JP6093502B2 - Electronic key registration method - Google Patents

Description

The present invention relates to an electronic key registration method for registering an electronic key in a communication target control device.

  2. Description of the Related Art Conventionally, there is known an electronic key system that performs wireless communication between an electronic key possessed by a vehicle user and the vehicle, and performs door locking / unlocking, engine start / stop, and the like based on the establishment of authentication. Yes. In such an electronic key system, it is necessary to protect communication between the electronic key and the vehicle in order to maintain security. For this reason, in the electronic key system, encryption communication is performed between the electronic key and the vehicle (see, for example, Patent Document 1). In encrypted communication, since the communication content is encrypted, it is excellent in confidentiality.

  A common key encryption method is adopted as the encryption method of the encryption communication. In the common key cryptosystem, the same encryption key is used for encryption and decryption. For this reason, it is necessary to have the same encryption key in both the electronic key and the vehicle. The registration of the electronic key and the encryption key to the vehicle is performed in the process of registering the electronic key in the vehicle control device. The control device authenticates the electronic key by collating the identification information wirelessly transmitted from the electronic key with the identification information stored in itself.

JP 2009-302848 A

By the way, in the electronic key registration system for registering the electronic key in the control device, if there is no connection between the control device and the electronic key, any electronic key can be brought into the control device, and other than the user May be registered in the control device. Therefore, the present inventor considered shipping the vehicle ID (identification information unique to the communication target) of the vehicle (communication target) to be registered in a state stored in advance in the control device and the electronic key. However, when the identification information unique to the communication target is falsified, the control device determines that the corresponding electronic key is used. In addition, it is conceivable to ship a pair of control devices and electronic keys together, but it is cumbersome and the electronic keys cannot be additionally registered later. In addition, the electronic key system used not only for the electronic key system used for a vehicle but also for a building such as a house has the same problem. Therefore, an electronic key registration method that can be easily registered while maintaining security has been desired.

The present invention has been made in view of such circumstances, and an object of the present invention is to provide an electronic key registration method that allows easy registration while maintaining security.

Hereinafter, means for achieving the above-described object and its operation and effects will be described.
According to the first aspect of the present invention, the electronic key used in an electronic key system that enables control of the communication target based on the authentication between the electronic key and the communication target is registered in the communication target control device. in the electronic key registration process by the electronic key registration system, the electronic key registration system is configured to store different unique identification information for each of the communication target to the controller, used to generate an encryption key used for the authentication a different encryption key generation code for each of the electronic key, an encryption key generated by the key generation logic that uses the encryption key generation code, and initial manufacturing step to be saved in the electronic key to be initially registered, the control write the identification information storage device in said electronic key being initially registered, the encryption key generation code stored in the electronic key to be initially registered The sending the electronic key and the control device is taken out, the initial registration step you save the encryption key and the control device is generated from the encryption key generation code by the key generation logic in the control unit itself, the The gist is to prepare.

  According to this configuration, identification information unique to the communication target is stored in the control device in the initial manufacturing step, and an encryption key is not stored in the control device. The electronic key for initial registration stores the encryption key generation code and the encryption key, and does not store identification information unique to the communication target. That is, since the electronic key and the control device are not paired, they need not be shipped together. Then, identification information unique to the control device registered in the initial registration step is stored in the electronic key. Further, the encryption key generation code stored in the electronic key for initial registration is taken out, an encryption key is generated from the encryption key generation code by the key generation logic, and the encryption key is stored in the control device. For this reason, the electronic key corresponds only to the control device in which the identification information and the encryption key are registered, and does not correspond to other communication target control devices. Therefore, it is possible to eliminate the registration of the electronic key for initial registration in another communication target control device, and it is not necessary to ship the paired electronic key and the control device together while maintaining security. Easy to register.

The gist of the invention described in claim 2 is that, in the electronic key registration method according to claim 1, the use of the key generation logic is prohibited after use.

  According to this configuration, since the key generation logic is prohibited after the electronic key for initial registration is registered, it is possible to prevent another electronic key for initial registration from being newly registered in the control device. Become.

  According to the present invention, registration can be easily performed while maintaining security.

The block diagram which shows schematic structure of an electronic key registration system. The figure which shows the initial manufacture of an electronic key registration system. The figure which shows the initial registration of an electronic key registration system. The sequence chart which shows the registration operation in the factory of an electronic key registration system. The figure which shows manufacture of the additional key of an electronic key registration system. The figure which shows manufacture of exchange ECU of an electronic key registration system. The figure which shows registration of exchange ECU of an electronic key registration system. The sequence chart which shows registration operation at the time of exchanging immobilizer ECU of an electronic key registration system.

Hereinafter, an embodiment in which an electronic key registration method according to the present invention is embodied in a vehicle will be described with reference to FIGS.
As shown in FIG. 1, the vehicle 1 is provided with an immobilizer system 3 that executes ID collation with the electronic key 2 by, for example, short-range wireless communication (wireless communication with a communication distance of about several centimeters). The electronic key 2 is provided with an ID tag, so-called transponder 4. The immobilizer system 3 is a system that performs ID verification based on an ID code signal transmitted from the transponder 4 when the transponder 4 is activated by a driving radio wave transmitted from the coil antenna 5 of the vehicle 1. Note that the vehicle 1 corresponds to a communication target. The immobilizer system 3 functions as an electronic key system.

  In this case, the vehicle 1 is provided with an immobilizer ECU 6 as a control unit of the immobilizer system 3. An engine ECU 12 that controls the operation of the engine 11 is connected to the immobilizer ECU 6 via an in-vehicle LAN 13. In the memory 67 of the immobilizer ECU 6, the ID code of the electronic key 2 that forms a pair with the vehicle 1 is registered. For example, a coil antenna 5 capable of transmitting and receiving radio waves in an LF (Low Frequency) band and an HF (High Frequency) band is connected to the immobilizer ECU 6. The coil antenna 5 is a magnetic field antenna that transmits radio waves using a magnetic field component, and is provided in a key cylinder. The immobilizer ECU 6 corresponds to a control device.

  The transponder 4 is provided with a control unit 41 that controls the communication operation of the transponder 4. An ID code (transponder code) is registered as a unique ID of the electronic key 2 in the memory 42 of the control unit 41. Similar to the coil antenna 5, the transponder 4 is provided with a transmission / reception antenna 21 that can transmit and receive radio waves in the LF band and the HF band.

  When the immobilizer ECU 6 detects that the electronic key 2 is inserted into the key cylinder, the immobilizer ECU 6 intermittently transmits drive radio waves from the coil antenna 5. When the boarded user starts the engine 11, the electronic key 2 is inserted into the key cylinder to perform a turning operation. At this time, when the transponder 4 receives the driving radio wave transmitted from the coil antenna 5 by the transmission / reception antenna 21, the transponder 4 starts up using the driving radio wave as a power source. When the transponder 4 is switched to the activated state, the transponder 4 transmits an ID code signal including an ID code registered in the transponder 4 from the transmission / reception antenna 21. When the immobilizer ECU 6 receives the ID code signal transmitted from the transponder 4 by the coil antenna 5, the immobilizer ECU 6 executes ID verification (immobilizer verification) using the ID code included in the ID code signal. When the immobilizer ECU 6 confirms that ID verification is established, the immobilizer ECU 6 holds the ID verification establishment in the memory 67.

  An ignition switch (IGSW) 14 for detecting the rotational position of the electronic key 2 is provided in the key cylinder. For example, when the ignition switch 14 is operated to the engine start position, the engine ECU 12 confirms the ID verification establishment result with the immobilizer ECU 6. When the engine ECU 12 acquires ID verification establishment from the immobilizer ECU 6, the engine ECU 12 starts ignition control and fuel injection control on the engine 11 and starts the engine 11.

  For immobilizer verification authentication, challenge response authentication is also executed in addition to code verification for confirming the ID code of the electronic key 2. In the challenge response authentication, for example, the vehicle 1 transmits a challenge code as a random number code to the electronic key 2 to calculate the response, and the response code calculated by the vehicle 1 itself matches the response code received from the electronic key 2. It is authentication by NO. For the authentication between the immobilizer ECU 6 and the transponder 4, a common key encryption method using a common encryption key is adopted. The electronic key 2 and the immobilizer ECU 6 calculate a response code from the challenge code using the encryption keys registered respectively.

  The memory 42 of the transponder 4 has a vehicle ID (VID), which is identification information unique to the vehicle 1, and a SEED code (SC) as an encryption key generation code that is different for each electronic key used when generating the encryption key K. And an encryption key K used for authentication are stored.

  In the memory 67 of the immobilizer ECU 6, an initial registration flag that permits initial registration of the electronic key 2 and a replenishment initial flag that is the immobilizer ECU 6 that is replenished for replacement and that permits initial registration of the electronic key 2 are set. ing. The memory 67 of the immobilizer ECU 6 stores a vehicle ID (VID) that is identification information unique to the vehicle 1, an encryption key K used for authentication, and a key generation logic used when generating the encryption key K. Has been.

  The immobilizer system 3 is provided with an electronic key registration system 7 for registering the electronic key 2 in the immobilizer ECU 6. The electronic key registration system 7 newly registers the electronic key 2 in the immobilizer ECU 6 or registers the electronic key 2 in the replaced immobilizer ECU 6. Further, the electronic key registration system 7 reads the encryption key from the database 9 in which a plurality of encryption keys are associated with one vehicle ID and stored, and stores the encryption key in the immobilizer ECU 6 or the electronic key 2. The database 9 stores an encryption key (K-2) corresponding to a vehicle ID (VID-A) unique to the vehicle 1 (see FIG. 2).

  The electronic key registration system 7 registers the electronic key 2 in the immobilizer ECU 6 by storing in the immobilizer ECU 6 the encryption key K used for authentication stored in the electronic key 2. At this time, the electronic key registration system 7 generates the encryption key K by acquiring the SEED code from the electronic key 2 instead of the encryption key K itself.

  The electronic key registration system 7 connects the registration tool 8 to the vehicle 1 and switches the operation mode of the immobilizer ECU 6 to the registration mode using the registration tool 8, thereby causing the immobilizer ECU 6 to register the electronic key 2. The registration tool 8 includes a control unit 81 that controls the registration tool 8, an operation unit 82 that detects a registration operation by the user, and a display unit 83 that displays the registration operation. When the registration tool 8 is set to the initial registration mode in which the electronic key 2 is newly registered, the registration tool 8 outputs an initial registration signal for changing the operation mode of the immobilizer ECU 6 to the initial registration mode. In addition, when the registration tool 8 is set to the replenishment initial registration mode in which the electronic key 2 is initially registered in the replaced immobilizer ECU 6, the registration tool 8 sends a replenishment initial registration signal for changing the operation mode of the immobilizer ECU 6 to the replenishment initial registration mode to the vehicle 1. Output.

  The immobilizer ECU 6 is provided with a mode switching unit 61 that switches operation modes. When the initial registration signal is input from the registration tool 8, the mode switching unit 61 switches the operation mode to the initial registration mode. When the replenishment initial registration signal is input from the registration tool 8, the mode switching unit 61 switches the operation mode to the replenishment initial registration mode.

  Further, the immobilizer ECU 6 is provided with a vehicle ID writing unit 62 for writing a vehicle ID to the electronic key 2 to be initially registered. When the operation mode is switched to the initial registration mode, the vehicle ID writing unit 62 transmits a vehicle ID signal including the vehicle ID stored in the memory 67 from the coil antenna 5 to the electronic key 2.

  Further, the immobilizer ECU 6 is provided with a vehicle ID confirmation unit 63 for confirming whether or not the vehicle ID stored in the electronic key 2 registered in the immobilizer ECU 6 is correct. When the operation mode is switched to the replenishment initial mode, the vehicle ID confirmation unit 63 transmits a vehicle ID confirmation signal for confirming whether the vehicle ID stored in the electronic key 2 is the same as the vehicle ID stored in the coil antenna. 5 to the electronic key 2. Then, the vehicle ID confirmation unit 63 confirms whether or not the vehicle ID included in the vehicle ID signal transmitted from the electronic key 2 is correct.

  Further, the immobilizer ECU 6 is provided with a SEED reading unit 64 that reads SEED in order to generate the encryption key K stored in the electronic key 2. The SEED reading unit 64 transmits a SEED request signal for requesting a SEED code from the coil antenna 5 when the operation mode is switched to one of the registration modes, and the SEED code from the SEED signal transmitted from the electronic key 2. Take out.

  The immobilizer ECU 6 is provided with an encryption key generation unit 65 that generates an encryption key K. The encryption key generation unit 65 generates the encryption key K by the key generation logic f using the SEED code acquired by the SEED reading unit 64 in the initial registration mode.

  The immobilizer ECU 6 includes an encryption key registration unit 66 that registers the generated encryption key K and changes the flag. The encryption key registration unit 66 registers the encryption key K in the immobilizer ECU 6 by storing the encryption key K generated by the encryption key generation unit 65 in the memory 67 in the initial registration mode. On the other hand, the encryption key registration unit 66 temporarily stores the encryption key K generated by the encryption key generation unit 65 in the memory 67 in the replenishment initial registration mode, and performs challenge response authentication. The encryption key registration unit 66 transmits a challenge signal including a challenge code from the coil antenna 5 and a response code obtained by calculating the challenge code included in the response signal transmitted from the electronic key 2 using the encryption key K; The transmitted challenge code is verified (response verification) with the response code calculated using the encryption key K. The encryption key registration unit 66 registers the encryption key K in the immobilizer ECU 6 by storing the encryption key K in the memory 67 when the response verification is established. In the initial registration mode, the encryption key registration unit 66 rejects the initial registration and prohibits the use of the key generation logic f when the initial registration rejection operation is detected after storing the encryption key K. The initial registration refusal operation is an operation of repeatedly turning on and off the ignition switch 14 20 times. On the other hand, in the replenishment initial registration mode, the encryption key registration unit 66 stores the encryption key K, then rejects the replenishment initial registration and prohibits the use of the key generation logic f.

  Here, the vehicle ID of the vehicle 1 to be registered is acquired in advance from the vehicle 1 to be registered. Specifically, the vehicle ID is displayed on the display 15 when a specific operation for requesting the vehicle ID is performed on the vehicle 1. When the electronic key 2 is additionally registered, the vehicle ID may be displayed on the display 15 when the existing electronic key 2 is inserted into the key cylinder and immobilizer collation is established.

Next, the registration operation of the electronic key 2 to the immobilizer ECU 6 by the electronic key registration system 7 will be described with reference to FIGS.
First, as shown in FIG. 2, in the initial manufacturing step, in the memory 67 of the initial registration immobilizer ECU 6, the vehicle ID (VID-A) of the vehicle 1 mounted from the database 9 and the additionally registered electronic are stored. The encryption key (K-2) of key 2 and the key generation logic f are stored. Further, the initial registration flag in the memory 67 is allowed to be accepted, and the supply initial flag is rejected. On the other hand, in the initial manufacturing step, the memory 42 of the electronic key 2 for initial registration is stored in the SEED code (SC-1) and the encryption key generated by the key generation logic f using the SEED code (SC-1). (K-1) is stored.

  Next, registration of the electronic key 2 in the factory will be described. In the initial registration step, the registration tool 8 is connected to the vehicle 1 and a registration operation is performed. The immobilizer ECU 6 is mounted on the vehicle 1, and the electronic key 2 is registered in the immobilizer ECU 6 mounted on the vehicle 1.

  As shown in FIG. 3, in the initial registration step, the vehicle ID (VID-A) is written from the immobilizer ECU 6 to the electronic key 2, and the key generation logic f is generated from the SEED code (SC-1) read from the electronic key 2. To generate an encryption key (K-1) and store the encryption key (K-1) in the immobilizer ECU 6.

  Specifically, as shown in FIG. 4, when the user operates the operation unit 82 to set the initial registration, the registration tool 8 outputs an initial registration signal to the immobilizer ECU 6 as an initial registration command (step S1). When receiving the initial registration signal, the immobilizer ECU 6 switches the operation mode to the initial registration mode (step S2). That is, the mode switching unit 61 switches to the initial registration mode in which the electronic key 2 is registered for the first time in the immobilizer ECU 6.

  Then, the immobilizer ECU 6 writes the vehicle ID stored in its own memory 67 in the electronic key 2 (step S3). That is, the vehicle ID writing unit 62 transmits a vehicle ID signal including the vehicle ID (VID-A) stored in the memory 67 from the coil antenna 5 to the electronic key 2.

  When receiving the vehicle ID signal, the electronic key 2 writes the vehicle ID (step S4). That is, the transponder 4 stores the vehicle ID (VID-A) included in the vehicle ID signal in the memory 42. Then, the electronic key 2 locks the writing of the vehicle ID (step S5). That is, the transponder 4 prevents the vehicle ID from being rewritten by prohibiting the vehicle ID in the memory 42 from being overwritten.

  The immobilizer ECU 6 reads the SEED code following the writing of the vehicle ID (step S6). That is, the SEED reading unit 64 transmits a SEED request signal for requesting a SEED code from the coil antenna 5.

  When receiving the SEED request signal, the electronic key 2 transmits a SEED signal (step S7). The transponder 4 transmits a SEED signal including the SEED code (SC-1) stored in the memory 42.

  The immobilizer ECU 6 calculates the encryption key (K-1) using the key generation logic f (step S8). That is, the SEED reading unit 64 acquires the SEED code (SC-1) by receiving the SEED signal. The encryption key generation unit 65 generates the encryption key (K-1) by the key generation logic f using the SEED code (SC-1) acquired by the SEED reading unit 64. Therefore, the immobilizer ECU 6 does not directly acquire the encryption key (K-1) from the electronic key 2 but generates the SEED code (SC-1).

  Subsequently, the immobilizer ECU 6 stores the generated encryption key (K-1) in the memory 67 (step S9). That is, the encryption key registration unit 66 registers the encryption key (K-1) in the immobilizer ECU 6 by storing the encryption key (K-1) generated by the encryption key generation unit 65 in the memory 67. The immobilizer ECU 6 can perform immobilizer verification with the electronic key 2 by using the registered encryption key (K-1).

  When the immobilizer ECU 6 detects an initial registration rejection operation (step S10), the immobilizer ECU 6 rejects the initial registration and disables the key generation logic f (step S11). That is, when the ignition switch 14 is repeatedly turned on and off 20 times, the encryption key registering unit 66 rejects the initial registration and prohibits the use of the key generation logic f when detecting the initial registration rejecting operation. As a result, the immobilizer ECU 6 cannot perform initial registration of the electronic key 2.

  Next, additional registration of the electronic key 2 will be described. As shown in FIG. 5, in the additional key manufacturing step, the vehicle ID (VID-A) of the mounted vehicle 1 is written in the memory 42 of the electronic key 2 according to the order, and this vehicle ID (V-ID) is written. ) Corresponding to the additional registration encryption key (K-2) is stored from the database 9. The electronic key 2 in which the vehicle ID (ID-A) and the encryption key (K-2) are stored can be used in the immobilizer ECU 6 without performing an additional registration operation.

  Next, registration of the electronic key 2 when the immobilizer ECU 6 is replaced will be described. As shown in FIG. 6, in the replacement control device manufacturing step (replacement ECU manufacturing step) for manufacturing the immobilizer ECU 6 to be replaced, the vehicle ID (VID) of the vehicle 1 to be mounted is stored in the memory 67 of the immobilizer ECU 6 according to the order. -A)) is written, and the encryption key (K-2) corresponding to the vehicle ID (V-ID) is stored from the database 9. Further, acceptance of the initial registration flag in the memory 67 is rejected, and acceptance of the replenishment initial flag is permitted. On the other hand, in the registered memory 42 of the electronic key 2 of the initial manufacture, the vehicle ID (VID-A) of the mounted vehicle 1 and the SEED code (SC-1) for generating the encryption key (K-1) are stored. The encryption key (K-1) generated by the key generation logic f using the SEED code (SC-1) is stored. Then, the registration tool 8 is connected to the vehicle 1 to perform a registration operation.

  As shown in FIG. 7, in the exchange control device registration step (exchange ECU registration step), is the vehicle ID stored in the electronic key 2 the vehicle ID (VID-A) of the vehicle 1 on which the immobilizer ECU 6 is mounted? If the vehicle IDs match, the encryption key (K-1) is generated by the key generation logic f from the SEED code (SC-1) read from the electronic key 2 and the encryption key (K-1) is obtained. Store in the immobilizer ECU 6.

  Specifically, as shown in FIG. 8, in the replacement ECU registration step of registering the immobilizer ECU 6 to be replaced, the registration tool 8 operates when the user operates the operation unit 82 to set the replenishment initial registration. Then, a replenishment initial registration signal is output to the immobilizer ECU 6 (step S41). When the immobilizer ECU 6 receives the replenishment initial registration signal, the immobilizer ECU 6 switches the operation mode to the replenishment initial registration mode (step S42). That is, the mode switching unit 61 switches to the replenishment initial registration mode in which the electronic key 2 is registered for the first time in the replaced immobilizer ECU 6.

  And immobilizer ECU6 confirms vehicle ID preserve | saved at the electronic key 2 (step S43). That is, the vehicle ID confirmation unit 63 transmits a vehicle ID confirmation signal for confirming whether the vehicle ID stored in the memory 67 is the same as the vehicle ID stored in the electronic key 2 from the coil antenna 5 to the electronic key 2. To do.

  When receiving the vehicle ID confirmation signal, the electronic key 2 transmits a vehicle ID signal (step S44). That is, the transponder 4 transmits a vehicle ID signal including the vehicle ID (VID-A) stored in the memory 42.

  The immobilizer ECU 6 checks whether or not the vehicle IDs included in the received vehicle ID signal match, and if they match (step S45), reads the SEED code (step S46). That is, the vehicle ID confirmation unit 63 confirms whether or not the vehicle ID included in the vehicle ID signal transmitted from the electronic key 2 is correct. The SEED reading unit 64 transmits a SEED request signal for requesting a SEED code from the coil antenna 5.

  When receiving the SEED request signal, the electronic key 2 transmits a SEED signal (step S47). That is, the transponder 4 transmits a SEED signal including the SEED code (SC-1) stored in the memory 42.

  The immobilizer ECU 6 calculates the encryption key (K-1) using the key generation logic f (step S48). That is, the SEED reading unit 64 acquires the SEED code (SC-1) by receiving the SEED signal. The encryption key generation unit 65 generates the encryption key (K-1) by the key generation logic f using the SEED code (SC-1) acquired by the SEED reading unit 64. Therefore, the immobilizer ECU 6 does not directly acquire the encryption key (K-1) from the electronic key 2 but generates the SEED code (SC-1).

  Subsequently, the immobilizer ECU 6 temporarily stores the generated encryption key (K-1) in the memory 67 (step S49). That is, the encryption key registration unit 66 temporarily stores the encryption key (K−1) generated by the encryption key generation unit 65 in the memory 67.

  Then, the immobilizer ECU 6 performs challenge response authentication to confirm whether or not the temporarily stored encryption key (K-1) is correct. Specifically, the immobilizer ECU 6 transmits a challenge signal (step S50). That is, the encryption key registration unit 66 transmits a challenge signal including a challenge code from the coil antenna 5. Subsequently, the encryption key registration unit 66 performs a response calculation using the encryption key (K-1) for the challenge code (step S51). The electronic key 2 performs a response operation using the encryption key (K-1) for the challenge code included in the received challenge signal (step S52). Then, the electronic key 2 transmits a response signal including a response code obtained by response calculation (step S53).

  When receiving the response signal, the immobilizer ECU 6 collates the response code included in the response signal, and when the response collation is established (step S54), the immobilizer ECU 6 stores the encryption key (K-1) (step S55). The encryption key registration unit 66 stores the encryption key (K-1) in the memory 67 and registers it in the immobilizer ECU 6 when the response verification is established.

  Then, the immobilizer ECU 6 rejects the replenishment initial registration and disables the key generation logic f (step S56). That is, the encryption key registration unit 66 rejects the replenishment initial registration and prohibits the use of the key generation logic f. As a result, the immobilizer ECU 6 cannot perform initial replenishment registration of the electronic key 2.

  Now, the electronic key registration system 7 writes the vehicle ID (VID-A) registered in advance in the immobilizer ECU 6 into the electronic key 2 and acquires the SEED code (SC-1) stored in advance in the electronic key 2 to obtain the key. An encryption key (K-1) is generated using the generation logic f and stored in the immobilizer ECU 6. For this reason, the vehicle ID (VID-A) is not stored in the electronic key 2 before the initial registration, and the encryption key (K-1) is not stored in the immobilizer ECU 6, that is, it is not paired. , You do not have to ship all together. Since the vehicle ID (VID-A) is stored in the electronic key 2 after the initial registration, the electronic key 2 after the initial registration cannot be registered in another immobilizer ECU 6. In addition, since the vehicle ID (VID-A) is written in the additionally registered electronic key 2 according to the purchase order and the encryption key (K-2) is stored from the database 9, the additionally registered electronic key 2 The electronic key 2 can be added without performing a registration operation between the mobile phone and the immobilizer ECU 6. Therefore, it is possible to easily register while maintaining security.

As described above, according to the embodiment described above, the following effects can be obtained.
(1) In the initial manufacturing step, the vehicle ID (VID-A) is stored in the immobilizer ECU 6, and the encryption key (K-1) corresponding to the electronic key 2 for initial registration is not stored. The electronic key 2 for initial registration stores the SEED code (SC-1) and the encryption key (K-1), and does not store the vehicle ID (VID-A). That is, since the electronic key 2 and the immobilizer ECU 6 are not paired, they need not be shipped together. Then, a vehicle ID (VID-A) unique to the immobilizer ECU 6 registered in the initial registration step is stored in the electronic key 2. Further, the SEED code (SC-1) stored in the electronic key 2 for initial registration is taken out, and the encryption key (K-1) is generated from the SEED code (SC-1) by the key generation logic f, The encryption key (K-1) is stored in the immobilizer ECU 6. For this reason, the electronic key 2 corresponds only to the immobilizer ECU 6 in which the vehicle ID (VID-A) and the encryption key (K-1) are registered, and does not correspond to the immobilizer ECUs of other vehicles. Therefore, registration of the electronic key 2 for initial registration in the immobilizer ECU of another vehicle can be eliminated, and it is not necessary to ship the paired electronic key 2 and the immobilizer ECU 6 together while maintaining security. Can be registered.

  (2) The encryption key (K-2) of the electronic key 2 additionally registered in the initial manufacturing step is stored in the immobilizer ECU 6 in advance, and the vehicle ID (VID-A) is stored in the additional key manufacturing step, and the database 9 Is stored in the electronic key 2 to be additionally registered. For this reason, the immobilizer ECU 6 to which the electronic key 2 is additionally registered can authenticate with the electronic key 2 for additional registration without directly storing the encryption key (K-2) from the additionally registered electronic key 2. it can. Therefore, registration of the electronic key 2 for additional registration to the immobilizer ECU of another vehicle can be eliminated, and additional registration can be easily performed while maintaining security.

  (3) Since the vehicle ID (VID-A) is written in the electronic key 2 in the replacement ECU registration step, the immobilizer ECU 6 of the electronic key 2 in which the vehicle ID (VID-A) is not stored is stored. Registration can be eliminated. Further, the SEED code (SC-1) stored in the electronic key 2 in the exchange ECU registration step is taken out, and the encryption key (K-1) generated by the key generation logic f is stored in the immobilizer ECU 6. Therefore, the authentication between the electronic key 2 for initial registration and the immobilizer ECU 6 is established, and the authentication between the electronic key 2 for additional registration and the immobilizer ECU 6 is established. Therefore, only the immobilizer ECU 6 in which both the vehicle ID (VID-A) and the encryption key (K-1) are stored can newly register the electronic key 2 for initial registration and the electronic key 2 for additional registration.

  (4) Since the key generation logic f is disabled after the electronic key 2 for initial registration is registered, it is possible to prevent another electronic key 2 for initial registration from being newly registered in the immobilizer ECU 6.

  (5) Since the vehicle ID (VID-A) is stored in the replacement immobilizer ECU 6 or the additional registration electronic key 2 at the time of shipment, the electronic key 2 is registered in the immobilizer ECU 6 different from the order when it is on the market. And registering the electronic key 2 different from the order in the immobilizer ECU 6 can be prevented.

In addition, the said embodiment can be implemented with the following forms which changed this suitably.
In the above embodiment, use of the key generation logic f is prohibited after initial registration, but the key generation logic f itself may be deleted.

In the above embodiment, the key generation logic f is prohibited from being used after the initial registration, but may be usable after the initial registration.
In the above embodiment, the encryption key may be registered after performing challenge response authentication in the initial registration step and the key addition registration step.

In the exchange ECU registration step of the above embodiment, the challenge key authentication may be omitted and the encryption key may be registered.
In the above embodiment, when the vehicle ID is acquired, the vehicle ID is displayed on the display 15 for confirmation. However, when a specific operation for requesting the vehicle ID is performed on the vehicle 1, an e-mail is sent to the e-mail address designated by the user. You may make it reach. In this way, only the user who receives the mail can check the vehicle ID, and the confidentiality is excellent.

In the above embodiment, the ignition switch 14 is operated as the initial registration rejection operation. However, the operation is not limited to the operation of the ignition switch 14, and other operations may be set.
In the above embodiment, the present invention is applied to the type of immobilizer system 3 in which the electronic key 2 is inserted into the key cylinder. However, when the electronic key enters the communication area created by the vehicle 1, communication is possible. The present invention may be applied to an electronic key system.

  In the above embodiment, the present invention is applied to the electronic key system of the vehicle 1, but the present invention may be applied to an electronic key system of a building such as a house.

  DESCRIPTION OF SYMBOLS 1 ... Vehicle as communication object, 2 ... Electronic key, 3 ... Immobilizer system, 4 ... Transponder, 5 ... Coil antenna, 6 ... Immobilizer ECU as control apparatus, 7 ... Electronic key registration system, 8 ... Registration tool, 9 ... Database, 11 ... Engine, 12 ... Engine ECU, 13 ... In-vehicle LAN, 14 ... Ignition switch, 15 ... Display, f ... Key generation logic, K ... Encryption key, SC ... SEED code, VID ... Vehicle ID.

Claims (2)

Electronic key registration by the electronic key registration system for registering the electronic key to be used in an electronic key system that enables the control of the communication target based on the authentication of the electronic key communication target is established in the control unit of the communication subject In the method
The electronic key registration system includes:
With storing different unique identification information for each of the communication target to the controller, and different encryption keys generated code for each of the electronic key for use in generating an encryption key used for the authentication, the encryption key generation code an encryption key generated by the key generation logic used, the initial manufacturing step to be saved in the electronic key to be initially registered,
It writes the electronic key to be initially registered identification information stored in the control device, transmitting the encryption key generation code stored in the electronic key is initially registered in the control device taking out the electronic key and, the electronic key registration method characterized in that said control device and a initial registration step you save the encryption key generated from the encryption key generation code to the control device itself by the key generation logic. The electronic key registration method according to claim 1,
An electronic key registration method, wherein the key generation logic is disabled after use.

Images