JP3090033B2 - Equipment start control device - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a device start control device, and more particularly to a device for stopping the start of a device when an incorrect key is used or an operation for starting the device is performed due to an incorrect circuit change or the like. About.

[0002]

2. Description of the Related Art In a car or the like, a door or the like has a lock device which can be released by a correct key, and the engine can be started only by a proper ignition key. In this way, the vehicle is prevented from being stolen. To ensure the prevention of theft, it has been proposed to equip a further anti-theft mechanism, which is being put into practical use.

[0003] For example, an automobile technology casebook / issue number 95
603 (Japan Automobile Manufacturers Association Intellectual Property Section 1995.1
2.1) discloses a vehicle anti-theft device that interlocks with an ignition key and prohibits the start of the engine when a correct ignition key is not used.

In this vehicle anti-theft device, a transponder for transmitting a personal identification code is built in an ignition key. This transponder receives electric power from radio waves from an antenna provided in the key cylinder and transmits the stored personal identification code. An immobilizer (Imobilizer) ECU is connected to the antenna of the key cylinder, and it is determined whether or not the transmitted password is correct. Further, the immobilizer ECU is connected to an engine ECU that controls engine ignition (ignition) and fuel supply (fuel injection), and informs the engine ECU whether a correct password has been obtained. If the correct password cannot be obtained in the immobilizer ECU, the engine ECU prohibits the supply of fuel to the engine and the ignition in the engine, and controls the stop of the engine. As a result, it is possible to prevent the engine from starting and the vehicle from running when the user attempts to start without using the correct key. The engine ECU is
The engine is started as usual in response to the ignition being turned on by operating the ignition key, and receives the signal from the immobilizer ECU to stop the engine.

[0005] Here, in the initial stage of starting the engine, the starter motor is rotating, and the power supply voltage fluctuates greatly. Therefore, communication between the immobilizer ECU and the engine ECU is performed after the engine speed reaches 500 rpm or more.

That is, when the engine speed is 500 rpm
At this point, the engine ECU creates a predetermined rolling code by generating random numbers, and generates the immobilizer E.
Send to CU. If the correct key has been recognized, the immobilizer ECU generates a rolling code by generating a similar random number, and returns the rolling code to the engine ECU.
As a result, the engine ECU confirms that the correct key has been used, terminates the key confirmation process, and continues normal engine operation.

On the other hand, if the correct rolling code is not returned within a predetermined time, the engine ECU stops ignition and fuel injection. Therefore, if the operation is not performed with the correct key, the engine is stopped.

[0008]

However, in this conventional example, the engine does not stop for several seconds (until it is confirmed that there is no return of the rolling code) after the engine speed reaches 500 rpm. The vehicle travels to some extent by repeating this.

Further, a backup memory is provided in the engine ECU to count and store the number of times of engine stop control at the time of starting. If an abnormal start operation is performed several times continuously, the engine is stopped. It is also conceivable to perform a process such as not starting the system.

However, if the power is turned off by means of turning off the ignition switch before the engine is stopped by this control, the count number does not increase as described above, and the vehicle can eventually run to some extent. There was a problem of becoming.

SUMMARY OF THE INVENTION The present invention has been made to solve the above problems, and has a device start control capable of performing a sufficient device start / stop process even when power is cut off during the process. It is intended to provide a device.

[0012]

SUMMARY OF THE INVENTION The present invention relates to a code collating means for collating a code of a key inserted into a key cylinder with a reference code stored in a storage means, and a code collating means connected to the code collating means. When the determination result of the code match from the means is obtained within a predetermined time, the device is permitted to start,
Engine start control means for prohibiting the start of the device when it is not obtained, and controlling the predetermined time to be shortened when the power supply is cut off before the permission or prohibition of the start of the device is determined. It is characterized by the following.

As described above, according to the present invention, when the power supply is cut off before the determination of permission or prohibition of starting the device is performed, the time required to determine a code match is reduced. Therefore,
When the power is turned off during the start of the device, the start time of the device can be reduced. Therefore, by turning off the power at a predetermined timing and repeating a certain operation of the device, it is possible to prevent the device from operating for a certain time.

Further, another invention is characterized in that when the energization is periodically turned on / off, the starting of the device is prohibited.

In particular, when the energization is periodically turned on and off, there is a high possibility that the power supply is illegally controlled by some tool. Therefore, in this case, by prohibiting the start of the device, it is possible to effectively prevent the start of the device due to an illegal operation.

In still another aspect of the present invention, the device is an engine, and the start control means sets a predetermined time period after the engine speed reaches a predetermined value or more when a key is operated for starting the engine. The method is characterized by waiting for a code matching determination result from the code matching means.

Thus, when the engine speed is equal to or higher than a predetermined value,
For example, by making a code match determination after 500 rpm or more, a reliable determination can be made. That is,
When the engine speed is 500 rpm or less, the possibility that the starter motor is rotating is high, and the power supply voltage is often unstable. The determination in such a case is inaccurate, and by making a subsequent determination, a reliable determination can be made. In the middle of the process, when the power is cut off, the time of 500 rpm or more can be sequentially shortened in order to reduce the time for the determination, and the vehicle travels to some extent by repeatedly turning on and off the ignition. Can be effectively prevented.

[0018]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Preferred embodiments of the present invention (hereinafter referred to as embodiments) will be described below with reference to the drawings.

[Overall System Configuration] FIG. 1 is a diagram showing an overall system of a vehicle anti-theft device using an apparatus start control device according to the present embodiment. A transponder 12 is incorporated in an ignition key 10 that is also used to open and close a door lock of a vehicle. This transponder 12 includes an antenna, a power supply circuit, a storage unit, a readout circuit, a transmission circuit, and the like. The transponder 12
When a predetermined radio wave is received from the outside, the radio wave is received by the antenna and supplied to the power supply circuit. The power supply circuit obtains power from a received radio wave and supplies power to an internal circuit. And
The personal identification number stored in the storage unit is read and transmitted from the antenna via the transmission circuit.

The key cylinder 14 is rotatable by an ignition key 10 having a predetermined shape (or a predetermined magnetization or the like). As in a normal case, an accessory switch, an ignition switch, a starter switch, etc. Are operated.
That is, the accessory switch controls on / off of the power of the accessory device, the ignition switch controls on / off of the power of devices required for traveling such as a spark plug, and the starter switch controls on / off of the power of the starter motor. The rotation of the ignition key 10 is enabled only when the tip of the inserted ignition key 10 matches the key cylinder 14.

An antenna 16 is provided around the front side of the key cylinder 14 (the side into which the key 10 is inserted). A predetermined radio wave is transmitted from the antenna 16 toward the transponder 12, and a radio wave from the transponder 12 is received by the antenna 16.

An immobilizer ECU 20 is connected to the antenna 16 via an amplifier 18 for amplifying a received signal. The key cylinder 14 is provided with a key insertion detection switch 22, and a signal indicating whether or not the key 10 is inserted is supplied to the immobilizer ECU 20. Therefore, the immobilizer ECU 20 operates the key 10
Can be detected at the time when is inserted. At this time, a predetermined radio wave can be transmitted from the antenna 16 and a reply from the transponder 12 can be received.

The immobilizer ECU 20 stores therein a reference code corresponding to the password of the key 10. In this example, the reference code is stored in the EEPROM 20a. Then, the processing unit 20 b
It is determined whether the personal identification code transmitted from the transponder 12 via the transponder 12 matches the reference code.

An engine ECU 24 is connected to the immobilizer ECU 20 via a communication line. In the engine ECU 24, the immobilizer ECU 20
Is a terminal IMI, and a terminal that transmits a signal to the immobilizer ECU 20 is a terminal IMO.

The engine ECU 24 controls an ignition (plug ignition) control unit 26 and a fuel injection (fuel supply) control unit 28. The ignition control unit 26 and the fuel injection control unit 28 are connected to the engine 30, and control ignition and fuel supply of the engine by these.

That is, the engine ECU 24 responds to the ignition on by the rotation of the key cylinder 14,
Power supply to the spark plug and fuel supply to the engine are made possible. In accordance with the rotation of the engine 30 in accordance with the rotation of the starter motor, predetermined ignition and fuel supply are performed, and after the engine 30 starts to rotate, ignition and fuel supply are continuously controlled.

The engine ECU 24 is connected to a rotation sensor 32 that is attached to the engine 30 and detects the number of revolutions of the engine 30, and detects the number of revolutions of the engine 30.

The immobilizer ECU 20 includes an encoder 2
0c, a random number generator 20d is provided. Encoder 2
0c generates a start code when the immobilizer ECU 20 is operating, and the random number generator 20d generates a predetermined rolling code. The immobilizer ECU
The transmission / reception circuit 20 for performing communication via the antenna 16 and a communication interface for performing communication with the engine ECU 24 are also provided in the device 20.

The engine ECU 24 has a processing unit 2
4a, a decoder 24b, a random number generator 24c, and a backup memory 24d. The decoder 24b
The start code transmitted from the immobilizer ECU 20 is decoded, and the random number generator 24c generates a predetermined rolling code. Further, the backup memory 24d stores a count value, a flag, and the like required for the next processing. The processing section 24a performs various processes, and the engine ECU 24 is also provided with a communication interface for communicating with the immobilizer ECU.

The backup memory 24d is an SRAM which is always supplied with power from the battery 34 and retains stored contents. The battery 34 also supplies power for operating various devices.

[Operation] Next, the operation of the present system will be described with reference to the timing charts of FIGS. 2 and 3 and the flowcharts of FIGS.

First, the driver operates the ignition key 1
0 is inserted into the key groove of the key cylinder 16, the key insertion detection switch 22 detects this, and the power is turned on.
Each part starts operation. That is, the immobilizer ECU
20 starts transmission of a start code to the engine ECU 24 and waits for reception of a signal from the antenna 16. When a signal from the antenna 16 is received, it is determined whether the password transmitted from the transponder 12 matches the reference code stored in the EEPROM 20a.

If they match, the control waits for the rolling code while sending the start code, and returns the rolling code when it is received. On the other hand, if the password and the reference code do not match, the engine EC
The communication line to U24 is fixed at L. When the key insertion detection switch 22 is not provided, the operation may be started by turning on the accessory switch or turning on the ignition switch.

When the ignition switch is turned on in response to the operation of the key 10, the engine ECU 24
The engine 30 is made operable by the ignition control unit 26 and the fuel injection control unit 28. Furthermore, by turning on the starter switch,
The starter motor is turned on, the engine starts rotating, and ignition and fuel supply are started.

"Start code" As described above, when the key insertion detection switch 22 or the accessory switch is turned on, the immobilizer ECU 20 starts operation, generates a start code in the encoder 20c, and starts transmission of the start code. I do. As a result, as shown in FIG. 2, a start code appears at the terminal IMI of the engine ECU 24. This start code is repeatedly transmitted by the immobilizer ECU 20. In addition, as a starting code,
Various means such as encryption using a combination of level H and L, PWH (pulse width modulation), and PSK (phase shift keying) can be applied.

"Flag XIMMOC" First, the engine E
The CU determines the value of the flag XIMMOC that is set to 0 in a routine that is performed first after connecting the battery. This flag XIMMOC is set to 0 even when there is an error at the time of the previous engine start, and is set to 1 when the engine starts normally.

Therefore, at the beginning of the processing in the engine ECU 24, by checking the value of the flag XIMMOC, it is determined whether the battery has been temporarily disconnected or a previous error has occurred. In addition, the flag XIMMOC
Is a backup memory 24d in the engine ECU 24.
Is stored in Therefore, it is not reset unless the battery is removed.

"Normal case of last time" First, the flag XIMM
The case where the previous engine start at OC = 1 was normal will be described with reference to FIGS.

First, the engine ECU 24 monitors whether the terminal IMI for receiving communication from the immobilizer ECU 20 is fixed at L from the state of the ignition switch being turned on (S1). In this determination, the duration of L of the terminal IMI is measured by a counter or the like, and is detected when this value has exceeded a predetermined value. The determination in S1 is always performed.

Then, the fact that IMI is L means that
This means that the immobilizer ECU 20 outputs L, which means detection of fraud, and the flag XIMMOC =
After setting to 0 (S2), the engine is stopped (S2).
3).

Thus, when the immobilizer ECU 20 detects inconsistency with the reference code of the personal identification code or any irregularity, and sets the communication line to the L level, this is determined by the L level of the terminal IMI.
4 is detected. And the engine ECU 24
However, the engine 30 is stopped to prohibit the ignition and the fuel injection.

Next, when the H level is detected at the terminal IMI, 1 is added to the fail counter CIMMOF (S4). As described above, in the present embodiment, the counter CIMMOF indicating the number of continuous abnormal terminations in the engine start processing is counted up at the beginning of the operation. Therefore, at the time of abnormal termination of the processing (on the way), the counter CIMMOF
Can be counted up. That is, when the ignition switch is turned off during the processing, the counter CIMMOF is counted up. In addition,
This counter CIMMOF is stored in the backup memory 24d.
Is stored within.

When the CIMMOF is counted up, it is determined whether or not the CIMMOF is one. That is, if there is no error by the previous time, this counter CIMMOF
Is 0, and 1 is added to this, and CIMMOF is 1. Therefore, in this case, the rolling code reception waiting time n seconds is set to the maximum value, for example, 3 seconds (S
6). If CIMMOF = 2, n = 2 seconds (S
7, S8), if CIMMOF = 3, set n = 1 second (S9, S10). Thus, n is set to the counter CI
By sequentially setting the rolling code to be smaller according to the value of the MMOF, the waiting time of the rolling code in the engine ECU 24 is sequentially reduced, and the traveling of the vehicle due to repeated unauthorized use can be reduced to a predetermined value or less.

It is then determined whether CIMMOF> 3 (S
11) If CIMMOF> 3, S2, S3
Then, the engine 30 is stopped. As a result, the engine 30 can be stopped at an early stage, and traveling by an incorrect starting operation can be completely disabled.

If CIMMOF is 3 or less,
Next, it is determined whether the engine speed has reached 500 rpm (S12). And the engine speed is 500rpm
Is repeated until it reaches 500 rpm, it is determined whether a start code has been received (S1).
3). The detection of the start code itself is repeated from the beginning of the process.

At S15, the engine ECU 24
If it is determined at the terminal IMI that some signal is received but this is different from the start code, m seconds (for example, 500 seconds) after the engine speed reaches 500 rpm.
msec) is determined (S14). And
If the start code has not been received even after the elapse of m seconds, the flag XIMMOC is set to 0 (S2) and the engine is stopped (S3).

As described above, by using the start code, not only the transmission of the L level from the immobilizer ECU 14 but also the fixing of the terminal IMI to the H level due to the line disconnection can be detected as an abnormality.
Can be stopped.

On the other hand, if the start code has been received in S13, the engine ECU 24 sends the rolling code to the immobilizer ECU 20 (S15).
This rolling code is performed by a random number generator 24c in the engine ECU 24 in a predetermined manner.

Here, the immobilizer ECU 20 detects the coincidence between the received personal identification code and the reference code stored in the EEPROM 20a by comparing the personal identification code with the reference code stored in the EEPROM 20a.
When it is confirmed that the rolling code has been received, a rolling code corresponding to the rolling code is generated using the internal random number generator 20d. Engine E
Since the CU 24 and the random number generation mechanism in the immobilizer ECU 20 are configured to correspond in advance, the generated rolling code always corresponds to the generated rolling code. Then, the immobilizer ECU 20 sends the rolling code to the engine ECU 24. If the password and the reference code do not match, the immobilizer ECU 20 sets the communication line to L at that time. Engine ECU2
Numeral 4 constantly monitors the state of the terminal IMI, and when L of the IMI is detected, the engine 30 is stopped at that time.

The engine ECU 24 determines whether a rolling code corresponding to the rolling code transmitted by itself is received (S16). If a correct rolling code is received, the engine ECU 24 sets the counter CIMMOF = 0 (S17), and sets the counter CIMMOF. After the value is returned to 0, the process ends. Therefore, the counter CIMMOF is reset to 0 only when the processing ends normally.

On the other hand, if the correct rolling code is not returned even though the rolling code has been transmitted, the normal operation is not performed. Therefore, in this case, it is determined whether n seconds have elapsed (S18). Then, for three seconds, the determination of the reception of the rolling code and the rolling code is repeated. If the rolling code cannot be received within n seconds, the process proceeds to S12, and the XIMOC
= 0 (S2), and the engine 30 is stopped (S3).

Here, n is one of 3, 2, and 1 seconds set in any of S6, 8, and 10. Therefore, the reception waiting time is shortened every time the engine start operation is abnormally terminated. In particular, as described above, the CIMMOF counts up before the engine is started. Therefore, even when the ignition is turned off during the start processing, the waiting time reduction processing is performed.

The reason why the start code is detected and the rolling code is transmitted and received after the engine speed reaches 500 rpm is that the starter motor may be operating when the engine speed is 500 rpm or less. In many cases, the power supply voltage is unstable in this case, and the probability of error occurrence is high.

As described above, the immobilizer ECU 20
Notifying the engine ECU 24 that the engine is normal by using a start code instead of H on the communication line. Therefore, when the communication line is disconnected, the start code is not sent. Therefore, the engine ECU 24 can stop the engine by not receiving the start code. The immobilizer ECU 20 repeats transmission of the start code even after transmission of the rolling code. The engine ECU 24 can always check the connection of the communication line. Also,
Restarting at the time of engine stall etc. becomes easy.

As described above, when there is no error in the previous processing, that is, when the flag XIMMOC = 1
The processing in the case of is performed. Further, when an abnormality is detected and the engine 30 is stopped, XIMMOC = 0 is set.

"In the case of battery disconnection or previous abnormality" It was determined that the battery was abnormal after the battery was disconnected or in the previous engine start process (flag XIMMOC =
0) will be described with reference to FIGS.

Also in this case, the immobilizer ECU
Reference numeral 20 denotes an engine ECU 24 when a fraud is detected.
Is set to L. Therefore, the engine ECU 24
Monitors the terminal IMI and determines whether the terminal IMI is fixed at L (S21). When the terminal IMI is fixed at L, the engine 30 is stopped (S2).
8).

On the other hand, the engine ECU 24 has a terminal IMI
When the H level is detected, the routine immediately enters a rolling code check routine. That is, the engine ECU 24 immediately starts transmitting the rolling code from the terminal IMO without waiting for the engine speed to reach 500 rpm (S22). Immobilizer ECU
20 transmits a start code unless a fraud is detected. However, when a rolling code is received from the engine ECU 24, a rolling code corresponding to the rolling code is generated and returned to the engine ECU 24.

While transmitting the rolling code from the terminal IMI, the engine ECU 24 monitors the state of the terminal IMI and determines whether the rolling code has been received (S23). Then, when the rolling code has been received, the flag XIMMOC is set to 1 (S24), and the process ends.

On the other hand, if the rolling code cannot be received, it is determined whether the engine speed has reached 500 rpm (S25). And the engine speed is 500
Transmission of the rolling code and reception determination of the rolling code are repeated until the rotation speed reaches rpm. Engine speed is 5
If the rolling code cannot be detected before reaching 00 rpm, the engine is stopped (S26).
A normal vehicle cannot run at all when the engine speed is 500 rpm or less. So, by this process,
Reliable stopping of traveling can be performed.

Further, after stopping the engine 30 in S26, it is determined whether the ignition is turned off (S27). If the ignition has not been turned off, the process returns to S22. As a result, the transmission of the rolling code from the engine ECU 24 and the transmission of the rolling code by the immobilizer ECU 20 continue until the ignition is turned off. Therefore, even after the engine is stopped, the engine ECU 24 can receive the rolling code. Then, in S23, if the rolling code has been successfully received, the flag X
IMMOC is reset to 1 (S24). Therefore,
The next engine start can be performed with XIMMOC = 1.

In the case where XIMMOC = 0, the value of the counter CIMMOF is not used in the processing. Therefore, it is preferable to reset CIMMOF to 0 at the beginning of this processing. When XIMMOC is set to 1, CIMMOF may be reset to 0.

If the ignition is turned off in S27, the process ends. Therefore, if the rolling code has not been received before the ignition is turned off, the flag XIMMOC remains at 0.

As described above, by transmitting and receiving the rolling code even after the engine is stopped, it is possible to prevent a situation in which the engine cannot be started if there is no illegality. That is, in the communication up to the engine speed of 500 rpm, a communication error is likely to occur, and even if there is no illegality, communication of a correct rolling code may not be performed. On the other hand, after the engine is stopped, the starter motor is not operating, and reliable communication can be performed. Thus, it is possible to prevent the engine from being unable to start due to a mere communication error.

As described above, in the present embodiment, when the supply of power to the backup memory 24d is cut off and the contents are cleared, the transmission and reception of the rolling code in the next process are performed early. That is, if the communication of the rolling code has not been completed normally by the time the engine speed reaches 500 rpm, the engine is stopped.
Therefore, when the backup power supply line is cut off, the engine does not reach 500 rpm, and the vehicle can reliably stop running. In particular, since the flag XIMMOC = 0 is set to the value at the time of abnormality, it is easy to set the value of the flag XIMMOC with the disappearance of the stored contents due to the power off. That is, during normal initial operation, this flag XIM
By clearing the MOC to zero, the previous abnormality can be set.

In the above embodiment, the flag XIMM
In the case where the engine is stopped using the OC, the rolling code communication is accelerated. However, this structure may not be provided. For example, in the above process, if the counter CIMMOF is not reset even in the process at the time of the previous abnormality, the CIMMOF is reset only at the time of normal termination. If the counter CIMMOF is counted up also in the process at the time of the previous abnormality, the communication timing can be changed by the rolling code using the value of the counter CIMMOF. In other words, upon abnormal termination or fraud detection, CIMMOF is counted up,
It is also preferable to advance the code matching determination time according to the value of CIMMOF.

[Brief description of the drawings]

FIG. 1 is a block diagram showing an entire system.

FIG. 2 is a timing chart showing the operation of the embodiment (previous normal).

FIG. 3 is a timing chart showing the operation of the embodiment (previous abnormality).

FIG. 4 is a flowchart showing the operation of the embodiment (previous normal).

FIG. 5 is a flowchart (2) showing the operation of the embodiment;
(Normal last time).

FIG. 6 is a flowchart showing an operation of the embodiment (previous abnormality).

[Description of Signs] 10 ignition key, 12 transponder, 1
4 key cylinders, 20 immobilizer ECUs, 24
Engine ECU, 26 Ignition control unit, 28
Fuel injection control unit, 30 engine,
20a EEPROM, 20c encoder, 24b decoder, 24d backup memory.

──────────────────────────────────────────────────続 き Continuation of the front page (56) References JP-A-9-249093 (JP, A) JP-A-8-2383 (JP, A) JP-A-9-11858 (JP, A) JP-A-4- 185554 (JP, A) JP-A-8-80810 (JP, A) (58) Fields investigated (Int. Cl. ⁷ , DB name) B60R 25/04 F02N 15/00

Claims (3)

(57) [Claims] 1. A code collating means for collating a code of a key inserted into a key cylinder with a reference code stored in a storage means, and connected to the code collating means. The device start is permitted when it is obtained within a predetermined time, the device start is prohibited when it is not obtained, and the power supply is cut off before the start or permission of the device is determined. And a start control means for shortening the following. 2. The apparatus according to claim 1, wherein when the energization is periodically turned on and off, the apparatus is prohibited from starting. 3. The device according to claim 1, wherein the device is an engine, and the start control unit is configured to control the engine speed to be equal to or higher than a predetermined value when a key is operated to start the engine. After
An apparatus start control device, wherein the apparatus waits for a code matching determination result from a code matching unit for a predetermined time.