JP4487697B2 - Vehicle remote control method and system and in-vehicle device - Google Patents

Description

  The present invention generally relates to a method and system for remotely operating a locked / unlocked state of a vehicle door, and a vehicle-mounted device, and more particularly, to a vehicle remote-controlled method and system that achieves both security against crime and countermeasures against erroneous operation, and vehicle-mounted. Relates to the device.

  A system for remotely operating a vehicle using communication is well known. For example, a system is known in which a remote operation content is transmitted from the center to the vehicle side when the user makes a request for remote operation of the vehicle to the center using a telephone line (for example, Patent Document 1). reference). In patent document 1, the unlocking operation of a vehicle door is mentioned as the content of remote control.

  In North America, an automotive wireless communication service called an “OnStar” system is actually provided by General Motors (GM) (see Non-Patent Document 1, for example).

  When subscribing to this service, a mobile phone that is activated by voice is mounted on the vehicle, and in the event of an emergency, it is possible to contact the GM response center through the mobile phone network and receive various services. One of the main service items of this “on-star” system is the ability to remotely control the locking / unlocking of the vehicle door.

Using this service, for example, when the user notices that he has forgotten to lock the door after leaving the vehicle, or when the user locks the door with the key in the passenger compartment, so-called "key closure". If the mobile phone contacts the response center, the door can be locked or unlocked by the operator's remote operation.
JP 2002-305599 A Internet <http: // www. onstar. com / us_english / jsp / index. jsp>

  However, in the above conventional vehicle remote control method and system, the vehicle door can be unlocked by remote control, so that the vehicle door is unlocked illegally due to unauthorized access such as so-called “spoofing” that impersonates a legitimate user. There is a risk. If the vehicle door is unlocked illegally, the risk of vehicle theft and vandalism increases.

  However, if vehicle door unlocking by remote control is completely prohibited (not provided as a service), if the vehicle door is accidentally locked by remote control (for example, an infant or pet is in the passenger compartment) If the vehicle door is locked despite being present), the door cannot be unlocked by remote control, and rescue is delayed until the authorized user with the key reaches the vehicle. Things can happen.

  As described above, the unlocking operation of the vehicle door by remote operation is prohibited from the viewpoint of security against crimes, but has a contradiction that it is desired to function in case of an emergency from the viewpoint of countermeasures against erroneous operations.

  The present invention has been made to solve the above-described problems, and has as its main object to provide a vehicle remote operation method and system and an in-vehicle device that can achieve both security against crime and countermeasures against erroneous operations.

  A first aspect of the present invention for achieving the above object is a vehicle remote control method for switching a locked state / unlocked state of a vehicle door in response to a remote operation request from a user, from the user to the unlocked state. This is a vehicle remote control method in which the vehicle door is switched to the unlocked state only when the request for switching to the unlocked state satisfies a predetermined condition when the switch is requested.

  In the first aspect, the predetermined condition is, for example, that a) there is an operation request preceding the request to switch to the unlocked state, and the preceding operation request is received when the vehicle door is unlocked. Or only when the request to switch to the unlocked state is requested within a predetermined time from the preceding operation request.

  According to the first aspect, the remote operation for unlocking the vehicle door is executed only when the predetermined condition is satisfied even if requested by the user. By setting appropriately, it is possible to achieve both security against crime and countermeasures against erroneous operations.

  For example, in the case of a) above, the unlocking operation of the vehicle door by remote operation can be performed only after the door that has been unlocked by the lock operation by remote operation is also locked. A method is realized in which the remote unlocking operation can be performed only when canceling (returning to the unlocked state again), and both security and countermeasures against erroneous operations are achieved. The above b) applies the condition of the above a) more strictly, and prevents the remote unlocking operation from functioning unless the unlocked state is locked within a predetermined time by the remote locking operation. Is.

  In this first aspect, for the purpose of more strictly limiting the case where the remote unlocking operation is permitted, for example, execution is permitted using user authentication and / or device authentication of an arbitrary method. The remote unlocking operation may be executed only when it is confirmed that the remote unlocking operation is requested by the same user and / or using the same device as the preceding remote locking operation. .

  A second aspect of the present invention for achieving the above object is a vehicle remote control method for switching a locked state / unlocked state of a vehicle door in response to a remote operation request from a user, wherein the vehicle door is unlocked. This is a vehicle remote operation method in which only a lock operation for switching from the locked state to the locked state and a cancel operation for the lock operation for switching the vehicle door from the locked state to the unlocked state after the lock operation are allowed.

  According to the second aspect, the remote operation for switching the vehicle door from the locked state to the unlocked state is performed only when the unlocked state of the vehicle door is set to the locked state by the lock operation which is also a remote operation. It becomes possible for the purpose of canceling (returning) the operation. Therefore, the security against crime is ensured by not permitting remote unlocking operation at normal times, and measures are taken when the vehicle door is accidentally locked by remote operation.

  In the second aspect, the cancel operation may be requested within a predetermined time from the preceding lock operation. Further, with the aim of more strictly limiting the case where the cancel operation is permitted, the cancel operation is performed by the same user as the preceding lock operation using, for example, user authentication and / or device authentication of an arbitrary method. It may be the one that must be requested using the same device.

  A third aspect of the present invention for achieving the above object is a vehicle remote control system in which an in-vehicle device mounted on a vehicle switches between a locked state and an unlocked state of a vehicle door in response to a remote operation request from a user. When the user requests switching to the unlocked state, the vehicle-mounted device switches the vehicle door to the unlocked state only when the request to switch to the unlocked state satisfies a predetermined condition. It is.

  In the third aspect, the predetermined condition is, for example, c) when there is an operation request preceding the request for switching to the unlocked state, and the preceding operation request is received when the vehicle door is unlocked. D) The predetermined condition is satisfied only when the request for switching to the unlocked state is requested within a predetermined time from the preceding operation request. It is filled.

  According to the third aspect, the remote operation for unlocking the vehicle door is executed only when the predetermined condition is satisfied even if requested by the user. By setting appropriately, it is possible to achieve both security against crime and countermeasures against erroneous operations.

  For example, in the case of the above c), the unlocking operation of the vehicle door by remote operation can be performed only after the door that has been unlocked by the locking operation by remote operation is also locked. A system is realized in which the remote unlocking operation can be performed only when canceling (returning to the unlocked state again), and both security and countermeasures against erroneous operations are achieved. The above d) applies the condition of the above c) more strictly, and prevents the remote unlock operation from functioning within a predetermined time after the unlock state is locked by the remote lock operation. Is.

  In this third aspect, with the main aim of reducing the processing load on the in-vehicle device, the system receives the remote operation request and sends a remote operation command according to the remote operation request to the in-vehicle device. A communication station device for transmitting, and the on-vehicle device switches the locked state / unlocked state of the vehicle door based on the remote operation command, and the communication is performed when the user requests switching to the unlocked state. The station device may transmit the remote operation command to the in-vehicle device only when the request for switching to the unlock state satisfies a predetermined condition.

  Further, in this third aspect, for the purpose of more strictly limiting the case where the remote unlocking operation is permitted, for example, execution is permitted using user authentication and / or device authentication of an arbitrary method. The remote unlocking operation may be executed only when it is confirmed that the remote unlocking operation is requested by the same user and / or using the same device as the preceding remote locking operation. .

  A fourth aspect of the present invention for achieving the above object is a vehicle remote control system in which an in-vehicle device mounted on a vehicle switches between a locked state and an unlocked state of a vehicle door in response to a remote operation request from a user. In the vehicle remote control system, only a lock operation for switching the vehicle door from the unlocked state to the locked state and a cancel operation for the lock operation for switching the vehicle door from the locked state to the unlocked state after the lock operation are permitted. is there.

  According to the fourth aspect, the remote operation for switching the vehicle door from the locked state to the unlocked state is performed only when the unlocked state of the vehicle door is set to the locked state by the lock operation which is also a remote operation. It becomes possible for the purpose of canceling (returning) the operation. Therefore, the security against crime is ensured by not permitting remote unlocking operation at normal times, and measures are taken when the vehicle door is accidentally locked by remote operation.

  In the fourth aspect, the cancel operation may be requested within a predetermined time from the preceding lock operation. Further, with the aim of more strictly limiting the case where the cancel operation is permitted, the cancel operation is performed by the same user as the preceding lock operation using, for example, user authentication and / or device authentication of an arbitrary method. It may be the one that must be requested using the same device.

  A fifth aspect of the present invention for achieving the above object is an in-vehicle device that switches a locked state / unlocked state of a vehicle door in response to a remote operation request from a user in a vehicle. The vehicle-mounted device switches the vehicle door to the unlocked state only when the request to switch to the unlocked state satisfies a predetermined condition when the switch to the unlocked state is requested.

  In the fifth aspect, the predetermined condition is, for example, e) an operation request preceding the request for switching to the unlocked state exists, and the preceding operation request is received when the vehicle door is unlocked. F) The predetermined condition is satisfied only when the request for switching to the unlocked state is requested within a predetermined time from the preceding operation request. It is filled.

  According to the fifth aspect, since the remote operation for unlocking the vehicle door is executed only when the predetermined condition is satisfied even if requested by the user, the predetermined condition is By setting appropriately, it is possible to achieve both security against crime and countermeasures against erroneous operations.

  For example, in the case of e), the unlocking operation of the vehicle door by remote operation can be performed only after the door that has been unlocked by the locking operation by remote operation is locked. An in-vehicle device that can perform a remote unlocking operation only when canceling (returning to the unlocked state again) is realized, and both security and countermeasures against erroneous operations are achieved. The above f) applies the condition of e) more strictly and prevents the remote unlock operation from functioning within a predetermined time after the unlock state is locked by the remote lock operation. Is.

  In this fifth aspect, for the purpose of more strictly limiting the case where the remote unlocking operation is permitted, for example, execution is permitted using user authentication and / or device authentication of an arbitrary method. The remote unlocking operation may be executed only when it is confirmed that the remote unlocking operation is requested by the same user and / or using the same device as the preceding remote locking operation. .

  A sixth aspect of the present invention for achieving the above object is an in-vehicle device that switches a locked state / unlocked state of a vehicle door in response to a remote operation request from a user in the vehicle, and unlocks the vehicle door. It is an in-vehicle device in which only a lock operation for switching from the state to the lock state and a cancel operation for the lock operation for switching the vehicle door from the lock state to the unlock state after the lock operation are allowed.

  According to the sixth aspect, the remote operation for switching the vehicle door from the locked state to the unlocked state is performed only when the unlocked state of the vehicle door is set to the locked state by the lock operation which is also a remote operation. It becomes possible for the purpose of canceling (returning) the operation. Therefore, the security against crime is ensured by not permitting remote unlocking operation at normal times, and measures are taken when the vehicle door is accidentally locked by remote operation.

  In the sixth aspect, the cancel operation may be requested within a predetermined time from the preceding lock operation. Further, with the aim of more strictly limiting the case where the cancel operation is permitted, the cancel operation is performed by the same user as the preceding lock operation using, for example, user authentication and / or device authentication of an arbitrary method. It may be the one that must be requested using the same device.

  According to the present invention, it is possible to provide a vehicle remote operation method and system and an in-vehicle device that achieve both security against crime and countermeasures against erroneous operations.

  Hereinafter, the best mode for carrying out the present invention will be described with reference to the accompanying drawings. The basic concept of the vehicle remote control method and system, the main hardware configuration, the operating principle, the basic control method, and the like are known to those skilled in the art, and thus detailed description thereof is omitted.

  FIG. 1 is a schematic diagram of a vehicle remote control system according to an embodiment of the present invention. This system includes an in-vehicle device 101 mounted on a vehicle, a center 102 which is a recognized institution and capable of wireless communication and / or wired communication, and wireless / wirelessly via the center 102 or via a network. It comprises a user communication terminal 103 capable of wired communication.

  The in-vehicle device 101 includes a communication unit 104 that can receive a remote operation command from the center 102, and a control unit 105 that switches the locked / unlocked state of the vehicle door according to the remote operation command received by the communication unit 104.

  The user communication terminal 103 is, for example, a mobile phone, a fixed phone, a remote control key, a personal computer, a PDA (personal digital assistant), or the like.

  When the vehicle user wants to perform a lock operation or unlock operation of the vehicle door by remote operation on his / her vehicle, first, a remote operation request is transmitted to the center 102 using the user communication terminal 103. The center 102 transmits a remote operation command to the in-vehicle device 101 of the target vehicle according to the content of the received remote operation request.

  In this embodiment, the lock operation request for switching the vehicle door to the locked state is performed without restriction because it is an operation in the direction of increasing security, but the unlock operation for requesting switching to the unlocked state is performed. Since the request is an operation in the direction of reducing security, the case where the request is executed as requested is limited.

  More specifically, in this embodiment, the remote unlocking operation is 1) when the user leaves the vehicle, and 2) is switched from the unlocked state to the locked state by the remote locking operation. Only when the remote lock operation is canceled. As a result, even if an infant or pet or the like has entered the vehicle in which the vehicle door is unlocked, the user does not have to return to the vehicle even if the door is locked remotely. The vehicle door can be unlocked by remote control.

  The case where the remote lock operation / unlock operation according to the present embodiment is permitted / not permitted is summarized in FIG. Here, “permitted” indicates a case where an operation according to the operation request is executed. Specifically, an unlock request in the locked state causes an unlocked state and an unlocked state. Indicates that the lock status is entered by a lock request. In addition, “non-permitted” indicates a case where the operation according to the operation request is not permitted and the operation request is ignored. Specifically, the unlock request in the locked state is not permitted, It means that the locked state is maintained. As described above, in this embodiment, the lock request under the unlocked state is not disallowed. Furthermore, “permitted” in the figure indicates that the operation request is ignored because the operation request content has already been realized. Specifically, the lock state is determined by the lock request under the lock state. It means that the unlocked state is maintained by the maintenance and unlock request under the unlocked state.

  As shown in FIG. 2, according to the present embodiment, when a lock operation is requested as a first remote operation request when the vehicle door is locked when the user gets off the vehicle, the lock operation is Allowed and locked. Next, when the lock operation is requested again as the second remote operation request, the lock operation is permitted and the locked state is maintained. On the other hand, when an unlock operation is requested as the second remote operation request, in this embodiment, it is not permitted in terms of security to unlock the vehicle that was locked when the vehicle got off by remote operation. The unlock request is not permitted and the locked state is maintained.

  Further, according to this embodiment, when the unlocking operation is requested as the first remote operation request when the vehicle door is locked when the user leaves the vehicle, the unlock request is not permitted. The locked state is maintained. Next, when a lock operation is requested as the second remote operation request, the lock operation is permitted and the locked state is maintained. On the other hand, when the unlock operation is requested again as the second remote operation request, it is not permitted again and the locked state is maintained.

  Further, according to this embodiment, when a lock operation is requested as the first remote operation request when the vehicle door is unlocked when the user leaves the vehicle, the lock operation is permitted and the lock operation is performed. Switch to state. Next, when the lock operation is requested again as the second remote operation request, the lock operation is permitted and the locked state is maintained. On the other hand, when the unlock operation is requested as the second remote operation request, both of the above conditions 1) and 2) are satisfied. Therefore, in this embodiment, the unlock operation is permitted in a limited manner. The unlock request is permitted and switched to the unlocked state.

  Further, according to this embodiment, when the unlocking operation is requested as the first remote operation request when the vehicle door is unlocked when the user leaves the vehicle, the unlock request is permitted. The unlocked state is maintained. Next, when a lock operation is requested as the second remote operation request, the lock operation is permitted and switched to the locked state. On the other hand, when the unlock operation is requested again as the second remote operation request, the unlock request is permitted and the unlocked state is maintained.

  The permission / non-permission of the lock operation and the unlock operation according to the present embodiment shown in FIG. 2 will be summarized with reference to FIGS. FIG. 3 is a state transition diagram when starting from the locked state, and FIG. 4 is a state transition diagram when starting from the unlocked state.

  As shown in FIG. 3, when the user locks the door when leaving the vehicle and is in the locked state, the remote unlocking operation is not permitted, and the unlocking operation is not performed by the remote operation. That is, even if a lock operation is requested by the user or an unlock operation is requested, the locked state is maintained.

  On the other hand, as shown in FIG. 4, when the user leaves the vehicle, the door is not locked, and the lock operation is always performed when the user has been unlocked. It becomes a state. The unlock operation is exceptionally accepted as a cancel operation for the remote lock operation only when there is a remote lock operation under the preceding unlock state.

  In other words, in the present embodiment, only the lock operation and the cancel operation are permitted for the remote operation of the lock mechanism of the vehicle door, and the single unlock without the preceding “remote lock operation in the unlock state” is performed. Requests will not be accepted.

  In this embodiment, when the unlocked state is changed to the locked state by the remote lock operation, for example, the remote unlock operation is permitted until the next boarding. Here, the next boarding is detected, for example, by detecting a smart key (registered trademark), detecting a door lock operation using a mechanical key or a wireless key, detecting a door knob operation, detecting a key ON.

  As described above, according to this embodiment, in the remote operation for switching the locked state / unlocked state of the vehicle door, in principle, the unlock operation request is not permitted, and only the lock operation and the cancel operation are permitted. While ensuring security against crimes, a solution to an erroneous remote lock operation is also secured.

  In the embodiment, in addition to the above conditions 1) and 2), with the aim of making the conditions for allowing the canceling operation (= the unlocking operation permitted exceptionally) more strict, The cancel operation may be permitted only within a predetermined time from the preceding “remote lock operation in the unlocked state”.

  In the above-described embodiment, the center 102 simply transmits a remote operation command corresponding to the remote operation request from the user to the in-vehicle device 101, and performs the cancel operation (= unlock operation permitted exceptionally). However, the present invention is not limited to this. For example, this determination is made in the center 102, and a remote operation request from the user is not permitted ( If it is allowed, no remote operation command may be transmitted to the in-vehicle device 101.

  In any case, in the situation where the unlock operation is not permitted, the display contents of the display are set such that the user communication terminal 103 cannot select the unlock operation request so that the user cannot request the unlock operation in the first place. Preferably it is controlled. As a result, communication traffic can be reduced. Even if an unlock operation can be requested, the selected item is displayed on the display of the user communication terminal 103 as “cancel / cancel lock operation”, “redo”, etc. An impression can be given to the user that the operation is basically prohibited.

  Further, in the above-described embodiment, with the main aim of further improving the security, any user authentication method or device authentication method is used, and the above-described limited remote unlocking operation is performed using the preceding unlocking operation. Only a request from the same user and / or a request using the same user communication terminal 103 as the remote lock operation in the locked state may be permitted.

  In this case, user authentication is performed by requesting password input or fingerprint authentication, for example, and user communication terminal 103 authentication is performed by, for example, a telephone number or a machine number (terminal-specific manufacturing number). In this case, user identification information such as the password and / or communication terminal identification information such as the telephone number and machine number is transmitted to the center 102 together with the remote operation request from the user terminal device 103, and the center 102 or the in-vehicle device 101 precedes it. It is determined whether the remote lock operation and the current remote unlock operation are requests from the same user and / or are requests using the same user communication terminal 103.

  Also, in this case, for the user communication terminal 103 that has requested the remote lock operation in the unlocked state, the URL of the Web page dedicated to the unlock operation generated temporarily by the center 102 for the user is displayed in an e-mail format. The above cancel operation may be requested only via the Web via this URL.

  Further, at the time of the user authentication, at the time of the cancel operation, a password dedicated to cancel may be additionally requested or a request time (transmission time) of the preceding remote lock operation may be requested in order to improve security.

  In the above embodiment, when a security system such as a surveillance camera or an intrusion detection horn that operates between the door lock and the door unlock is mounted on the vehicle on which the in-vehicle device 101 is mounted, this type of system is usually used. Is canceled by door unlocking, but is preferably set so as not to be canceled during the above-described canceling operation (= the exceptionally permitted unlocking operation). Thereby, it is possible to continue operating the security system even after the cancel operation described above.

  Similarly, in the above-described embodiment, a car finder system function (such as a large-scale parking lot where the vehicle position is determined) such as a hazard lamp blinking when the door is unlocked with a wireless key or the like on the vehicle on which the in-vehicle device 101 is mounted In the case where a function for notifying the user) is provided, it is preferable that the function is set so as not to function during the above-described cancel operation (= unlock operation permitted exceptionally). As a result, even if an unauthorized access person performs an attack operation on an unspecified number of vehicles and succeeds in unlocking the door, it is not easy to know which vehicle is unlocked.

  The present invention can be used in a vehicle remote control method and system. The appearance, weight, size, running performance, etc. of the vehicle on which the in-vehicle device used in this system is mounted are not limited.

  As will be apparent to those skilled in the art, the present invention can be extended not only to locking / unlocking vehicle doors, but also to windows, slide roofs, trunks, bonnets, and the like.

1 is a schematic diagram of a vehicle remote control system according to an embodiment of the present invention. It is the figure which put together the case where remote lock operation / unlock operation is permitted / not permitted in the table form in the vehicle remote control system concerning one example of the present invention. It is a state transition diagram in case a start state is a locked state in the vehicle remote control system which concerns on one Example of this invention. It is a state transition diagram in case the start state is an unlocked state in the vehicle remote control system according to one embodiment of the present invention.

Explanation of symbols

101 In-vehicle device 102 Center (communication station device)
103 User communication terminal 104 Communication unit 105 Control unit

Claims (4)

A vehicle remote operation method for switching a locked state / unlocked state of a vehicle door in response to a remote operation request from a user,
When the user requests to switch to the unlocked state,
There is a request to switch to the locked state when the vehicle door is unlocked prior to the request to switch to the unlocked state, and
Only when switching to the unlocked state is requested within a predetermined time from the preceding switching request,
A vehicle remote control method, wherein a vehicle door is switched to an unlocked state.   An in-vehicle device mounted on a vehicle in response to a remote operation request from a user is a vehicle remote operation system that switches a locked state / unlocked state of a vehicle door,
  When the user requests switching to the unlocked state, the in-vehicle device is
  There is a request to switch to the locked state when the vehicle door is unlocked prior to the request to switch to the unlocked state, and
  Only when switching to the unlocked state is requested within a predetermined time from the preceding switching request,
  A vehicle remote control system, wherein the vehicle door is switched to an unlocked state. Including a communication station device that receives the remote operation request and transmits a remote operation command corresponding to the remote operation request to the in-vehicle device;
The in-vehicle device switches a locked state / unlocked state of a vehicle door based on the remote operation command,
When the user requests switching to the unlocked state, the communication station device
There is a request to switch to the locked state when the vehicle door is unlocked prior to the request to switch to the unlocked state, and
Only when switching to the unlocked state is requested within a predetermined time from the preceding switching request,
The vehicle remote operation system according to claim 2, wherein a remote operation command for switching the vehicle door to an unlocked state is transmitted to the in-vehicle device.   In a vehicle, an in-vehicle device that switches a locked state / unlocked state of a vehicle door in response to a remote operation request from a user,
  When the user requests to switch to unlocked state,
  There is a request to switch to the locked state when the vehicle door is unlocked prior to the request to switch to the unlocked state, and
  Only when switching to the unlocked state is requested within a predetermined time from the preceding switching request,
  A vehicle-mounted device that switches a vehicle door to an unlocked state.

Images