JP5956244B2 - Mobile device registration system - Google Patents

Description

  The present invention relates to a portable device registration system for registering a portable device with a control device to be communicated.

  2. Description of the Related Art Conventionally, a portable device system that performs encrypted communication between a portable device possessed by a vehicle user and the vehicle and performs locking / unlocking of a door, starting / stopping of an engine, etc. based on the establishment of authentication is known. ing. And in such a portable machine system, in order to maintain security, it is necessary to protect communication between a portable machine and a vehicle. For this reason, in the portable device system, encryption communication is performed between the portable device and the vehicle (see, for example, Patent Document 1). In encrypted communication, since the communication content is encrypted, it is excellent in confidentiality.

  A common key encryption method is adopted as the encryption method of the encryption communication. In the common key cryptosystem, the same encryption key is used for encryption and decryption. For this reason, it is necessary to have the same encryption key in both the portable device and the vehicle. The registration of the encryption key to the portable device and the vehicle is performed in the process of registering the portable device to the vehicle control device. The control device authenticates with the portable device by collating the identification information wirelessly transmitted from the portable device with the identification information stored in itself.

JP 2009-302848 A

  By the way, in a portable device registration system for registering a portable device with a control device, if there is no association between the control device and the portable device, any portable device can be registered with the control device, and other than the user May be registered in the control device. In this case, since the portable device system can be operated by using a portable device other than the user, the security is low.

  The present invention has been made in view of such circumstances, and an object thereof is to provide a portable device registration system with high security.

In order to solve the above-mentioned problem, the invention according to claim 1 is characterized in that the same encryption key is held with a communication target and encrypted communication is performed with the communication target control device using the encryption key. In the portable device registration system for registering a portable device to be performed in the control device, the control device generates a key for generating an encryption key from first identification information unique to the communication target and a key generation code fetched from outside Logic is stored, and the portable device stores an encryption key generation code unique to the portable device used when generating the encryption key and the encryption key generated using the key generation logic. The control device writes the first identification information in the registered portable device through wireless communication with the portable device as the registration processing of the portable device, and stores the encryption key stored in the portable device. The generated code is generated from the key generation code using the key generation logic stored in the key generation code, and the generated encryption key is stored. The management server that manages the identification information of one stores the activation logic specific to the first identification information that is used for encryption and decryption of the signal between the two, and the control device stores the first identification information It sends an activation request signal including the identification information to the management server, the management server using the activation logic shown that permits the encrypted communication using the encryption key wherein the controller stores The encrypted activation permission signal is sent to the control device, and the control device receives the activation permission signal when the activation permission signal is received. While decoding with the active of logic, and summarized in that to allow the encrypted communication using the encryption key that it has stored.

According to this configuration, since the activation permission signal transmitted from the management server is encrypted using the activation logic unique to the first identification information, the party to be permitted to activate, that is, It can be decoded only by a control device having the same first identification information as the previous first identification information. For this reason, the activation permission signal cannot be decoded by other control devices. In other words, the activation is not permitted, so that the security is high.

According to a second aspect of the present invention, there is provided a portable device that has the same encryption key with a communication target and performs encrypted communication with the communication target control device using the encryption key. In the portable device registration system for registering, a key generation logic for generating an encryption key from first identification information unique to the communication target and a key generation code fetched from outside is stored in the control device, and the portable device Is stored with an encryption key generation code unique to the portable device used when generating the encryption key, and the encryption key generated using the key generation logic, the control device, As the registration process of the portable device, the first identification information is written to the registered portable device through wireless communication with the portable device, and the encryption key generation code stored in the portable device is fetched. Generating the encryption key from the key generation code using the key generation logic stored in the key generation code, and storing the generated encryption key, wherein the control device stores the stored encryption key and the first sends an activation request signal associating the first identification information to the management server, the management server to confirm the presence or absence of registration to itself of the encryption key included in the activation request signals received, if no registration The encryption key is registered in association with the first identification information, and an activation permission signal indicating permission of the encrypted communication using the encryption key is sent to the control device, The control device, when receiving the activation permission signal using the stored encryption key, permits the encrypted communication using the stored encryption key To.

According to this configuration, the management server sends an activation permission signal only when the received encryption key is not registered. That is, the management server does not send an activation permission signal if the encryption key is registered. If the control device does not receive the activation permission signal, it cannot perform encrypted communication with the portable device even if it stores the encryption key. For this reason, since the portable device cannot perform encrypted communication with a plurality of control devices, the security is high.

According to a third aspect of the present invention, there is provided a portable device that has the same encryption key with a communication target and performs encrypted communication with the control target control device using the encryption key. In the portable device registration system for registering, a key generation logic for generating an encryption key from first identification information unique to the communication target and a key generation code taken from outside is stored in the control device, and the portable device Is stored with an encryption key generation code unique to the portable device used when generating the encryption key, and the encryption key generated using the key generation logic, the control device, As the registration process of the portable device, the first identification information is written to the registered portable device through wireless communication with the portable device, and the encryption key generation code stored in the portable device is fetched. Generates the encryption key from the key generation code using the key generation logic stored in the key generation code, stores the generated encryption key, and manages the control device and the first identification information The management server stores activation logic unique to the first identification information used for signal encryption and decryption between the two, and the control device stores the stored encryption key and the first It sends an activation request signal that associates identification information to the management server, the management server to confirm the presence or absence of registration to itself of the encryption key included in the activation request signals received, in the absence registration has And registering the encryption key in association with the first identification information, and using the activation logic indicating that the encrypted communication using the encryption key is permitted An encrypted activation permission signal is sent to the control device, and the control device activates the activation permission signal when receiving the activation permission signal using the stored encryption key. The gist is to decrypt using logic and permit the encrypted communication using the encryption key stored by itself.

According to this configuration, the management server sends an activation permission signal only when the received encryption key is not registered. That is, the management server does not send an activation permission signal if the encryption key is registered. If the control device does not receive the activation permission signal, it cannot perform encrypted communication with the portable device even if it stores the encryption key. Further, since the activation permission signal is encrypted using the activation logic, the party to be permitted to be activated, that is, the control device having the same first identification information as the previous first identification information. Can only be deciphered with For this reason, the activation permission signal cannot be decrypted by other control devices. In other words, activation is not permitted, and the portable device cannot perform encrypted communication with a plurality of control devices. High nature.

According to a fourth aspect of the present invention, in the portable device registration system according to the first or third aspect, the control device transmits an activation request signal encrypted using the activation logic, and the management server The gist is to decrypt the activation request signal encrypted using the activation logic.

  According to this configuration, the activation request signal in which the first identification information and the encryption key are associated cannot be decrypted unless it has the activation logic. Therefore, since the first identification information and the encryption key can be prevented from leaking to the outside, the security is further improved.

The invention according to claim 5 is the portable device registration system according to any one of claims 1 to 4, wherein the control device and the portable device are specific to the portable device in addition to the encryption key. The encrypted communication is performed using the second identification information, and the control device captures the second identification information together with the key generation code, stores the second identification information, and stores the second identification information. And the management server checks whether or not the second identification information is registered in addition to the presence or absence of the encryption key, and transmits the encryption key and the encryption key. When the second identification information is not registered, the encryption key and the second identification information are registered in association with the first identification information, and the second identification information is used for the activation request signal. Allow the encrypted communication And summary to be included the effect that.

According to this configuration, the encryption key and the second identification information are registered in the management server in a state associated with the first identification information. For this reason, even if the portable device is lost, the portable device corresponding to the control device can be manufactured from the information registered in the management server .

According to a sixth aspect of the present invention, in the portable device registration system according to any one of the first to fifth aspects, communication between the control device and the management server is performed via a tool including a notification unit. When the management server cannot transmit the activation permission signal, the management server transmits an activation disable signal indicating that, and when the tool receives the activation disable signal, the management server transmits the activation disable signal. The gist is to notify that the activation permission signal cannot be transmitted via the notification means.

  According to this configuration, when activation is not permitted, the notification means notifies that, so the operator who performs the registration work between the control device and the portable device recognizes that activation was not permitted. It's easy to do.

  According to the present invention, it is possible to provide a portable device registration system with high security.

The block diagram which shows schematic structure of an electronic key registration system. The figure which shows manufacture of an electronic key registration system. The figure which shows registration of an electronic key registration system. The sequence chart which shows the registration work of an electronic key registration system. The figure which shows manufacture of the additional key of an electronic key registration system. The figure which shows manufacture of exchange ECU of an electronic key registration system.

Hereinafter, an embodiment in which an electronic key registration system according to the present invention is embodied in a vehicle will be described with reference to FIGS.
As shown in FIG. 1, the vehicle 1 is provided with an immobilizer system 3 that executes ID verification with the electronic key 2 by, for example, short-range wireless communication (wireless communication with a communication distance of about several centimeters). The electronic key 2 is provided with an ID tag, so-called transponder 4. The immobilizer system 3 is a system that performs ID verification based on a key ID signal transmitted from the transponder 4 when the transponder 4 is activated by a driving radio wave transmitted from the coil antenna 5 of the vehicle 1. Note that the vehicle 1 corresponds to a communication target. The immobilizer system 3 functions as an electronic key system.

  The vehicle 1 is provided with an immobilizer ECU 6 as a control unit of the immobilizer system 3. An engine ECU 12 that controls the operation of the engine 11 is connected to the immobilizer ECU 6 via an in-vehicle LAN 13. In the memory 67 of the immobilizer ECU 6, the key ID of the electronic key 2 that is paired with the vehicle 1 is registered. The immobilizer ECU 6 is connected to a coil antenna 5 that transmits and receives radio waves in an LF (Low Frequency) band and an HF (High Frequency) band. The coil antenna 5 employs a magnetic field antenna that transmits radio waves using a magnetic field component, and is provided in a key cylinder. The immobilizer ECU 6 corresponds to a control device.

  The transponder 4 of the electronic key 2 is provided with a control unit 41 that controls the communication operation. A key ID (transponder code) unique to the electronic key 2 is registered in the memory 42 of the control unit 41. The transponder 4 is provided with a transmission / reception antenna 21 for transmitting and receiving radio waves in the LF band and the HF band.

  When the immobilizer ECU 6 detects that the electronic key 2 is inserted into the key cylinder, the immobilizer ECU 6 intermittently transmits drive radio waves from the coil antenna 5. When the boarded user starts the engine 11, the electronic key 2 is inserted into the key cylinder to perform a turning operation. At this time, when the transponder 4 receives the driving radio wave transmitted from the coil antenna 5 by the transmission / reception antenna 21, the transponder 4 starts up using the driving radio wave as a power source. When the transponder 4 switches to the activated state, the transponder 4 transmits a key ID signal including the key ID registered in the transponder 4 from the transmission / reception antenna 21. When the immobilizer ECU 6 receives the key ID signal transmitted from the transponder 4 by the coil antenna 5, the immobilizer ECU 6 is permitted to use the key ID included in the key ID signal and its own memory 67 (the permission flag is set). ID collation (immobilizer collation) with the key ID is performed. The immobilizer ECU 6 stores the ID verification result in the memory 67. In this example, setting the permission flag is referred to as activation, and details of the activation will be described later.

  An ignition switch (IGSW) 14 for detecting the rotational position of the electronic key 2 is provided in the key cylinder. When the ignition switch 14 is operated to the engine start position, the engine ECU 12 checks with the immobilizer ECU 6 whether or not ID verification is established. The engine ECU 12 acquires the result of the ID collation from the immobilizer ECU 6, and when the result indicates that the collation is established, the engine ECU 12 starts the ignition control and the fuel injection control to the engine 11 and starts the engine 11.

  The immobilizer ECU 6 performs challenge response authentication in addition to code verification for confirming the key ID of the electronic key 2. In challenge response authentication, for example, the vehicle 1 transmits a challenge code as a random number code to the electronic key 2 to calculate the response, and the response code calculated by the vehicle 1 itself matches the response code received from the electronic key 2. It is authentication by NO. For the authentication between the immobilizer ECU 6 and the transponder 4 in this example, a common key encryption method using a common encryption key is employed. The electronic key 2 and the immobilizer ECU 6 calculate a response code from the challenge code using the encryption keys registered respectively.

  The memory 42 of the transponder 4 stores a vehicle ID (VID), which is identification information unique to the vehicle 1, a SEED code (SC) used when generating the encryption key K, and an encryption key K used for authentication. Has been.

  The memory 67 of the immobilizer ECU 6 includes a vehicle ID (VID) that is identification information unique to the vehicle 1, an encryption key K used for authentication, a key generation logic f used when generating the encryption key K, and an electronic key. 2 key IDs are stored. The memory 67 stores activation logic g for encrypting the vehicle ID, the key ID, the encryption key K, and the like. The activation logic g is unique corresponding to the vehicle ID. This activation logic g is used in the activation process.

  The immobilizer system 3 includes an electronic key registration system 7 that registers the electronic key 2 in the immobilizer ECU 6. The electronic key registration system 7 is a system that performs wireless communication between the electronic key 2 and the immobilizer ECU 6 and registers information unique to each other. The electronic key registration system 7 includes a management center 9 that allows the immobilizer ECU 6 to be activated. The management center 9 includes a database 90 that stores the vehicle ID in a state in which the key ID, the encryption key K, and the activation logic g are associated with each other. As shown in FIG. 2, the database 90 initially stores only the vehicle ID and activation logic g unique to the vehicle 1. When the immobilizer ECU 6 is manufactured, the vehicle ID and the activation logic g stored in the database 90 are stored in the memory 42. Note that the writing of the key ID and the encryption key K to the database 90 is performed during the activation process. Further, (-) shown in FIG. 2 indicates that the key ID or the like is not registered, that is, blank.

  As shown in FIG. 1, the electronic key registration system 7 includes a registration tool 8 for registering the electronic key 2 in the immobilizer ECU 6. The registration tool 8 is used by being connected to the vehicle 1. The registration tool 8 switches the operation mode of the immobilizer ECU 6 between the normal mode and the registration mode. The immobilizer ECU 6 in the registration mode wirelessly communicates with the electronic key 2 to register its own information (vehicle ID (VID-A)) in the electronic key 2 and also to the electronic key 2. Information (key ID (Ky-A), encryption key K (KA)) is registered. Then, the immobilizer ECU 6 generates an activation request signal and sends it to the registration tool 8. The registration tool 8 includes a control unit 81 that controls the registration tool 8, an operation unit 82 that detects a registration operation by the user, and a display unit 83 that displays the registration operation. When the registration tool 8 is operated by the user and set to the registration mode, the registration tool 8 outputs a registration signal indicating that the operation mode of the immobilizer ECU 6 is changed to the registration mode to the vehicle 1. Further, when receiving the activation request signal from the immobilizer ECU 6, the registration tool 8 sends the activation request signal to the management center 9 via the network. When receiving the activation permission signal from the management center 9, the registration tool 8 sends the activation permission signal to the immobilizer ECU 6. The activation request signal (Active demand, hereinafter referred to as Ad signal) and the activation permission signal (Active appearance, hereinafter referred to as Aa signal) will be described in the process of activation described later.

  The immobilizer ECU 6 is provided with a mode switching unit 61 that switches operation modes. When a registration signal is input from the registration tool 8, the mode switching unit 61 switches the operation mode from the normal mode to the registration mode. The mode switching unit 61 switches the operation mode to the normal mode when the connection between the immobilizer ECU 6 and the registration tool 8 is released after switching to the registration mode. The immobilizer ECU 6 in the normal mode performs normal authentication, that is, ID verification with the electronic key 2.

  The immobilizer ECU 6 is provided with a vehicle ID transmission unit 62 that transmits a vehicle ID to the electronic key 2 to be registered. When the operation mode of the immobilizer ECU 6 is switched to the registration mode, the vehicle ID transmission unit 62 transmits a vehicle ID signal including the vehicle ID stored in the memory 67 from the coil antenna 5 to the electronic key 2.

  Further, the immobilizer ECU 6 is provided with a SEED reading unit 64 that reads a SEED code in order to generate the encryption key K stored in the electronic key 2. The immobilizer ECU 6 transmits a SEED request signal for requesting a SEED code from the coil antenna 5. When the electronic key 2 receives the SEED request signal, the electronic key 2 generates a SEED signal including a SEED code, and transmits the generated signal. The SEED reading unit 64 extracts the SEED code from the SEED signal received via the coil antenna 5.

  The immobilizer ECU 6 is provided with an encryption key generation unit 65 that generates an encryption key K. The encryption key generation unit 65 generates the encryption key K from the SEED code acquired by the SEED reading unit 64 using the key generation logic f stored in the memory 67.

  The immobilizer ECU 6 is provided with an activation request signal generation unit (hereinafter referred to as an Ad signal generation unit) 68 that generates an Ad signal. The Ad signal generation unit 68 uses the activation logic g stored in the memory 67 to generate an Ad signal obtained by encrypting the key ID, the encryption key K, and a code that requests activation permission.

  The management center 9 includes an activation request signal reading unit (hereinafter referred to as an Ad signal reading unit) 91 that reads an Ad signal, a determination unit 92 that determines whether or not activation is permitted, and data for updating data in the database 90. A writer 93 and an activation permission signal generator (hereinafter referred to as Aa signal generator) 94 are provided.

  When the management center 9 receives the Ad signal, the Ad signal reading unit 91 uses any of the activation logics g stored in the database 90, and the vehicle ID, the key ID, and the encryption key K included in the Ad signal. And code that requests activation. The determination unit 92 determines whether or not there is a code requesting permission for activation read by the Ad signal reading unit 91. If it is determined that the code is present, the determination unit 92 refers to the key ID received with reference to the database 90. And whether the encryption key K is registered. When the determination unit 92 determines that the received key ID and encryption key K are not registered, the data writing unit 93 corresponds to the received vehicle ID and the received key ID. To the database 90. When the key ID and the encryption key K are written in the database 90 in the data writing unit 93, the Aa signal generation unit 94 receives the vehicle ID, the key ID, the encryption key K, and a code that permits activation as the vehicle ID. The Aa signal encrypted with the activation logic g corresponding to is generated. The management center 9 sends the Aa signal generated by the Aa signal generation unit 94 to the registration tool 8 via the network.

  The immobilizer ECU 6 is provided with an activation permission signal reading unit (hereinafter referred to as Aa signal reading unit) 69 that reads the received Aa signal and sets a permission flag on the key ID and encryption key K registered in the memory 67. Yes. The Aa signal reading unit 69 uses the activation logic g stored in the memory 67 to read the vehicle ID, the key ID, the encryption key K, and the code permitting activation included in the Aa signal. If the read key ID and encryption key K are registered in the memory 67, a permission flag is set for the key ID and encryption key K (activation). The key ID and the encryption key K can be used by being activated. Thereby, the immobilizer ECU 6 can perform ID collation with the electronic key 2 having the activated key ID and the encryption key K.

Next, the registration operation of the electronic key 2 to the immobilizer ECU 6 will be described with reference to FIGS.
The vehicle 1 is composed of various parts. For this reason, after each part is manufactured in a parts factory, it is collected in an assembly factory, and is assembled | attached to the vehicle 1 there. That is, the immobilizer ECU 6 and the electronic key 2 are each manufactured at the parts factory, then collected at the assembly factory, and assembled to the vehicle through the assembly line. And the registration operation | work of the electronic key 2 with respect to immobilizer ECU6 is performed.

  First, the manufacturing work in the parts factory before the registration work will be described. As shown in FIG. 2, the immobilizer ECU 6 is manufactured in a state in which the vehicle ID (VID-A), the key generation logic f, and the activation logic g (g-A) are stored in the memory 67. The vehicle ID (VID-A) and the activation logic g (g-A) are those stored in the database 90. These are unique to the immobilizer ECU 6. The key generation logic f is common to all manufactured immobilizer ECUs 6. On the other hand, the electronic key 2 includes a key ID (Ky-A), a SEED code (SC-A), and an encryption key K (KA) generated from the SEED code using the key generation logic f. Manufactured in the state stored in the memory 42. The SEED code (SC-A) is unique to the electronic key 2.

  Next, the registration operation of the electronic key 2 in the assembly factory will be described. As shown in FIG. 3, in the electronic key registration system 7 of this example, the immobilizer ECU 6 transmits a vehicle ID signal including a vehicle ID (VID-A). When receiving the vehicle ID signal from the immobilizer ECU 6, the electronic key 2 registers the vehicle ID (VID-A) included in this signal. The electronic key 2 transmits a SEED code signal including a SEED code (SC-A). The immobilizer ECU 6 temporarily stores the SEED code included in the SEED code signal in the memory 67, and generates the encryption key K (K-1) from the SEED code (SC-A) using the key generation logic f. This is stored in the memory 67. Thus, the electronic key 2 and the immobilizer ECU 6 are not linked (corresponding) in advance, but are linked only after registration work in the assembly factory.

  Here, the registration process procedure of the electronic key 2 will be described in detail according to the sequence charts shown in FIGS. As shown in FIG. 4, when the registration tool 8 is operated by the user and set to the registration mode, the registration tool 8 outputs a registration signal to the immobilizer ECU 6 (step S1). When receiving the registration signal, the immobilizer ECU 6 switches the operation mode to the registration mode (step S2).

  Then, the immobilizer ECU 6 transmits a vehicle ID signal including the vehicle ID (VID-A) stored in the memory 67 from the coil antenna 5 to the electronic key 2 (step S3). When receiving the vehicle ID signal, the electronic key 2 writes the vehicle ID (VID-A) included in the vehicle ID signal in the memory 42 (step S4).

Immobilizer ECU6 transmits the key ID request signal which requests | requires transmission of key ID from the coil antenna 5 following transmission of vehicle ID of step S3 (step S5).
When receiving the key ID request signal, the electronic key 2 transmits a key ID signal including the key ID (Ky-A) stored in the memory 42 as a response thereto (step S6).

When receiving the key ID signal, the immobilizer ECU 6 writes the key ID (Ky-A) included in the signal to the memory 67 (step S7).
Immobilizer ECU6 transmits the SEED request | requirement signal which requests | requires transmission of a SEED code from the coil antenna 5 following transmission of the key ID request | requirement signal of step S5 (step S8).

  When receiving the SEED request signal, the electronic key 2 transmits a SEED signal including the SEED code (SC-A) stored in the memory 42 as a response thereto (step S9).

  When receiving the SEED signal, the immobilizer ECU 6 generates the encryption key K (KA) from the SEED code (SC-A) included in the signal using the key generation logic f (step S10). That is, the immobilizer ECU 6 does not directly acquire the encryption key K (KA) from the electronic key 2, but generates the encryption key K (KA) by acquiring the SEED code (SC-A). The SEED code (SC-A) is temporarily stored in the memory 67. Subsequently, the immobilizer ECU 6 stores the generated encryption key K (KA) in the memory 67 (step S11).

  Subsequently, as shown in FIG. 5, the immobilizer ECU 6 activates an activation request signal (Ad signal) in order to obtain permission (activation) of ID collation using the key ID and the encryption key K registered in itself. Is transmitted to the registration tool 8 (step S12). The registration tool 8 that has received the Ad signal transmits this Ad signal to the management center 9 via the network (step S13).

  When receiving the Ad signal, the management center 9 uses the activation logic g to obtain a vehicle ID, a key ID, an encryption key K, and a code requesting permission for activation (step S14). Next, the management center 9 determines whether or not the received key ID and encryption key K are registered in the database 90 (step S15). If the key ID and the encryption key K are not registered in the database 90, the management center 9 writes the key ID and the encryption key K in the database 90 so as to correspond to the received vehicle ID (step S16). Then, the management center 9 transmits an activation permission signal (Aa signal) to the registration tool 8 via the network (step S17).

  The registration tool 8 that has received the Aa signal transmits the received Aa signal to the connected immobilizer ECU 6 (step S18). When receiving the Aa signal, the immobilizer ECU 6 obtains a vehicle ID, a key ID, an encryption key K, and a code permitting activation using the activation logic g (step S19). When the immobilizer ECU 6 obtains a code permitting activation, the immobilizer ECU 6 sets a permission flag on the received key ID and encryption key K (activation) (step S20). In this way, the immobilizer ECU 6 can perform ID verification with the electronic key 2 using the key ID and the encryption key K registered in itself.

  As shown in FIG. 6, when the key ID and the encryption key K are registered in the database 90 in step S15, the management center 9 writes the key ID and the encryption key K into the database 90. Without activation, an activation impossible signal (nAa signal) indicating that activation cannot be performed is transmitted to the registration tool 8 (step S21). The registration tool 8 that has received the nAa signal displays on the display unit 83 a message indicating that activation is not possible (step S22).

  Thus, when the electronic key 2 is already registered in the database 90, the key ID and the encryption key K of the electronic key 2 are not activated. That is, the immobilizer ECU 6 cannot perform ID verification using the key ID and the encryption key K that are registered but not activated. Thereby, since the electronic key 2 cannot perform ID collation with respect to several immobilizer ECU6, security is high. Further, through visual recognition of the display unit 83, an operator who performs a series of registration operations can recognize that the electronic key 2 has already been registered in the database 90.

Next, a case where the electronic key 2 is lost after the vehicle is shipped and the electronic key 2 is replenished, and a case where the immobilizer ECU 6 is replaced due to a failure or the like will be described.
As shown in FIG. 3, the activated vehicle ID, key ID, encryption key K, and activation logic g are stored in the database 90 of the management center 9 in association with each other. For this reason, if the vehicle ID or the key ID is known, the electronic key 2 and the immobilizer ECU 6 in a state in which the ID can be collated can be easily manufactured by reading the corresponding information from the database 90. Therefore, the special registration work described above is not necessary.

As described above, according to the embodiment described above, the following effects can be obtained.
(1) The immobilizer ECU 6 sets a permission flag for the key ID and the encryption key K when receiving an activation permission signal permitting ID verification using the registered key ID and the encryption key K. . The immobilizer ECU 6 permits only ID collation using the key ID and the encryption key K with the permission flag set. That is, ID verification using a key ID and an encryption key K without a permission flag cannot be performed. Thereby, since the electronic key 2 cannot perform ID collation with respect to several immobilizer ECU6, the security property of the immobilizer system 3 is high.

  Further, if the registration work through the management center 9 is not performed, the key ID and the encryption key K are not activated. Therefore, even if the electronic key 2 or immobilizer ECU 6 before registration flows out to the market, the electronic key 2 or immobilizer ECU 6 that has flowed out cannot perform registration work via the management center 9. Also from this point, the security of the immobilizer system 3 is high.

  (2) The electronic key 2 and the immobilizer ECU 6 are not linked in advance, but are linked only after registration work in the assembly factory. That is, the electronic key 2 can be registered with any immobilizer ECU 6. Conversely, the immobilizer ECU 6 can be registered for any electronic key 2. Thus, the electronic key 2 and the immobilizer ECU 6 do not need to be delivered to the assembly factory as a set. In addition, the burden on the worker during registration work is small.

  (3) The activation request signal and the activation permission signal are encrypted with the activation logic unique to the vehicle ID. The activation request signal and the activation permission signal other than the management center 9 and the immobilizer ECU 6 that are parties having the same vehicle ID cannot be decoded. As a result, the vehicle ID, the key ID, and the encryption key K included in the activation request signal and the activation permission signal are prevented from leaking outside.

  (4) Communication between the immobilizer ECU 6 and the management center 9 is performed via the registration tool 8 including the display unit 83. Further, the management center 9 transmits an activation disabling signal indicating that activation cannot be permitted when at least one of the key ID and the encryption key K included in the activation request signal is registered in the database 90. did. The registration tool 8 displays that the activation cannot be permitted through the display unit 83 when receiving the activation disabling signal. Thereby, an operator who performs a series of registration operations can easily recognize that the electronic key 2 has already been registered in the database 90 through visual recognition of the display unit 83.

In addition, the said embodiment can be implemented with the following forms which changed this suitably.
In the above embodiment, the key ID may not be included in the activation request signal. That is, the management center 9 checks only whether or not the encryption key K is registered in the database 90. If there is no registration, the management center 9 registers the encryption key K and transmits an activation permission signal. Even in this case, the electronic key 2 has high security because ID collation with the plurality of immobilizer ECUs 6 is not permitted. Further, the activation request signal may not include the encryption key. That is, the management center 9 registers only the vehicle ID in the database 90 and then transmits an activation permission signal. Even in this case, since the activation permission signal is encrypted by the activation logic g, the security is high.

  In the above embodiment, the management center 9 does not necessarily have to confirm whether or not the encryption key K is registered. In this case, the management center 9 needs to encrypt the activation permission signal with the activation logic g. In such a configuration, the activation permission signal can be decoded only by the immobilizer ECU 6 that should receive the activation permission signal. For this reason, even if the activation permission signal is received by another immobilizer ECU, the received activation permission signal cannot be decoded. Accordingly, wireless communication between the other immobilizer ECU and the electronic key registered in the immobilizer ECU is not activated, so that the security is high.

  In the above embodiment, the activation request signal and the activation permission signal are not necessarily encrypted by the activation logic. Further, what is encrypted by the activation logic may be either the activation request signal or the activation permission signal. Even in this case, the electronic key 2 has high security because ID collation with the plurality of immobilizer ECUs 6 is not permitted.

  In the above embodiment, the communication between the immobilizer ECU 6 and the management center 9 is not necessarily performed via the registration tool 8. That is, the communication between the immobilizer ECU 6 and the management center 9 may be performed via another tool or directly. Even in this case, the electronic key 2 has high security because ID collation with the plurality of immobilizer ECUs 6 is not permitted.

  In the above embodiment, when the registration tool 8 receives the activation permission signal, the registration tool 8 may display the fact on the display unit 83. In this way, the registered worker can easily recognize that the activation is permitted.

  -In the said embodiment, as an alerting | reporting means which alert | reports that activation is impossible, not only the display part 83 but various forms can be taken. For example, notification by sound or notification by light or vibration may be used.

  In the above embodiment, the electronic key 2 may delete the SEED code after registering the vehicle ID. If the SEED code is deleted, registration to the immobilizer ECU 6 becomes impossible, so that one electronic key 2 can be prevented from being registered in a plurality of immobilizer ECUs 6.

  In the above embodiment, the immobilizer ECU 6 may delete the key generation logic f itself after the registration work. In this way, it is possible to prevent another electronic key from being registered in the immobilizer ECU 6. Further, it is possible to prevent the key generation logic f itself from leaking outside. Even if the key generation logic f is not deleted, it is possible to prevent another electronic key from being registered in the immobilizer ECU 6 if the use is prohibited after the registration work.

  In the above embodiment, the present invention is applied to the type of immobilizer system 3 in which the electronic key 2 is inserted into the key cylinder. However, when the electronic key enters the communication area created by the radio wave transmitted from the vehicle 1, The present invention may be applied to an electronic key system of a type in which communication is performed.

  In the above embodiment, the present invention is applied to the immobilizer system 3 in which the electronic key 2 activated by receiving the driving radio wave from the vehicle 1 transmits a radio signal, but by operating a switch provided in the electronic key 2 The present invention may be applied to a so-called wireless system that transmits a radio signal toward the vehicle 1.

  In the above embodiment, the present invention is applied to the electronic key system of the vehicle 1, but the present invention may be applied to an electronic key system of a building such as a house.

DESCRIPTION OF SYMBOLS 1 ... Vehicle, 2 ... Electronic key, 3 ... Immobilizer system, 4 ... Transponder, 5 ... Coil antenna, 6 ... Immobilizer ECU, 7 ... Electronic key registration system, 8 ... Registration tool, 9 ... Management center, 11 ... Engine, 12 DESCRIPTION OF SYMBOLS ... Engine ECU, 13 ... In-vehicle LAN, 14 ... Ignition switch (IGSW), 21 ... Transmission / reception antenna, 41 ... Control part, 42 ... Memory, 61 ... Mode switching part, 62 ... Vehicle ID transmission part, 64 ... SEED reading part, 65 ... Encryption key generation unit, 67 ... Memory, 68 ... Activation request signal generation unit, 69 Activation permission signal reading unit, 81 ... Control unit, 82 ... Operation unit, 83 ... Display unit, 90 ... Database, 91 ... Active Activation request signal reading unit, 92... Determination unit, 93... Data writing unit, 94.

Claims (6)

In a portable device registration system that has the same encryption key with a communication target and registers a portable device in which encrypted communication is performed with the control target control device using the encryption key in the control device.
The control device stores key generation logic for generating an encryption key from first identification information unique to the communication target and a key generation code captured from the outside,
The portable device stores an encryption key generation code unique to the portable device used when generating the encryption key, and the encryption key generated using the key generation logic,
The control device writes the first identification information to the registered portable device through wireless communication with the portable device as the registration processing of the portable device, and stores the encryption key generation code stored in the portable device And generating the encryption key using the key generation logic stored in itself from the key generation code, and storing the generated encryption key,
The control server and the management server that manages the first identification information store activation logic unique to the first identification information used for signal encryption and decryption between the two,
The control device sends an activation request signal including the first identification information to a management server ;
The management server sends an activation permission signal encrypted using the activation logic indicating permission of the encrypted communication using the encryption key stored by the control device to the control device,
The control device, when receiving the activation permission signal, decrypts the activation permission signal using the activation logic and performs the encrypted communication using the encryption key stored by itself. Mobile device registration system to allow. In a portable device registration system that has the same encryption key with a communication target and registers a portable device in which encrypted communication is performed with the control target control device using the encryption key in the control device.
The control device stores key generation logic for generating an encryption key from first identification information unique to the communication target and a key generation code captured from the outside,
The portable device stores an encryption key generation code unique to the portable device used when generating the encryption key, and the encryption key generated using the key generation logic,
The control device writes the first identification information to the registered portable device through wireless communication with the portable device as the registration processing of the portable device, and stores the encryption key generation code stored in the portable device And generating the encryption key using the key generation logic stored in itself from the key generation code, and storing the generated encryption key,
The control device sends an activation request signal that associates the stored encryption key and the first identification information to a management server ,
The management server checks whether or not the encryption key included in the received activation request signal has been registered, and if there is no registration, registers the encryption key in association with the first identification information. And an activation permission signal indicating that the encrypted communication using the encryption key is permitted to the control device,
The mobile device registration system that permits the encrypted communication using the stored encryption key when the control device receives the activation permission signal using the stored encryption key. In a portable device registration system that has the same encryption key with a communication target and registers a portable device in which encrypted communication is performed with the control target control device using the encryption key in the control device.
The control device stores key generation logic for generating an encryption key from first identification information unique to the communication target and a key generation code captured from the outside,
The portable device stores an encryption key generation code unique to the portable device used when generating the encryption key, and the encryption key generated using the key generation logic,
The control device writes the first identification information to the registered portable device through wireless communication with the portable device as the registration processing of the portable device, and stores the encryption key generation code stored in the portable device And generating the encryption key using the key generation logic stored in itself from the key generation code, and storing the generated encryption key,
The control server and the management server that manages the first identification information store activation logic unique to the first identification information used for signal encryption and decryption between the two,
The control device sends an activation request signal that associates the stored encryption key and the first identification information to a management server ,
The management server checks whether or not the encryption key included in the received activation request signal has been registered, and if there is no registration, registers the encryption key in association with the first identification information. And sending an activation permission signal encrypted using the activation logic indicating permission of the encrypted communication using the encryption key to the control device,
When the control device receives the activation permission signal using the stored encryption key, the control device decrypts the activation permission signal using the activation logic and also stores the encryption key stored by itself. A portable device registration system for permitting the encrypted communication using. In the portable device registration system according to claim 1 or 3,
The control device transmits an activation request signal encrypted using the activation logic,
The portable server registration system, wherein the management server decrypts the activation request signal encrypted using the activation logic. In the portable device registration system according to any one of claims 1 to 4,
The control device and the portable device perform the encrypted communication using second identification information unique to the portable device in addition to the encryption key,
The control device captures the second identification information together with the key generation code, stores the second identification information, transmits the stored second identification information included in the activation request signal,
The management server confirms whether or not the second identification information is registered in addition to the presence or absence of the encryption key. If the encryption key and the second identification information are not registered, the management server A portable device that registers second identification information in association with the first identification information, and includes that the activation request signal permits the encrypted communication using the second identification information Registration system. In the portable device registration system according to any one of claims 1 to 5,
Communication between the control device and the management server is performed via a tool including a notification unit,
When the management server cannot transmit the activation permission signal, it transmits an activation impossible signal indicating that,
The portable device registration system for notifying that the activation permission signal cannot be transmitted via the notification unit when the tool receives the activation disabling signal.