JP3017413B2 - Vehicle data communication method and device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a vehicle data communication method and apparatus, and more particularly, to a vehicle anti-theft apparatus for disabling engine starting when an incorrect engine key is used.
The present invention relates to a vehicle data communication method and apparatus suitable for data communication with the external diagnostic device.

[0002]

2. Description of the Related Art While various proposals have been made to prevent theft of vehicles such as automobiles, when an attempt is made to start or run a vehicle using an incorrect key, the vehicle is mechanically or electrically driven. Prohibition of starting and running (immobilize)
There are things that I try to do. For this purpose, an identification code, that is, an ID code is built in the key, and when the key is inserted into the key cylinder to start the vehicle, the ID code built in the key is read, and a reference ID registered in advance in the vehicle is read. The engine is enabled by generating a permission signal only when the codes match with each other (for example, see "Automotive Technology", Vol. 48, No. 8, 1994, pp. 59-64). .

FIG. 6 shows an example of such a conventional transponder type immobilizer. Key 2
Has a built-in memory (not shown) in which a key ID code (for example, 64 bits) is stored in advance, and a transmitter 4 for transmitting the key ID code. The transmitter 4 of the key 2 and the key cylinder 5 are connected by, for example, an induction coil (antenna) 6.

When the key 2 is inserted into the key cylinder 5 and turned to the position where the ignition is turned on, the ignition switch 7 is closed. In response, an immobilizer control hybrid IC (hereinafter, immobilizer HI) in an engine control unit (hereinafter, referred to as ECU) 30 is provided.
The immobilizer CPU 13 built in the C 10 (expressed as C) operates, and power is supplied from the antenna unit 19 to the transmitter 4 via the induction coil (antenna) 6. The antenna unit 19 is electrically connected to the ECU 30 via a pair of connectors 40 and 50, together with a drive system and a control system terminal essential for engine control such as the fuel injection valve 17 and the fuel pump 18. When power is supplied, the transmitter 4 reads the ID code stored in the key 2 and sequentially transmits the ID code to the key cylinder 5 side.

[0005] The received key ID code is amplified by a receiving amplifier built in the antenna unit 19, and is transmitted via the I / F circuit 12 in the immobilizer HIC 10 to the immobilizer CPU 1.
3 and an appropriate ID code register 1 therein.
3B is temporarily stored. EEPRO of Immobili HIC10
In M14, a unique reference ID code assigned to each vehicle is registered in advance, and the reference ID code and the read key ID code are compared and collated by the collation function unit 13S of the immobilizer CPU 13. Then, when it is determined that they match or have a predetermined relationship, the permission signal is sent from the collation function unit 13S to the engine C.
Sent to PU16. At the same time, the starter relay is energized and the starter motor (both not shown) starts rotating.

The ROM 15 of the engine CPU 16 stores an engine control program including at least an engine control algorithm, an input / output control algorithm, and an anti-theft control algorithm. Engine CPU1
6 operates in accordance with the engine control program, and determines and confirms the reception of the permission signal based on the anti-theft control algorithm. If the permission signal is a legitimate signal, the engine control algorithm such as the fuel injection valve 17, the fuel pump 18, and the ignition control unit 20 on the signal port selected by the input / output control algorithm is sent to the engine control algorithm. To execute a unique control based on the vehicle, and enable the vehicle to start and run.

On the other hand, the reference ID code registered in the EEPROM 14 and the key ID transmitted and read from the key 2
If the codes do not match or are not in a predetermined relationship, the matching function unit 13S does not send out the permission code. Accordingly, the start of the vehicle by the CPU 16 is prohibited, and the alarm (not shown) is activated by the immobilizer CPU 13 to provide an appropriate alarm and display. Similarly,
Even when the permission signal transmitted from the matching function unit 13S is not a legitimate signal, the start of the vehicle by the engine CPU 16 is prohibited. In this way, unauthorized starting and running of the engine by an unauthorized key are prevented, and vehicle theft is reliably prevented.

[0008]

In the above-mentioned conventional transponder type immobilizer, measures such as initializing the anti-theft function and temporarily stopping the function are taken at the time of repair or periodic inspection when the ECU 10 breaks down. An external diagnostic device is separately prepared for this.

As shown in FIG. 5, the external diagnostic device 100 is connected to the ECU 10 only at the time of repair or the like, and when an operator performs a key operation or the like corresponding to a desired treatment, the external diagnostic device 100 responds to the desired treatment. The command signal is sent to the ECU 10. In the ECU 10 that has received the command signal, for example, if the command is a command for disabling the immobilizer function, processing such as ID code determination by the immobilizer CPU 13 is prohibited and the immobilizer function is disabled.

On the other hand, if the external diagnostic device 100 is used illegally and, for example, the anti-theft function is temporarily disabled, theft using an unauthorized key can be performed.
The external diagnostic device 100 is strictly stored and managed in a service station or the like. However, even if the same command signal is transmitted every time for the same command (treatment) even if the command signal is used only in the service station, the command signal is illegally read by a malicious third party. The chances are high. Therefore,
For example, if a command signal for temporarily disabling the anti-theft function is illegally read by some method and then reproduced and sent to an immobilizer of another vehicle, the anti-theft function of the vehicle is disabled. There was a problem that the theft was carried out.

An object of the present invention is to solve the above-mentioned problems of the prior art, and a command signal transmitted from an external diagnostic device to a vehicle at the time of repair or the like is illegally intercepted and reproduced.
It is an object of the present invention to provide a vehicular data communication method and apparatus that prevent a command instruction to a vehicle from being illegally performed.

[0012]

In order to achieve the above object, the present invention provides a vehicle data communication method comprising a data transmitting unit and a data receiving unit for receiving the data and executing a predetermined command. The apparatus is characterized in that the following means are taken. (1) The data transmission unit includes: a data generation unit that generates random data; a transmission-side operation unit that performs a predetermined operation on the random data to calculate the first post-operation random data; Means for transmitting random data after calculation; a data receiving unit for receiving the random data and the first random data after calculation; and a second means for performing a predetermined calculation on the received random data to perform a second calculation. Receiving means for calculating random data after calculation, comparing means for comparing the first and second random data after calculation, and command executing means for executing a scheduled command according to the comparison result. . (2) a data transmitting unit, a command specifying unit that specifies a desired command, a data generating unit that generates random data, a unit that receives post-computation random data returned from the data receiving unit, and the specified An operation corresponding to the command is executed on the random data after the operation to execute the first operation.
And a means for transmitting the random data and the first re-calculated random data, respectively, wherein the data receiving unit includes the random data and the first re-calculated random data. Means for receiving post-computation random data, receiving-side computation means for performing post-computation random data on the received random data to calculate post-computation random data, means for transmitting post-computation random data, and post-computation random data Means for executing a calculation corresponding to each command, calculating random data after the second recalculation for each command, and comparing the first and second random data after the recalculation, Means for selecting a command corresponding to the second re-computed random data which is the same as the post-random data, and a command for executing the selected command. Equipped and execution means. (3) The data transmitting unit includes: a unit for generating an arbitrary trigger signal; a unit for receiving random data transmitted from the data receiving unit; and performing a predetermined calculation on the received random data and performing the first calculation. A transmission-side operation unit for calculating random data; and a unit for transmitting a trigger signal and random data after the first operation, respectively, wherein the data reception unit receives the trigger signal transmitted from the data transmission unit. And data generating means for generating random data,
A receiving operation means for executing a predetermined operation on the random data to calculate the second post-operation random data; a comparing means for comparing the first and second post-operation random data; Command execution means for executing a command. (4) The data transmitting unit generates random data and transmits the generated random data to the data receiving unit. The data receiving unit performs a predetermined operation on the received random data to calculate random data after the first operation, and The transmitting unit performs a predetermined operation on the random data and sends the result to the data receiving unit as random data after the second operation, and the data receiving unit compares the first and second random data after the operation. , The scheduled command is executed according to the comparison result. (5) The data transmitting unit generates random data and sends it to the data receiving unit, and the data receiving unit performs a predetermined calculation on the received random data and sends the calculated random data to the data transmitting unit. On the other hand, on the other hand, the post-computation random data is subjected to a computation according to each command prepared in advance, and a second post-recomputation random data is calculated for each command. An operation according to a desired command is performed on the post-random data, and this is transmitted to the data receiving section as first post-recalculated random data, and the data receiving section transmits the first and second post-calculated random data. And a command corresponding to the same second random data after re-calculation is executed as the same random data after first re-calculation. (6) The data transmitting unit transmits an arbitrary trigger signal to the data receiving unit, and upon receiving the trigger signal, the data transmitting unit transmits random data to the data transmitting unit, and performs a scheduled operation on the random data. Then, the first random data is calculated after the first calculation, and the data transmission unit performs a predetermined calculation on the received random data, and transmits this to the data reception unit as the second random data after the calculation. Compares the first and second post-computation random data,
Execute the scheduled command according to the comparison result. (7) Elapsed time from reception of random data to reception of random data after the first operation, or elapsed time from transmission of random data to reception of random data after the first operation, or operation When the elapsed time from the transmission of the post-random data to the reception of the random data after the first recalculation exceeds a predetermined time, a predetermined end process is executed.

[0013]

According to each of the above-described structures, the following functions and effects are achieved. (1) According to the above configurations (1) and (4), two different types of data (random data and random data after calculation) are transmitted from the data transmitting unit to the data receiving unit each time. Simply intercepting / reproducing one of the data transmitted from the data receiver is not regarded as legitimate data in the data receiving unit. Therefore, an illegal command instruction due to interception and reproduction of data is prevented. (2) According to the above configurations (2) and (5), an arithmetic expression is prepared for each command, and different data is transmitted from the data transmission unit to the data reception unit each time even for the same command. Is automatically performed by specifying a command. Therefore, even when a desired command can be instructed to the data receiving unit, it is possible to prevent an illegal command instruction by intercepting and reproducing data without impairing operability. (3) According to the above configurations (3) and (6), different random data is transmitted from the data receiving unit to the data transmitting unit every time, thereby preventing an unauthorized command instruction due to data interception / reproduction. . (4) According to the above configuration (7), when the transmission / reception interval of each data exceeds a predetermined time, a predetermined end process is executed, so that each data is transmitted from a device other than a proper data transmission device. Therefore, when the transmission / reception interval of the data is long, the execution of the failure diagnosis based on the illegal act can be prevented.

[0014]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described below in detail with reference to the drawings. FIG. 1 is a block diagram showing functions of main parts of the first embodiment of the present invention.

The external diagnostic machine 100 has a data generating means 101 for generating random data A in accordance with an instruction from an operator.
And a diagnostic device-side arithmetic means 10 for performing a predetermined arithmetic operation on the random data A and calculating the random data f (A) after the arithmetic operation
2 and a transmission / reception means 103 for transmitting / receiving each data to / from a vehicle (ECU) 200.

On the other hand, the vehicle (ECU) 200 responds to the received random data A by
02, a vehicle-side arithmetic means 201 for executing the same arithmetic operation as the arithmetic operation to calculate the random data f (A) after the arithmetic operation, a transmitting / receiving means 202 for transmitting / receiving each data to / from the external diagnostic device 100, 100 diagnostic device-side arithmetic means 10
2 is compared with the post-calculation random data f (A) calculated by the receiving-side calculation means 201 of the self, and they match or are in a predetermined relationship. And a data comparison unit 203 for generating a permission signal, and a command execution unit 204 for executing a predetermined command according to the comparison result.

FIG. 3 is a flowchart showing the operation of the configuration of FIG. In the external diagnostic apparatus 100, when the operator performs a key operation or the like to specify a command for failure diagnosis, random data A is generated by the data generating means 101 in step S101. The random data A
Is data indicating a different value every time even if the same command is instructed.

In step S102, the random data A is transmitted to the vehicle 200 by the transmission / reception means 103. In step S103, the diagnostic device-side arithmetic means 102
A predetermined calculation is performed on the random data A, and the calculated random data f (A) is calculated. In step S104, the post-computation random data f (A)
Is transmitted to the vehicle 200 by the transmission / reception means 103.

On the other hand, on the vehicle 200 side, step S
In step 201, when the reception of the random data A sent from the failure diagnostic device 100 is detected, step 202
Then, the same calculation as described above is performed on the random data A by the vehicle-side calculation means 102, and the calculated random data f (A) is calculated.

In step S203, the diagnostic device 100
It is determined whether or not the post-computation random data f (A) transmitted in step S104 is received, and if the reception is detected, in step S204, the process proceeds to step S20.
Calculated random data f on the vehicle side calculated in 2
(A) is compared with the post-computation random data f (A) on the diagnostic device side received in step S203. Here, if they match, a predetermined command is executed in step S205, and if they do not match, the process ends without executing the command.

According to this embodiment, even if different data (random data A and calculated random data f (A)) are transmitted from the failure diagnostic device 100 to the vehicle 200 each time, the vehicle 200 Since a specific command can be instructed to the side, illegal command instruction due to interception and reproduction of data is prevented, and the reliability and safety of the anti-theft device are improved.

FIG. 2 is a block diagram showing the function of the main part of the second embodiment of the present invention. The same reference numerals as those described above denote the same or equivalent parts. FIG. 7 is a perspective view of the external diagnostic device 100 to which the present embodiment is applied. The external diagnostic device 100 includes a display unit 100a, a numeric keypad 100b, and a command key 100.
c. In this embodiment, the external diagnostic device 100
The feature is that multiple types of commands can be specified on the side.

The external diagnostic device 100 receives random data A
A data generating unit 101 for generating a command, a command specifying unit 105 for selectively specifying a desired command by an operator,
Calculated random data f returned from vehicle 200 side
(A) (or f '(A)) is subjected to a predetermined operation in accordance with the specified command, and re-calculated random data F1 {f (A)}, F2 {f (A) } One of Fx {f (A)} ... (or F'1 {f '(A)｝, F'2 {f' (A)} ...
F′x {f ′ (A)}...) And a transmission / reception unit 103.

On the other hand, the vehicle 200 performs an operation on the received random data A in accordance with the even or odd, and calculates the random data f (A) or f '(A) after the operation, respectively.
And the calculated random data f (A) (or f ′ (A)) are respectively subjected to calculations corresponding to the prepared commands, and recalculated for each command. After random data F1 {f (A)}, F2 {f
(A)} ... Fx {f (A)} ... (or F'1 {f '(A) A, F'2 {f'
(A)}... F′x {f ′ (A)}...) And the diagnostic device-side computing device 1 of the external diagnostic device 100
04 random data Fx {f
(A)} (or F′x {f ′ (A)}) is converted into the re-calculated random data Fx {f (A)} (or F ′) calculated by the second vehicle-side calculation means 205. 'x {f' (A)})
If the same post-recalculation random data as the received post-recalculation random data is calculated, the command determination unit 206 that determines a command corresponding to the calculated post-recalculation random data and executes the determined command And a command execution unit 207 for executing the command.

FIG. 4 is a flowchart showing the operation of this embodiment. On the external diagnostic device 100 side, step S1
At 51, the operator operates the command key 100c to perform a desired diagnostic command (for example, a command for disabling the immobilizer function, a command for initializing arithmetic processing,
Command to initialize the reference ID code), at step S152, the data generation unit 1
01 generates arbitrary random data A. In step S153, the random data A is transmitted to the vehicle 200 by the transmission / reception means 103.

On the other hand, on the vehicle 200 side, Step S25
In step 1, when it is detected that the random data A transmitted from the failure diagnostic device 100 has been received, the process proceeds to step 252.
First, an even / odd determination of the random data A is performed.
Here, if the random data A is an even number, a calculation for the even number is performed on the random data A by the vehicle-side calculating means 201, and the calculated random data f (A) is calculated. If the number is an odd number, the calculation for the odd number is executed, and the calculated random data f '(A) is calculated. In step S253, the calculated random data f (A) (or f '(A)) is returned to the diagnostic device 100 by the transmitting / receiving means 202.

In step S254, the second vehicle-side arithmetic means 205 calculates the calculated random data f (A).
(Or f '(A)), an operation corresponding to all commands is executed, and random data F1 {f (A)}, F2 {f (A)},. {f (A)}…
(Or F'1 {f '(A)}, F'2 {f' (A)}… F'x {f '(A)}
…) Is calculated.

More specifically, if three commands are prepared, for example, a command for disabling the immobilizer function, a command for initializing the arithmetic processing, and a command for initializing the reference ID code, for example, random data If A is an even number and the post-computation random data f (A) has been calculated by the vehicle-side computing means 201, F1 will be used as the re-computation random data in response to the command.
{f (A)} is calculated, F2 {f (A)} is calculated as re-calculated random data in response to the command, and F3 is calculated as re-calculated random data in response to the command.
{f (A)} is calculated.

Similarly, the random data A is an odd number, and the calculated random data f '
If (A) is calculated, F′1 {f ′ (A)} is calculated as re-calculated random data in response to the command, and F′2 {is calculated as re-calculated random data in response to the command. f ′ (A)} is calculated, and F′3 {f ′ (A)} is calculated as random data after recalculation in response to the command.

In the diagnostic machine 100 again, step S15
In step 155, when the reception of the post-computation random data f (A) (or f '(A)) sent from the vehicle 200 side is detected in step S155, in step 155, step S1 is executed.
An operation according to the command specified in 51 is performed on the post-computation random data f (A) (or f '(A)), and the post-recomputation random data Fx {f (A)} (or F 'x {f' (A)}) is calculated.

More specifically, in step S1
If the command specified at 51 is a command for disabling the immobilization function, and if the post-computation random data received at step S154 is f (A), re-computation random data F1 {f (A)} is calculated. Is done. Also,
The specified command is a command for disabling the immobilizer function, and the received random data after the calculation is f ′
In the case of (A), the random data after recalculation F'1 {f '(A)｝
Is calculated.

Similarly, if the specified command is a command for initializing the arithmetic processing, the re-calculated random data F2 {f (A)} (or F'2 {f '(A)｝) If the calculated and designated command is a command for initializing the reference ID code, the random data F3
{f (A)} (or F′3 {f ′ (A)}) is calculated. In step S156, the only post-recalculation random data Fx {f (A)} (or F'x {f '(A)}) calculated in step S155 is transmitted to the vehicle 200 by the transmission / reception unit 103. Is done.

On the other hand, on the vehicle 200 side, step S25
In 5, the recalculated random data Fx {f (A)} (or F'x {f '(A)}) transmitted from the diagnostic device 100 side.
Is determined. When the reception is detected, in step 256, the command determining means 206 calculates the re-calculated random data that matches the received re-calculated random data in step S254, and the second vehicle-side calculating means 205 calculates the same. Is determined. Then, when it is determined that the calculation has been performed, a command corresponding to the random data after the recalculation is selected,
This is executed in step S257.

That is, for example, the random data F1 {f (A)} after the recalculation is transmitted from the diagnostic device 100 side to the vehicle 200 side, and the second vehicle side calculation means 205 of the vehicle 200 side
In this case, if the random data F1 {f (A)} after the recalculation is calculated, it is determined that the instruction command is a "command for disabling the immobilizer function", and step S257 is performed.
Then, the command is executed to disable the immobilizer function.

According to this embodiment, a desired command can be designated by sending different data (random data A and random data Fx {f (A)} after recalculation) every time. Unauthorized command instructions due to interception and playback of the device are prevented,
Safety is improved.

FIG. 8 is a block diagram showing the function of the main part of the third embodiment of the present invention. The same reference numerals as those described above denote the same or equivalent parts. The present embodiment is characterized in that, when an arbitrary trigger signal T is transmitted from the external diagnostic device 100 side, the vehicle 200 transmits random data A in response to this.

The external diagnostic device 100 executes a predetermined operation on the trigger signal generating means 106 for generating the trigger signal T and the random data A sent from the vehicle 200 and executes the calculated random data f (A ) Is calculated by the diagnostic device-side arithmetic means 102 for calculating the value of) and the transmitting / receiving means 103.

On the other hand, the vehicle 200 generates the random data A when the trigger signal T is received.
08 and the random data A, the vehicle-side arithmetic means 201 for executing the same arithmetic operation as the arithmetic operation by the diagnostic machine-side arithmetic means 102 and calculating the random data f (A) after the arithmetic operation
And the post-computation random data f (A) sent from the external diagnostic device 100 with the post-computation random data f (A) computed by the receiving-side computing means 201, and if both match, or if It is constituted by a data comparison unit 203 that generates a permission signal when there is a relationship, and a command execution unit 204 that executes a predetermined command according to the comparison result.

FIG. 9 is a flowchart showing the operation of the configuration of FIG. In the external diagnostic device 100, when the operator performs a key operation or the like and instructs a command for failure diagnosis, the trigger signal generating means 106 generates a trigger signal T in step S171. The trigger signal T is a signal for urging the vehicle 200 to start a failure diagnosis, and an arbitrary signal can be used. Step S1
At 72, the trigger signal T is transmitted to the vehicle 200 by the transmission / reception means 103. At step S173, it is determined whether or not the random data A transmitted from the vehicle 200 has been received.

On the other hand, on the vehicle 200 side, step S27
In 1, when the reception of the trigger signal T sent from the failure diagnostic device 100 is detected, in step 272, the random data A is generated by the data generator 101. In step S273, the random data A is transmitted to the external diagnostic device 100 by the transmitting / receiving means 202. In step S274, a predetermined calculation is performed on the random data A, and the calculated random data f
(A) is calculated. In step S275, the post-computation random data f (A) transmitted from the failure diagnostic device 100
Is determined.

In the external diagnostic machine 100, step S173
In step S174, when the reception of the random data A is detected, the same calculation as described above is performed on the random data A by the vehicle-side calculation means 102, and the calculated random data f (A) is calculated. Step S17
At 5, the random data A is transmitted by the transmission / reception means 103 to the vehicle 200 side.

When the vehicle 200 detects the reception of the calculated random data f (A) in step S275,
In step S276, the calculated random data f on the vehicle 200 side calculated in step S274 is calculated.
(A) is compared with the post-computation random data f (A) on the diagnostic device 100 received in step S275. Here, if they match or are in a planned relationship, a predetermined command is executed in step S277, and if they do not match, the process ends without executing the command.

According to this embodiment, since different random data A is transmitted from the vehicle 200 to the failure diagnostic device 100 each time, an illegal command instruction due to interception and reproduction of data is prevented, and the theft prevention is prevented. The reliability and safety of the device are improved.

FIG. 10 is a block diagram showing the function of the main part of the fourth embodiment of the present invention. The same reference numerals as those described above denote the same or equivalent parts. In this embodiment, the timer 210a measures the elapsed time after receiving the random data.
Is added to the vehicle 200 side of the first embodiment (FIG. 1),
When the elapsed time from the reception of the random data A to the reception of the calculated random data f (A) exceeds a predetermined time, a predetermined end process is executed.

FIG. 12 is a flowchart showing the operation of this embodiment. In step S201, when the reception of the random data A is detected by the transmission / reception means 202, the timer 210a starts in step S201a. Thereafter, until the reception of the post-computation random data f (A) is detected in step S203, step S203 is performed.
The timer 210a is monitored at 203a, and before the random data f (A) after the calculation is received, the timer 21a is monitored.
When 0a times out, that is, when a predetermined time elapses, the process ends.

According to the present embodiment, when the elapsed time from the reception of the random data A to the reception of the post-computation random data f (A) exceeds a predetermined time, a predetermined end process is executed. Therefore, in the case where the data reception interval is long because each data is transmitted from a device other than the proper diagnostic device 100, it is possible to prevent the failure diagnosis based on the illegal act from being performed. Become.

FIG. 11 is a block diagram showing the function of the main part of the fifth embodiment of the present invention. The same reference numerals as those described above denote the same or equivalent parts. In the present embodiment, the timer 210b for measuring the elapsed time after the transmission of the calculated random data f (A) is provided by the vehicle 200 of the second embodiment (FIG. 2).
If the elapsed time from the transmission of the post-computation random data f (A) to the reception of the post-recomputation random data FX {f (A)} exceeds a predetermined time, predetermined termination processing is performed. I want to run.

FIG. 14 is a flowchart showing the operation of this embodiment. In step S253, when the transmission and reception of the calculated random data f (A) is detected by the transmission / reception means 202, the timer 210 is determined in step S253b.
b starts. Thereafter, in step S255b, the timer 210b until the reception of the recalculated random data FX {f (A)} is detected in step S255.
Is monitored, and the timer 210b times out before the random data FX {f (A)} is received after the recalculation, that is, the process ends when a predetermined time has elapsed.

According to the present embodiment, after the post-computation random data f (A) is transmitted, the post-computation random data
When the elapsed time until the reception of {f (A)} exceeds a predetermined time, a predetermined end process is executed. Therefore, if the reception timing of the random data FX {f (A)} after the recalculation is delayed because the random data FX {f (A)} is transmitted from a device other than the legitimate diagnostic device 100, the failure based on the wrongdoing Diagnosis execution can be prevented.

FIG. 14 is a block diagram showing the function of the main part of the sixth embodiment of the present invention. The same reference numerals as those described above denote the same or equivalent parts. In the present embodiment, a timer 210c that counts the elapsed time after sending random data
Is provided on the vehicle 200 side of the third embodiment (FIG. 8), and when the elapsed time from the transmission of the random data A to the reception of the random data f (A) after the calculation exceeds a predetermined time, the predetermined End processing is executed.

FIG. 15 is a flowchart showing the operation of this embodiment. In step S273, when transmission / reception of the random data A is detected by the transmission / reception means 202, the timer 210c starts in step S273c. Thereafter, until the reception of the post-computation random data f (A) is detected in step S275, the process proceeds to step S275.
At 273c, the timer 210c is monitored, and before the random data f (A) after the calculation is received, the timer 210c is monitored.
When 0c times out, that is, when a predetermined time elapses, the process ends.

According to the present embodiment, when the elapsed time from the transmission of the random data A to the reception of the calculated random data f (A) exceeds the predetermined time, the predetermined end processing is executed. Therefore, the calculated random data f
If the reception timing of the data is delayed because (A) is transmitted from a device other than the authorized diagnostic device 100, it is possible to prevent the failure diagnosis based on the illegal act.

In the above-described embodiment, the present invention has been described by applying the present invention to data transfer between an external diagnostic device and a vehicle. However, the present invention is not limited to this. The present invention can be similarly applied to the transfer of data such as an immobilizer code between a portable transmitter such as the key 2 and a vehicle, in which the key 2 is stored.

[0054]

As described above, according to the present invention, the following effects are achieved. (1) Since a specific command can be designated by sending different data (random data and random data after calculation) each time, an illegal command designation due to interception and reproduction of data is prevented. (2) Since a desired command can be designated by transmitting different data (random data and random data after recalculation) every time, an illegal command designation due to interception and reproduction of data is prevented. (3) Since different random data is transmitted from the data receiving unit to the data transmitting unit every time, an illegal command instruction due to interception and reproduction of data is prevented. (4) A timer means is provided so that a predetermined end process is executed when the transmission / reception interval of each data exceeds a predetermined time, so that each data is transmitted from a device other than a proper data transmission device. In the case where the transmission / reception interval of the data is long, the execution of the failure diagnosis based on the illegal act can be prevented.

[Brief description of the drawings]

FIG. 1 is a functional block diagram of a main part of a first embodiment of the present invention.

FIG. 2 is a functional block diagram of a main part of a second embodiment of the present invention.

FIG. 3 is a flowchart showing the operation of FIG.

FIG. 4 is a flowchart showing the operation of FIG.

FIG. 5 is a block diagram showing a configuration of an ECU to which the present invention is applied.

FIG. 6 is a block diagram showing a configuration of an ECU having an immobilization function.

FIG. 7 is a perspective view of an external diagnostic device to which the present invention is applied.

FIG. 8 is a functional block diagram of a main part of a third embodiment of the present invention.

FIG. 9 is a flowchart showing the operation of FIG.

FIG. 10 is a functional block diagram of a main part of a fourth embodiment of the present invention.

FIG. 11 is a functional block diagram of a main part of a fifth embodiment of the present invention.

FIG. 12 is a flowchart showing the operation of FIG.

FIG. 13 is a flowchart showing the operation of FIG.

FIG. 14 is a functional block diagram of a main part of a sixth embodiment of the present invention.

FIG. 15 is a flowchart showing the operation of FIG.

[Explanation of symbols]

2 key, 4 transmitter, 5 key cylinder, 6 induction coil (antenna), 7 ignition switch, 10
... Imobi HIC, 13 ... Imobi CPU, 14 ... EEPR
OM, 16 engine CPU, 100 external diagnostic device, 1
00a: display unit, 100b: numeric keypad, 100c: command key, 101: data generation means, 102: diagnostic device side calculation means, 200: vehicle (ECU), 202: transmission / reception means, 203: data comparison means, 204: command execution means

(56) References JP-A-6-19948 (JP, A) (58) Fields investigated (Int. Cl. ⁷ , DB name) H04Q 9/00-9/16 G06F 15/30

Claims (6)

(57) [Claims] 1. A vehicular data communication device comprising: a transmitting device (100); and a receiving device (200) for receiving data transmitted from the transmitting device and executing a scheduled command. The apparatus comprises: a transmitting / receiving unit (103) for transmitting / receiving data to / from the receiving side device; and a command specifying unit (105) for specifying a desired command.
A data generating means (101) for generating random data and transmitting the same from the transmitting / receiving means; and performing an operation in accordance with the specified command on the received random data after the arithmetic operation, A transmitting-side calculating means (104) for obtaining random data and transmitting the same from the transmitting / receiving means, wherein the receiving-side apparatus transmits / receives data to / from the transmitting-side apparatus; A first receiving-side calculating means (201) for performing a predetermined calculation on the received random data to obtain the calculated random data and transmitting the calculated random data from the transmission / reception means; The second receiving-side arithmetic means (20
5) comparing each calculation result obtained for each command with the received random data after recalculation, and selecting a command according to the calculation result having a predetermined relationship with the random data after recalculation. Means (206), and a command execution means (207) for executing the selected command. 2. A timer means (210b) for measuring an elapsed time after transmission of random data after calculation.
When the elapsed time from the transmission of the random data after the calculation to the reception of the random data after the recalculation exceeds a predetermined time, the command execution means (207) further performs a termination process of the data communication. The data communication device for a vehicle according to claim 1 , wherein the communication is executed. 3. The transmitting device is an external diagnostic device,
The vehicle data communication apparatus according to claim 1 or 2, characterized in that the receiving device is a vehicle control device mounted on the vehicle. Wherein said transmitting apparatus is a portable transmitter that transmits the ID code, the vehicle according to any one of claims 1 to 3, characterized in that the receiving device is a vehicle theft prevention device Data communication device. 5. A vehicular data communication method in a vehicular data communication device comprising a transmitting device and a receiving device for receiving data transmitted from the transmitting device and executing a scheduled command, The apparatus transmits random data, receives the calculated random data, executes a calculation corresponding to a desired command on the calculated random data, transmits the calculation result as random data after recalculation, and The apparatus receives the random data, executes a predetermined operation on the random data, transmits the operation result as random data after the operation, and responds to the command after the operation as the random data after the operation. Performing each operation, receiving the random data after the re-operation, and obtaining each operation result obtained for each command and the A data communication method for a vehicle, comprising: comparing the random data after the recalculation with the random data after the recalculation; 6. The receiving device measures the elapsed time after the transmission of the random data after the calculation, and terminates the data communication when the elapsed time until the reception of the random data after the recalculation exceeds a predetermined time. The data communication method for a vehicle according to claim 5 , wherein the processing is performed.