JP4739924B2 - Electronic key system - Google Patents

Description

The present invention relates to an electronic Kishisute beam to permit or perform the various operations of the vehicle authentication performed in a variety of wireless communication between the vehicle key and the vehicle.

In recent years, as shown in Patent Literature 1, electronic key systems that exchange signals by wireless communication between a vehicle key and a vehicle and permit or execute various operations of the vehicle such as door locking / unlocking and engine starting are widely used. It is popular. One type of this electronic key system is an immobilizer system for the purpose of preventing vehicle theft. The immobilizer system reads the ID code from the transponder built in the vehicle key, and if the ID code of this vehicle key matches the ID code stored in the vehicle in advance, the immobilizer lock state of the immobilizer system is released, The system is allowed to start the engine.
JP 2005-83011 A

  In general, starting an engine of a vehicle equipped with an immobilizer system requires that the key of the vehicle key (mechanical key) matches the keyhole of the key cylinder and that the immobilizer system is unlocked by the transponder. . Here, if the engine start is permitted even if the vehicle key is not at hand, it is necessary to give an ID code to another communication terminal (for example, a mobile phone) and further to provide a key mountain structure of a mechanical key. is there. However, since it is practically difficult to have a mobile phone with a mechanical key, in a vehicle having this kind of immobilizer system, the engine start permission / non-permission is, after all, carrying a dedicated vehicle key. It becomes a place depending on whether or not.

The object of the present invention is to determine whether to permit / deny various vehicle operations such as door locking / unlocking and engine starting by other communication terminals regardless of possessing / not possessing a dedicated key. even employed, less likely to occur a situation to separately prepare it for communication terminal, and to provide an electronic Kishisute beam capable of ensuring security against vehicle theft even allow various vehicles operating in the communication terminal is there.

In order to solve the above problems, according to the present invention, when a first identification code unique to a key transmitted wirelessly from a vehicle key is received by a first vehicle antenna on the vehicle side, various vehicle operations of the vehicle are controlled. A control unit that collates the first identification code on the key side with the first identification code on the vehicle side, and if the collation is established, permits or executes the various vehicle operations. In the electronic key system that can also perform verification to confirm whether or not it matches the keyhole, multipurpose data for each application is managed in its own memory, and the vehicle or a wireless communication target other than the vehicle is used for each application. A communication terminal capable of performing wireless communication to be performed by itself, and capable of transmitting identification data including a second identification code unique to itself and use restriction information of the second identification code; Between the second identification code on the terminal side and the second identification code on the vehicle side when the identification data transmitted by the communication terminal via the wireless communication is received by the second vehicle antenna. The identification code is collated, and it is determined from the contents of the use restriction information whether the second identification code on the terminal side satisfies a use condition. When the collation is established, the second identification code on the terminal side is A communication device that outputs a notification to that effect to the control unit and permits or executes the various vehicle operations by the control unit, and the control unit transmits the vehicle key. said first identification code when received by the first vehicle antenna which collates the first identification code of the vehicle and the first identification code of the key side, the collation is established, and the vehicle A start permission control circuit for permitting the engine start when the collation of Kagiyama by key is satisfied, before Symbol communication device, even if not the vehicle key and the verification of the first identification code is established, the vehicle If the verification of the second identification code is established with the communication terminal that is located , and the verification by the key mountain is established with a key different from the vehicle key, and the second identification code satisfies the use condition, The gist is to enable the engine to be started by the start permission control circuit.

  According to this configuration, in a normal vehicle key, the function of transmitting the first identification code is often a function added only to the dedicated vehicle key. Therefore, when there is no dedicated key at hand, the first identification code cannot be verified between the key and the vehicle, and therefore various vehicle operations such as locking / unlocking the door lock or permitting engine start cannot be executed. It becomes a situation.

  Therefore, in this example, a communication terminal that transmits a unique second identification code is prepared, and a communication device that collates the second identification code by wireless communication with the communication terminal is mounted on the vehicle. Further, the mechanical key which the key mountain has, although the first identification code cannot be transmitted, is stored in the vehicle's attache case or the like. When entering a parked vehicle, the second identification code is verified by wireless communication between the communication terminal and the communication device, and if these codes match and the verification is successful, door locking / unlocking and engine start are permitted. It will be in the state. Then, if the mechanical key stored in the vehicle is taken out and inserted into the key cylinder and the mechanical key is turned to the engine start position, the engine is started. Therefore, even if the dedicated key is not at hand, if the communication terminal is owned, it is possible to execute a series of operations of getting into a parked vehicle and starting the engine.

  In addition, the communication terminal used in the present invention has a function capable of realizing wireless communication with a plurality of wireless communication objects by itself, that is, a single card can satisfy a plurality of card functions. In order to use a communication terminal as a wallet, a ticket, an entrance / exit card, etc., the user often owns this communication terminal in advance. Therefore, in the present invention, since the second identification code for the vehicle is registered in the communication terminal and used as the vehicle key, it is difficult to separately prepare a vehicle key substitute terminal.

  Further, even when the communication terminal is used as a substitute key for the vehicle key, if the second identification code registered in the communication terminal does not satisfy the use conditions, the second identification code becomes invalid, and the communication terminal is used as the vehicle key. Cannot be used. For example, if the second identification code is issued to a plurality of communication terminals, a plurality of vehicle keys exist, which may cause a problem that the key management becomes complicated and vehicle theft occurs. However, since the use is effective only while the second identification code satisfies the use condition, it cannot be used as a vehicle key after that period, and thus the vehicle key is unlikely to be abused. Security is also ensured.

  According to the present invention, the communication method of the wireless communication is such that when the communication terminal is held over the second antenna that transmits a drive radio wave, the communication terminal is activated by the drive radio wave and communicates with the communication device. At the time of the communication, communication is performed by symmetric communication without using a subcarrier between the communication terminal and the communication device, and an encryption key is exchanged every time data is exchanged between the communication terminal and the communication device. The gist of the present invention is that mutual communication is used, in which encrypted communication is used, and different random numbers are generated between the communication terminal and the communication device, and each of them confirms random number matching.

  According to this configuration, the communication between the communication terminal and the communication device uses a method with a very high communication speed called symmetric communication, so that the communication between the communication terminal and the communication device can be performed at a very high speed. Become. In addition, since encrypted communication with high confidentiality is used for communication between the communication terminal and the communication device, and mutual authentication for confirming random number matching is used in each of the communication terminal and the communication device, communication between the communication terminal and the communication device is performed. It is also possible to make the security level extremely high.

According to the present invention, the vehicle key has a built-in wireless tag having the first identification code unique to the key, and the wireless tag is activated when receiving a tag driving radio wave from the first vehicle antenna as a communication partner. And transmitting the first identification code, and when the control unit receives the first identification code transmitted by the vehicle key by the first vehicle antenna, the key side first identification code and the vehicle side first it collates the identification code, a start permission control circuit for permitting the engine start when the collation is established, before Symbol communication device, the second identification code by the communication terminal located inside the vehicle is calling when it receives, together with the second identification code of the terminal to match the collation is established with the second identification code of the vehicle, if they meet the second identification code of the terminal side use conditions, To that effect The output to the start permission control circuit, and summarized in that to permit the engine start by the start enable control circuit.
According to this configuration, even if the dedicated key is not owned, the engine can be started by the communication terminal. Therefore, if the communication terminal is owned, the engine can be started.

According to the present invention, when an operation for locking / unlocking a door lock is applied to the vehicle key, the vehicle key transmits the first identification code as a signal corresponding to the operation, and the control unit includes: When the first identification code transmitted by the vehicle key is received by the first vehicle antenna, the first identification code on the key side and the first identification code on the vehicle side are collated, and the collation is established to a verification control circuit to allow or perform the locking and unlocking of the door lock, before Symbol communication device, when the communication terminal located outside the vehicle has received the second identification code transmitting, second identification of said terminal If the code matches the second identification code on the vehicle side and the verification is established, and if the second identification code on the terminal side satisfies the use conditions, the door is locked based on a command from the verification control circuit To unlock and unlock It outputs a notification to that effect to the lock control circuit, and summarized in that to permit or perform the locking and unlocking of the door lock according to the door lock control circuit.

  According to this configuration, even if the dedicated key is not owned, door locking / unlocking is permitted or executed by the communication terminal, and if the communication terminal is owned, it is possible to get on and off the vehicle.

The gist of the present invention is that the communication unit including the communication terminal and the communication device is a retrofit that can be attached to the vehicle as necessary.
According to this configuration, the communication unit including the communication terminal and the communication device can be retrofitted to the vehicle. Therefore, if verification of the identification code is established between the communication terminal and the communication device, various types of vehicles can be used without using a dedicated key. It is possible to appropriately provide the vehicle with a function that permits or executes the operation as necessary.

The gist of the present invention is that the use restriction information is an expiration date indicating how long the second identification code can be used.
According to this configuration, whether or not the second identification code satisfies the use condition is determined based on whether or not the expiration date is satisfied, for example, instead of looking at the number limit. Therefore, if the second identification code is within the validity period, the door lock can be locked and unlocked and the engine can be started many times at the communication terminal in which the second identification code is registered.

  According to the present invention, the communication device has a radio timepiece that can automatically correct the time, recognizes the current time based on time data of the radio timepiece, the current time, and the communication Whether the use of the second identification code on the terminal side is valid by comparing the expiration date of the second identification code on the terminal side received from the terminal and checking whether the expiration date is within the deadline. The gist is to determine whether or not.

  According to this configuration, when the communication terminal determines whether or not the expiration date of the second identification code of the communication terminal is within the time limit, the current time is determined based on the clock data of the radio clock. Thus, for example, even if the battery mounted on the vehicle loses power and the time of the watch is turned off and the time is reset, the time of the watch is automatically corrected after the battery is replaced and the power is supplied again. As a result, erroneous determination is less likely to occur when the communication terminal determines the expiration date.

According to the present invention, a key for use in verification of the Kagiyama is summarized in that those that are stored in advance in the vehicle.

  According to the present invention, regardless of possessing / not possessing a dedicated key, permission / non-permission of various vehicle operations such as door locking / unlocking and engine starting can be determined by other communication terminals. Even if it is adopted, it is unlikely that a separate communication terminal will be prepared, and security against vehicle theft can be ensured even if various vehicle operations are permitted on the communication terminal.

Hereinafter, an embodiment of embodying electronic Kishisute beam of the present invention with reference to FIGS. 1 to 4.
As shown in FIG. 1, an immobilizer system 1 a is mounted on the vehicle 1 for the purpose of preventing vehicle theft. In this immobilizer system 1a, a transponder 2a built in a wireless key (including a dedicated key: main key and sub key) 2 that is a vehicle key is activated by an electromagnetic wave transmitted from the vehicle 1, and the transponder that the transponder transmits after activation. The engine is allowed to start on the condition that the ID code matches the transponder ID code registered in the vehicle. The wireless key 2 corresponds to a vehicle key.

  The vehicle 1 is equipped with a security ECU (Electronic Control Unit: hereinafter the same) 3 that performs ID verification with the wireless key 2 and a door ECU 4 that controls the locking and unlocking of the door lock of the vehicle 1. Yes. These ECUs 3 and 4 are connected via a bus 5 in the vehicle. A door control receiver 6 capable of wireless communication with the wireless key 2 is connected to the security ECU 3. The security ECU 3 corresponds to a control unit (collation control circuit), and the door ECU 4 corresponds to a door lock control circuit. Moreover, the door control receiver 6 comprises a 1st vehicle antenna.

When the door lock release button 9 of the wireless key 2 is pressed, the wireless key 2 transmits to the vehicle 1 _a door lock release request signal Sa on which _a vehicle key ID code (first identification code) unique to the key is placed. Security ECU3, when through the door control receiver 6 to enter the door unlock request signal S _a, the determination vehicle key ID code included in the signal, whether it matches the vehicle key ID code registered on the vehicle side If the vehicle key ID code is correct, a verification establishment signal is output to the door ECU 4. When the door ECU 4 inputs a verification establishment signal in the door lock state, the door ECU 4 drives the door lock motor 7 to release the door lock. The same process is performed when the door lock is set to the locked state.

  An immobilizer ECU 8 that satisfies the vehicle anti-theft function is connected to the security ECU 3. The wireless key 2 has a built-in transponder 2a having a chip-specific transponder ID code (first identification code). The immobilizer ECU 8 is equipped with an engine ECU 11 that performs ignition control and fuel injection control of the engine 10. The immobilizer ECU 8 corresponds to a control unit (start permission control circuit), and the transponder 2a corresponds to a wireless tag.

A transmission / reception antenna 13 for the immobilizer ECU 8 is connected to the immobilizer ECU 8 via an amplifier 12. The transmission / reception antenna 13 is formed in a coil shape by being wound around the key cylinder 14 in the circumferential direction, and intermittently transmits a driving radio wave (electromagnetic wave) S _b1 within a minute area. The immobilizer ECU 8 can wirelessly communicate with the transponder 2a via the transmission / reception antenna 13. The transmission / reception antenna 13 constitutes the first vehicle antenna, and the drive radio wave S _b1 corresponds to the tag drive radio wave.

When the wireless key 2 is inserted into the key cylinder 14, the transponder 2a in the wireless key 2 receives the driving radio wave _Sb1 from the transmitting / receiving antenna 13 and starts driving, and the transponder signal _Sb2 carrying its own transponder ID code. Send. The immobilizer ECU 8 receives the transponder signal S _b2 via the transmission / reception antenna 13 and compares the transponder ID code of the transponder signal S _b2 with its own transponder ID code. If these ID codes match, the immobilizer ECU 8 determines that a proper driver has entered the vehicle 1 and enters an immobilizer lock state, and outputs an engine start permission signal to the engine ECU 11 to permit engine start.

  When the wireless key 2 inserted into the key cylinder 14 is turned from the off position to the starter position and the starter switch of the engine switch 14a is turned on, the starter motor 15 for starting the engine is driven. At this time, if an engine start permission signal is input from the immobilizer ECU 8, the engine ECU 11 performs plug ignition and fuel injection of the engine 10 and starts the engine 10.

The vehicle 1, Feli C a (R) and the non-contact IC card communication system using a non-contact IC card communication technology called (hereinafter, simply referred to as a communication system) 16 is mounted. The communication system 16 is a system that can use an IC card as a wallet or a boarding ticket to complete settlement of accounts, or can use an IC card as an employee card or student card to manage entry and exit. The main features of the communication system 16 are high security that is difficult to counterfeit and tamper with, high-speed processing of data transmission / reception, the IC card itself can be reused many times, and a variety of applications that can be used multiple times with one IC card There are advantages. The communication system 16 is a retrofit item for the vehicle 1 and is separately added to the vehicle 1 according to the user's application.

  The communication system 16 includes a reader / writer 17 attached to the vehicle 1 and a communication circuit (IC card) 19 built in the mobile phone 18. The reader / writer 17 and the communication circuit 19 can perform wireless communication using a communication method compliant with the ISO / IEC 18092 standard. The wireless communication system of this standard employs symmetrical communication that employs the same encoding / modulation system for communication from the reader / writer 17 to the communication circuit 19 and for communication from the communication circuit 19 to the reader / writer 17. The wireless communication system of this standard is 13.56 MHz carrier wave, the communication speed is 212 kbps, the subcarrier is “none”, the encoding system is the Manchester system, and the collision detection / avoidance is the time slot communication. The reader / writer 17 corresponds to a communication terminal, and the communication circuit 19 corresponds to a communication terminal.

  The reader / writer 17 includes a communication controller (control board) 20 that controls the reader / writer 17, and an outside antenna 21 and an inside antenna 22 connected to the communication controller 20. The communication controller 20 is connected to the door ECU 4 and the immobilizer ECU 8 via separate communication lines (wiring), and is disposed, for example, below the driver's seat. The communication controller 20 performs mutual communication with the communication circuit 19 of the mobile phone 18 via the outside antenna 21 when the mobile phone 18 is outside the vehicle, and the in-vehicle antenna 22 when the mobile phone 18 is outside the vehicle. Through the communication circuit 19 of the mobile phone 18.

  The outside antenna 21 is an antenna that is installed on, for example, a door handle knob outside the door and has a characteristic of performing communication within a minute area (for example, about 5 to 10 cm). The in-vehicle antenna 22 is an antenna that is installed in the vicinity of the steering wheel of the driver's seat, for example, and has the characteristic of performing communication within a very small area in the same manner as the outside antenna 21.

  For example, a push-type activation button 23 for activating the communication system 16 is connected to the communication controller 20. The activation button 23 is disposed, for example, on a door handle knob or the like, and outputs an ON signal to the communication controller 20 when pressed. The communication controller 20 activates the communication system 16 when an ON signal is input from the activation button 23. The outside antenna 21 and the inside antenna 22 correspond to the second vehicle antenna, and the start button 23 corresponds to the operation means.

  The mobile phone 18 incorporates a CPU 24 that performs overall control of the mobile phone 18, a ROM 25 that stores various programs and applications for the mobile phone 18, and a RAM 26 that serves as a work area when the CPU 24 executes programs and applications. ing. The mobile phone 18 includes various buttons 27 that are operated when the mobile phone 18 is operated, a microphone 28 that collects the voice of the operator, a speaker 29 that outputs the voice of the caller, and various operations. A screen 30 for displaying corresponding images and characters is provided.

  The communication circuit 19 is connected to the CPU 24 via the interface 31. An IC substrate 32 of the communication circuit 19 is provided with a control IC 33 that controls the communication circuit 19, a data rewritable memory (EEPROM or the like) 34, and an antenna 35 that can transmit and receive various signals. For example, EEPROM is used as the memory 34 and is connected to the control IC 33 by printed wiring. In addition, the antenna 35 has a shape that is wound in a square ring shape along the periphery of the substrate 32, and is electrically connected to the control IC 33. The control IC 33 corresponds to registration means.

When the start button 23 is pressed and the communication system 16 starts to be started, the communication controller 20 drives the drive radio wave (within a minute area) from the outside antenna 21 and the inside antenna 22 before the communication with the communication circuit 19. Electromagnetic wave) S _c1 is transmitted intermittently. Since the transmission area of the drive radio wave S _c1 is as small as about 5 to 10 cm, when the mobile phone 18 (that is, the communication circuit 19) is held over the vehicle exterior antenna 21 or the vehicle interior antenna 22, the antenna 35 transmits the drive radio wave S _c1 . Received state. At this time, electric power is generated in the communication circuit 19 by the drive radio wave _Sc1 , and the communication circuit 19 is activated based on the electric power.

  After starting the communication circuit 19, the reader / writer 17 and the communication circuit 19 communicate with each other according to a communication method compliant with the ISO / IEC 18092 standard. The communication between the reader / writer 17 and the communication circuit 19 employs a communication method in which transmission data is encrypted and a random number is generated for the data to perform mutual authentication between the reader / writer 17 and the communication circuit 19. ing. During this communication, the control IC 33 can perform various processes such as data reading from the memory 34 and data writing to the memory 34 based on a command from the reader / writer 17.

The memory 34 of the communication circuit 19 stores a composite ID key K _id as a vehicle key ID. The composite ID key K _id is composed of a portable key ID code (second identification code) that is code data unique to the key and an expiration date (use restriction information) of the portable key ID code, and is encrypted. Registered in the memory 34. The expiration date of the composite ID key _Kid is date / time data indicating how long the mobile key ID code can be used. The composite ID key K _id corresponds to identification data.

  On the other hand, a portable key ID code similar to that registered in the communication circuit 19 is stored in the memory 36 of the communication controller 20. The communication controller 20 is connected to a radio clock 20a capable of automatically correcting the time and calendar. The radio timepiece 20a receives a standard radio wave carrying time information with an ultra-high performance antenna and automatically corrects the time using the standard radio wave. The communication controller 20 can always input time data from the radio timepiece 20a, and can recognize the current date and time from this time data.

  In the communication system 16, when the reader / writer 17 and the communication circuit 19 perform wireless communication, the communication controller 20 of the reader / writer 17 includes a mobile key ID code on the mobile phone 18 side and a mobile key ID code on the reader / writer 17 side. And match. The communication controller 20 confirms that the mobile key ID code on the mobile phone 18 side matches the mobile key ID code on the reader / writer 17 side, and the mobile key ID code transmitted from the mobile phone 18 satisfies the expiration date. For example, the mobile phone 18 permits or executes various operations of the vehicle 1.

For example, when the vehicle 1 is parked (the engine is stopped and the door lock is locked), the wireless communication is performed between the reader / writer 17 and the communication circuit 19 by holding the mobile phone 18 over the antenna 21 outside the vehicle. At this time, the communication circuit 19 starts to be activated by the driving radio wave S _c1 transmitted from the outside antenna 21, and the communication circuit 19 returns an ID code signal S _{c2 on} which the composite ID key K _id is placed. The communication controller 20 receives the ID code signal _{Sc 2} at the vehicle exterior antenna 21 and acquires the portable key ID code of the communication circuit 19. The communication controller 20 compares the portable key ID code acquired from the communication circuit 19 with its own portable key ID code, and determines whether these codes match.

Further, the communication controller 20 compares the expiration date included in the composite ID key _Kid with the current date and time recognized from the time data of the radio clock 20a, and the portable key ID code transmitted from the communication circuit 19 is valid. Judge whether it is within the deadline. If the portable key ID code matches between the reader / writer 17 and the communication circuit 19 (ID verification is established), and the portable key ID code transmitted from the communication circuit 19 is within the validity period, A verification establishment signal S _r1 is output to the door ECU 4 to permit the door lock release. When the door ECU 4 receives the verification establishment signal S _r1 from the communication controller 20 in the door locked state, the door ECU 4 releases the door lock.

On the other hand, when the vehicle 1 is stopped and the door lock is released, when the mobile phone 18 is held over the antenna 21 outside the vehicle, wireless communication is performed between the reader / writer 17 and the communication circuit 19, and the door is locked. Similarly to the case, the communication controller 20 acquires the composite ID key K _id from the communication circuit 19. The communication controller 20 checks its own portable key ID code against the portable key ID code of the communication circuit 19 and determines whether or not the composite key IDK _id is within the expiration date. If these mobile key ID codes match and the mobile key ID code of the mobile phone 18 is within the expiration date, the communication controller 20 outputs a verification establishment signal S _r1 to the door ECU 4 to lock the door lock. . When the door ECU 4 receives the verification establishment signal S _r1 from the communication controller 20 in the door unlocked state, the door ECU 4 locks the door.

Further, when the driver enters the vehicle while the engine is stopped and holds the mobile phone 18 over the vehicle antenna 22, wireless communication is performed between the reader / writer 17 and the communication circuit 19, and the same as in the case of door locking / unlocking. In addition, the communication controller 20 acquires the composite ID key _Kid from the communication circuit 19. The communication controller 20 checks its own portable key ID code against the portable key ID code of the communication circuit 19 and determines whether or not the composite key IDK _id is within the expiration date. If these portable key ID codes match and the portable key ID code of the portable telephone 18 is within the expiration date, the communication controller 20 outputs a verification establishment signal S _r2 to the immobilizer ECU 8 to permit engine start. . When the immobilizer ECU 8 receives the collation establishment signal S _r2 from the communication controller 20, the immobilizer ECU 8 enters an immobilizer lock state that permits engine start, and outputs an engine start permission signal to the engine ECU 11.

  Here, there is a case where it is desired to start the engine 11 without a dedicated key such as the wireless key 2 at hand. However, if the dedicated key is not at hand, the other keys do not have the transponder 2a built in the key, so that the verification using the transponder 2a cannot be performed and the immobilizer lock of the immobilizer ECU 8 cannot be released. As a result, the engine cannot be started.

  However, the mobile phone 18 in which the mobile key ID code is registered is held over the in-vehicle antenna 22, ID verification is established between the mobile phone 18 and the reader / writer 17, and the mobile key ID code on the mobile phone 18 side is within the expiration date. If it is a thing, the immobilizer lock | rock of immobilizer ECU8 is cancelled | released. The engine 11 is started by taking out the mechanical key 37 stored in an attache case or the like in the vehicle, inserting it into the key cylinder 14 and turning it to the starter position. This mechanical key is a key that has a key pile corresponding to the key hole in the key cylinder 14 but does not include the transponder 2a.

When the driver stops the engine 10 and gets off the vehicle and holds the mobile phone 18 over the outside antenna 21 to lock the unlocked door lock, the door ECU 4 outputs a door lock completion signal _Sr3 to the communication controller 20. Communication controller 20, when the door ECU4 enter the door lock completion signal S _r3, start button 23 until the re-operation, to stop the activation of the communication system 16.

Note that the memory 34 of the communication circuit 19 can have a plurality of folders and a plurality of files in the folders according to applications. For this reason, the mobile phone 18 has a multi-application function that satisfies a plurality of card functions with one mobile phone by writing various data in addition to the composite ID key K _id (that is, the vehicle key ID) to the memory 34. Have. ing. Therefore, the mobile phone 18 incorporating the communication circuit 19 is not only used as a vehicle key substitute, but also, for example, a train ticket (commuter pass), a prepaid card (wallet), a point card, a membership card, an employee ID card, It can be used as various cards such as student ID cards, credit cards, and mileage cards.

As a method of registering the composite ID key K _id in the mobile phone 18 (that is, the memory 34 of the communication circuit 19), a method of acquiring the mobile phone 18 from the management server 38 by connecting to the dedicated management server 38 via a network, There is a method in which the cellular phone 18 is set in a dedicated writing device 39 capable of writing the ID key K _id to the cellular phone 18 and acquired from the writing device 39.

First, when the composite ID key K _id is acquired from the management server 38, the button group 27 of the mobile phone 18 is operated to connect the mobile phone 18 to the management server 38 via the antenna 40. At this time, an ID code acquisition screen 41 shown in FIG. 2 is displayed on the screen 30 of the mobile phone 18. In the ID code acquisition screen 41, a management number input field 41a for inputting a management number given by the system administrator when joining the communication system 16 and a personal identification number set by the vehicle owner are input. There is a personal identification number input field 41b and an expiration date input field 41c for inputting the date and time to be set as the expiration date. Here, by setting an upper limit (for example, a maximum of 10 days from the current time point) in the expiration date input field 41c, abuse of the composite ID key Kid _assigned to the mobile phone 18 may be prevented. Good. The user inputs necessary information on the ID code acquisition screen 41 and then returns the personal information data to the management server 38.

In the database of the management server 38, management numbers and passwords of subscribers who have joined the communication system 16 are registered. Therefore, the management server 38 recognizes the user connected to the management server 38 by referring to the database based on the management number and the password entered from the mobile phone 18, and the mobile key ID of the vehicle owned by the user. Read the code from the database. Then, the management server 38 generates a composite ID key K _{id including the} mobile key ID code and the expiration date, and _returns ID code data carrying the composite ID key K _id to the user's mobile phone 18. To do.

When the mobile phone 18 receives the ID code data via the antenna 40, the CPU 24 of the mobile phone 18 outputs this ID code data to the communication circuit 19 via the interface 31. When the communication circuit 19 receives the ID code data, control IC33 of the communication circuit 19, it writes the composite ID key K _id in its memory 34. Thereby, the composite ID key K _id of the vehicle transmitted from the management server 38 is registered in the mobile phone 18, and the mobile phone 18 can be used as a vehicle key.

  On the other hand, when the management server 38 receives the personal information data from the mobile phone 18 and determines that the operator who has input this data does not exist in the database, the management server 38 determines that the input data is incorrect. Recognizing, the management server 38 replies to the mobile phone 18 with a notification to prompt data re-input. When the CPU 24 of the mobile phone 18 receives a notification for prompting data re-input, the CPU 24 displays that fact on the screen 30 and causes the operator to re-enter personal information data.

  When acquiring the ID code from the dedicated writing device 39, one end of the connection cable 39 a extending from the writing device 39 is inserted into the connection port 42 of the mobile phone 18 to connect the mobile phone 18 to the writing device 39. To do. Then, the input button of the writing device 39 is operated to display the ID code input screen 43 shown in FIG. 3 on the screen of the writing device 39. In this ID code input screen 43, a manufacturing number input field 43a for inputting the manufacturing number of the communication circuit 19, an ID code input field 43b for inputting a portable key ID code, and a date and time to be set as an expiration date are displayed. There is an expiration date entry field 43c for inputting. The user inputs necessary information on the ID code input screen 43 and then outputs the ID information data from the writing device 39 to the mobile phone 18.

When the mobile phone 18 inputs ID information data from the writing device 39, the CPU 24 of the mobile phone 18 outputs the ID information data to the communication circuit 19 via the interface 31. Here, since the own manufacturing number is registered in the memory 34 of the communication circuit 19, the control IC 33 of the communication circuit 19 includes the manufacturing number in the input ID information data and the manufacturing number registered in itself. And compare. Control IC33, if these production numbers match, it is determined that the input operation of the composite ID key K _id by the regular registration operation has been performed, writing the composite ID key K _id input into the memory 34. Thus, the composite ID key K _id of the vehicle output from the writing device 39 is registered in the mobile phone 18, and the mobile phone 18 can be used as a vehicle key.

  On the other hand, when the serial number of the ID information data input from the writing device 39 is different, the control IC 33 of the communication circuit 19 outputs a notification that the input data is erroneous data to the CPU 24. When the CPU 24 receives a notification that the input data is incorrect data, the CPU 24 outputs a notification to that effect to the writing device 39. When the writing device 39 receives a notification from the mobile phone 18 that the input data is incorrect data, the writing device 39 displays the notification on its own screen and prompts the operator to re-enter the ID information data. Note that the notification of erroneous data may be performed by the mobile phone 18. The management server 38 corresponds to an external server, and the writing device 39 corresponds to an external device.

When the registration of the composite ID key K _id to the mobile phone 18 is completed, the operation _proceeds to the registration of the composite ID key K _id to the reader / writer 17. As this work, the reader / writer 17 is set to the composite ID key input mode by, for example, pressing and holding the start button 23. In this state, when the mobile phone 18 is held over the outside antenna 21 (in-vehicle antenna 22), communication is performed between the reader / writer 17 and the communication circuit 19, and the reader / writer 17 receives the composite ID key K _id from the communication circuit 19. Receive. Writer 17 writes the composite ID key K _id received from the communication circuit 19 in its memory 36 to complete the registration process of a composite ID key K _id.

Next, communication modes performed between the reader / writer 17 and the cellular phone 18 when various vehicle operations are permitted or executed by the cellular phone 18 will be described with reference to FIG.
When the activation button 23 is operated and the communication system 16 is activated, the communication controller 20 of the reader / writer 17 transmits the driving radio wave _Sc1 to the outside as polling (calling) from the outside antenna 21 (inside antenna 22). When the mobile phone 18 is held over the outside antenna 21 (in-vehicle antenna 22) and the communication circuit 19 of the mobile phone 18 receives the drive radio wave _Sc1 via the antenna 35, the communication circuit 19 is activated by the drive radio wave _Sc1 .

The communication circuit 19 that has started up _returns a response signal _{Sc 3} including information such as its own manufacturing number from the antenna 35 to the reader / writer 17. The communication controller 20 refers to the manufacturing number in the response signal _Sc3 to determine whether the currently communicating communication circuit 19 has a model number that can be communicated. If communication is possible, the communication controller 20 proceeds to mutual authentication processing.

  Subsequently, mutual authentication is performed between the communication circuit 19 and the communication controller 20, and for this mutual authentication, security of triple DES, which is a triple application of a secret key encryption algorithm called DES (Data Encryption Standard). High encryption communication is adopted. In Triple DES, for example, a specific sentence is encrypted with a key (encryption table) Ka, the result is decrypted with the key (encryption table) Kb, and the result is further performed with the key (encryption table) Kc (key Ka). ) To encrypt.

  As the mutual authentication, first, the communication controller 20 generates a random number Rr, encrypts the random number Rr in the transmission data, and transmits the encrypted data to the communication circuit 19. The communication circuit 19 decrypts the encrypted data received from the communication controller 20 to extract the random number Rr, generates encrypted data including the random number Rr, and returns the encrypted data to the communication controller 20. The communication controller 20 decrypts the encrypted data received from the communication circuit 19, extracts the random number Rr, and determines whether or not it matches the random number Rr generated by itself.

  On the other hand, the communication circuit 19 also generates a random number Rc, encrypts the random number Rc included in the transmission data, and transmits the encrypted data to the communication controller 20. The communication controller 20 decrypts the encrypted data received from the communication circuit 19 to extract the random number Rc, generates encrypted data including the random number Rc, and returns the encrypted data to the communication circuit 19. The communication circuit 19 decrypts the encrypted data received from the communication controller 20, extracts the random number Rc, and determines whether or not it matches the random number Rc generated by itself. When the communication controller 20 recognizes that the random number coincides with both the reader / writer 17 and the communication circuit 19, it determines that mutual authentication has been established.

When mutual authentication is established, the communication controller 20 transmits an ID code request signal _Sc4 to the communication circuit 19 in order to request the communication circuit 19 to transmit an ID code. When receiving the ID code request signal S _c4 from the communication controller 20, the communication circuit 19 transmits an ID code signal S _{c2 on} which its composite ID key K _id is placed. Note that single DES to which only one DES is applied is adopted for communication for exchanging the ID code request signal S _c4 and the ID code signal S _c2 .

When the communication controller 20 receives the ID code signal S _c2 from the communication circuit 19, the communication controller 20 collates the portable key ID code included in the ID code signal S _c2 with the portable key ID code registered in the communication circuit 19, and the ID code. It is determined whether or not the expiration date included in the signal _Sc2 is within the expiration date. The communication controller 20 outputs a verification establishment signal S _r1 (S _r2 ) to the door ECU 4 and the immobilizer ECU 8 if the ID verification is established and the portable key ID code is within the expiration date. Thereby, for example, the door lock is locked or unlocked, the engine 10 is unlocked by the immobilizer ECU 8, and the engine key 37 inserted into the key cylinder 14 is turned to the on position. 10 starts.

  Therefore, as an example of starting the engine 10 without using the dedicated key, for example, the mechanical key 37 without the ID verification function is inserted in the key cylinder 14 of the vehicle 1. Even when the mechanical key 37 is left inserted in the key cylinder 14 in this way, the transponder 2a is not built in the mechanical key 37, so that the immobilizer lock by the immobilizer ECU 8 can be released by the mechanical key 37. Since the engine 10 cannot be started, there is no problem with respect to security such as vehicle theft.

  Then, when getting into the parked vehicle with the mechanical key 37 inserted, the mobile phone 18 is first held over the antenna 21 outside the vehicle to release the door lock and get into the vehicle 1, and then the mobile phone 18 is connected to the in-vehicle antenna 22. Hold up to release immobility lock. Since the engine start is permitted when the immobil lock is released, turning the mechanical key 37 to the ON position turns on the starter switch of the engine switch 14a, and the engine 10 starts to start. Therefore, even if the mechanical key 37 does not include the transponder 2a, the engine 10 can be started.

  Further, since the mobile key ID code registered in the mobile phone 18 has an expiration date, the use of the mobile phone 18 as a substitute key for the vehicle key is permitted only within the expiration date. Therefore, even if a mobile key ID code is issued to a plurality of users in a rental car business, for example, the mobile key ID code cannot be used as a vehicle key if it expires. This makes it difficult to cause vehicle theft and other problems, and ensures high security.

According to the configuration of the present embodiment, the following effects can be obtained.
(1) When entering the parked vehicle 1, even if there is no dedicated key at hand, if the user has the mobile phone 18, the mobile phone 18 is held over the antenna 21 outside the vehicle and the door lock is released. After getting in, the mobile phone 18 is held over the in-vehicle antenna 22 to release the immobilizer lock. Therefore, if the mobile phone 18 is owned, the engine 10 can be started by turning the mechanical key 37 inserted in the key cylinder 14 to the ON position. Incidentally, in this example, the cellular phone 18 having Feli C a (R) function, there is a characteristic that satisfies the plurality of card functions in one, mobile to the communication circuit 19 built in the portable telephone 18 Only by registering the key ID code, the mobile phone 18 can be used as a vehicle key. Therefore, it is also an advantage that there is no need to separately prepare a vehicle key replacement communication terminal.

  (2) Since the expiration date is set for the mobile key ID code registered in the mobile phone 18, if the expiration date has passed, the mobile key ID code releases the door lock of the vehicle 1 or permits the engine to start. Can no longer do. Therefore, when it is desired to stop using the mobile phone 18 as a vehicle key, there is no need to bother to delete the mobile key ID code.

(3) If the electronic key system of the present example is adopted, for example, it is not necessary to provide a key mountain for a mechanical key in the mobile phone 18, so that the practicality is high in implementation.
(4) If the mechanical key 37 is stored in the vehicle or inserted into the key cylinder 14, the mechanical key 37 may be stolen by a thief who has illegally entered the vehicle. Can not be started, so there is no problem with security against vehicle theft.

(5) Even if the mobile phone 18 allows the door lock to be unlocked and unlocked and the immobilizer lock released as in this example, the wireless communication between the mobile phone 18 and the reader / writer 17 can be performed by high-speed wireless communication. because it uses is a high security can Feli C a (R) can be secured fast communication processing and high security.

  (6) The wireless communication between the reader / writer 17 and the mobile phone 18 uses a symmetric communication method having a characteristic of low unnecessary radiation, and also collides with a carrier by a time slot method in which the number of transactions is less than other methods. Since detection / avoidance is performed, it is very effective in increasing the communication speed.

  (7) For wireless communication between the reader / writer 17 and the mobile phone 18, encryption of the carrier wave is used. Further, the data of this carrier wave is authenticated by the reader / writer 17 and the mobile phone 18 (mutual authentication). At the same time, a mechanism for changing the encryption key for each mutual authentication (in this example, triple DES) is used, which is very effective in ensuring high security.

  (8) Since the communication system 16 of this example can be retrofitted to the vehicle 1, if the verification of the identification code is established between the reader / writer 17 and the mobile phone 18, various operations of the vehicle 1 can be performed without using a dedicated key. Functions that are permitted or executed can be appropriately provided in the vehicle 1 as necessary. Further, even if the communication system 16 is added to the vehicle 1, almost no significant design change is required for the immobilizer system. Therefore, ID verification using the transponder 2 a can be performed as before.

  (9) The criterion for determining whether or not the portable key ID code satisfies the use condition is an expiration date indicating how long the ID code can be used. Accordingly, if the mobile key ID code is within the expiration date, the door lock can be released and the engine can be started any number of times by the mobile phone 18 in which the mobile key ID code is registered.

  (10) When the reader / writer 17 determines whether or not the mobile key ID code of the mobile phone 18 is within the expiration date, the current time is recognized from the time data of the radio clock 20a. Therefore, for example, even if the battery mounted on the vehicle 1 has no power and the timepiece is turned off and the time is reset, the radio timepiece 20a automatically corrects the time after the power is supplied again after battery replacement. Therefore, the reader / writer 17 can recognize an accurate time. Therefore, erroneous determination is less likely to occur when the reader / writer 17 determines the expiration date.

(11) Since the activation button 23 that is operated when the reader / writer 17 is activated is provided, the reader / writer 17 transmits the driving radio wave _Sc1 when the activation button 23 is operated. Accordingly, since the reader / writer 17 is in a standby state before the start button 23 is operated, power is not required for the reader / writer 17 before that, so that the battery mounted on the vehicle 1 can be saved. it can.

  (12) Since the portable key ID code can be written in the communication circuit 19 using the management server 38 or the dedicated writing device 39, for example, the communication circuit 19 is overwritten with a new ID code as appropriate. You can also. Therefore, when the driving vehicle changes, if the mobile key ID code for the vehicle is newly written in the communication circuit 19, the mobile phone 18 can drive the vehicle. Different vehicles 1 can be driven. Even if the vehicle 1 is replaced, if the ID code is re-registered, the door lock / unlock and the immobilizer lock of the new vehicle can be performed with the conventional mobile phone 18.

In addition, this embodiment is not limited to the said structure, You may change into the following aspects.
The determination of whether or not the mobile key ID code of the mobile phone 18 satisfies the usage conditions is not limited to the method of checking whether or not the mobile key ID code is within the expiration date. For example, in the communication circuit 19 of the mobile phone 18, the mobile key ID code and the number of times the use is permitted are registered. When the mobile key ID code of the communication circuit 19 is registered in the communication controller 20, be registered. Whenever the communication controller 20 receives the portable key ID code from the communication circuit 19 and permits or executes various operations of the vehicle 1, the communication controller 20 decrements the usable frequency by one and when the usable frequency becomes 0. Thus, the configuration may be such that the use of the mobile key ID code registered in itself is not permitted.

  The determination as to whether or not the mobile phone key ID code of the mobile phone 18 satisfies the usage conditions is made by comparing the date and time of the expiration date of the mobile key ID code with the current date and time obtained from the clock data of the radio clock 20a. The method is not limited to the method of determining whether or not the current date and time has passed the expiration date. For example, in the communication circuit 19 of the mobile phone 18, the mobile key ID code and the use permission time (for example, 10 hours) are registered. When the mobile key ID code of the communication circuit 19 is registered in the communication controller 20, the ID code At the same time, the usage permission time is registered. Then, the communication controller 20 sets its own timer when it receives the mobile key ID code, and when the use permission time elapses from the start of timing, the timer is timed up and the use of the mobile key ID code is not permitted. It may be configured.

  -When locking / unlocking the door lock with the mobile phone 18, if ID verification is established between the reader / writer 17 and the mobile phone 18, the door lock is not limited to being automatically locked / unlocked. For example, in the door lock state, after the ID collation is established between the reader / writer 17 and the mobile phone 18, the door lock is performed on condition that the touch sensor embedded in the door handle knob detects a touch operation on the door handle knob. May be released. Further, in the door unlocked state, after the ID verification is established between the reader / writer 17 and the mobile phone 18, the door lock is locked on condition that the door lock switch provided on the door handle knob is pressed. Also good.

The wireless communication between the reader / writer 17 and the mobile phone 18 is not necessarily limited to the configuration in which the driving radio wave _Sc1 is simultaneously transmitted from the vehicle exterior antenna 21 and the vehicle interior antenna 22. For example, when the vehicle is parked, first, a driving radio wave S _c1 is transmitted from the antenna 21 outside the vehicle, a door opening / closing operation is detected by a door courtesy switch or the like, and the driver gets into the vehicle. The procedure of transmitting the drive radio wave _Sc1 from the controller 22 may be performed.

ID collation between the reader / writer 17 and the mobile phone 18 is not necessarily limited to being performed by the reader / writer 17. For example, when the reader / writer 17 receives the ID code signal S _c2 from the mobile phone 18, the mobile key ID code of the received ID code signal S _c2 may be bridged to the immobilizer ECU 8, and ID verification may be performed by the immobilizer ECU 8.

  -When ID verification (that is, verification outside the vehicle) is established between the mobile phone 18 and the antenna 21 outside the vehicle, it is not limited to permitting locking / unlocking of the door lock. In addition to permitting locking / unlocking of the door lock, Engine start may be permitted.

A method for registering the portable key ID code in the reader / writer 17 using the management server 38 or the writing device 39 may be adopted as in the case of the cellular phone 18.
And communication method of the wireless communication between the reader writer 17 and the communication circuit 19 is not limited to the communication system standardized by Feli C a (registered trademark), the communication method is not particularly limited.

The activation button 23 that activates the reader / writer 17 is not always necessary. That is, the start button 23 may be omitted, and the drive radio wave _Sc1 may be constantly transmitted from the vehicle exterior antenna 21 and the vehicle interior antenna 22.

  The terminal used as a substitute for the vehicle key is not limited to the mobile phone 18 and may be another communication terminal such as a PDA (personal digital assistant) as long as the communication circuit 19 is incorporated.

Next, technical ideas that can be grasped from the above-described embodiment and other examples will be described below together with their effects.
(1) In any one of Claims 1-8 , the said communication apparatus is equipped with the operation means for system starting which makes the said 2nd vehicle antenna start transmission of the said drive radio wave. In this case, when the operation means for starting the system is operated, the communication device starts transmitting the drive radio wave from that time. Therefore, since the communication device is in a standby state before the operation means is operated, power is not required for the communication device before that, so it is possible to save the power of the battery mounted on the vehicle. It becomes.

(2) In any one of Claims 1-8 , the said communication terminal takes in the said 2nd identification code from the external server or external apparatus which manages the said 2nd identification code, The said 2nd identification code is used for the said communication terminal There is a registration means for registering. In this case, since the identification code can be registered in the communication terminal, it is possible to overwrite the communication terminal with a new identification code. Therefore, by performing the rewriting operation of the identification code, it becomes possible to permit or execute various vehicle operations of a plurality of different vehicles with one communication terminal, and the versatility of the system is improved.

(3) In any one of claims 1 to 8, the communication terminal is built in a mobile phone. In this case, for example, various vehicle operations such as locking / unlocking the door lock and permission to start the engine can be performed by the mobile phone.

The block diagram which shows the structure of the electronic key system in one Embodiment. The ID code acquisition screen figure at the time of registering a portable key ID code with a mobile telephone. The ID code input screen figure at the time of registering a portable key ID code with a mobile telephone. A transaction chart of wireless communication performed between a reader / writer and a mobile phone.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 ... Vehicle, 2 ... Wireless key as vehicle key, 2a ... Transponder as radio | wireless tag, 3 ... Security ECU which comprises control unit (collation control circuit), 4 ... Door ECU as door lock control circuit, 6 ... 1st DESCRIPTION OF SYMBOLS 1 Door control receiver which comprises a vehicle antenna, 8 ... Immobilizer ECU which comprises a control unit (start permission control circuit), 10 ... Engine, 13 ... Transmission / reception antenna which comprises 1st vehicle antenna, 17 ... Reader / writer as communication equipment , 19: a communication circuit as a communication terminal, 20a: a radio wave clock, 21 ... an outside antenna constituting the second vehicle antenna, 22 ... an in-vehicle antenna constituting the second vehicle antenna, 23 ... an activation button as an operation means, 33 ... Control IC as registration means 34... Memory 38. Management server as external server , 39 ... writing device as an external device, a composite ID key as K _id ... identification data, S _b1 ... Tags driving radio wave, S _c1 ... driving radio wave, Rr, Rc ... random number.

Claims (8)

When the first identification code unique to the key transmitted wirelessly from the vehicle key is received by the first vehicle antenna on the vehicle side, the control unit for controlling various vehicle operations of the vehicle sends the first identification code on the key side and the vehicle side The first identification code is collated, and if the collation is established, the various vehicle operations are permitted or executed, and the collation for confirming whether the key pile of the vehicle key matches the keyhole on the vehicle side can also be executed. In an electronic key system,
Multi-purpose data for each application is managed in its own memory, and it is possible to carry out wireless communication with the wireless communication target other than the vehicle or the vehicle by the application-specific unit. A communication terminal capable of transmitting identification data including an identification code and use restriction information of the second identification code;
Between the second identification code on the terminal side and the second identification code on the vehicle side when the second vehicle antenna receives the identification data provided on the vehicle and transmitted by the communication terminal via the wireless communication. The identification code is collated, and it is determined from the contents of the use restriction information whether the second identification code on the terminal side satisfies the use condition. When the collation is established, the second identification code on the terminal side If the use condition is satisfied, the communication unit outputs a notification to that effect to the control unit, and permits or executes the various vehicle operations by the control unit.
When the first identification code transmitted from the vehicle key is received by the first vehicle antenna, the control unit collates the first identification code on the key side with the first identification code on the vehicle side, and A start permission control circuit that permits engine start when collation is established and collation of the key pile by the vehicle key is established ;
Before SL communication device, wherein even when no vehicle keys and verification of the first identification code is established, the collation of the communication terminal second identification code established located inside the vehicle, and said vehicle key An electronic key system that enables engine start by the start permission control circuit if collation with a key pile is established with another key and the second identification code satisfies the use condition.   The communication method of the wireless communication is such that when the communication terminal is held over the second antenna that transmits a driving radio wave, the communication terminal is activated by the driving radio wave, and communication with the communication device is started. In some cases, communication is performed by symmetric communication that does not use a subcarrier between the communication terminal and the communication device, and encrypted communication in which an encryption key is changed every time data is exchanged between the communication terminal and the communication device. 2. The electronic key system according to claim 1, wherein mutual authentication is employed, in which different random numbers are generated between the communication terminal and the communication device, and each of them confirms a random number match. . The vehicle key includes a wireless tag having the first identification code unique to the key, and when the tag driving radio wave is received from the first vehicle antenna that is a communication partner, the wireless tag is activated to activate the first identification code. Send
When the first identification code transmitted from the vehicle key is received by the first vehicle antenna, the control unit collates the first identification code on the key side with the first identification code on the vehicle side, and It is a start permission control circuit that permits engine start when verification is established,
Before SL communication device, when the communication terminal located inside the vehicle has received the second identification code originating, the collation second identification code of the terminal is coincident with the second identification code of the vehicle If the second identification code on the terminal side satisfies the use condition, a notification to that effect is output to the start permission control circuit, and the engine start by the start permission control circuit is permitted. The electronic key system according to claim 1 or 2. The vehicle key, when an operation for locking and unlocking the door lock is applied to the vehicle key, transmits the first identification code as a signal corresponding to the operation,
When the first identification code transmitted from the vehicle key is received by the first vehicle antenna, the control unit collates the first identification code on the key side with the first identification code on the vehicle side, and A verification control circuit that permits or executes door lock locking and unlocking when verification is established,
Before SL communication device, when the communication terminal located outside the vehicle has a second received identification code originating, said matching second identification code of the terminal is coincident with the second identification code of the vehicle If the second identification code on the terminal side satisfies the use condition, a notification to that effect is output to the door lock control circuit that locks and unlocks the door lock based on the command from the verification control circuit. The electronic key system according to any one of claims 1 to 3, wherein the door lock control circuit permits or executes the locking and unlocking of the door lock.   The electronic key system according to any one of claims 1 to 4, wherein the communication unit including the communication terminal and the communication device is a retrofit that can be attached to the vehicle as necessary.   The electronic key system according to claim 1, wherein the use restriction information is an expiration date indicating how long the second identification code can be used.   The communication device has a radio clock that can automatically correct the time, recognizes the current time based on time data of the radio clock, and the current time and the terminal received from the communication terminal Determining whether or not the use of the second identification code on the terminal side is valid by comparing the expiration date of the second identification code on the side and checking whether the expiration date is within the period The electronic key system according to claim 6. The key used for collation of the key pile is previously stored in the vehicle, The electronic key system according to any one of claims 1 to 7.

Images