JP5844663B2 - Use remedy - Google Patents

Description

The present invention remedies relates use you remedy the user to state that it is possible to operate the communication target.

  As is conventionally known, many vehicles tend to be equipped with an electronic key system that uses an electronic key as a vehicle key. In the electronic key system, the key ID is transmitted from the electronic key to the vehicle wirelessly to perform ID collation. When the ID collation is established, door lock / unlock and engine start are permitted / executed. In this type of electronic key system, it is necessary to register the electronic key to be used in the vehicle in advance. This electronic key registration system is disclosed in, for example, Patent Documents 1 and 2.

JP-A-7-61328 JP 2004-107959 A

  By the way, as an electronic key registration system, adoption of a registration method (online registration method) using network communication (Internet communication) is being studied today. As an example of the online registration method, for example, it is assumed that the center is inquired through network communication, and if user authentication is established at the center, the electronic key registration to the vehicle is permitted. However, since it is also assumed that the user is in an area where network communication is not possible (offline area), there has been a need for technology development that enables key registration in the offline area as an aid for online registration.

An object of the present invention, even if the user was in offline region, while ensuring security is to provide a can be Ru used for remedy to remedy the user communication target operational state.

In order to solve the above problem, in the present invention, when a registration command for the electronic key is input to a control device that can communicate with the electronic key , the control device uses either the electronic key ID or the encryption key from the electronic key. Is stored in its own memory, and the control device stores the other of the electronic key ID and the encryption key acquired from the center through communication with the center using a network. the online registration process that linked the unique ID and the electronic key ID of the control device, wherein although be registered before Symbol control device an electronic key is, under an environment of offline no infrastructure of the network, or the in an environment of offline network has become disconnected, the user you've lost the electronic key, Ri by the key use the control device Misao The use remedy for relieving ready for, based on the user information is communicated to said center off-line under the user, ascertaining whether authorized user in the center, Yu chromatography The confirmation is established correctly In this case, the gist includes a step of creating a temporarily usable electronic key and a step of sending the temporarily usable electronic key to a user .

According to the configuration of the present invention, when a user who does not have an electronic key at hand is in an offline area, if the user is an authorized user, an electronic key that can be temporarily used is sent to the user. Therefore, even when the user is in an offline area, it is possible to communicate with the communication target by using this electronic key. The electronic key sent to the user at this time is a key that is temporarily permitted to communicate with the communication target. Therefore, since the operation to be communicated is limited, it is possible to ensure security as compared with the case where the key use is allowed without limitation. Further, according to this configuration, since user confirmation is performed at the center, it is possible to accurately determine the legitimacy of the user.

The gist of the present invention is that the control device acquires the electronic key ID or the encryption key from the center through a registration tool. According to this configuration, since the online registration method requires a registration tool at hand, it is possible to ensure the security of key registration.

In the present invention, the center is provided with a user database for managing association between the user and the electronic key used by the user, and in the step of creating the electronic key that can be used temporarily, By referring to the user database with user information as a clue, the electronic key ID that the user has used so far is determined, and the electronic key that can be temporarily used is created based on the electronic key ID. The gist. According to this configuration, by referring to the user database, it becomes possible to easily determine key-related information related to the electronic key that has been used by the user, so it is possible to simplify the creation of a temporary usable electronic key. The effect is high .

  According to the present invention, even if the user is in an offline area, the user can be relieved to a state where the communication target can be operated while ensuring security.

The block diagram of the electronic key system of one Embodiment. The block diagram of an electronic key registration system (online registration system). The block diagram of a use relief system. The operation | movement flowchart of a use relief system. The schematic diagram of the electronic key system using the electronic key with use restrictions.

An embodiment of a use relief system and a use relief method embodying the present invention will be described below with reference to FIGS.
[Electronic key system]
As shown in FIG. 1, the vehicle 1 is provided with an electronic key system 3 that authenticates the validity of the electronic key 2 by bidirectional communication with the electronic key 2 triggered by communication from the vehicle 1. The electronic key 2 is a key capable of wirelessly transmitting an ID (electronic key ID) registered therein to the vehicle 1. Examples of the two-way communication electronic key system 3 include a key operation free system and an immobilizer system. Note that the vehicle 1 corresponds to a communication target.

  The vehicle 1 is provided with a verification ECU 4 that performs ID verification with the electronic key 2, a body ECU 5 that manages the power supply of the on-vehicle electrical components, and an engine ECU 6 that controls the engine, which are connected via a bus 7 in the vehicle. Has been. In the memory 4 a of the verification ECU 4, there are an in-vehicle device ID (vehicle ID) that is a unique ID of the vehicle 1, an electronic key ID registered in the vehicle 1, an encryption key Kcr used for encrypted communication with the electronic key 2, and the like. It is registered. When a plurality of electronic keys 2 are registered in the vehicle 1, a plurality of sets of the electronic key ID and the encryption key Kcr are stored in accordance with this. The verification ECU 4 is connected to a communication device (vehicle transmitter, vehicle receiver) 8 of a key operation free system (LF-UHF communication) and a communication device (immobilizer antenna) 9 of an immobilizer system (LF-LF communication). ing. The verification ECU 4 corresponds to a control device.

  The electronic key 2 is provided with a key control unit 10 that manages the communication operation of the electronic key 2. Similarly to the verification ECU 4, an electronic key ID, an in-vehicle device ID, an encryption key Kcr, and the like are also registered in the memory 10a of the key control unit 10. The key control unit 10 is connected to a communication unit 11 for a key operation free system and a communication unit 12 for an immobilizer system.

  In the case of the key operation free system, when the vehicle is parked, the transmitter outside the communication device LF transmits the request signal Srq to the outside of the vehicle, and returns the ID signal Sid to the electronic key 2 that has received the request signal Srq. Carry out smart verification outside the car). At this time, the in-vehicle device ID and the electronic key ID are authenticated, and encrypted communication using the encryption key Kcr is performed. If smart verification outside the vehicle is established, door locking / unlocking is permitted / executed. When the electronic key 2 is in the vehicle, the in-vehicle transmitter of the communication device 8 starts transmission of the request signal Srq, and performs in-vehicle smart verification in the same manner as outside the vehicle. If in-vehicle smart verification is established, engine start by operating the engine switch 13 is permitted.

  In the case of the immobilizer system, the authentication of the electronic key ID is performed between the vehicle 1 and the electronic key 2 by two-way communication with a short distance (communication distance: about 10 cm) using LF radio waves. Since this immobilizer communication is communication in which electric power radio waves transmitted from the vehicle 1 are used as the power source of the electronic key 2, the electronic key 2 can be operated without a power source. For short-range radio, for example, transponder communication, NFC (Near Field Communication) communication, or the like is used, and encryption communication using the encryption key Kcr is performed.

[Electronic key registration system]
As shown in FIG. 2, the electronic key 2 can be registered in the vehicle 1 by the electronic key registration system 14. In this case, each of the verification ECU 4 and the key control unit 10 is provided with registration function units 15 and 16 for performing a key registration operation. The electronic key registration system 14 of this example registers the electronic key 2 in the vehicle 1 by connecting the registration tool 17 to the vehicle 1 by wire and operating a registration tool 17 by a service person.

  The registration tool 17 can wirelessly communicate with the center 18 that manages registration of the electronic key 2 through communication via a network. This network communication is so-called Internet communication, for example, IP (Internet Protocol) communication. Further, the registration tool 17 performs wired communication with the vehicle 1 connected by wire such as a cable. Short-distance LF bidirectional communication is used for communication between the vehicle 1 and the electronic key 2 at the time of key registration.

  The electronic key registration system 14 of this example is an online registration method in which key registration is performed online with a network connectable center 18. In this case, the in-vehicle device center key Kvc used for key registration is registered in the memory 4a of the verification ECU 4. The in-vehicle device center key Kvc is an encryption key for key registration associated with the vehicle 1 and the center 18 and is assigned to each vehicle 1. The in-vehicle device center key Kvc is an encryption key compliant with, for example, AES (Advanced Encryption Standard) encryption.

  The center 18 is provided with a vehicle-mounted device database 19 for managing which vehicle-mounted device ID and electronic key 2 are registered in which vehicle 1. In the vehicle-mounted device database 19, what vehicle-mounted device center key Kvc is registered in which vehicle 1 (verification ECU 4) is also written and registered. The center 18 is provided with an electronic key database 20 for managing which electronic key ID and encryption key Kcr are registered in which electronic key 2. In the electronic key database 20, what kind of SEED code Ssd is registered in which electronic key 2 is also written and registered. The SEED code Ssd of the electronic key database 20 is created by passing the encryption key Kcr through the corresponding on-vehicle device center key Kvc at the center 18.

  When the vehicle 1 inputs an additional registration command for the electronic key 2 from the registration tool 17, the vehicle 1 acquires the electronic key ID “ID-2” from the electronic key 2 and writes and stores it in its own memory 4 a. Further, the vehicle 1 outputs a SEED production request to the center 18 via the registration tool 17 to create the SEED code Ssd of the electronic key 2 that is about to be registered. At this time, the center 18 refers to the OBE database 19 to determine the OBE center key Kvc → “key-A” to be used from the OBE ID “ID-A” received from the vehicle 1. The SEED code “A2” is created by passing the encryption key “key-2” of the electronic key 2 to be registered through “key-A”. The center 18 outputs the created SEED code “A2” to the vehicle 1 via the registration tool 17. The vehicle 1 generates the encryption key “key-2” by decrypting the SEED code “A2” acquired from the center 18 through its own vehicle-mounted device center key “key-A”, and stores this in the memory 4a. Write and save. In the electronic key 2, the vehicle-mounted device ID “ID-A” notified from the vehicle 1 during the additional registration process is written in the memory 10 a.

  When the center 18 obtains the SEED creation request from the registration tool 17, the center 18 knows the electronic key ID of the electronic key 2 that is to be additionally registered, so the electronic key ID “ID-2” of the electronic key 2 to be additionally registered is obtained. This is reflected in the in-vehicle device database 19. Further, after sending the SEED code “A2” to the registration tool 17, the center 18 reflects the encryption key “key-2” of the electronic key 2 to be registered in the in-vehicle device database 19.

[Use relief system]
As shown in FIG. 3, the vehicle 1 is provided with a use relief system 21 that rescues a user who is in a situation where online registration cannot be used. This is because, for example, if the user loses all the keys on hand and is in an offline area where network communication is not possible, even if he / she tries to register a new electronic key 2 in the vehicle 1, the electronic key registration using the above-described online registration method is performed. This is because the system 14 cannot be used and some countermeasure is required.

  The center 18 is provided with a user database 22 for managing association between key registration information and vehicle user information. The key registration information is information on the electronic key ID and mechanical key ID of each electronic key 2. The mechanical key ID is key groove pattern information formed on the key plate of the electronic key 2. The vehicle user information is information related to a user who has subscribed to the electronic key registration system 14.

  In the user database 22, a key registration information writing field includes a mechanical key ID writing field 23 and an electronic key ID writing field 24, and a vehicle user information writing field includes an in-vehicle device ID writing field 25 and a user ID writing. A column 26 is provided. By referring to the user database 22, it is possible to know which user ID uses which mechanical key ID, electronic key ID, and vehicle-mounted device ID.

  The center 18 is provided with a user information acquisition unit 27 that acquires user information Dus from a user who has lost the electronic key 2 and a user confirmation unit 28 that confirms the user information Dus. The user information acquisition unit 27 acquires user information Dus from a user who has lost the electronic key 2 in the offline area. The user information Dus is, for example, a user ID or password registered in the electronic key registration system 14. The user confirmation unit 28 confirms the validity of the user information Dus received from the user by referring to the user database 22.

  The center 18 is provided with a use-restricted electronic key creation unit 30 that creates a use-restricted electronic key (hereinafter referred to as a use-restricted electronic key 29). The electronic key creation unit 30 with use restriction refers to the user database 22 to obtain a mechanical key ID, an electronic key ID, and an in-vehicle device ID related to the user ID from the user ID in the user information Dus that has been contacted. Extraction is performed, and the use-restricted electronic key 29 is created based on these IDs. The use-restricted electronic key creation unit 30 also writes use-restriction information Dlt in the memory 29 a of the use-restricted electronic key 29. The use restriction information Dlt includes various data such as the distance from the home to the dealer, the number of times that the engine switch 13 can be turned on, and the date and time when the use restricted electronic key 29 can be used.

  The center 18 is provided with an electronic key sending part 31 for sending the created electronic key 29 with use restriction to the user. The electronic key sending unit 31 sends the electronic key 29 with use restriction to the user by mail or the like.

  The verification ECU 4 is provided with a restriction operation unit 32 that restricts the use of the vehicle 1 based on the use restriction information Dlt registered in the electronic key 29 with use restriction. The restriction operation unit 32 acquires the use restriction information Dlt from the use-restricted electronic key 29 during ID verification with the use-restricted electronic key 29, and uses the vehicle 1 only in a mode permitted by the use restriction information Dlt ( For example, engine start operation is permitted.

Next, the operation of the use relief system 21 of this example will be described with reference to FIGS.
In step 101 shown in FIG. 4, the user who has lost all the electronic keys 2 notifies the user 18 of the user information Dus to the center 18 by telephone or FAX.

In step 102, the user information acquisition unit 27 acquires user information Dus notified by the user.
In step 103, the user confirmation unit 28 confirms the user information Dus received from the user. At this time, the user confirmation unit 28 performs user confirmation by confirming whether or not the user ID and password in the user information Dus are the same as those registered in the center 18. Steps 101 to 103 correspond to a user confirmation step.

  In step 104, the use-restricted electronic key creation unit 30 extracts use restriction information Dlt to be given to the contacted user. For example, the distance from the user's home to the nearest dealer is determined, and this distance data is extracted as use restriction information Dlt. Further, use permission number data indicating the number of times that the engine start by the engine switch 13 can be operated, and date / time data indicating a period in which the key can be used may be extracted as the use restriction information Dlt.

  In step 105, the use-restricted electronic key creation unit 30 creates the use-restricted electronic key 29 based on the extracted use restriction information Dlt. At this time, the use-limited electronic key creation unit 30 refers to the user database 22 to determine the mechanical key ID and electronic key ID used by the user from the user ID of the user who has been informed that the key has been lost. And the vehicle-mounted device ID is determined, and the electronic key 2 is created based on these. At this time, the use-restricted electronic key creation unit 30 writes and stores the electronic key ID, the vehicle-mounted device ID, and the use-restriction information Dlt in the memory 29a, and processes the mechanical key ID into a plate, whereby the use-restricted electronic key 29 is created.

In step 106, the electronic key sending unit 31 sends the created use-restricted electronic key 29 to the user, for example, by mail.
In step 107, the user acquires the electronic key 29 with use restriction sent from the center by mail or the like. Steps 104 to 107 correspond to a key sending step.

  In step 108, the user operates the vehicle 1 with the use-restricted electronic key 29 that arrives at hand. At this time, ID collation (immobilizer collation) is performed between the vehicle 1 and the use-restricted electronic key 29. FIG. 5 shows an example of immobilizer collation using the electronic key 29 with use restriction. When the verification ECU 4 detects that the use-restricted electronic key 29 is inserted into the key cylinder of the driver's seat in the vehicle, the verification ECU 4 transmits a driving radio wave Scc. The use-limited electronic key 29 starts up the driving radio wave Scc as a power source, and transmits a transponder signal Str to the vehicle 1 by encrypted communication. The transponder signal Str includes, for example, an electronic key ID and usage restriction information Dlt.

  When receiving the transponder signal Str, the verification ECU 4 performs ID verification based on the electronic key ID in the transponder signal Str. In addition, the restriction operation unit 32 also determines whether or not the electronic key 29 with use restriction currently being communicated is in a usable state, based on the use restriction information Dlt in the transponder signal Str. At this time, the verification ECU 4 permits the engine start if the immobilizer verification is established and the key use is valid, and permits the engine start if the key usage is invalid even if the immobilizer verification is established. do not do. When the verification ECU 4 determines that the engine start may be permitted, the verification ECU 4 outputs an engine start permission signal to the engine ECU 6.

  In step 109 shown in FIG. 4, the vehicle 1 permits vehicle use (engine start) only under restricted conditions. That is, the engine start permission signal is output from the verification ECU 4 to the engine ECU 6 only when the use-limited electronic key 29 is in a valid state, and therefore, the engine start operation can be performed only when the key use is valid.

According to the configuration of the present embodiment, the following effects can be obtained.
(1) When the user loses all the electronic keys 2 and is in an offline area, the new key cannot be registered in the vehicle 1 by the online registration method, so the user first provides the user information Dus by telephone or FAX, for example. Contact Center 18. After confirming the validity of the user based on the user information Dus, the center 18 sends the electronic key 29 with use restriction to the user by mail or the like. As a result, the key is delivered to the user in the offline area even though the use is restricted, and the vehicle 1 can be operated (engine start operation) with this key. Further, since the electronic key delivered to the user is a key that is restricted in use, security can be ensured as compared with the case where the key use is allowed without restriction. As described above, even if the user is in an offline region, the user can be rescued from a situation where the vehicle cannot be used by permitting the use of the vehicle while ensuring security.

(2) Since the electronic key 29 with use restriction is sent to the user who has lost the key, the effect of preventing unauthorized registration of the key and preventing vehicle theft is enhanced.
(3) The online registration method of the electronic key registration system 14 requires the registration tool 17 at hand, so that the security of key registration can be ensured.

(4) Since the user who has lost the electronic key 2 is confirmed at the center 18, the legitimacy of the user can be accurately determined.
(5) Since the electronic key 29 with use restriction is distributed to the user by mail, the certainty of the key distribution to the user can be ensured.

  (6) The user database 22 is provided in the center 18, and by referring to the user database 22, key-related information (vehicle equipment ID, electronic key ID, mechanical key ID) necessary for the use-restricted electronic key 29 is acquired. Therefore, the electronic key 29 with use restriction can be created accurately and efficiently.

Note that the embodiment is not limited to the configuration described so far, and may be modified as follows.
The creation of the electronic key 29 with use restriction is not limited to being performed at the center 18. For example, a purchase order may be sent from the center 18 to the factory, and the electronic key 29 with use restriction created at the factory may be sent to the user.

  The online registration method is not limited to the system configuration illustrated in FIG. 2, and may be any registration method using a network. The online registration method is not limited to the method of registering the encryption key Kcr, and may be a method of delivering an electronic key ID.

The electronic key registration system 14 may be in a form that does not use the registration tool 17.
The electronic key system 3 is not limited to a key operation free system or an immobilizer system, and may be, for example, a wireless key system that performs ID collation by narrowband radio in response to communication from the electronic key 2.

The communication of the user information Dus is not limited to telephone or FAX, and can be changed as long as the user information Dus can be notified.
User information Dus is not limited to a user ID or password, but may be other symbols, ciphertexts, or the like.

The user confirmation is not limited to being performed by the center 18, but may be performed at another place and the confirmation result may be notified to the center 18.
The sending of the electronic key 29 with use restriction to the user is not limited to mailing, but can be sent to the user by other methods.

  -Use restrictions are not limited to the form which places restrictions on the vehicle 1 side. For example, the use of the vehicle 1 can be restricted by making the use-restricted electronic key 29 unusable after the expiration date (time up).

The usage restriction information Dlt is not limited to different data for each user, and may be uniform.
The content of the use restriction can be appropriately changed as long as a certain restriction can be imposed on the use of the vehicle 1.

Next, technical ideas that can be grasped from the above-described embodiment and other examples will be described below together with their effects.
(B) In an environment where an electronic key can be registered in the communication target control device by an online registration method in which the center is inquired using a network, but there is no electronic key at hand and the network cannot be connected. A use relief method for relieving a user who has been struck from a state in which the communication target cannot be operated, comprising the above-described user confirmation step and key sending step.

  DESCRIPTION OF SYMBOLS 1 ... Vehicle as communication object, 2 ... Electronic key, 4 ... Verification ECU as control apparatus, 17 ... Registration tool, 18 ... Center, 21 ... Use relief system, 22 ... User database, 29 ... Temporarily usable Electronic key with use restriction as an electronic key, Dus... User information, Ssd... SEED code as registration information necessary in the registration sequence.

Claims (3)

When a registration command for the electronic key is input to the control device that can communicate with the electronic key , the control device obtains one of the electronic key ID and the encryption key from the electronic key, stores it in its own memory, and stores the network. Save the other of the electronic key ID and the encryption key by the control device through a communication with the center has obtained from the Center using the memory, and the electronic key ID and the unique ID of the center and the control device the online registration method of association, the although be registered before Symbol control device an electronic key is, under an environment of infrastructure is not offline the network, or in the off-line environment in which the network becomes disconnected, the a user who has lost the electronic key, met how to use rescue to relief to the state in which the control unit Ri by the key use can be manipulated ,
Based on the user information is communicated to said center off-line under the user, ascertaining whether authorized user in the center,
When Yu over The confirmation is established correctly, the method comprising the steps of: creating an electronic keys temporarily available,
Use remedy for comprising the <br/> the step of sending the electronic keys temporarily available to the user. The use relief method according to claim 1, wherein the control device acquires the electronic key ID or the encryption key from the center through a registration tool. The center is provided with a user database for managing the association between the user and the electronic key used by the user,
In the step of creating the electronic key that can be used temporarily, the electronic key ID that the user has used so far is determined by referring to the user database using the user information as a clue, and the electronic key ID The use relief method according to claim 1, wherein the electronic key that can be used temporarily is created based on the key.