JP5269408B2 - Anti-theft device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an anti-theft device, preventing an authentication function from being fulfilled by performing centralized management for identification information on each part, and preventing the parts from being stolen without a broad band wireless communication function. <P>SOLUTION: This anti-theft device includes: a collection means 111 for collecting the identification information on each part 105; an identification information generating means 110 for generating a product identification information for identifying a product based on the collected identification information; a storage means 102 for storing the generated product identification information; a processing means 103 for setting the generated product identification information to the parts; and a control means 109 for determining whether the product identification information stored when starting in the storage means matches product identification information newly generated by the identification information generating means based on the identification information collected through the collection means when starting, and stopping the starting of the product when they do not match. <P>COPYRIGHT: (C)2009,JPO&amp;INPIT

Description

  The present invention relates to an anti-theft device that prevents unauthorized use of parts used in legitimate products in other products.

  Mobile objects such as passenger cars are widely used as general means of transportation, but at the same time damage such as theft is increasing. At present, attempts have been made to reduce the risk of theft by making use of an immobilizer authentication function or obtaining a vehicle position using GPS (Global Positioning System), or to facilitate the discovery of the vehicle at the time of theft. However, with the popularization of smaller mobile bodies (personal mobility), theft of parts and batteries has become a more serious problem.

  As means for preventing this, there is known a method of performing authentication between a plurality of ECUs (Electronic Control Units) constituting a mobile vehicle using a wide area wireless network and an ID management center (see Patent Document 1 below). reference). An example of a conventionally assumed system is shown in FIG. A vehicle (mobile body) 901 includes an information terminal 902 for connecting to a wide area wireless network represented by a mobile phone network. Further, the wide area wireless network can access the ID management server 903. Each ECU connected to the ignition key and the network inside the vehicle mutually authenticates each ID code to detect fraud.

The ID management server 903 stores the ID of the stolen vehicle by the recording device 904, and authenticates the vehicle by comparing the ID transmitted from each vehicle with the data in the recording device 904. Thereby, it is possible to prevent the stolen vehicle or the ECU from being continuously used. As described above, the authentication method via the management server on the wide area wireless network is used as a method for preventing theft of the vehicle and the parts and devices mounted on the vehicle.
Japanese Patent Laying-Open No. 2006-7871 (Summary, FIG. 1)

  However, there is no guarantee that wide area wireless networks are always available. The places and situations where its use is remarkably restricted include the back of mountains, remote areas, underground facilities, and disasters. In either case, the infrastructure functions required for wide area radio are limited or disabled, making communication difficult. Moreover, when the attachment position and structure of the communication terminal mounted on the vehicle are grasped, the authentication function is completely paralyzed by destroying the terminal.

  Also, in the method of managing ID numbers and RFID (Radio Frequency Identification) information of all parts using a central management mechanism as in the prior art, the authentication function functions by performing analysis and cracking of the management mechanism. It will disappear. In particular, in the case of an ECU mounted on a vehicle, modifications such as RoM (Read only Memory) replacement are frequently performed. For this reason, it is necessary to prevent vulnerabilities caused by holding all parts information of a vehicle in a specific ECU.

  In view of the above-described problems, the present invention can prevent the authentication function from being performed by centrally managing the identification information of each part, and can prevent the theft of the part without using the wide area wireless communication function. An object is to provide an antitheft device.

In order to achieve the above object, according to the present invention, an anti-theft device for preventing the theft of parts constituting a product, the collecting means for collecting identification information assigned to each of the parts,
Identification information generating means for generating product identification information for identifying the product based on the collected identification information, storage means for storing the generated product identification information, and the parts constitute the product Processing means for performing processing for storing the product identification information generated by the identification information generation means in a predetermined storage area of the component to indicate that the product is to be stored, when the product is activated Whether the product identification information stored in the means matches the product identification information newly generated by the identification information generation means based on the identification information collected via the collection means at the time of activation determine, and a processing control means for performing for the stopping the activation of the product when they do not match, with, when installing a new part to the product, the system The means determines whether or not the product identification information is already stored in a predetermined storage area of the new part to be installed, and if it is determined that the product identification information is not stored, the collecting means The identification information of other parts including the new part to be installed is collected, and the identification information generating means identifies the product based on the collected identification information. The processing means performs processing for storing the new product identification information generated by the identification information generation means in a predetermined storage area of all the parts constituting the product. When it is determined that product identification information not corresponding to the product is stored in a predetermined storage area of the new part to be installed, the control unit rejects the part. Theft prevention device is provided it is determined that such components you stop the start of the product. With this configuration, it is possible to prevent the authentication function from being disabled by centrally managing the identification information of each component, and to prevent the theft of the component without using the wide area wireless communication function. The identification information generation unit is, for example, a UID generation unit 109 described later, or a UID generation unit 109 and an encryption key generation unit 112. Further, with this configuration, it is possible to appropriately install components.

In the antitheft device of the present invention, it is a preferred aspect of the present invention that the product identification information is unique identification information for uniquely identifying the product or information generated based on the unique identification information . With this configuration, it is possible to set the reliability of authentication.

In the anti-theft device of the present invention, when updating the product identification information stored in the predetermined storage area of the part constituting the product, the collecting means identifies the part constituting the product. Information is collected, the identification information generating means generates product identification information for identifying the product based on the collected identification information, and the processing means is generated by the identification information generating means. new product identification information, performing the processing of the order is stored in a predetermined storage area of all parts constituting the product is a preferred embodiment of the present invention. With this configuration, the set product identification information can be appropriately updated.

Also, the theft prevention device of the present invention, before SL when the product identification information stored in a predetermined storage area of the component has been erased based on the message, the collecting means, was the subject of the uninstallation The identification information of the parts other than the parts is collected, the identification information generating means generates product identification information for identifying the product based on the collected identification information, and the processing means is the identification information It is a preferable aspect of the present invention to perform processing for storing the new product identification information generated by the generation unit in a predetermined storage area of all the parts constituting the product. With this configuration, it is possible to appropriately uninstall the parts. The above-described receiving unit corresponds to, for example, a serial input receiving unit 108 described later.

Moreover, in the anti-theft device of the present invention, it is a preferred aspect of the present invention that the identification information generating means generates the product identification information including identification information of a user who uses the product. With this configuration, authentication using identification information corresponding to the user can be performed. In the antitheft device of the present invention, the product identification information is generated by exclusive OR of identification information of parts constituting the product and identification information of the user who uses the product. Is a preferred embodiment. With this configuration, appropriate product identification information can be generated.

Also, the theft prevention device of the present invention, if the reissue of identification information of the user has been made, said collecting means collects identification information of the part constituting the product, the identification information generating means, collection is to produce a new product identification information for identifying said product based on said identification information and reissued identification information of the user, the processing means, the newly generated by said identification information generating means the such product identification information, performing the processing of the order is stored in a predetermined storage area of all parts constituting the product is a preferred embodiment of the present invention. With this configuration, even when the user identification information is reissued due to loss of the user identification information, the product identification information can be appropriately set in the part.

  The anti-theft device of the present invention has the above-described configuration and prevents the authentication function from being disabled by centrally managing the identification information of each component, and prevents the theft of the component without using the wide area wireless communication function be able to. In addition, when the identification information (ID number) of the parts is centrally managed as in the past, and regular replacement of the parts frequently occurs, the management information (identification of the parts constituting the product) The flexibility of rewriting of information lists is required. However, according to the anti-theft device of the present invention, since the component identification information is not centrally managed, it is possible to prevent fraud due to falsification of management information as in the prior art.

  Embodiments of the present invention will be described below. In the following, description is made by taking a vehicle part as an example. However, the present invention is not limited to a vehicle part, and can be similarly applied to a part of another product. In the embodiment of the present invention, an IC (Integrated Circuit) tag described later which does not have a power supply is used. The IC tag operates by obtaining power from the information transmission means 103 located on the anti-theft device side.

  The IC tag is attached to each part constituting the vehicle. The required number of information transmission means 103 is installed in the vehicle according to the number of IC tags, and IDs are collected from the IC tags of the respective parts in accordance with a request from the ECU providing the authentication function. The ECU generates only one UID (Unique Identification) inside the vehicle using the user ID input from the user and the ID collected from all IC tags. In this UID generation, a UID may be generated using only IDs collected from all IC tags.

  By using this UID to generate an encryption key for communicating with each IC tag, it is possible to detect and prevent the attachment of illegal parts. In such a case, it may be possible to easily break through the authentication procedure by replacing the IC tag attached to the component. However, in general, IC tags are not only small, but can also be embedded inside components. By applying IC tag packaging technology, tamper resistance can be added to prevent tampering due to replacement. It is.

  An example of the basic configuration of the IC tag used in the embodiment of the present invention is shown in FIG. The IC tag 104 has a memory space (authentication ECU encryption key recording unit 201) for writing a UID or encryption key passed from the ECU, and a function (encryption processing unit 202) that can realize encryption and decryption in data transmission / reception. ). Basically, the UID and encryption key cannot be erased once they are recorded in the authentication ECU encryption key recording unit 201, but they are exceptionally erased by using user identification information. It is also possible to configure so as to. By configuring it so that it cannot be erased once recorded, it can be stolen because the original UID and encryption key are different from the newly generated UID and encryption key, even if the component is stolen and used, as will be described later. Can not. The anti-theft device according to the embodiment of the present invention has the following effects.

  That is, there is no need for authentication through a broadband wireless infrastructure and a management center. Further, it is possible to perform authentication for each part, not for each vehicle, and to make the theft of parts meaningless. In addition, by using an IC tag, the cost can be reduced as compared with the authentication check for each ECU. In addition, if an IC tag is used, ID can be assigned to any minute part. Also, it is not necessary to know who is using which parts at the management center in the wide area wireless network (the location privacy problem can be solved). Further, even if the ECU that performs the authentication process is analyzed and the UID leaks, the ID of each component is not found. Further, all communication between the IC tag and the ECU that performs the authentication process is encrypted.

  Here, an example of the structure of the anti-theft device according to the embodiment of the present invention is shown in FIG. The anti-theft device 100 includes an ECU 101, a UID storage unit 102, and an information transmission unit 103. In addition, the component of the antitheft device 100 is not restricted to this, You may include another component.

  The ECU 101 performs processing related to authentication. The UID storage unit 102 records UIDs generated from all the IC tags 104 attached to the parts 105 constituting the product. The information transmission means 103 supplies power to the IC tag 104 and transmits information such as UID and ID. The ECU 101 further includes an IC tag control unit 106, a device identification unit 107, a serial input reception unit 108, a UID authentication unit 109, a UID generation unit 110, an ID collection unit 111, and an encryption key generation unit 112.

  The IC tag control means 106 controls the IC tag 104. The device specifying unit 107 specifies a component and an IC tag 104 that are communication targets in the authentication process. The serial input receiving means 108 receives ID (key), serial input, information on components to be uninstalled, etc. from the user 114 via the terminal 113. The UID authentication unit 109 authenticates the UID. The UID authentication unit 109 may also authenticate the encryption key.

  The UID generation unit 110 generates a UID using an ID collected from the IC tag 104 and a user ID. As described above, in generating the UID, the UID may be generated using only IDs collected from all the IC tags 104. The ID collection unit 111 collects each ID from all the IC tags 104. The encryption key generation unit 112 generates an encryption key based on the generated UID. The UID generation unit 110 and the encryption key generation unit 112 may be a single generation unit, and the generation unit may generate a UID as necessary, or generate an encryption key based on the UID.

  Next, various operation flows in the anti-theft device according to the embodiment of the present invention will be described. First, component installation will be described with reference to FIG. Authentication processing when a component is newly installed is very important in preventing unauthorized use of stolen goods. A user connects a part with an IC tag that requires authentication for use to his / her vehicle. Here, the connection means an electrical and mechanical connection.

  The ECU starts the authentication process when the vehicle is powered on by the user. The ECU that performs the authentication process checks the user ID and the IC tag in the vehicle, and detects the presence of a new part from the UID comparison. When detected, the ECU prompts the user to install a new part through the terminal (step S301). The ECU receives a serial (product serial) input from the user (step S302).

  Here, if a serial number for license is assigned to the new part, it is conceivable to input the code from the terminal. If serial number input is not required, the user may need to explicitly select a component to be newly installed from the component list displayed on the terminal.

  The ECU determines whether a key already exists in the encryption key memory (authentication ECU encryption key recording unit 201) of the determined IC tag to be installed (step S303). If it exists, the part to be installed is considered to be illegal, and it is determined that the installation has failed (step S307), the vehicle is changed to an inoperable state (step S308), and the series of processes is terminated.

  On the other hand, when the encryption key memory of the IC tag is empty, the ECU generates a new UID and an encryption key based on the UID based on all other IDs including the ID of the component to be installed and the user ID ( Step S305). Then, a new encryption key is set for all IC tags (step S306), the encryption key for the new component IC tag is received and recorded, and the authentication process is terminated. Note that a new encryption key may not be set for all IC tags, but only for some IC tags.

  Next, an encryption key update processing flow will be described with reference to FIG. The ECU acquires IDs from all IC tags attached to the components in the vehicle (step S401). The ECU generates a new UID based on all the acquired IDs and user IDs (step S402). The ECU generates an encryption key for the ECU based on the new UID (step S403). In this case as well, the generated new encryption key may be set only for some IC tags without being set for all IC tags.

  Next, a component uninstallation (removal) processing flow will be described with reference to FIG. The purpose of the uninstall process is to eliminate the relationship of parts belonging to a specific vehicle. By normally performing the uninstall process, it is possible to transfer used parts to other users. First, the user selects to execute the uninstall process from the activated vehicle terminal. For example, the serial input receiving unit 108 receives from the user the selection of a component to be uninstalled from the component list displayed on the terminal (step S501).

  At this time, the user ID is received again to authenticate the user (step S502). However, this step S502 is not necessarily performed and is optional. When the component (target) of the uninstall process is determined, the ECU transmits an encryption key deletion request message using the encryption key of the IC tag of the component to be uninstalled (step S503). It is determined whether or not the IC tag of the component to be uninstalled has successfully decrypted the message received from the ECU (step S504). If the decryption is successful, the IC tag is stored in the IC tag encryption key ECU encryption key record. The encryption key in the section 201 is deleted (step S505), and a message indicating that the processing has been successful is returned.

  On the other hand, if the decryption is impossible, it is determined that the uninstallation has failed (step S508). This means that one of the encryption keys held by the IC tag of the ECU and the component to be uninstalled is wrong. After step S505, the ECU collects IDs from all other IC tags except the uninstalled IC tag, and generates a new UID and a new encryption key based on the UID together with the user ID (step S506). A new encryption key is set for all IC tags (step S507). In this case as well, the generated new encryption key may be set only for some IC tags without being set for all IC tags.

  Next, an authentication process in starting the vehicle when the present invention is used will be described with reference to FIG. The purpose of user authentication is to prevent theft of the vehicle. First, immediately after the user activates the vehicle, the ECU starts user authentication. At that time, the ECU requests the user ID (key) from the user (step S601). This key may be transmitted by an immobilizer transponder or directly input by a user from a terminal.

  Thereafter, the ECU acquires IDs from all the IC tags attached to the parts constituting the vehicle (step S602), and generates a UID from the user ID and the IDs of all the IC tags (step S603). The ECU determines whether or not the generated UID matches the last UID stored in the UID storage unit 102 (the latest stored UID) (step S604). The use of the vehicle is permitted (step S605). On the other hand, if the two do not match, the ECU proceeds to an authentication process for all components (step S606). Although the comparison between UIDs is performed here, a comparison between encryption keys generated based on the UID may be used.

  Next, the user ID reissue process will be described with reference to FIG. If the user ID is lost, the authentication process in the vehicle alone cannot be performed, so that both installation and uninstallation of parts are not possible, and use of the vehicle is also impossible. In such a situation, it is necessary to have a new user ID issued from the support center via the network from the terminal.

  When it is confirmed that the user authentication by the support center is successful and a new user ID is set on the vehicle (step S701), the ECU generates a new UID based on the IDs of all the IC tags and the new user ID. (Step S702). In addition, the ECU generates a new encryption key based on the new UID (step S703). The ECU sets a new encryption key for all IC tags (step S704). If the user authentication by the support center fails, the user ID is not reissued.

  Next, a theft prevention method at the time of parking using the present invention will be described. At the time of parking, it is premised on the cooperation with the charging equipment and parking system installed in the parking lot. The parking system stores the UID of each vehicle during parking and performs individual authentication. As the communication means, wireless communication such as PLC (Power Line Communication) or DSRC (Dedicated Short Range Communication) via a charging circuit can be considered. Management is performed by using these communication means and the UID of each vehicle. Even when the UID leaks to an external third party, the user ID and the ID in the IC tag are not detected (see an example of generating a UID described later).

  Next, an example of UID generation will be described with reference to FIG. As described above, the UID is generated from a set of IDs possessed by the user ID and all IC tags attached to the parts constituting the vehicle. As a UID generation algorithm based on these combinations, the one shown in FIG. 8 can be considered. That is, the exclusive OR of the IDs of all the IC tags and the user ID (key) is taken to generate a fixed-length bit string. A value obtained by converting the bit string obtained here by a one-way function is defined as a UID. It is desired that the value obtained by the one-way function is always a bit string having a constant and sufficient length.

  Further, although the block cipher is assumed as the encryption method used in the present invention, it is considered possible to introduce not only a symmetric encryption method but also an asymmetric encryption method. At this time, each IC tag and ECU have different secret keys and public keys. The introduction of asymmetric cryptography is a costly method in terms of computer resources, but it is possible to realize a system with higher strength.

  The anti-theft device according to the present invention prevents the authentication function from being disabled by centrally managing the identification information of each component, and can prevent the theft of the component without using the wide area wireless communication function. This is useful for an anti-theft device that prevents unauthorized use of parts used in legitimate products by other products.

It is a block diagram which shows an example of a structure of the anti-theft device which concerns on embodiment of this invention. It is a block diagram which shows an example of the IC tag in embodiment of this invention. It is a flowchart which shows an example of the processing flow of the installation of the components in embodiment of this invention. It is a flowchart which shows an example of the update process flow of the encryption key in embodiment of this invention. It is a flowchart which shows an example of the processing flow of uninstallation of the components in embodiment of this invention. It is a flowchart which shows an example of the authentication processing flow in the starting of the vehicle in embodiment of this invention. It is a flowchart which shows an example of the reissue process flow of the user ID in embodiment of this invention. It is a figure for demonstrating an example of the production | generation of UID in embodiment of this invention. It is a block diagram which shows the structure of the conventional theft detection system.

Explanation of symbols

100 anti-theft device 101 ECU
102 UID storage means (storage means)
103 Information transmission means (processing means)
104 IC tag 105 Parts 106 IC tag control means 107 Device identification means 108 Serial input reception means (reception means)
109 UID authentication means (control means)
110 UID generation means (identification information generation means)
111 ID collection means (collection means)
112 Encryption key generation means (identification information generation means)
113 Terminal 114 User 201 Cryptographic Key Recording Unit for Authentication ECU 202 Cryptographic Processing Unit 901 Vehicle (moving object)
902 Information terminal 903 ID management server 904 Recording device

Claims (7)

An anti-theft device for preventing the theft of parts constituting the product,
A collecting means for collecting identification information attached to each part;
Identification information generating means for generating product identification information for identifying the product based on the collected identification information;
Storage means for storing the generated product identification information;
Processing means for performing processing for storing the product identification information generated by the identification information generation means in a predetermined storage area of the part in order to indicate that the part constitutes the product;
The product newly generated by the identification information generation unit based on the product identification information stored in the storage unit at the time of activation of the product and the identification information collected through the collection unit at the time of activation. Control means for determining whether or not the identification information matches, and performing processing for stopping the activation of the product when they do not match,
Prepared ,
When installing new parts for the product,
The control means determines whether or not the product identification information is already stored in a predetermined storage area of the new part to be installed, and if it is determined that the product identification information is not stored,
The collecting means collects identification information of other parts including the new part to be installed;
The identification information generating means generates the product identification information for identifying the product based on the collected identification information,
The processing means performs processing for storing the new product identification information generated by the identification information generation means in a predetermined storage area of all the parts constituting the product,
When it is determined that the product identification information is stored in a predetermined storage area of the new part to be installed, the control unit determines that the part is an unauthorized part and determines the product Stop starting,
When uninstalling the parts constituting the product,
A receiving unit that receives information on the component to be uninstalled;
The identification information generating means uses the product identification information stored in a predetermined storage area of the part to be uninstalled, and uses the product identification information stored in the part to be uninstalled. generates a message for erasing, theft prevention device Ru is erased the product identification information stored in the storage area of the part to be the uninstallation.   The antitheft device according to claim 1, wherein the product identification information is unique identification information for uniquely identifying the product or information generated based on the unique identification information. When updating the product identification information stored in the predetermined storage area of the parts constituting the product,
The collecting means collects identification information of the parts constituting the product;
The identification information generating means generates product identification information for identifying the product based on the collected identification information;
The processing means, wherein said new product identification information generated by the identification information generating means, to claim 1 or 2 performs processing for storing in a predetermined storage area of all parts constituting the product Anti-theft device. If the product identification information stored in a predetermined storage area of the part based on the previous SL message is erased,
The collection means collects identification information of parts other than the part that is the object of uninstallation,
The identification information generating means generates product identification information for identifying the product based on the collected identification information;
The processing means, the new product identification information generated by the identification information generating means any of claims 1 to 3 that performs processing for storing in a predetermined storage area of all parts constituting the product The antitheft device according to any one of the above. The anti-theft device according to any one of claims 1 to 4 , wherein the identification information generating unit generates the product identification information including identification information of a user who uses the product. The anti-theft device according to claim 5 , wherein the product identification information is generated by an exclusive OR of identification information of parts constituting the product and identification information of the user who uses the product. When the user's identification information is reissued,
The collecting means collects identification information of the parts constituting the product;
The identification information generating means generates new product identification information for identifying the product based on the collected identification information and the reissued user identification information,
7. The processing unit according to claim 5 or 6 , wherein the processing unit performs a process for storing the new product identification information generated by the identification information generation unit in a predetermined storage area of all parts constituting the product. Anti-theft device.

Images