to whether or not DISARM should really be performed to the output device 705, for example in the form of a final DISARM decision button. When the final DISARM decision button is pressed on the user terminal 4, the in-vehicle security device control unit 403 of the linked in-vehicle security device 1 DISARMs at least one of the security functions of the security system.

As a result, in the case of daily use in which the user himself/herself has the user terminal 4, DISARM will not be performed arbitrarily by passing through a person, so that relay attacks and the like can be avoided.
When performing DISARM, it is advisable to notify not only the security remote control 3 but also the smartphone 4a.
A characteristic of using the user terminal 4 is that the user 200 holds the user terminal 4 in his/her hand or stores it in a location where it can be easily accessed, so in the above configuration, the user 200 is likely to notice notifications related to the security system.

In the above-described developed embodiment, if the user terminal 4 is a smartphone 4a, communication can be established anywhere over a longer distance via a mobile communication network than communication using the security remote control 3.
Moreover, it is also possible to make the determination based on RSSI using Bluetooth or BLE (Bluetooth Low Energy) of the smartphone 4a.

In such a configuration, if the user terminal 4 (smartphone 4a) is far from the location of the vehicle 10, for example, when the vehicle 10 is at home and the user terminal 4 is at work, or when all pre-registered user terminals 4 are far from the vehicle 10, control such as stopping the execution of the DISARM process may be performed.

In the above-mentioned developed form, the user terminal 4, for example, a smartphone 4a, can also be used as a security key. Each smartphone 4a has a unique ID, so it is preferable that the smartphone 4a be connected to a security system so that it has the function of identifying that the user has boarded the vehicle and performing DISARM.

The smartphone 4a can be "connected" to the security system using a wired cable, or it can be connected wirelessly using radio waves from the vehicle 10's Wi-Fi, Bluetooth, etc.

In addition to or instead of the above configuration, the security system may include a reader installed in the vehicle 10 and a QR code displayed on the smartphone 4a for reading. The QR code may be updated periodically.

The processor 703 of the user terminal 4 may display the QR code to be displayed, for example, as a pop-up on the screen of the smartphone 4a (the output device 705 of the user terminal 4) when getting on the train, etc.
It is further preferable that the processor 703 of the user terminal 4 can change the QR code to be displayed or generate a new one each time, like a one-time password.

In the embodiments of Figures 9 to 15, for example, the security remote control 3 or the user terminal 4 may be configured to notify whether DISARAM is required by a switch operation or whether DISARAM is to be performed (or has been performed) without a switch operation.

It is preferable that the in-vehicle security device control unit 403 of the in-vehicle security device 1 has a function of detecting and recording the identity (similarity) of the surrounding environment of the in-vehicle security device 1 and the security remote control 3 at a predetermined timing, such as when the vehicle 10 is unlocked, for example, between time T1 and time T2.

The in-vehicle security device control unit 403 of the in-vehicle security device 1 can determine that a specified condition is met if, for example, the detected surrounding environment is similar to the surrounding environment when it was previously determined that the specified condition was met.

If the identity of the surrounding environment is recognized, the vehicle security device control unit 403 of the vehicle security device 1 DISARMs at least one security function.
The in-vehicle security device control unit 403 of the in-vehicle security device 1 may have a function for determining, for example, whether the in-vehicle security device 1 and the security remote control 3 are in the same location or in nearby locations.

The similarity (similarity) of the surrounding environment of the vehicle-mounted security device 1 and the security remote control 3 may be detected by an environmental sensor.
The vehicle 10 may be provided with an environmental sensor that detects at least one of air temperature, air pressure, sound, brightness, radio waves, weight, speed, and acceleration.

In a security system, the vehicle security device control unit 403 of the vehicle security device 1 may be able to use, for example, a sensor device provided in the user terminal 4 as an environmental sensor.

The vehicle security device control unit 403 of the vehicle security device 1 can use the above-mentioned environmental sensors to detect the state of the vehicle key 2, the state of the security remote control 3, the state of the vehicle 10, the state of the environment surrounding the vehicle 10, etc.

The state of the vehicle key 2 and the state of the security remote control 3 include, for example, the positional relationship between the vehicle key 2 and the security remote control 3, the positional relationship between the user 200 and the vehicle key 2 and the security remote control 3, the storage state of the vehicle key 2 and the security remote control 3, etc.

The state of the vehicle 10 includes, for example, changes in the detection values of the sensors 9 (e.g., sensor devices that detect physical quantities related to the interior of the vehicle and the body of the vehicle 10) before and after use of the vehicle 10, the presence or absence of cargo before and after use of the vehicle 10, changes in the equipment and devices attached to the vehicle 10 before and after use of the vehicle 10, etc.

The state of the environment surrounding the vehicle includes, for example, changes in the detection values of sensors before and after use of the vehicle 10, such as sensors that detect physical quantities outside the vehicle and related to the body of the vehicle 10, the presence or absence of people other than the legitimate user 200 around the vehicle 10, the presence or absence of suspicious objects around the vehicle 10, the radio wave conditions around the vehicle 10, etc.

The vehicle security device control unit 403 of the vehicle security device 1 may check the identity a predetermined time after unlocking, for example.
In this case, the specified time may be determined, for example, based on the time it takes for the user 200 to close the vehicle door again after getting into the vehicle 10 during daily use, or may be set by the user himself, a dealer, or a staff member at a pro shop.

The in-vehicle security device control unit 403 of the in-vehicle security device 1 may be able to accept input by another authentication method instead of or in addition to the switch operation.
The in-vehicle security device control unit 403 of the in-vehicle security device 1 can select another authentication method, for example, from those given as examples of the predetermined input operation mentioned above.

The in-vehicle security device control unit 403 of the in-vehicle security device 1 may, for example, perform a process of changing to a simpler authentication method, such as changing from a stronger authentication method to a simpler authentication method, or changing from a biometric authentication method to a password authentication method, instead of skipping or reducing the request for a switch operation.

The vehicle security device control unit 403 of the vehicle security device 1 may have a function to inform the user 200 of the dangers of relay attacks and the like, and information regarding the security strength of the security currently applied to the vehicle 10.

In the security system, the in-vehicle security device control unit 403 of the in-vehicle security device 1 has the function of evaluating the extent to which measures have been taken against relay attacks, etc., for example by counting the total number of security functions that are ON, judging the security strength against relay attacks, etc. of the security applied to the vehicle 10, and informing the user 200 of information regarding the results of the evaluation and judgment, displaying a report, and creating and outputting statistics on the contents and numbers of items that have been taken measures.

The security strength against relay attacks and the like of the security applied to the vehicle 10 is an example of the "likelihood of a relay attack occurring," and the higher the security strength, the lower the likelihood of a relay attack occurring.

The above security system may further have a function for determining that a predetermined condition is not met if the total number of security functions that are turned ON does not reach a number determined to be sufficient against relay attacks, etc., or if the types of security functions that are turned ON do not satisfy a combination determined to be sufficient against relay attacks, etc.

A number determined to be sufficient against relay attacks or the like, or a combination determined to be sufficient against relay attacks or the like, is an example of a "probability setting value."
The in-vehicle security device control unit 403 of the in-vehicle security device 1 may have the function of acquiring and displaying news related to each vehicle, information on prevalent crimes against the vehicle 10 owned by the user 200, and information on countermeasures against such crimes, for example, from information sites on the Internet, via the network 6.

The in-vehicle security device control unit 403 of the in-vehicle security device 1 changes the frequency of display, the timing of display, and the display mode (for example, to display forcibly or to display only by banner notification) depending on the number of enabled countermeasures against relay attacks, etc.

The security system may have a function of receiving an input for determining which of the controls in each of the embodiments described with reference to FIGS. 9 to 15 is to be performed.
In such a security system, for example, a user 200 can use at least one of the input/output unit 404 of the in-vehicle security device 1, the input/output unit 504 of the security remote control 3, the input/output unit 604 of the monitoring device 5, and the input device 704 of the user terminal 4 to perform an input operation to determine which control to perform.

FIG. 16 is an example of an explanatory diagram for explaining a security system that utilizes received signal strength.
In the embodiment of Figure 16, the vehicle security device control unit 403 can set the reception of a signal with a received signal strength as described below as a specified condition for skipping security operations such as switch input by the user 200 or reducing the number of such operations.

In the embodiment of Figure 16 (a), the vehicle security device control unit 403 of the vehicle security device 1 has the function of detecting information from the vehicle key 2 in various states, for example, different storage states or distances from the vehicle security device control unit 403.
In the embodiment of Figure 16 (b), the vehicle security device control unit 403 of the vehicle security device 1 has the function of detecting information from the security remote control 3 in various states, for example, different storage states or distances from the vehicle security device control unit 403.

The vehicle security device control unit 403 shown in FIG. 16 is one specific example of a configuration that performs detection of the RSSI of a return signal by the vehicle security device 1, as described using FIG. 14.

The unlock information a to f shown in FIG. 16(a) will be described.
The unlock information a represents the unlock information output from a vehicle key 2 that is relatively close to the vehicle 10 and has few obstacles, such as a situation in which the vehicle key 2 is held in the hand of the user 200.

The unlock information a may be, in particular, the received signal strength detected when the user 200 touches the outer handle 230 of the vehicle 10 .
Therefore, the unlock information a is received by the in-vehicle security device control unit 403 with the strongest or a comparatively strongest signal strength as a result of an operation by the authorized user 200 .

The security system may also be configured to accept input of the received signal strength under such conditions from the user 200.
For example, the vehicle security device control unit 403 may have a function of determining an upper limit of normal signal reception strength based on the reception signal strength of a signal input in such a state.

The unlock information b represents the unlock information output from the vehicle key 2 when the vehicle key 2 is in a stored state that the user 200 uses on a daily basis.
In the example of FIG. 16(a), the vehicle key 2 that outputs the unlock information b is stored in a bag.

In a configuration in which unlocking is possible without the need for user operation, such as pushing a physical button, the user 200 will often leave the vehicle key 2 in a bag or the like that is used daily.
In such a situation, the strength of the received signal received by the vehicle security device control unit 403 via the bag or the like is reduced to some extent.

For example, the vehicle security device control unit 403 may have a function of determining a first lower limit value of the normal signal reception strength based on the received signal strength of a signal input from a vehicle key 2 placed in a bag or the like.

The unlock information c represents the unlock information output from a vehicle key 2 located near the outer edge of the detection range of the vehicle security device control unit 403, for example, from a vehicle key 2 held in the hand of a user 200 who has just entered the detection range of the vehicle security device control unit 403.
As with the vehicle key 2 that outputs the unlock information a, there are few obstacles between the vehicle 10 and the vehicle key 2 that outputs the unlock information c.

As a result, there is little attenuation in the signal reception strength detected by the in-vehicle security device control unit 403. However, the vehicle key 2 that outputs the unlock information c is farther away from the vehicle 10, particularly from the transmitting/receiving antenna portion connected to the in-vehicle security device control unit 403, than the vehicle key 2 that outputs the unlock information a, so the value of the reception signal strength of the unlock information c is lower than the value of the reception signal strength of the unlock information a.

For example, the in-vehicle security device control unit 403 may have a function of determining a second lower limit value of the normal signal reception strength based on the received signal strength of the signal input from the vehicle key 2 that outputs the unlock information c.
The vehicle security device control unit 403 may set different ranges for both the first lower limit value and the second lower limit value described above to determine normal signal strength.

The vehicle security device control unit 403 may be configured to flexibly set the normal signal strength for each user 200 to the extent that it can determine that the unlock information is likely to originate from a legitimate user 200.

For example, a legitimate user 200 may output unlock information c multiple times near the outer edge of the detection range, and input the received signal strength to the vehicle security device control unit 403 so that it can be stored and learned.

The unlock information d represents the unlock information output from the vehicle key 2 when the vehicle key 2 is in a stored state that the user 200 uses on a daily basis.
In the example of FIG. 16A, the vehicle key 2 that outputs the unlock information d is stored in a pocket of the user 200's clothes, for example, clothes that are worn daily, such as a suit or work clothes.

As in the case of the vehicle key 2 that outputs the unlock information b, the user 200 often keeps the vehicle key 2 that outputs the unlock information d in his or her pocket on a daily basis.
In such a situation, the strength of the received signal received by the vehicle security device control unit 403 is reduced to some extent depending on the physical properties of the material of the clothing, etc.

For example, the vehicle security device control unit 403 may have a function to determine a second lower limit value of the normal signal reception strength based on the received signal strength of a signal input from the vehicle key 2 placed in a pocket.

The vehicle security device control unit 403 may be configured to receive the input of unlock information b and unlock information d at multiple positions from near the outer edge of the detection range to the point where the user 200 comes into contact with the vehicle 10, and store and learn the information.

The unlock information e is output from an unauthorized access terminal such as relays 1830A and 1830B for relay attacks or a code grabber, which will be described later.
The in-vehicle security device control unit 403 may be configured to refer to signal strength information stored in the auxiliary memory device 402, for example, at the time when the unlock information is input by the legitimate user 200, and if the unlock information is input at a signal strength that has not been detected before, to determine that there is a high possibility that the unlock information has been input by an unauthorized access terminal.

The unlock information f is, for example, unlock information output from a vehicle key 2 that is far away from the vehicle 10 .
The vehicle key 2 that outputs the unlock information f is outside the detection range and therefore is not detected by the in-vehicle security device control unit 403. It is more preferable that a security remote control 3 or the like carried together with the vehicle key 2 that outputs the unlock information f detects the unlock information f, stores information on the position coordinates and time when the unlock information f was output, and shares such information throughout the security system, thereby enabling the information to be used to improve security functions and accuracy.

For example, by presetting, storing, learning, etc. the received signal strength of the unlocking information, the vehicle security device control unit 403 can more easily determine the state of the user 200, such as its position relative to the vehicle 10, the storage or holding state of the vehicle key 2, for example, whether it is in a frequently used bag, etc., and as a result, it becomes easier to determine the likelihood that the output of the unlocking information is coming from a legitimate user 200.

The state of the user 200, for example, the positional relationship with the vehicle 10, is an example of the "relationship between the user and the vehicle."
The likelihood that a message is sent by a legitimate user 200 is an example of "user legitimacy."

The request information RSSI information g to m shown in FIG. 16B will be described.
The security remote control 3 shown in FIG. 16(b) may be carried by the user 200 together with, for example, the vehicle key 2 shown in FIG. 16(a).

The RSSI information of the request information output from the security remote control 3 may be configured to be output together with the unlock information as shown in FIG. 16(a). In this case, the unlock information may be output by the vehicle key 2 or by the security remote control 3.

In addition, the "request information" in "RSSI information of request information" in FIG. 16(b) and its description is the same information as the "request information" described in FIG. 9 to FIG. 14.

The “RSSI information of the request information” is the received signal strength information of the signal detected by the security remote control 3 , and is the received signal strength information of the request information output from the vehicle 10 .
For example, the configuration in which the return information shown in FIG. 12 includes data on received signal strength corresponds to the embodiment in FIG. 16(b).

It is preferable that the security remote control 3 is configured to output other information, such as RSSI information of another signal, location information, or information related to radio wave conditions, instead of or in addition to the RSSI information of the request information.

The RSSI information g of the request information represents the RSSI information of the request information output from a security remote control 3 that is relatively close to the vehicle 10 and has few obstacles, such as when the security remote control 3 is held in the hand of the user 200.

The RSSI information g of the request information may be, in particular, the RSSI information of the request information output from the vehicle 10 when the user 200 comes into contact with the outer handle 230 of the vehicle 10 .
Therefore, the RSSI information g of the request information is RSSI information regarding the request information received by the security remote control 3 with the strongest or a relatively strongest signal strength as an operation by the authorized user 200 .

The security system may also be configured to accept input of the received signal strength under such conditions from the user 200.
For example, the security remote control 3 may have a function of determining an upper limit of normal signal reception strength based on the reception signal strength of the request information signal input in such a state.

In such a configuration, the security remote control 3 may output, as the RSSI information g of the request information, information that the received request information is a normal value, rather than specific numerical information of the received signal strength.

The RSSI information h of the request information represents the RSSI information of the request information output from the security remote control 3 when the security remote control 3 that the user 200 uses daily is in a stored state.
In the example of FIG. 16(b), the security remote control 3 that outputs the RSSI information h of the request information is contained in a bag.

In a configuration in which unlocking is possible without the need for user operation, such as pushing a physical button, the user 200 will often leave the security remote control 3 in a bag or the like that he or she uses on a daily basis.
In such a situation, the strength of the received signal received by the security remote control 3 through the bag or the like is reduced to some extent.

For example, the vehicle security device control unit 403 may have a function of determining a third lower limit value of normal signal reception strength based on the RSSI information h of request information input from a security remote control 3 placed in a bag or the like.
Alternatively, the security remote control 3 itself may have a function of determining the above-mentioned third lower limit value of the normal signal reception strength based on the received signal strength of the detected request information.

The RSSI information i of the request information represents the RSSI information output from a security remote control 3 located near the outer edge of the detection range of the vehicle security device control unit 403, for example, from a security remote control 3 held in the hand of a user 200 who has just entered the detection range of the vehicle security device control unit 403.
As with the security remote control 3 that outputs the RSSI information g of the request information, there are few obstacles between the security remote control 3 that outputs the RSSI information i of the request information and the vehicle 10 .

As a result, there is little attenuation in the received signal strength of the request information detected by the security remote control 3. However, the security remote control 3 that outputs the RSSI information i of the request information is farther away from the vehicle 10, particularly from the transmitting/receiving antenna portion connected to the in-vehicle security device control unit 403, than the vehicle key 2 that outputs the RSSI information g of the request information, so the value of the RSSI information i of the request information is lower than the value of the RSSI information g of the request information.

For example, the security remote control 3 or the in-vehicle security device control unit 403 may have a function of determining a fourth lower limit value of the normal signal reception strength based on the RSSI information i of the request information.
The security remote control 3 or the in-vehicle security device control unit 403 may set different ranges for both the third lower limit value and the fourth lower limit value described above to determine normal signal strength.

It is preferable that the security remote control 3 and the in-vehicle security device control unit 403 are configured to be able to flexibly set the normal signal strength for each user 200 to an extent that it can be determined that the request information is likely to originate from a legitimate user 200.

For example, a legitimate user 200 may be configured to output request information from the vehicle 10 multiple times near the outer edge of the detection range, and input the RSSI information to the security remote control 3 or the in-vehicle security device control unit 403 for storage and learning.

The RSSI information k of the request information represents the RSSI information of the request information output from the security remote control 3 when the security remote control 3 that the user 200 uses daily is in a stored state.
In the example of FIG. 16(b), the security remote control 3 that outputs the RSSI information k of the request information is stored in a pocket of the clothes of the user 200, for example, clothes worn daily such as a suit or work clothes.

As in the case of the security remote control 3 that outputs the RSSI information h of the request information, the user 200 often keeps the security remote control 3 that outputs the RSSI information k of the request information in his or her pocket on a daily basis.
In such a situation, the signal strength of the request information received by the security remote control 3 is reduced to some extent depending on the physical properties of the material of the clothing.

For example, the vehicle security device control unit 403 may have a function of determining a fourth lower limit value of normal signal reception strength based on the RSSI information k of the request information input from the security remote control 3 placed in a pocket.

The vehicle security device control unit 403 may be configured to receive input of the RSSI information h of the request information and the RSSI information k of the request information at multiple positions from near the outer edge of the detection range to the point where the user 200 comes into contact with the vehicle 10, and store and learn the information.

In the example of FIG. 16(b), the unauthorized access terminal does not transmit data including RSSI information in the request information.
Furthermore, as will be described later with reference to Figure 18, in a relay attack, the relay attack perpetrators 1810, 1820 use two relay attack repeaters 1830A, 1830B to send and receive request information and unlock information, and the received signal strength in this case is often different from the value during normal use by a legitimate user 200.

The vehicle security device control unit 403 may be configured to determine that there is a high possibility of an attack by an unauthorized access terminal if the RSSI information of the request information at the time of unlocking is not detected, or if, for example, the RSSI information of the request information at the time of unlocking by the legitimate user 200 stored in the auxiliary storage device 402 is referenced and RSSI information of the request information that has not been received before is input.

The RSSI information m of the request information is, for example, the RSSI information of the request information output from a security remote control 3 that is far away from the vehicle 10 .
The security remote control 3 that outputs the RSSI information m of the request information is outside the detection range, and therefore is not detected by the in-vehicle security device control unit 403. It is more preferable that the security remote control 3 that outputs the RSSI information m of the request information stores information on the position coordinates and time when the RSSI information m of the request information was output, and that such information can be shared throughout the security system to improve the functionality and accuracy of the security.

For example, by presetting, storing, learning, etc. the RSSI information of the request information, the vehicle security device control unit 403 can more easily determine the status of the user 200, such as its position relative to the vehicle 10, the storage or holding status of the vehicle key 2, for example, whether it is in a frequently used bag, etc., and as a result, it becomes easier to determine the likelihood that the output of the unlock information is coming from a legitimate user 200.

The in-vehicle security device control unit 403 may also have a function of adjusting and recording the signal strength of the request information that is actually output. In such a configuration, the in-vehicle security device control unit 403 can improve the accuracy and reliability of the security system by comparing the signal strength of the request information that is actually output with the RSSI information of the request information received from the security remote control 3.

For example, in a case where an unauthorized access terminal outputs false RSSI information, if the received signal strength value obtained from that RSSI information is higher than the signal strength of the request information actually output from the vehicle 10, the in-vehicle security device 1 can determine that some kind of abnormality has occurred and take measures such as increasing the alert level of the entire security system.

As described above, the vehicle key (genuine key) 2 and the security remote control (remote control) 3 are used in various ways by the user 200 on a daily basis, such as being held in both hands, in a pocket, or in a bag.

There are also various types and configurations of pockets into which the vehicle key 2 and the security remote control 3 are placed, such as front and back pockets of trousers, breast pockets, and the like.
Similarly, bags come in many different types and conditions, for example, leather, duralumin, etc.
Furthermore, the human body can act as an antenna, the nature of which differs depending on the physique of each individual.

It would be better if the security system were configured to record and learn the received signal strength indicator (RSSI) of information sent and received by the security system, as well as changes and the rate of change in RSSI, in association with the habitual behavior, clothing, belongings, etc. of the user 200.

The user's 200 habitual behavior, clothing, and belongings are examples of the "user's vehicle usage."
In yet another example, the daily approach speed of the user 200 to the vehicle 10 may be used as the "usage status of the user's vehicle." This makes it possible to determine the RSSI and its change speed that change due to behavioral habits that differ for each individual user 200, such as the walking speed of the user 200, the positional relationship (e.g., distance) with respect to the vehicle 10 at which the user stops, whether the walking speed is slowed, etc., and to use the results for security control.

The in-vehicle security device 1, security remote control 3, etc. may have an initial setting mode (calibration mode) that measures the radio wave strength under the conditions used by the user 200. In such a mode, the in-vehicle security device control unit 403, security remote control control unit 503, etc. determine the upper and lower limits of the "set range."

In the initial setting mode (calibration mode), the vehicle security device control unit 403, the security remote control control unit 503, etc., should detect the received signal strength (RSSI) at least once to determine the upper and lower limits within the "set range."
In another configuration, the in-vehicle security device control unit 403, the security remote control control unit 503, etc., in the initial setting mode (calibration mode), detects the received signal strength (RSSI) multiple times and determines the upper and lower limits of the "set range" based on the average, minimum, maximum, etc. of the detected values.

In the initial setting mode (calibration mode), the in-vehicle security device control unit 403, the security remote control control unit 503, etc. preferably have a function of displaying the measured RSSI on the display unit 405 of the in-vehicle security device 1, the display unit 505 of the security remote control 3, etc., and starting a process of accepting input from the user 200 for setting the threshold value and threshold range that determine the upper and lower limits.

An input by the user 200 for setting a threshold value or a threshold range that determines an upper or lower limit is an example of a "setting input by the user."
16 are examples of “threshold values of received signal strength.” The “threshold range” is preferably a range determined based on the lower limit value and the upper limit value.

It is preferable that the in-vehicle security device control unit 403, the security remote control control unit 503, etc., have a function to switch between a display mode that displays the measured RSSI as a specific numerical value, a display mode that displays it as a graph such as a bar graph or a pie chart, and a display mode that displays it as a numerical value and a graph.

It is preferable that the in-vehicle security device control unit 403, the security remote control control unit 503, etc. have a function to accept user input that assigns the user 200, such as "self", "family member", "employee", etc., or the status of the user 200, such as "going to work", "going home", "business", "shopping", etc., to the measured RSSI.

The in-vehicle security device control unit 403, the security remote control control unit 503, etc. may adjust the microwave unit of the vehicle 10, such as a Doppler device, and adjust the G of the impact detection, as well as perform an initial setting mode (calibration mode).

In the embodiment of FIG. 16 and FIG. 17 described later, it is preferable to take into consideration that the received signal strength (RSSI) of the signal output from the security remote control 3 and the in-vehicle security device (in-vehicle device) 1 varies greatly depending on whether the radio waves pass through the door or glass of the vehicle 10. Furthermore, it is preferable to combine this with the daily and habitual behavior of the user 200 and make a judgment.

For example, if the user 200 habitually places the vehicle key 2 or the security remote control 3 in a front pocket of trousers or the like, the signal interferes with the door of the vehicle 10, making it difficult for the signal to penetrate, and the received signal strength (RSSI) becomes relatively low.

For example, if the user 200 habitually places the vehicle key 2 or the security remote control 3 in the back pocket of his/her trousers, the signal interferes with the human body and the door of the vehicle 10, making it difficult for the signal to penetrate, and the received signal strength (RSSI) becomes comparatively lower.

For example, if the user 200 habitually carries the vehicle key 2 or the security remote control 3 in the breast pocket of a jacket or the like, the signal interferes with the window glass of the vehicle 10 and is therefore easily transmitted, resulting in a relatively high received signal strength (RSSI).

In the embodiments of Figure 16 and Figure 17 described below, the vehicle security device control unit 403, the security remote control control unit 503, etc. identify the height at which the security remote control 3 is located and change the threshold value depending on that height; for example, the higher the height, the lower the threshold value.
This makes it possible to correct the effect of height on the RSSI even if the user 200 does not always place the vehicle key 2 or the security remote control 3 in the same place.

The in-vehicle security device control unit 403, the security remote control control unit 503, etc. may use the electronic device 8 or the sensor 9 to specify the height.
For example, the height may be detected using an air pressure sensor or an acceleration sensor.
In the above-mentioned initial setting mode (calibration mode), it is advisable for the user 200 to set the height at which the vehicle key 2 or the security remote control 3 is most frequently inserted.

It would be better if the in-vehicle security device control unit 403, the security remote control control unit 503, etc., had a function to execute processing to output a message such as "Please insert the remote control in the place where you usually insert it" when starting the aforementioned initial setting mode (calibration mode).

In the embodiment of FIG. 16 and FIG. 17 described below, the received signal strength (RSSI) of information transmitted and received by the security system during the everyday, habitual usage of the legitimate user 200, as well as its average value and changes over time, are recorded and learned, making it easier to determine the likelihood that the user 200 is a legitimate user.

For example, when the radio wave strength for determining that a user 200 is a legitimate user ranges from 1 to 100, such a configuration makes it possible to make a determination with a level of accuracy that cannot be achieved with a configuration in which the radio wave strength threshold is set uniformly at, for example, 40.

In conventional security systems that set received signal strength indicator (RSSI), if the threshold is set too low, DISARM can easily be carried out by someone attempting unauthorized access, lowering security strength; if the threshold is set too high, DISARM becomes more difficult, and the user 200 has to endure more daily hassle.
In the embodiment of FIG. 16 and the embodiment of FIG. 17 described later, such problems are avoided, and it becomes easier to achieve both convenience for the user 200 and security effects.

FIG. 17 is an example of an explanatory diagram illustrating another security system that utilizes received signal strength.
The embodiment of FIG. 17(a) is configured such that a user terminal 4 is incorporated into the security system shown in FIG. 16(a).
The embodiment of FIG. 17(b) is a configuration in which a user terminal 4 is incorporated into the security system shown in FIG. 16(b).

In the embodiment of Fig. 17(a), the vehicle key 2 functions similarly to the embodiment of Fig. 16(a), except that the user terminal 4 outputs second unlock information in response to request information from the vehicle 10.
In this configuration, the vehicle security device control unit 403 can set the input of the second unlock information as a specified condition for skipping security operations such as switch input by the user 200 or reducing the number of such operations.

The user terminal 4 may create and output different second unlock information depending on the time of day, the location of the vehicle 10, etc.
In such a configuration, the security system can provide user 200 with more options for countermeasures against unauthorized access using relay attack repeaters, code grabbers, etc., and user 200 can select the countermeasure that is more suitable for him/herself, thereby keeping vehicle 10 safer.

In the embodiment of FIG. 17(b), the security remote control 3 can function similarly to the embodiment of FIG. 16(b). In addition, the security remote control 3 can function as described below. The user 200 may be able to switch between these functions.

When a communication connection between the security remote control 3 and the user terminal 4 is established,
The third unlock information, which is different from the normal unlock information, for example, the unlock information described with reference to FIG. 16, is output.

In this configuration, the vehicle security device control unit 403 can set the input of the third unlock information as a predetermined condition for skipping security operations such as switch input by the user 200 or reducing the number of times such operations are performed.

The user terminal 4 may output a command to the security remote control 3 to create different third unlock information depending on the time of day, the location of the vehicle 10, etc.
Even with such a configuration, the security system can increase the options of countermeasures it can provide to user 200 against unauthorized access using relay attack repeaters, code grabbers, etc., and user 200 can select the countermeasure that is more suitable for him or her, thereby keeping vehicle 10 safer.

The signal strength information 422, 522, 622, 722 stored in the auxiliary storage devices 402, 502, 602, 702 of the vehicle-mounted security device 1, security remote control 3, user terminal 4, and monitoring device 5 may include information on the set range of received signal strength for each piece of information, or at least one of the upper and lower limits.

In an advanced version of the embodiment of FIG. 17, the vehicle security device control unit 403 may have a function of detecting and recording radio waves and information emitted by a terminal (hereinafter referred to as an "outsider terminal") other than the user terminal 4 owned by the user 200 himself, such as a terminal owned by a suspicious person or a relay attack perpetrator 1810, such as an outsider's smartphone.

For example, the vehicle security device control unit 403 may have the function of detecting and recording the state of radio waves and information emitted by the user terminal 4 and outsider terminals present in the vehicle, and the state of radio waves and information emitted by the user terminal 4 and outsider terminals present near the vehicle.

The state of radio waves and information emitted by the user terminal 4 and outsider terminals present inside the vehicle, and the state of radio waves and information emitted by the user terminal 4 and outsider terminals present near the vehicle are examples of the "first radio wave condition inside and around the vehicle" and the "second radio wave condition."

Specifically, the in-vehicle security device control unit 403 has a function of acquiring information useful for identifying a smartphone, such as smartphone-specific information, emitted from the smartphone via a BLE beacon or the like, and recording the received smartphone ID information, etc., together with at least one of information regarding the opening and closing of the lock, time information, and location information when the lock is opened and around the time of opening and closing the lock.

As a result, if a suspicious person or relay attack perpetrator 1810 around the vehicle 10 has a smartphone, which is one type of outsider terminal, with BLE turned on, the in-vehicle security device control unit 403 can record the BLE ID of the smartphone, etc., and use the recorded information to identify the suspicious person or relay attack perpetrator 1810, etc., and as evidence of the harassment, pranks, or crime that has been committed.

It would be better if the security system had the function of detecting radio waves output from, for example, a radio interception device, eavesdropping device, tracking device, etc., placed near the vehicle 10 or attached to the vehicle 10 by a relay attack perpetrator 1810, 1820, etc.

As a result, the in-vehicle security device control unit 403, the security remote control control unit 503, the monitoring device control unit 603, etc. can output such detection results to the user 200. By receiving such an output, the user 200 can recognize early on the risk of analysis of the specified conditions, etc. used in the security system, and can increase his or her vigilance.

The vehicle security device control unit 403 may be configured to associate and record the IDs of all smartphones when multiple smartphones or the like are found around the vehicle 10.

For example, as described below, a relay attack is carried out by a pair of relay attack perpetrators 1810, 1820, so recording information about smartphones present around the vehicle 10 can be used as evidence to identify which of the two was on the vehicle 10 side.

The in-vehicle security device control unit 403 may record information about smartphones present around the vehicle 10 as described above when the engine is started or while the vehicle is running.
Furthermore, the vehicle security device control unit 403 may have a function of recording the information recorded as described above so that it can be traced as history information.

As a result, even if the vehicle 10 falls victim to a relay attack or the like, it is possible to record the entire sequence of movements from the time the relay attack is carried out to the time the drive parts for running the vehicle, such as the engine and motor, start up, and then as the vehicle drives away.

When the vehicle security device control unit 403 detects that a door has been opened, the engine has been started, the vehicle has been driven, etc., even if the smartphone ID of the user 200, who is a normal driver, is not detected as the smartphone ID, the vehicle security device control unit 403 may have a function of capturing images of the state of the vehicle 10 in that state for at least a portion of the time using an image capturing device within the vehicle 10, such as the camera 8c, and recording the images, possibly together with the smartphone ID.

Furthermore, the in-vehicle security device control unit 403 may have the function of transmitting information on the position where the driving parts for driving the vehicle, such as the engine and motor, are turned off after the above-mentioned door is opened, the engine is started, and the vehicle is being driven, and in some cases, the ID of the smartphone owned by the relay attack perpetrators 1810, 1820, etc., to an external party, such as the user terminal 4 of the legitimate user 200, a server of the company that manufactures and sells the in-vehicle security device 1, or a server of the police, etc.

The in-vehicle security device control unit 403 may have a function of performing predetermined anti-theft control or other crime prevention control, such as performing control to prevent the start of the drive units for driving the vehicle, such as the engine or motor, when the smartphone 4a of the user 200 who is the driver is detected by BLE until the drive units for driving the vehicle, such as the engine or motor, are turned off or the door is closed, but the smartphone 4a of the user 200 who is the driver is not detected by BLE when the door is subsequently opened or the drive units for driving the vehicle, such as the engine or motor, are started.

The vehicle security device control unit 403 having the above functions further obtains the battery status, such as the remaining charge of the battery, of the smartphone 4a of the user 200 who is the driver when the driving units for running the vehicle, such as the engine or motor, are turned off or the door is closed, and if the door is locked after a time when the battery may run out, it is better to have a function to skip the execution of security controls such as anti-theft control even in the above cases, since this makes it easier to avoid problems such as the legitimate user 200 being unable to unlock the vehicle 10 due to a dead battery on his or her smartphone 4a.

It is preferable that the vehicle security device control unit 403 has a function of outputting related information from an output device of the vehicle 10, such as a speaker, and notifying the user 200 when there is a possibility that the battery in the smartphone 4a of the driver/user 200 is dead.

FIG. 18 is an example of a schematic diagram illustrating an overview of a security system having a monitoring device 5. In FIG.
FIG. 18A is an example of a schematic diagram illustrating the operation of the monitoring device 5 when a legitimate user 200 approaches the vehicle 10.
FIG. 18B is an example of a schematic diagram illustrating the operation of the monitoring device 5 when a relay attack is being performed on a legitimate user 200.

Figure 18 (a) illustrates a state in which the approach of a legitimate user 200 to a vehicle 10 is detected. Note that the operation described below can be performed in the same way even if the legitimate user 200 touches the outer handle 230 of the vehicle 10.

As shown in FIG. 18(a), when a user 200 approaches a vehicle 10 and a transition operation from a locked state to an unlocked state is performed on the vehicle 10 without the user 200 operating the vehicle key 2, the monitoring device 5 accordingly receives an LF signal output from the transmitter of the vehicle 10, such as a 134 kHz or 124 kHz signal, or a 300 MHz band signal, such as a 312 MHz signal.

When the monitoring device 5 receives an LF signal, a signal in the 300 MHz band, or the like, it outputs notification information, such as a buzzer sound, to the user 200 .
Therefore, the user 200 can easily recognize the occurrence of LF signals, 300 MHz band signals, and the like that he or she cannot perceive.
In FIG. 18, notification information is represented by "!!!".

The notification information output by the monitoring device 5 may be music or a voice message, such as "Vehicle doors will be unlocked", instead of a warning sound such as a buzzer sound.
Furthermore, if the user 200 of the vehicle 10 is using a control device for a virtual character such as a virtual navigator or a virtual passenger, it is also possible to output a voice message in the voice of that virtual character.

Furthermore, the monitoring device 5 may have a function of detecting a communication connection with the security remote control 3 or the user terminal 4 .
A monitoring device 5 having such a function can, for example, detect a communication connection with the security remote control 3 or the user terminal 4 when the user 200 disembarks from the vehicle 10, but if it does not detect a communication connection with the security remote control 3 or the user terminal 4 when the user subsequently gets into the vehicle 10, output a voice message such as "Did you bring the remote control?" or "Have you forgotten your smartphone?"

FIG. 18B illustrates a state in which a relay attack is being carried out against a legitimate user 200.
In FIG. 18B , a relay attack perpetrator 1810 on the vehicle side is near the vehicle 10 , and a relay attack perpetrator 1820 on the user 200 side is near the user 200 who is walking away from the vehicle 10 .

The relay attack perpetrators 1810 and 1820 each have a relay attack repeater 1830 (1830A, 1830B).
The relay attack perpetrator 1810 on the vehicle side touches the outer handle 230 of the vehicle 10 to cause the transceiver 220 of the vehicle 10 to transmit an LF signal (unlock operation). The relay attack repeater 1830A receives the LF signal and converts it to a frequency (POWER) that can reach the relay attack repeater 1830B held by the relay attack perpetrator 1820 on the user 200 side, and then transmits the data to the relay attack repeater 1830B held by the relay attack perpetrator 1820 on the user 200 side.

The relay attack repeater 1830B of the relay attack perpetrator 1820 on the user 200 side converts the relayed signal into an LF signal and transmits it to the vehicle key 2 (original remote control) held by the user 200.

The vehicle key 2 (original remote control) determines that the signal is addressed to itself, and transmits an unlock signal to the relay attack repeater 1830B of the relay attack perpetrator 1820 on the user 200 side.
The monitoring device 5 has a function of detecting this unlock signal, and when it detects this unlock signal, it outputs a warning sound such as a buzzer, music, or a voice message, as described using Figure 18 (a).

In addition to the notification information described with reference to FIG. 18(a), the monitoring device 5 may be configured to output, for example, a voice message such as "Be careful of your surroundings" or "There is a risk of a relay attack" when the reception level (RSSI) of the received signal is outside the value or range of values of the signal strength information 622 stored in the auxiliary storage device 602 of the monitoring device 5, or outside the value or range of values of the learning information 623.

Better yet, the security system is configured to determine the value or range of values of the signal strength information 622, or the value or range of values of the learning information 623, based on values detected during normal use by a legitimate user 200.

At the same time, the relay attack repeater 1830B of the relay attack perpetrator 1820 on the user 200 side receives the signal transmitted by the vehicle key 2 (original remote control), converts the received signal to a frequency (POWER) that reaches the relay attack repeater 1830A of the relay attack perpetrator 1810 on the vehicle side, and transmits it to the relay attack repeater 1830A of the relay attack perpetrator 1810 on the vehicle side.

The relay attack repeater 1830A of the vehicle-side relay attack perpetrator 1810 receives this signal, converts it to a frequency that the vehicle 10 can receive, and transmits it to the vehicle 10, causing the vehicle 10 to transition from a locked state to an unlocked state.

When the user 200 of the vehicle 10 recognizes such a risk from the notification information from the monitoring device 5, he/she can, for example, by operating the security remote control 3, cut off the power supply to the engine or motor of the vehicle 10 by the in-vehicle security device 1, remotely check the images captured by the electronic devices 8 of the vehicle 10, such as the drive recorder 8b or camera 8c, check and save the communication log around the vehicle detected by the sensor 9 of the vehicle 10, and output the user's 200 own words from an output device of the vehicle 10, such as a speaker attached to the vehicle 10, via the security remote control 3 or user terminal 4.

This allows for a more crime-preventive response to relay attack perpetrators 1810 than ever before.

The monitoring device 5 may be configured to output notification information based on movement information generated based on the vehicle key 2 or the monitoring device 5 moving away from the vehicle 10, or the vehicle key 2 or the monitoring device 5 moving toward the vehicle 10, etc.

It is preferable that the monitoring device 5 is configured to be able to change the output content of the notification information, such as outputting notification information with a higher level of alertness when an LF signal is received, for example, after the user 200 has left the vehicle 10 or while the user 200 is away from the vehicle 10.
The movement information may be issued by the vehicle 10, the security remote control 3, the user terminal 4, etc., based on, for example, a GPS signal, received signal strength information, image analysis information, etc.

In addition, the monitoring device 5 outputs notification information in response to information emitted from the vehicle 10 or the vehicle key 2 after the vehicle key 2 or the monitoring device 5 starts to leave the vehicle 10, so that the user 200 who recognizes the notification information can be prompted to give consideration to their actions after leaving the vehicle 10. As an example of actions to take after leaving the vehicle 10, it is particularly recommended that the user safely store the vehicle key 2.

The monitoring device 5 detects the distance to the vehicle key 2 or the user terminal 4, for example continuously or periodically, based on the signal strength of the signal transmitted and received via the network 6, and such a monitoring device 5 may be configured to output notification information in response to a change in the distance between the monitoring device 5 and the vehicle key 2 or the user terminal 4.
As a result, the monitoring device 5 can output warning information in the event that the user 200 leaves behind the vehicle key 2 or the user terminal 4, and can alert the user 200.

The monitoring device 5 may be configured to output notification information based on charging information emitted when the remaining charge of the battery built into the vehicle key 2 or the monitoring device 5, such as the remaining charge, falls below a set value, such as a set value set for transitioning to a battery safe mode.

In such a configuration, the monitoring device 5 may output warning information to prevent the vehicle key 2 from running out of charge without the user 200 realizing it, causing the user 200 to be unable to use the vehicle key 2 and thus unable to unlock the vehicle 10 or start driving.

The security system described so far can effectively protect the vehicle 10 against relay attacks in which the LF signal (134 kHz and 124 kHz) transmitted from the vehicle 10 is transmitted as a high-power LF to the vehicle key (original key) 2 held by the owner of the vehicle 10, and the signal is converted and relayed to a different frequency and restored to LF near the owner of the vehicle 10, causing the vehicle key (original key) 2 to respond and transmit a high-power response signal of 300 MHz band (weak radio). The security system described so far can effectively protect the vehicle 10 against relay attacks in which the LF signal (134 kHz and 124 kHz) transmitted from the vehicle 10 is transmitted as a high-power LF to the vehicle key (original key) 2 held by the owner of the vehicle 10, and the signal is converted and relayed to a different frequency and restored to the 300 MHz band frequency near the vehicle 10 to unlock the vehicle 10.

In addition, even if the relay attack perpetrators 1810, 1820 commit the crime in a location where the owner of the vehicle 10 cannot see the vehicle 10 (a location a short distance away from the vehicle 10), the vehicle 10 can be effectively protected.

In another embodiment, the vehicle key 2 may have a detection unit that detects a change in the position or attitude of the vehicle key 2, and a control unit that controls the transmission of a signal related to the smart function according to the detection result of the detection unit. In this way, a security system that can effectively protect the vehicle 10 from crimes such as relay attacks can be provided. In particular, the control unit of the vehicle key 2 may transmit a signal related to the smart function or control the stopping of the transmission according to a change in the position or attitude of the vehicle key 2 detected by the detection unit. For example, when the vehicle key 2 is stationary, the control unit of the vehicle key 2 may stop the transmission of a signal related to the smart function. In this way, it is possible to reduce the possibility of crimes, particularly relay attacks, based on a signal related to the smart function spontaneously emitted from the vehicle key 2 when the user is not using or is not about to use the vehicle 10, for example, by placing the vehicle key 2 in a room or entrance of the home. The control to stop the transmission may be to not transmit at all, or may be to provide both a period of transmission and a period of non-transmission, such as reducing the frequency of transmission. The stationary state may be, for example, when no change in the position or attitude of the vehicle is detected for a predetermined period of time, in other words, when the change in the position or attitude is zero or can be considered to be zero. As the detection unit, a sensor that can be used as the sensor 9 may be appropriately used, and in particular, at least one of an acceleration sensor and a gyro sensor, or a vibration sensor may be used. As the control unit, for example, a configuration including a processor, a main memory device such as a RAM, and a wireless communication module may be used. As the signal related to the smart function, in particular, a signal for transitioning the vehicle 10 from a locked state to an unlocked state, or a signal for transitioning from a driving prohibited state to a driving permitted state may be used.

Specific configurations and development variations of the security system described above will be exemplified below.
Specific Example 1
A security system for a vehicle having a function of performing an operation of transitioning the vehicle to at least one of an unlocked state and a travel standby state, for example, an engine startable state and an EV driving motor startable state, in response to an input of first information, for example, unlock information,
A security system in which a security control unit of a security device requests at least one input operation by a user to perform a smart operation, such as a switch operation such as entering a PIN code, and skips the input operation request or reduces the number of requests if certain conditions are met.
The unlock information in the first specific example may be input by wireless communication or by wired communication such as CAN.

Example 2
The security control unit:
based on a received signal strength associated with a signal received at at least one of the remote control receiver and the vehicle receiver;
A security system that performs a determination of a predetermined condition related to at least one of an association between a user and a vehicle and the legitimacy of the user.

Specific Example 3
The relationship is the distance between the user and the vehicle,
The security control unit skips a request for an input operation or reduces the number of requests if the distance is equal to or less than a set value.
The distance in the third embodiment corresponds, for example, to the outer edge of the detection range of a vehicle sensor.

Specific Example 4
The security control unit is a security system that accepts the setting of a threshold or a threshold range for signal strength based on the user's use of the vehicle.

Specific Example 5
The security control unit receives a threshold or a threshold range setting for each user or for each storage position of at least one of the vehicle key and the security remote control of the vehicle.
The storage position in the fifth embodiment is preferably a place where the user often puts or places the remote control.

Example 6
The security control unit transmits second information, such as an unlock transmission signal or unlocked information, to the security remote control in response to an input of first information, such as unlock information, for the vehicle;
The security remote controller determines a received signal strength of the second information signal;
When the received signal strength of the second information signal is higher than a set value, for example, an upper or lower threshold, or is within a set value range, for example, a threshold range, the security remote control transmits third information, for example, switch operation cancellation information, to the security control unit;
The security control unit determines that a predetermined condition is satisfied when the third information is received.
The first information and the second information in the sixth embodiment may be the same information or data.

Example 7
The security control unit is a security system that outputs notification information, such as a warning, in addition to a request for an input operation.

Example 8
The security control unit transmits the second information to the security remote control in response to the input of the first information to the vehicle;
The security remote controller transmits fourth information related to reception of the second information signal, such as return information from the security remote controller, to the security control unit;
The security control unit:
If the received signal strength of the fourth information signal is equal to or greater than a set value or is within a set value range, it is determined that a predetermined condition is satisfied;
A security system that determines that a predetermined condition is not satisfied if the fourth information is not received or if the received signal strength of the signal of the fourth information is lower than a set value.

Example 9
the security control unit transmits second information to the security remote control in response to input of the first information to the vehicle;
The security remote control
fourth information related to receiving the signal of the second information; and
Transmitting fifth information related to the received signal strength of the signal of the second information, such as signal strength information of an unlock transmission signal or unlocked information, to the security control unit;
The security control unit:
A security system that determines the predetermined condition based on a comparison result between a fourth information signal and a fifth information signal.

Example 10
A monitoring device, for example a key holder-type monitoring device attached together with a vehicle key, receives a sixth information signal output from the vehicle in response to the input of the first information, for example a weak radio signal such as an LF signal or a 300 MHz band signal,
A security system in which the monitoring device outputs notification information, such as a buzzer sound, in response to receiving the sixth information signal.

Example 11
A security system in which the monitoring device stops outputting a warning signal when the monitoring device receives a sixth information signal for a first set period, for example a user-selectable set period between 15 seconds and 60 seconds, while the vehicle is traveling.

Example 12
A security system in which, if the monitoring device does not receive the sixth information signal for a second set period while the vehicle is traveling, for example a user-selectable set period between 15 seconds and 60 seconds, the monitoring device resumes outputting a warning signal in response to receipt of the sixth information signal.

Example 13
The security control unit is capable of switching an input operation between inputting a PIN number and simultaneously operating at least two input devices installed in the vehicle.

Specific Example 14
The security control unit is a security system capable of switching the target for receiving input operations between an input device attached to the vehicle, an input unit of a vehicle key, an input unit of a security remote control, and an input unit of a user terminal of the user.

Specific Example 15
The security control unit is a security system that requests a different input operation by the user to execute a transition operation, for example an operation other than a switch input using a smartphone or the like, when a predetermined condition is satisfied.

Specific Example 16
A security control unit transmits a request for another input operation by the user for executing a transition action to the user terminal of the user, and performs recognition processing of the two-stage input operation using different input devices.

Example 17
The security control unit transmits notification information regarding the execution of a transition operation, such as video information or audio information such as "DISARMING" or "DISARMING COMPLETED" to at least one of the security remote control and the user terminal.

Example 18
The security control unit is a security system that determines a predetermined condition based on the distance between the vehicle and the user terminal.

Specific Example 19
The security control unit:
A security system that determines that a predetermined condition is met when user terminal information, such as a smartphone unique ID, is acquired from a user terminal.

Example 20
The security control unit outputs seventh information, such as a display command for a QR code or a one-time password, to the user terminal,
the user terminal generates and outputs eighth information, such as a QR code or a one-time password, in response to the seventh information;
A security system in which the security control unit determines that a specified condition is met when it obtains input related to the eighth information, such as having an in-vehicle camera read a QR code or a user inputting a one-time password.

Specific Example 21
The security control unit has a function of executing at least one of a warning operation and a guard operation in response to an input of security event information relating to a security event occurring in the vehicle, such as an approach, an impact, or the like;
The security control unit transmits to the user terminal:
Output security event information,
Requesting at least one second input operation by the user to stop the execution of the warning operation and the alert operation, such as an input operation on a smartphone,
The security control unit is a security system that stops a function of executing a warning operation and a security operation when a predetermined second input operation is received.

Example 22
The warning and alert actions are
Activating at least one of an output device, such as a speaker, and an input device, such as a microphone or a camera, that is attached to the vehicle;
Output of information from an output device, such as warning information,
Transmission of information acquired by the input device, such as audio information, video information, etc., to a user terminal;
At least one of
The user terminal is
Security event information, such as approach information and impact information,
Information regarding the execution state of at least one of a warning operation and a guard operation;
A security system that displays or records at least one of the above.

Specific Example 23
The security control unit is a security system that determines that a predetermined condition is satisfied when the vehicle is present within a set range, such as a workplace, a dealership, etc.

In the specific example 23, the set range may be a place other than a place where unspecified people can enter, such as an area where thefts occur frequently, a department store or a public place, or a parking lot at or near the home.

Specific Example 24
The security control unit determines that a specified condition is met when the time is outside a first set period, such as during the night, or within a second set period, such as during work or school hours.

Specific Example 25
The security control unit:
Determine the set period by learning the user's regular behavior history, such as the time of commuting to work or school, or
A security system that accepts input of a set period based on a user's regular behavioral history, such as the time of day when the user commutes to work or school.

Illustrative Example 26
The security control unit has a function of determining the possibility of a relay attack against the vehicle,
The security control unit is a security system that determines that a predetermined condition is not satisfied when the possibility of a relay attack occurring is higher than a set value, for example, when there is a situation where a relay attack may be performed.

Illustrative Example 27
The security control unit:
Analyze the person photographed by the imaging device installed in the vehicle,
This security system determines that the likelihood of a relay attack occurring is higher than a set value when a person is different from a set user, for example when an unknown person is captured on camera.

Specific Example 28
The imaging device installed in the vehicle captures images of the interior of the vehicle from the rear of the vehicle,
The security control unit:
A security system that detects and evaluates a person in at least one of the areas of the windshield, rear windshield, and windows in an image taken of the interior of a vehicle from the rear.

Specific Example 29
The security control unit outputs information relating to a request for an input operation to at least one of the security remote control and the user terminal.

Specific Example 30
The security control unit detects a state of the vehicle key and a state of the security remote control in response to the input of the first information,
The security control unit is a security system that determines predetermined conditions based on the state of the vehicle key and security remote control.

Specific Example 31
The security control unit detects a state of the vehicle and a state of an environment surrounding the vehicle in response to the input of the first information;
The security control unit:
The state of the detected vehicle key and security remote control, the state of the detected vehicle, and the state of the surrounding environment of the vehicle are
The state of the vehicle key and the security remote control, the state of the vehicle, and the state of the surrounding environment of the vehicle are compared when the security control unit previously determined that the predetermined condition was satisfied;
The security control unit is a security system that determines that a predetermined condition is satisfied when the comparison result is within a set range of similarity, such as a range in which identity is recognized.

Specific Example 32
The security control unit is a security system that determines the state of the vehicle and the state of the vehicle's surrounding environment based on input from environmental sensors.

Specific Example 33
The environmental sensor is a security system that detects at least one of the following: temperature, air pressure, sound, brightness, radio waves, weight, speed, and acceleration.

Specific Example 34
The environmental sensor detects a state of the vehicle and a state of an environment surrounding the vehicle in response to an input of the first information, for example, at the time of unlocking;
The environmental sensor further detects the state of the vehicle and the state of the surrounding environment of the vehicle again in response to the opening of the door of the vehicle;
The security control unit is a security system that determines a predetermined condition based on the similarity of at least two detection results by the environmental sensor.

Specific Example 35
The input operation is
Placing at least one of the vehicle key and the security remote control in a set position;
activating at least one on-board electronic device;
Moving the seat belt
Touching the designated vehicle parts,
A security system that is at least one of the following:

Specific Example 36
The input operation is
Placing at least one of a vehicle key and a security remote control in a set position;
activating at least one on-board electronic device;
Moving the seat belt
Touch the vehicle position you set,
A security system that performs at least two of the above in a set order.

Illustrative Example 37
The input operation is a communication with an in-vehicle electronic device having a communication function,
The security control unit is a security system that judges specified conditions based on the accuracy of the content of the communication.

Specific Example 38
The content of the communication is
The contents of past communications,
Past driving history,
A security system determined based on at least one of the above.

Specific Example 39
A security system in which the input operation is the input of set destination information, for example, location information such as a workplace or home.

Specific Example 40
A security system in which the input operation is an input operation of destination information, or a set response to a request for input of destination information, such as voice input of a place of work, a home, etc.

Specific Example 41
the security control unit assigns authentication strengths to the plurality of input operations individually;
The security control unit changes the requested input operation to an input operation assigned with a lower authentication strength when a predetermined condition is satisfied.

Specific Example 42
A security system in which at least one of a security remote control and a user terminal outputs information regarding safe storage of a vehicle key, such as audio information such as "Put the key in the case" or video information.

Specific Example 43
A security system in which at least one of a security remote control and the user terminal outputs information regarding safe storage of a vehicle key within a set time from the time the user gets off the vehicle.

Specific Example 44
A security system in which at least one of a security remote control and a user terminal outputs information regarding the safe storage of a vehicle key within a set time from the time the user locks the vehicle.

Specific Example 45
At least one of the security remote control and the user terminal sets the set time,
At the time of vehicle locking operation,
When a certain time has elapsed since the vehicle was locked,
A time when the radio wave intensity of the radio wave received from the vehicle is decreased by a predetermined amount or a predetermined percentage or more at the time of the vehicle locking operation,
A security system that determines based on at least one point in time.

Illustrative Example 46
At least one of the security remote control and the user terminal,
Detecting at least once a time length from a time when the vehicle is locked to a time when the vehicle key is stationary;
A security system that determines a set time based on the length of time.

Specific Example 47
At least one of the security remote control and the user terminal,
detecting that the user has safely stored the vehicle key prior to outputting information regarding the safe storage of the vehicle key;
A security system that changes the frequency of outputting information regarding the safe storage of vehicle keys depending on the detection result.

Specific Example 48
In response to the user getting out of the vehicle, at least one of the security remote control and the user terminal detects the location of the vehicle key;
A security system in which at least one of a security remote control and a user terminal outputs notification information, such as warning information, when a vehicle key is within a set range, such as near an entrance or outside a security box.

Specific Example 49
When the user gets off the vehicle, at least one of the security remote control and the user terminal detects a location of the vehicle key;
A security system in which, if a vehicle key is outside a storage case for a predetermined period of time, at least one of a security remote control and a user terminal outputs notification information, such as warning information.

Specific Example 50
At least one of the security remote control and the user terminal measures a length of time from when the user gets off the vehicle to when the movement of the vehicle key stops;
A security system in which at least one of a security remote control and a user terminal determines a predetermined time based on a measurement result.

Specific Example 51
A security system in which at least one of a security remote control and a user terminal determines the predetermined time based on at least one of a learning result, an average, and a maximum value of the length of time measured.

Specific Example 52
When the user gets out of the vehicle, at least one of the security remote control and the user terminal detects the location of the vehicle key and identifies the radio wave conditions at the location;
A security system in which at least one of a security remote control and a user terminal outputs alarm information when the radio wave conditions at the location where a vehicle key is placed are in an alarm setting state.

Specific Example 53
The security remote controller communicates with the vehicle key at the placement location, and identifies a first communication sensitivity of the communication with the vehicle key, for example, identifying the proximity of the vehicle key and the security remote controller;
The security control unit communicates with the security remote control, identifies a second communication sensitivity of the communication with the security remote control, identifies, for example, a proximity between the vehicle and the security remote control or a user terminal, and transmits the second communication sensitivity to the security remote control;
The security remote control
The first communication sensitivity is greater than a first set value, and
When the second communication sensitivity is greater than the second set value, for example, when the vehicle and the vehicle key are close to each other,
A security system that outputs alarm information.

Specific Example 54
The security remote control
When the first communication sensitivity or the second communication sensitivity is greater than a set value,
If the vehicle key remains stationary for a certain period of time,
A security system that outputs alarm information.

Specific Example 55
At least one of the security remote control and the user terminal has map information, such as information on the layout of the house, and radio wave condition information, and identifies the radio wave condition of the installation position based on the map information and the radio wave condition information;
A security system in which at least one of a security remote control and a user terminal outputs alarm information when a vehicle key is in a set radio wave condition.
The map information in the specific example 55 can be acquired, for example, from a cleaning robot owned by the user.

Illustrative Example 56
The alarm information includes information regarding a designated location of the vehicle key, such as a safe location,
At least one of the security remote control and the user terminal outputs alarm information at least by voice, for example, "Keep it in a room away from the entrance or on the second floor."

Illustrative Example 57
The user terminal has a function of allocating at least one of audio information and image information designated by the user, such as the user's favorite music and photos, to the alarm information;
A security system in which the user terminal outputs at least one of assigned audio information and image information in association with the alarm information.

Specific Example 58
The user terminal
Function to assign audio information to alarm information in conjunction with a music playback application;
Function to assign image information to alarm information in cooperation with image playback applications;
A security system comprising at least one of the following:

Illustrative Example 59
A security system in which a user terminal outputs at least one of audio information and image information superimposed on alarm information.

Specific Example 60
The security control unit is a security system that displays information about relay attacks to a user, such as the risk of relay attacks, countermeasures taken, and scores of past events that seem like relay attacks, statistically, for example in the form of reports or scores, or in the form of graphs.

Illustrative Example 61
The security control unit:
Obtaining security information, such as news related to the security of the user's vehicle model, via the network;
A security system that outputs to a user security information and information about security functions of a security device related to the security information, such as security functions for combating crimes that are in the news.

Illustrative Example 62
The security control unit is a security system that updates, for example, adds, modifies, or releases for a fee, the security functions of the security device via a network.

Specific Example 63
The security control unit processes the security information as follows:
Vehicle type,
Vehicle equipment,
The area in which the vehicle is travelling,
Vehicle parking areas,
Vehicle usage time,
Vehicle usage status,
User attributes,
A security system that acquires based on at least one of the above.

Illustrative Example 64
The security control unit:
Relay attack,
Code grabber,
CAN Invaders,
The frequency of displaying security information is determined according to the number of security functions that counter at least one of the above.
The manner of display,
A security system that modifies at least one of the following:

Illustrative Example 65
The security control unit detects the radio wave conditions around the vehicle,
The security control unit is a security system that records information about radio wave conditions in response to an input of first information.

Illustrative Example 66
The information on the radio wave condition includes identification information of the electronic device, such as a terminal ID of a smartphone,
The security control unit is a security system that records the identification information in association with information regarding the input of the first information, such as the unlock date and time, the location, etc.

Illustrative Example 67
The security control unit records the identification information of at least two electronic devices together with information on the received signal strength of the identification information signal.

Illustrative Example 68
The security control unit processes the identification information and information related to the identification information, such as the received signal strength of the identification information and the time change of the signal strength,
Perform smart actions,
Vehicle operation,
A security system that records during at least one of the following:

Illustrative Example 69
The security control unit:
Different vehicle states, e.g. unlocked, running, etc.
Transition of vehicle states, such as transition from an unlocked state to a driving-permitted state,
In association with at least one of
Identification information,
information on the received signal strength of the signal of the identification information;
A security system that records at least one of the above.

Illustrative Example 70
The security device stores user identification information, such as the smartphone terminal ID information of a legitimate user,
When the security control unit does not detect the stored identification information related to the user from the information related to the radio wave condition, the security control unit captures an image using a photographing device in the vehicle in response to a transition operation of the vehicle state, and starts photographing if, for example, the smartphone terminal ID of the authorized user is not recognized.
The security control unit is a security system that records video information together with identification information contained in the detected radio wave conditions.

Specific Example 71
The security control unit controls the vehicle to:
A transition from a running state to a stopped state, or
Position information regarding the position where the transition operation from the standby state to the stopped state was performed,
A security system that transmits to a terminal outside the vehicle.

Illustrative Example 72
The security device stores user identification information, such as the smartphone terminal ID information of a legitimate user,
The security control unit:
Detecting a first radio wave condition around the vehicle in response to a transition operation of the vehicle to at least one of a locked state and a stopped state;
Detecting a second radio wave condition around the vehicle in response to a subsequent input of a request signal for execution of the smart operation;
The security control unit:
When identification information related to a user is detected from the first radio wave condition information and when identification information related to a user is not detected from the second radio wave condition information, for example, when a user has a smartphone when getting off a vehicle, but does not have the smartphone the next time the vehicle door is opened,
A security system that requires at least one input operation by a user to execute a transition action, or blocks the execution of the transition action.

Specific Example 73
The security control unit:
Detecting a battery state of the electronic device of the user from the first radio wave condition;
predicting a time when the user's electronic device will be unable to output identification information relating to the user, for example, a time when the battery is expected to run out, based on the battery state and the elapsed time since the detection of the battery state;
A security system that skips a process that blocks the execution of a transition action after a predicted time.

Illustrative Example 74
The security control unit:
Detecting a battery state of the electronic device of the user from the first radio wave condition;
predicting a time at which the user's electronic device will be unable to output identification information relating to the user based on the battery state and the elapsed time from the time point at which the battery state was detected;
A security system that outputs information regarding a battery state, such as information warning about a dead battery or information urging charging, before a predicted time.

Specific Example 75
The security control unit controls a security device, such as a microwave unit,
The security control unit:
After the input of the first information, for example, time T1 in FIG. 14, or after the output of the security device, for example, time T6 in FIG. 15,
A security system that disables or changes the timing of activation of a security device.

Illustrative Example 76
At least one first security device is a microwave motion detection sensor;
A security control unit in this security system stops the operation of a security device or changes the activation timing, thereby reducing the frequency of communication between the security device and the security remote control.

Illustrative Example 77
The security control unit controls the security device.
The security control unit:
Signal from the vehicle key,
Signal from security remote control,
Detecting the signal strength of at least one of
The security control unit is a security system that stops operation of a security device or changes the operation timing when the signal strength is lower than a predetermined range.
The predetermined range in Example 77 is a range in which the risk of unauthorized access can be considered low.

Illustrative Example 78
The security control unit transmits the detection information of the security device to the security remote control,
The security remote control
Detecting a received signal strength of a signal of the detection information of the security device;
Transmitting the received signal strength of the detection information signal of the security device to the security control unit;
The security device stores a history of received signal strengths of signals detected by the security device, such as a history of received signal strengths by authorized users,
The security control unit is a security system that determines a predetermined range of signal strength from a stored signal strength history.

Specific Example 79
The security control unit controls the security device.
The security control unit transmits detection information of the security device, such as approach warning information, to the security remote control,
The security remote controller identifies the reception signal strength of the detection information signal, such as the RSSI of the approach alarm, and transmits the information on the reception signal strength of the detection information signal to the security control unit.
The security control unit:
Received signal strength of the detection information signal;
A security system that stops the operation of a security sensor or changes the operation timing when the detected value is within a predetermined range.

Specific Example 80
The security control unit controls the security device.
The security control unit transmits the detection information of the security device to the security remote control,
The security remote control transmits return information to the security control unit in response to the detection information,
The security control unit:
Received signal strength of the return information signal, for example, the strength of a signal sent from a security remote control, having an RSSI of an approach alarm, etc.
A security system that stops the operation of a security sensor or changes the operation timing when the detected value is within a predetermined range.

Furthermore, the above-mentioned configurations, functions, processing units, processing means, etc. may be realized in hardware, in part or in whole, for example by designing them as integrated circuits. Furthermore, the above-mentioned configurations, functions, etc. may be realized in software, by a processor interpreting and executing a program that realizes each function. Information on the programs, tables, files, etc. that realize each function can be stored in a memory, a recording device such as a hard disk or SSD (Solid State Drive), or a recording medium such as an IC card, SD card, or DVD.

In addition, the control lines and information lines shown are those that are considered necessary for the explanation, and not all control lines and information lines in the product are necessarily shown. In reality, it can be considered that almost all components are connected to each other.
The above-described embodiments disclose at least the configurations described in the claims.

The scope of the present invention is not limited to the configurations explicitly described in the specification, but includes combinations of various aspects of the present invention disclosed herein. The configurations of the present invention that are sought to be patented are specified in the attached claims, but it is our intention to include configurations disclosed in this specification in the claims in the future, even if they are not currently specified in the claims.

The present invention is not limited to the configurations described in the above-mentioned embodiments. The components of each of the above-mentioned embodiments and variations may be arbitrarily selected and combined. Any components of each of the embodiments and variations may be arbitrarily combined with any components described in the means for solving the invention or any components that embody any components described in the means for solving the invention. We intend to acquire rights to these as well through amendments to this application or divisional applications, etc. Even if there is a description such as "in the case of" or "when", this is not intended to describe a configuration that is limited to that case or time. We also disclose configurations that are not in these cases or times, and we intend to acquire rights to them. Furthermore, the parts that are described in order are not limited to this order. We also disclose configurations in which some parts have been deleted or the order has been changed, and we intend to acquire rights to them.

In addition, by converting to a design registration application, we intend to obtain rights to the overall design or partial design. The drawings show the entire device in solid lines, but they include not only the overall design but also partial designs claimed for a portion of the device. For example, some components of the device can be included as partial designs, and the drawings include some parts of the device as partial designs regardless of the components. A portion of the device can be a part of the device, or a part of that part. We intend to obtain rights to not only the overall design, but also partial designs in which any part of the solid line part of the drawing is shown as a broken line part. In addition, all of the modules, components, parts, etc. inside the device's casing shown in the drawings are subject to trade independently, and we intend to obtain rights to them by converting to a design registration application in the same way.

The above-mentioned embodiment discloses at least the following configuration.
(1) A security system for a vehicle, the security system having a function of switching the vehicle to at least one of an unlocked state and a standby state in response to an input of first information,
a security control unit of the security device requests at least one input operation by a user for executing the transition operation, and when a predetermined condition is satisfied, skips the request for the input operation or reduces the number of requests;
Security system.
In this way, even if a security function requiring an input operation is left ON, if a certain condition is satisfied, the user does not need to perform an input operation or the number of times the user performs the input operation is reduced, improving user convenience. Also, it becomes easier to prevent the user from turning OFF a security function that requires an input operation and contributes to maintaining the vehicle safer, because of the trouble or hassle of performing the input operation every time.

(2) The security control unit receives a setting input by the user regarding a threshold or a threshold range of a received signal strength of a signal used to determine the predetermined condition, the received signal strength varying depending on a usage status of the vehicle by the user.
Security system.
In this way, the judgment conditions can be flexibly determined according to the different usage conditions of each user. For example, the influence of the way the vehicle is used, such as the route taken to approach the vehicle, and the way the remote control is carried, such as which pocket the remote control is placed in, or where in the bag the remote control is placed, can be reflected in the setting of the received signal strength when judging the predetermined conditions, so that the predetermined conditions can be judged more accurately.

(3) The security control unit outputs, in addition to the request for the input operation, notification information regarding the request for the input operation.
Security system.
In this way, the user can obtain information as to whether an input operation is necessary or not, and can easily recognize whether the security system is functioning effectively.

(4) When the predetermined condition is not satisfied, the security control unit outputs information regarding the request for the input operation to at least one of a remote control and a user terminal.
Security system.
In this way, a user who is accustomed to skipping input operation requests can easily recognize that an input operation different from usual is required even when an input operation is rarely required. On the other hand, when an input operation is not required, no information is output from the remote control or user terminal, which is energy-saving and environmentally friendly. In addition, when the user is holding a sleeping baby, it is easy to prevent the baby from waking up due to the output of such information. Therefore, it is easy to prevent the user from turning off the security function for reasons other than safety.

(5) The security control unit switches the input operation by the user requesting execution of the transition operation to another input operation based on a determination result of the predetermined condition.
Security system.
In this way, the input operation by the user can be appropriately switched to another input operation based on the result of the judgment of a predetermined condition, so that the user can feel less bothered or inconvenienced. For example, it becomes easier to switch to a request for an input operation with a different security strength depending on the judged certainty of the user, so that the comfort of using the security system can be improved.

(6) The security control unit receives an input of the different input operation through an input device different from an input device that receives an input operation by a user requesting execution of the transition operation.
Security system.
In this way, the user can switch the device used to execute the input operation, so that it becomes easier to request input operations with different security strengths. For example, in a configuration in which the security control unit accepts input of input operations from an input device installed hidden in the vehicle or a remote control or user terminal that the user actually owns, instead of an input device installed in an easily accessible or easily found position in the vehicle, it becomes difficult for a criminal who performs a relay attack or the like to find the input device, or it becomes impossible for the criminal to access the input device at all, so that the crime prevention effect can be improved.

(7) The security control unit
based on the received signal strength associated with a signal received at at least one of a remote control receiver and a vehicle receiver;
determining the predetermined condition related to at least one of a relationship between the user and the vehicle and a legitimacy of the user;
Security system.
In this way, signals received by the security system remote control or vehicle, for example signals that are sent and received in any case when executing the security functions of the security system, can also be used to determine specified conditions, and since the received signal strength can be obtained as a numerical value, the specified conditions can be created easily and flexibly by linking the received signal strength to the relationship between the user and the vehicle or the legitimacy of the user.

(8) the relationship is a positional relationship between the user and the vehicle;
the security control unit determines the predetermined condition based on the received signal strength that changes depending on the positional relationship.
Security system.
In this way, the received signal strength can be used as a guide for the distance between the user and the vehicle, so that the predetermined condition can be determined more accurately. In this case, for example, the distance between the user and the vehicle and the received signal strength at the time of inputting the first information, which may vary for each user depending on the user's physique and the position and height of the remote control stored in the user's clothing, can also be taken into consideration.

(9) The security control unit
If the vehicle is within a set range, or if the time is within a set period,
determining that the predetermined condition is satisfied;
Security system.
In this way, since it is possible to set locations or time periods when input operations are not required, troublesome operations can be reliably omitted in the user's usual, fixed use. For example, when the vehicle is parked in a safe parking lot in the workplace, or when the vehicle is used at a fixed time each day for commuting to work or school or for seeing off people, input operations can be skipped.

(10) The security control unit has a function of determining the possibility of a relay attack against the vehicle,
The security control unit determines that the predetermined condition is not satisfied when the probability of the occurrence of the relay attack is higher than a probability setting value.
Security system.
In this way, if the possibility of a relay attack occurring is high, the request for an input operation is not skipped or the number of requests for an input operation is not reduced, so that the vehicle's security against relay attacks can be maintained at a high level.

(11) The security control unit
Analyzing a person photographed by an imaging device mounted on the vehicle;
If the person is different from a registered user, it is determined that the occurrence probability of the relay attack is higher than the probability setting value.
Security system.
In this way, the possibility of a relay attack occurring can be determined with greater accuracy, and inappropriate skipping of input operation requests or reduction in the number of requests can be reduced, thereby maintaining the vehicle's state safer against relay attacks.

(12) The security control unit detects a state of the vehicle key and a state of the remote control in response to the input of the first information,
The security control unit determines the predetermined condition based on a state of the vehicle key and a state of the remote control.
Security system.
In this way, the predetermined condition is judged based on the state of both the vehicle key and the remote control, so that the judgment can be made with higher accuracy. For example, it is very difficult for a perpetrator of a relay attack or the like to imitate and relay the detection result when the user himself has the actual vehicle key and remote control, so that the security system requests at least one input operation from a perpetrator of a relay attack or the like who transmits only the first information to the vehicle, so that measures can be taken against vehicle theft.

(13) The security control unit detects a state of the vehicle and a state of a surrounding environment of the vehicle in response to an input of the first information,
The security control unit includes:
The detected states of the vehicle key and the remote control, the detected state of the vehicle, and the detected state of the surrounding environment of the vehicle.
comparing the states of the vehicle key and the remote control, the state of the vehicle, and the state of the surrounding environment of the vehicle when the security control unit previously determined that the predetermined condition was satisfied;
The security control unit determines that the predetermined condition is satisfied when the comparison result is within a set range of similarity.
Security system.
In this way, the security system uses the state of the vehicle and the state of the surrounding environment of the vehicle in addition to the states of both the vehicle key and the remote control, and skips input operations or reduces the number of times when the state is close to a state previously determined to be safe. Therefore, the security system is less likely to inappropriately skip input operations or reduce the number of times when a criminal commits a relay attack in which only the first information is transmitted to the vehicle, and more reliably executes a request for at least one input operation, making it possible to take measures against vehicle theft.

(14) The security control unit transmits second information to the remote control in response to an input of the first information to the vehicle,
The remote control determines the received signal strength of the second information signal;
the remote controller transmits third information to the security control unit when the received signal strength of the second information signal is higher than a strength setting value or is within a strength setting value range;
the security control unit determines that the predetermined condition is satisfied when the third information is received.
Security system.
In this way, the remote control carried by the user determines the relationship between the vehicle and the remote control, so that the state of the user can be more accurately reflected when determining a predetermined condition. In addition, the security system requests at least one input operation against a perpetrator of a relay attack that transmits only the first information to the vehicle, for example, so that measures can be taken against vehicle theft.

(15) The security control unit transmits second information to the remote control in response to an input of the first information to the vehicle,
the remote controller transmits fourth information related to reception of the second information signal to the security control unit;
The security control unit includes:
If the received signal strength of the signal of the fourth information is equal to or greater than a strength setting value or is within a set value range, it is determined that the predetermined condition is satisfied;
If the fourth information is not received or if the received signal strength of the signal of the fourth information is lower than the strength setting value, it is determined that the predetermined condition is not satisfied.
Security system.
In this way, the security control unit present in the vehicle judges the relationship between the vehicle and the remote control, so that when judging a predetermined condition, the state of the vehicle can be more accurately reflected, or other information that can be detected by a sensor in the vehicle can be additionally used. In addition, the security system executes a request for at least one input operation against a perpetrator of a relay attack that transmits only the first information to the vehicle, for example, so that measures can be taken against vehicle theft.

(16) The security control unit transmits second information to the remote control in response to an input of the first information to the vehicle,
The remote control includes:
the fourth information related to reception of the signal of the second information; and
transmitting fifth information related to a received signal strength of the signal of the second information to the security control unit;
The security control unit includes:
Based on a comparison result of the received signal strength of the fourth information signal and the received signal strength of the fifth information signal,
determining the predetermined condition;
Security system.
In this way, since both the remote control carried by the user and the security control unit in the vehicle perform processing related to the received signal strength, the state of the user and the state of the vehicle can be more easily reflected when determining a predetermined condition, and the security function can be executed with higher accuracy. In addition, since the security system executes a request for at least one input operation against a perpetrator of a relay attack that transmits only the first information to the vehicle, for example, it is possible to take measures against vehicle theft.

(17) A monitoring device receives sixth information output from the vehicle in response to the input of the first information;
The monitoring device outputs notification information in response to receiving the sixth information.
Security system.
In this way, the user can become aware of the input of the sixth information, which the user himself cannot recognize, through the notification information. In the case of a relay attack, the user may unknowingly receive the sixth information that he or she would not normally receive, but the notification information from the monitoring device, such as a buzzer sound, can help the user become aware of such a risk and become vigilant.

(18) When the monitoring device receives a signal of the sixth information for a first set period while the vehicle is traveling, the monitoring device stops outputting the notification information.
Security system.
In this way, the continuous output of the notification information can be stopped in response to the signal of the sixth information that can be received under the driving environment. When the user himself is driving the vehicle, relay attacks are very unlikely to be launched, and the need for vigilance based on the notification information is reduced, so stopping the output of the notification information hardly causes any security inconvenience to the user, and rather, the user can drive more safely because unnecessary notification information does not disturb his or her concentration on driving.

(19) When the monitoring device does not receive a signal of the sixth information for a second set period after stopping the output of the warning signal while the vehicle is traveling, the monitoring device resumes output of the notification information in response to reception of the signal of the sixth information.
Security system.
In this way, the monitoring device can resume the output of notification information that has been stopped once, according to the settings, so that the user does not need to perform any operation to resume the output of notification information himself, thereby improving convenience for the user 200.

(20) When the monitoring device receives the first information, the monitoring device outputs notification information.
Security system.
In this way, the monitoring device can output notification information not only for the sixth information output from the vehicle, but also for the first information output from the vehicle key, etc., so that the user can more reliably recognize the transmission and reception of signals related to his or her own vehicle. For example, in a situation where the user has the vehicle key in a pocket or bag and, due to the storage state, it is in contact with, for example, other objects, and the button for outputting the first information is frequently pressed, the battery of the vehicle key is unnecessarily consumed, but the notification information from the monitoring device makes it easier for the user to recognize such an abnormality.

(21) At least one of the remote control and the user terminal outputs information regarding the safe storage of the vehicle key.
Security system.
In this way, the user is more likely to be aware of the need to store the vehicle key safely, and the user's daily actions are more likely to change to be more secure. Not relying solely on devices and equipment to improve security not only improves security, but also conserves resources and energy, and is desirable from the perspective of the sustainability of the global environment.

(22) At least one of the remote control and the user terminal outputs information regarding safe storage of the vehicle key within a set time from the time the user gets off the vehicle.
Security system.
In this way, information regarding the safe storage of the vehicle key can be output at a time when the user is more likely to be conscious of the need to store the vehicle key safely or when they are more motivated to be conscious of the need, which can lead to improvements in user behavior.

(23) The security control unit
Relay attack,
Code grabber,
CAN Invaders,
frequency of displaying the security information in accordance with the number of security functions that are enabled among the security functions countering at least one of the above;
The manner of display,
Change at least one of
Security system.
This is advantageous because it can increase the user's crime prevention awareness against crimes that pose a high threat to users, such as relay attacks, code grabbers, and CAN invaders. For example, for users who are not very crime prevention conscious and have a small number of enabled security functions, the frequency of display can be increased or the display can be made more prominent, making it easier for users to become crime prevention conscious.

(24) The security control unit detects a first radio wave condition inside and around the vehicle,
The security control unit records information regarding the first radio wave condition in association with the first information.
Security system.
In this way, by recording the first radio wave conditions in and around the vehicle, it is possible to refer to and use various information contained in the first radio wave conditions. For example, if the first radio wave conditions are recorded when an attack such as a relay attack is being launched, it becomes easier to find out what electronic devices were present around the vehicle at that time.

(25) The security control unit detects the first radio wave condition in response to a transition operation of the vehicle to at least one of a locked state and a start-stop state,
The security control unit includes:
The first radio wave condition, and
a second radio wave condition detected after the first radio wave condition;
Compare the following:
The security control unit executes a blocking process of the transition operation based on a result of the comparison.
Security system.
In this way, it is possible to compare the radio wave conditions (first radio wave conditions) when a user gets off the vehicle and locks it with the radio wave conditions (second radio wave conditions) detected thereafter, for example, the radio wave conditions (second radio wave conditions) detected when a legitimate user gets back into the vehicle, or to compare the radio wave conditions (first radio wave conditions) when a user gets off the vehicle and locks it with the radio wave conditions (second radio wave conditions) detected thereafter, for example, the radio wave conditions (second radio wave conditions) detected when a perpetrator of a relay attack or the like tries to get into the vehicle after confirming that the legitimate user has left the vehicle. In the latter case, it is possible to execute a blocking process of the transition operation based on a clear difference between the first radio wave conditions and the second radio wave conditions, for example, a difference in which radio waves from a terminal owned by the user, such as the vehicle key 2, the remote control 3, the user terminal 4, etc., cannot be detected.

(26) The security control unit
Detecting a battery state of at least one of the vehicle key, the remote control, and the user terminal from the first radio wave condition;
skipping the block process based on the battery status;
Security system.
In this way, based on the battery state of at least one of the vehicle key, the remote control, and the user terminal detected from the radio wave state (first radio wave state) when getting off the vehicle and locking the vehicle, for example, if the remaining battery power is low, the blocking process may be skipped. This makes it possible to avoid blocking the transition operation due to the radio waves of the vehicle key, the remote control, and the user terminal not being confirmed from the second radio wave state due to the batteries of the vehicle key, the remote control, and the user terminal being dead, for example.

(27) The security control unit controls at least one security device,
The security control unit includes:
After the time of inputting the first information, or
After the output of the security device,
Deactivating or altering the timing of activation of said security device;
Security system.
This makes it easier to avoid a security function provided by the security device operating simultaneously or at the same time as a security function that requires at least one input operation, thereby making it easier to reduce the possibility of the two functions interfering with each other unexpectedly.

(28) The security control unit controls the security device,
The security control unit includes:
A signal from the vehicle key;
A signal from the remote control,
A signal from the security device;
detecting said received signal strength of at least one signal of
The security control unit stops the operation of the security device or changes the operation timing based on the received signal strength or based on a comparison result of the received signal strength.
Security system.
In this way, the operation of the security device can be stopped or the operation timing can be changed so as to not interfere with control corresponding to each received signal strength for a security function that requires at least one input operation in relation to the received signal strength of the signal from the vehicle key, the received signal strength of the signal from the remote control, and the received signal strength of the signal from the security device.

(29) At least one of the security devices is a device that outputs microwaves;
The security control unit stops the operation of the security device or changes the operation timing, thereby reducing the frequency of the microwave communication between the security device and the remote control.
Security system.
In this way, the frequency of microwave communication can be reduced so as to be less likely to interfere with the control of sending and receiving various signals for security functions that require at least one input operation.

(30) It is preferable to provide a program for realizing any of the above functions in a security system.
In this way, it is possible to provide a security function that is safer but less troublesome for the user of the vehicle to which the security system is applied, and for example, the user can use the security function in a manner that is closer to their usual behavior.

The inventions shown in (1) to (30) above can be combined in any way. For example, the invention shown in (1) may be combined with at least a part of the configuration of at least one of the inventions from (2) onwards. In particular, the invention shown in (1) may be combined with at least a part of the configuration of at least one of the inventions from (2) onwards. Any configuration may be extracted from the inventions shown in (1) to (30) and the extracted configurations may be combined. The applicant of this application intends to acquire rights to the inventions including these configurations. Furthermore, even if there is a description such as "in the case of" or "when", this is not intended to describe the configuration as being limited to that case or time. These are examples of better configurations, and the applicant intends to acquire rights to configurations other than these cases or times. Furthermore, the parts described in order are not limited to this order. Configurations in which some parts have been deleted or the order has been changed are also disclosed, and the applicant intends to acquire rights.

Reference Signs List 1: In-vehicle security device, 2: vehicle key, 3: security remote control, 4: user terminal, 5: monitoring device, 6: network, 7: backup siren, 8: electronic device, 9: sensor, 10: vehicle.

Claims (30)

a security system for a vehicle, the security system having a function of switching the vehicle to at least one of an unlocked state and a standby state in response to an input of first information,
A security control unit of a security device requests at least one input operation by a user to execute the transition operation, and skips the request for the input operation or reduces the number of requests when a predetermined condition is satisfied. the security control unit receives a setting input by the user regarding a threshold or a threshold range of a received signal strength of a signal used to determine the predetermined condition, the received signal strength varying depending on a usage status of the vehicle by the user;
2. The security system of claim 1. the security control unit outputs, in addition to the request for the input operation, notification information regarding the request for the input operation.
3. The security system of claim 2. When the predetermined condition is not satisfied, the security control unit outputs information regarding the request for the input operation to at least one of a remote control and a user terminal.
4. The security system of claim 3. the security control unit switches the input operation by the user requesting execution of the transition operation to another input operation based on a determination result of the predetermined condition.
5. The security system of claim 4. the security control unit accepts an input of the separate input operation with an input device different from an input device that accepts the input operation by the user requesting execution of the transition operation;
6. The security system of claim 5. The security control unit includes:
based on the received signal strength associated with a signal received at at least one of a remote control receiver and a vehicle receiver;
determining the predetermined condition related to at least one of a relationship between the user and the vehicle and a legitimacy of the user;
7. The security system of claim 6. the relationship is a positional relationship between the user and the vehicle,
the security control unit determines the predetermined condition based on the received signal strength that changes depending on the positional relationship.
8. The security system of claim 7. The security control unit includes:
If the vehicle is within a set range, or if the time is within a set period,
determining that the predetermined condition is satisfied;
9. The security system of claim 8. The security control unit has a function of determining the possibility of a relay attack against the vehicle,
The security control unit determines that the predetermined condition is not satisfied when the probability of the occurrence of the relay attack is higher than a probability setting value.
10. The security system of claim 9. The security control unit includes:
Analyzing a person photographed by an imaging device mounted on the vehicle;
If the person is different from a registered user, it is determined that the occurrence probability of the relay attack is higher than the probability setting value.
11. The security system of claim 10. The security control unit detects a state of the vehicle key and a state of the remote control in response to the input of the first information,
The security control unit determines the predetermined condition based on a state of the vehicle key and a state of the remote control.
12. The security system of claim 11. The security control unit detects a state of the vehicle and a state of a surrounding environment of the vehicle in response to the input of the first information,
The security control unit includes:
The detected states of the vehicle key and the remote control, the detected state of the vehicle, and the detected state of the surrounding environment of the vehicle.
comparing the states of the vehicle key and the remote control, the state of the vehicle, and the state of the surrounding environment of the vehicle when the security control unit previously determined that the predetermined condition was satisfied;
The security control unit determines that the predetermined condition is satisfied when the comparison result is within a set range of similarity.
13. The security system of claim 12. the security control unit transmits second information to the remote control in response to the input of the first information to the vehicle;
The remote control determines the received signal strength of the second information signal;
the remote controller transmits third information to the security control unit when the received signal strength of the second information signal is higher than a strength setting value or is within a strength setting value range;
the security control unit determines that the predetermined condition is satisfied when the third information is received.
14. The security system of claim 13. the security control unit transmits second information to the remote control in response to the input of the first information to the vehicle;
the remote controller transmits fourth information related to reception of the second information signal to the security control unit;
The security control unit includes:
If the received signal strength of the signal of the fourth information is equal to or greater than a strength setting value or is within a set value range, it is determined that the predetermined condition is satisfied;
If the fourth information is not received or if the received signal strength of the signal of the fourth information is lower than the strength setting value, it is determined that the predetermined condition is not satisfied.
15. The security system of claim 14. the security control unit transmits second information to the remote control in response to the input of the first information to the vehicle;
The remote control includes:
the fourth information related to reception of the signal of the second information; and
transmitting fifth information related to a received signal strength of the signal of the second information to the security control unit;
The security control unit includes:
Based on a comparison result of the received signal strength of the fourth information signal and the received signal strength of the fifth information signal,
determining the predetermined condition;
16. The security system of claim 15. a monitoring device receiving sixth information output from the vehicle in response to the input of the first information;
The monitoring device outputs notification information in response to receiving the sixth information.
17. The security system of claim 16. When the monitoring device receives a signal of the sixth information for a first set period while the vehicle is running, the monitoring device stops outputting the notification information.
20. The security system of claim 17. when the monitoring device does not receive the sixth information signal for a second set period after stopping the output of the warning signal while the vehicle is traveling, the monitoring device resumes the output of the notification information in response to the reception of the sixth information signal.
20. The security system of claim 18. When the monitoring device receives the first information, the monitoring device outputs notification information.
20. The security system of claim 19. At least one of the remote control and the user terminal outputs information regarding the secure storage of the vehicle key.
21. The security system of claim 20. At least one of the remote control and the user terminal outputs information regarding safe storage of the vehicle key within a set time from the time when the user gets off the vehicle.
22. The security system of claim 21. The security control unit includes:
Relay attack,
Code grabber,
CAN Invaders,
a frequency of displaying the security information in accordance with the number of security functions that are enabled among the security functions countering at least one of the above;
The manner of display,
Change at least one of
23. The security system of claim 22. The security control unit detects a first radio wave condition inside and around the vehicle,
The security control unit records information regarding the first radio wave condition in association with the first information.
24. The security system of claim 23. the security control unit detects the first radio wave condition in response to a transition operation of the vehicle to at least one of a locked state and a start-stop state,
The security control unit includes:
The first radio wave condition, and
a second radio wave condition detected after the first radio wave condition;
Compare the following:
The security control unit executes a blocking process of the transition operation based on a result of the comparison.
25. The security system of claim 24. The security control unit includes:
Detecting a battery state of at least one of the vehicle key, the remote control, and the user terminal from the first radio wave condition;
skipping the block process based on the battery status;
26. The security system of claim 25. The security control unit controls at least one security device;
The security control unit includes:
After the time of inputting the first information, or
After the output of the security device,
Deactivating or altering the timing of activation of said security device;
27. The security system of claim 26. The security control unit controls the security device,
The security control unit includes:
A signal from the vehicle key;
A signal from the remote control,
A signal from the security device;
detecting said received signal strength of at least one signal of
The security control unit stops the operation of the security device or changes the operation timing based on the received signal strength or based on a comparison result of the received signal strength.
28. The security system of claim 27. At least one of the security devices is a microwave output device;
The security control unit stops the operation of the security device or changes the operation timing, and reduces the frequency of the microwave communication between the security device and the remote control.
29. The security system of claim 28. 30. A program for implementing each function according to any one of claims 1 to 29 in a security system.

Images