JP6501330B1 - Vehicle control system - Google Patents

Abstract

An object of the present invention is to control an operation such as locking / unlocking of a key of a vehicle via a portable terminal such as a smartphone. A control server 130 capable of communicating with a portable terminal 110 of a vehicle user via a network line 120 and a remote control key board for locking / unlocking the key of the vehicle The control server 130 encrypts the control data for controlling the operation of the vehicle using the ID of the vehicle and the secret key associated with the ID, and encrypts the control data after encryption. The portable terminal 110 transmits the encrypted control data transmitted by the wireless communication unit to the control device 140 using near field communication, and the control device 140 transmits the encrypted control data to the portable terminal 110 via the portable terminal 110. When the transmitted encrypted control data is decrypted and the one-time password (OTP) included in the control data matches the stored one-time password Run the command that is included in your data, do not run the command when they do not match. [Selected figure] Figure 3

Description

The present invention configures a control device mounted on a vehicle using a substrate of a remote control key such as an existing smart key or keyless entry key, and instructs the control device via a portable terminal such as a smart phone. The present invention relates to a vehicle control system in which operations such as locking / unlocking of a lock can be controlled.

  Conventionally, as an example of a vehicle control system, there is a vehicle control system related to car sharing as shown in Patent Document 1.

According to the vehicle control system related to this car sharing, the lock of the vehicle reserved by the user can be unlocked using the portable terminal of the user.

JP 2018-92323 A

  However, the vehicle control system related to car sharing described in Patent Document 1 must be provided in a vehicle by preparing an on-vehicle dedicated control device for configuring the vehicle control system. Such a dedicated on-vehicle controller communicates directly with the control unit of the vehicle to control the behavior of the vehicle, and is therefore provided by persons other than those who have developed or manufactured the vehicle or who are familiar with the specifications of the vehicle. It is difficult to do. In addition, car sharing companies etc. install a dedicated control device in the vehicle first, connect them communicably with the vehicle, and perform a series of work such as setting for enabling the control device and the server to communicate. Must. It is difficult to carry out this series of operations by the car sharing company itself because of the technical difficulty and the large workload. Furthermore, the dedicated control device is generally expensive, and commissioning of a series of operations from a specialized vendor also increases labor costs.

Therefore, the present invention configures a control device mounted on a vehicle using a substrate of a remote control key such as an existing smart key or keyless entry key, and instructs the control device via a portable terminal such as a smartphone. It is an object of the present invention to provide a vehicle control system in which operations such as locking / unlocking of a vehicle lock can be controlled.

The vehicle control system of the present invention for achieving the above object utilizes a control server capable of communicating with a portable terminal of a vehicle user via a communication line, and a remote control key substrate for locking / unlocking the lock of the vehicle. And a control unit configured to control the operation of the vehicle, the control server storing the ID of the vehicle and a storage unit storing the secret key associated with the ID, and a secret key corresponding to the ID of the vehicle A control data generation unit generates a one-time password based on time or a counter value, adds a vehicle command to the generated one-time password, and generates control data for controlling the operation of the vehicle, and encrypts the control data And the communication unit for transmitting the control data after encryption to the portable terminal. The portable terminal transmits the encrypted control data transmitted by the communication unit to the control device in a short distance. Transmission is possible using line communication, and the control device is provided in the vehicle and is capable of near field communication with the portable terminal, and receives encrypted control data transmitted via the portable terminal from the portable terminal Wireless communication unit, Decryption unit for decrypting control data after encryption, Storage unit for storing vehicle ID and secret key, One-time password included in control data after decryption , Storage unit for control device A collating unit that collates the one-time password generated by the secret key stored in the memory, and the one-time password included in the combined control data and the secret key stored in the storage unit of the control device The command execution unit executes a command included in the control data when the one-time password matches, and does not execute the command when the one-time password does not match.

  According to the vehicle control system of the present invention, the control device mounted on the vehicle is configured using the existing remote control key substrate such as smart key and keyless entry key, so a control device dedicated to the vehicle is prepared. do not have to. In addition, since the control device can be configured by effectively utilizing the Rimon Conkey of the vehicle, the vehicle control system can be inexpensive. In addition, since the control server and the control device communicate via the portable terminal of the vehicle user, it is sufficient if the portable terminal has an application for communication, and the control device has a function for communicating with the control server There is no need to have Furthermore, since the setting for the control device to communicate with the control server is unnecessary, the construction of the vehicle control system is facilitated. Furthermore, the vehicle control system of the present invention can easily modify an existing vehicle as a vehicle for car sharing.

It is explanatory drawing of the attachment process of the control apparatus of a vehicle control system. It is a schematic block diagram of the control apparatus of FIG. FIG. 1 is a schematic configuration diagram of a vehicle control system of a first embodiment. It is a schematic block diagram of the control server of FIG. It is a figure where it uses for operation | movement description of the control-data production | generation part of FIG. 4, and an encryption part. It is a schematic block diagram of the control apparatus of FIG. It is a figure where it uses for operation | movement description of the control apparatus of FIG. It is a flowchart of the unlocking operation of the vehicle control system of FIG. It is a flowchart of the lock operation of the vehicle control system of FIG. FIG. 6 is a schematic configuration diagram of a vehicle control system of a second embodiment. It is an operation | movement flowchart of the vehicle control system of FIG.

  Before describing the embodiment, first, how the control device of the vehicle control system of the present invention is simply and inexpensively manufactured and attached will be described. FIG. 1 is an explanatory view of a mounting process of a control device of a vehicle control system.

  First, the owner of the vehicle 10 sends a remote control key 20 such as a smart key or keyless entry key of the vehicle 10 to a vendor, and a vehicle for the remote control key 20 of the vehicle 10 from an actual store, a store on the Internet, etc. The connection device 30 is purchased. The vehicle connection device 30 may be prepared, for example, for each manufacturer of the vehicle 10 and for each vehicle type.

  Next, the owner of the vehicle 10 attaches the purchased vehicle connection device 30 to the vehicle 10. The vehicle connection device 30 is connected to both the constant power supply line and the ACC line of the vehicle 10 as shown in the figure. The constant power supply line is a line to which the battery voltage is always supplied regardless of whether the engine is started. The constantly powered line is a power source of the vehicle connection device 30, the substrate 40, and the key connection device 50, that is, the control device 140. The ACC line is a line to which the battery voltage is supplied when the engine start button is pressed or the key position is set to ACC, or when the engine is on. The vehicle connection device 30 can determine the presence or absence of the start of the engine based on the presence or absence of the voltage of the ACC line.

On the other hand, the vendor disassembles the existing remote control key 20 sent from the owner of the vehicle 10 and takes out the substrate 40 from the remote control key 20. The substrate 40 has a function of locking / unlocking the lock of the vehicle 10 or the like. Next, the key connection device 50 for the remote control key 20 is wired and connected to the substrate 40. The key connection device 50 has a function of outputting to the substrate 40 a command for locking / unlocking the lock of the vehicle 10, a command for stopping the power supply to the substrate 40, and the like. Then, the key unit 60 in which the substrate 40 and the key connection device 50 are integrated is sent to the owner of the vehicle 10.

  The owner of the vehicle 10 connects the key unit 60 sent from the vendor to the vehicle connection device 30 attached to the vehicle 10. The functions of the substrate 40, the key connection device 50, and the vehicle connection device 30 will be described later.

  By the above operations, the hardware configuration of the vehicle control system is completed. Thus, the control device 140 mounted on the vehicle 10 can be configured using the substrate 40 of the remote control key 20 such as the existing smart key and keyless entry key. Therefore, it is not necessary to prepare a dedicated control device for configuring the vehicle control system as in the conventional case, and the vehicle control system can be configured simply and inexpensively. In addition, the owner of the vehicle 10 performs a simple wiring operation of attaching the vehicle connection device 30 purchased from the store to the constant power supply line and the ACC line of the vehicle 10, and the vehicle connection device 30 to the key unit 60 sent from the vendor. The vehicle control system can be configured by performing a simple connection operation of connecting the two. Therefore, even if the user does not have specialized knowledge of the vehicle 10, the user can easily configure the vehicle control system.

FIG. 2 is a schematic block diagram of the control device 140 of FIG. As shown in FIG. 2, the key unit 60 is formed by the substrate 40 and the key connection device 50, and the control device 140 is formed by the key connection device 50 and the vehicle connection device 30. The substrate 40 operates to lock / unlock the lock of the vehicle 10 or the like. The key connection device 50 is connected to the substrate 40 and outputs a command such as locking / unlocking to the substrate 40. The vehicle connection device 30 is connected to the key connection device 50 of the key unit 60, causes the key connection device 50 to lock / unlock the lock, and controls power on / off to the substrate 40.

  Next, the vehicle control system of the present invention will be described in detail divided into [Embodiment 1] and [Embodiment 2].

Embodiment 1
FIG. 3 is a schematic configuration diagram of the vehicle control system of the first embodiment.

(Configuration of control system)
The vehicle control system 100 includes a control server 130 capable of communicating with the portable terminal 110 of the user of the vehicle 10 (see FIG. 1) via the network line (communication line) 120 and a remote control for locking / unlocking the lock of the vehicle 10 And a control device 140 that controls the operation of the vehicle 10 by controlling the substrate 40 of the key 20. The portable terminal 110 is a terminal owned by a user who uses the vehicle 10. For example, it is a generally spread portable terminal device such as a smartphone and a tablet terminal. The portable terminal 110 and the control device 140 can communicate bi-directionally using a short distance wireless communication method such as Bluetooth (registered trademark).

  The network line 120 functions as a communication unit, and is a communication line connecting the portable terminal 110 and the control server 130 by wire or wirelessly. The network line 120 includes mobile communication that communicates via a telephone company, and communication lines such as the Internet, intranet, and LAN that communicate via a connection provider such as a provider.

Control server 130 has a function of generating control data for controlling the operation of vehicle 10 and transmitting the control data to portable terminal 110. In the present embodiment, as the control data for controlling the control of the operation of the vehicle 10, the lock of the locking / unlocking of the vehicle 10, power-on to the substrate 40 included in the key unit 60 installed in the vehicle 10 I will illustrate / off. The control data, lock the lock / unlock, not limited to the power on / off, it may be included the operation of such starting or stopping the engine of the vehicle 10. The detailed configuration of the control server 130 and the control data will be described later.

Control device 140, the control data control server 130 has generated, tablets locking / unlocking of the vehicle 10, controlling the power on / off to the substrate 40 included in the key unit 60 installed in the vehicle 10.

(Control server configuration)
FIG. 4 is a schematic block diagram of the control server 130 of FIG. The control server 130 includes an ID / secret key storage unit 132, a control data generation unit 134, an encryption unit 136, and a wireless communication unit 138.

  The ID / secret key storage unit 132 functioning as a storage unit stores the ID of the vehicle 10 and the secret key associated with the ID. When there are a plurality of vehicles 10, the ID / secret key storage unit 132 stores, for each vehicle 10, an ID of the vehicle 10 and a secret key associated with the ID as a table.

  The control data generation unit 134 generates control data for controlling the operation of the vehicle 10, using the ID of the vehicle 10 and the secret key associated with the ID. Further, the encryption unit 136 encrypts the generated control data. Here, generation of control data and a configuration of control data will be described.

  FIG. 5 is a diagram for explaining the operation of the control data generation unit 134 and the encryption unit 136 of FIG. The control data generation unit 134 first generates a one-time password (hereinafter referred to as OTP) based on the secret key corresponding to the ID of the vehicle 10 stored in the ID / secret key storage unit 132 and the time when its own clock is engraved. Do. The OTP is generated by computing binary data indicating a secret key and binary data indicating a time T according to a predetermined calculation procedure. As the predetermined calculation procedure, for example, an algorithm for calculating various hash values such as MD5, SHA-1, and SHA-256 can be used. Note that OTP can also be generated using the value of a counter instead of the time when its own clock ticks.

  Next, a command of the vehicle 10 is added to the generated OTP to generate control data. Note that the time T is a value updated at predetermined intervals, such as every 30 seconds, in consideration of the time lag between the control server 130 on the transmitting side and the control device 140 on the receiving side. You may Further, time T at the time of generation of the OTP may be added to the control data. Therefore, the control data includes the command for operating the vehicle 10 and the OTP generated by the secret key and the time T.

  The encryption unit 136 encrypts control data. As shown in FIG. 5, the encryption unit 136 encrypts the control data in which the command and the OTP information are concatenated, using a common key encryption method such as AES. A secret key for AES is used to encrypt control data. The OTP private key and the AES private key used to generate the OTP may be the same, but in consideration of security, the OTP private key and the AES private key are different. It is preferable to use

  The wireless communication unit 138 transmits the encrypted control data to the portable terminal 110 shown in FIG. This transmission is performed from the control server 130 via the network line 120 and the mobile communication line. The portable terminal 110 can transmit the encrypted control data transmitted by the wireless communication unit 138 to the control device 140 using near field communication.

(Configuration of control device 140)
FIG. 6 is a schematic block diagram of the control device 140 of FIG. FIG. 7 is a diagram for explaining the operation of the control device 140 of FIG. The control device 140 includes a wireless communication unit 142, a decryption unit 144, an ID / secret key storage unit 145, a verification unit 146, and a command execution unit 148. The command execution unit 148 includes a lock / unlock control unit 147 that controls lock / unlock of the lock of the vehicle 10 and a power control unit 149 that controls power on / off. The control device 140 is provided in the vehicle 10 and can perform near field communication with the portable terminal 110.

  The wireless communication unit 142 receives the encrypted control data transmitted via the mobile terminal 110 from the mobile terminal 110. The portable terminal 110 has a function of transmitting the control data after encryption transmitted by the wireless communication unit 138 (see FIG. 4) of the control server 130 to the control device 140.

  The decryption unit 144 decrypts the encrypted control data using the AES secret key. Decoding of control data will now be described.

  The wireless communication unit 142 receives the encrypted control data via the mobile terminal 110. As shown in FIG. 7, the decryption unit 144 decrypts the received encrypted control data using a common key encryption method such as AES (using a secret key for AES). The control data after decryption is control data before encryption shown in FIG. The OTP is separated from the decoded control data.

  The ID / secret key storage unit 145 functioning as a storage unit stores the ID of the vehicle 10 and the secret key. The ID of the vehicle 10 and the secret key stored in the ID and secret key storage unit 145 are the ID and the secret key of the vehicle 10 stored in the ID and secret key storage unit 132 of the control server 130 of FIG. It is the same.

  The collation unit 146 collates the OTP included in the control data after decryption with the OTP generated based on the secret key stored in the ID / secret key storage unit 145. Here, OTP matching will be described.

  As shown in FIG. 7, the collation unit 146 first generates an OTP using a time T at which its own clock ticks and the secret key stored in the ID / secret key storage unit 145. Subsequently, the collation unit 146 takes out the OTP included in the control data. Then, the collation unit 146 collates the generated OTP with the OTP of the transmitted control data. In addition, the collating unit 146 may generate a plurality of OTPs for a predetermined range of time before and after the time T when the clock of the control server 130 and the controller 140 takes account of the difference between the times when the control server 130 and the control device 140 respectively cut. . In this case, the collating unit 146 may determine that the OTPs match when one of the OTPs matches the OTP of the control data. In addition, when the control data includes a time T at the time of generating the OTP, the OTP may be generated using the time T.

The command execution unit 148 executes the command included in the control data when the OTP included in the control data matches the OTP generated by the collation unit 146, and does not execute the command when the OTP does not match. Specifically, if the command included in the control data is unlocked, the lock / unlock control unit 147 causes the unlocking the lock of the vehicle 10, also if the command is a lock included in the control data, lock The lock control unit 147 locks the lock of the vehicle 10. The lock / unlock control unit 147 is realized, for example, by connecting a control terminal to a lock / unlock switch provided on the substrate 40, and an electric signal for controlling the switch via the terminal is provided. Will be sent. Further, the power supply control unit 149, in accordance with the lock of the locking / unlocking operation controlled by the lock / unlock control unit 147, on the power supplied to the substrate 40, and controls the off. The power supply control unit 149 is realized, for example, by connecting a terminal for power control to a power supply wiring provided on the substrate 40, and supplies or cuts off power to the substrate 40 via the terminal.

(Operation of vehicle control system)
FIG. 8 is a flowchart of the unlocking operation of the vehicle control system 100 of FIG. The operation of the vehicle control system 100 will be described with reference to FIGS. 3 to 7. Note that the power control unit 149 of the control device 140 turns off the power of the substrate 40 before performing the following unlocking operation.

  First, the user of the rented or car-shared vehicle 10 approaches the distance to which the near-field wireless communication such as Bluetooth (registered trademark) can be performed. Then, the portable terminal 110 receives the ID of the vehicle 10 from the control device 140 mounted on the vehicle 10 (S100). The control device 140 transmits the ID of the vehicle 10 stored in the ID / secret key storage unit 145 within a predetermined range at predetermined time intervals using near field communication. That is, the control device 140 broadcasts the ID of the vehicle 10 at constant time intervals. Therefore, the portable terminal 110 can receive the broadcasted ID. When the received ID includes the ID of the vehicle reserved by the user, the portable terminal 110 establishes a connection with the control device 140 that is transmitting the ID. The ID of the vehicle reserved by the user is stored in advance in the portable terminal 110. For example, Bluetooth Low Energy (BLE) can be used as a short distance wireless communication system. In this case, the control device 140 can transmit the ID of the vehicle 10 to the surroundings at constant time intervals by the advertisement function. The short distance wireless communication system is not limited to the above, and various short distance wireless communication systems can be adopted.

  Next, the mobile terminal 110 that has received the ID of the vehicle 10 executes the installed application (S101). This application is distributed by a car sharing company or the like, and can be executed by a user authorized by the car sharing company to use the vehicle 10. The application may be run automatically or may be run based on the user's instructions. Also, the application may be executed in the background in advance, or may be executed in the background when the ID of the reserved vehicle 10 is acquired.

  The portable terminal 110 transmits the ID transmitted from the control device 140 to the control server 130 via the network line 120 (S102). The control data generation unit 134 of the control server 130 extracts the secret key corresponding to the transmitted ID from the ID / secret key storage unit 132. The control data generation unit 134 generates a one-time password (OTP) based on the extracted secret key and the time when its own clock is engraved.

  The control data generation unit 134 adds an unlock command to the generated OTP to generate control data as shown in FIG. The encryption unit 136 encrypts the generated control data using a common key encryption method such as AES (S103).

  The wireless communication unit 138 transmits the encrypted control data to the portable terminal 110 via the network line 120 (S104). Since the control data is entirely encrypted and the encrypted control data includes the OTP, reuse of the control data is impossible even if it is intercepted. In addition, even if the secret key of the AES leaks, it is difficult to generate correct control data.

The portable terminal 110 transmits the received control data as it is to the control device 140 installed in the vehicle of the vehicle 10 by near-field wireless communication using Bluetooth (registered trademark) or the like. The wireless communication unit 142 of the control device 140 receives the encrypted control data via the portable terminal 110 (S105). Communication between the portable terminal 110 and the control device 140 is performed by near field communication using Bluetooth (registered trademark) or the like. Therefore, if the distance between the portable terminal 110 and the vehicle 10 is close enough to be visible, control data will not be received, and the lock of the vehicle 10 can be prevented from being unlocked by a hacker or the like.

  The decryption unit 144 decrypts the received control data using a common key encryption method such as AES (S106).

  The collation unit 146 generates an OTP using the time T and the secret key stored in the ID / secret key storage unit 145. Further, the collation unit 146 takes out the OTP included in the control data, and collates the generated OTP with the OTP of the transmitted control data (S107).

The matching unit 146 determines whether the generated OTP matches the OTP of the control data transmitted (S108). If the two OTPs match (S108: YES), the power control unit 149 turns on the power of the substrate 40, and the lock / unlock control unit 147 executes a command included in the control data to execute The lock is unlocked (S109). On the other hand, if the two OTPs do not match (S108: NO), the process ends without executing the command included in the control data.

Thus, when the user attempts to unlock the lock of the vehicle 10, only approaching the vehicle 10 with the portable terminal 110, it is possible to unlock the lock of the vehicle 10. Therefore, the lock of the vehicle 10 can not be unlocked unless the vehicle 10 is in front of the eyes, and it is possible to prevent the vehicle 10 from being used by anyone other than the owner of the vehicle 10.

  The above is the unlocking operation of the vehicle 10. Next, the locking operation of the vehicle 10 will be described. FIG. 9 is a flowchart of the locking operation of the vehicle control system 100 of FIG.

In this flowchart, when the engine of the vehicle 10 is not started even after a predetermined time has elapsed since the lock of the vehicle 10 is unlocked , or after the engine is started, the control device 140 and the portable terminal 110 When the connection of the short distance wireless communication is disconnected between them, the lock of the vehicle 10 is locked.

  Also, after the engine is started, the start of the engine is notified to the control server 130 via the portable terminal 110, and the control device 140 is in the lock standby state by the lock command transmitted from the control server 130 via the portable terminal 110. It is set to.

Furthermore, when the short-distance wireless communication connection is disconnected between the control device 140 and the portable terminal 110 in the lock standby state, the control device 140 locks the lock of the vehicle 10.

When the flowchart of FIG. 8 is executed and unlocking is completed, the control device 140 determines whether the engine has been started within a predetermined time after unlocking (S200). If the engine is not started within the predetermined time (S200: NO), the lock / unlock control unit 147 locks the lock of the vehicle 10 and turns off the power of the control device 140 (S208).

  On the other hand, if the engine is started within a predetermined time (S200: YES), the control device 140 notifies the portable terminal 110 of the owner of the vehicle 10 of the start of the engine by near field communication (S201). The mobile terminal 110 notified of the start of the engine requests the control server 130 for a lock command as control data via the network line 120 (S202).

  The control server 130 generates a lock command and encrypts it (S203), and the control server 130 transmits the encrypted lock command to the portable terminal 110 via the network line 120 (S204). The portable terminal 110 transmits the lock command transmitted from the control server 130 to the control device 140 by near field communication as it is. The wireless communication unit 142 of the control device 140 receives the lock command via the portable terminal 110 (S205). The control device 140 sets the control device 140 in the lock standby state according to the transmitted lock command (S206).

Next, the control device 140 determines whether or not the connection with the portable terminal 110 is disconnected (S207). If the connection is not disconnected (S207: NO), the standby state remains in the lock standby state, and if the connection is disconnected (S207: YES), the lock / unlock control unit 147 locks the lock of the vehicle 10 and performs control. The power of the device 140 is turned off (S208).

Thus, tablets door to be started the engine from being unlocked within a predetermined time, the lock of the door is automatically locked. In addition, even if the engine is started, the lock of the vehicle 10 is automatically locked when the short-distance wireless communication connection is disconnected between the control device 140 and the portable terminal 110. It is because it is considered that the user has left the vehicle 10 that the connection is disconnected. Turning on / off the power of the control device 140, and more precisely the key unit 60 (see FIG. 2) together with the locking / unlocking of the lock of the vehicle 10 allows the user to hold the key unit 60 in the vehicle 10 as well. This is to make it possible to leave the vehicle 10.

Second Embodiment
FIG. 10 is a schematic configuration diagram of a vehicle control system of a second embodiment. The vehicle control system 200 of the second embodiment differs from the vehicle control system 100 of the first embodiment in that a reservation server 210 is provided.

(Configuration of vehicle control system)
Similarly to the vehicle control system 100 of the first embodiment, the vehicle control system 200 also includes the control server 130 capable of communicating with the portable terminal 110 of the user of the vehicle 10 via the network line (communication line) 120; It has a control device 140 that is configured using the substrate 40 of the remote control key 20 that locks / unlocks and controls the operation of the vehicle 10, and is capable of near field communication with the portable terminal 110. These operations are the same as in the first embodiment. The reservation server 210 stores reservation data for which the user has reserved use of the vehicle 10.

(Operation of control system)
FIG. 11 is an operation flowchart of the vehicle control system of FIG. The operations of S300, S301, and S305 to S311 in the operation flowchart of FIG. 11 are the same as the operations of S100, S101, and S103 to S109 of the operation flowchart of FIG.

  First, the user of the car sharing vehicle 10 approaches the distance to which the short distance wireless communication such as Bluetooth (registered trademark) can be performed. Then, the portable terminal 110 receives the ID of the vehicle 10 from the control device 140 mounted on the vehicle 10 (S300). Control device 140 transmits the ID of vehicle 10 stored in ID / secret key storage unit 145 to portable terminal 110 using near field communication.

  Next, the mobile terminal 110 that has received the ID of the vehicle 10 executes the installed application (S301). This application is distributed by a rental company, and can be executed by a user who is permitted to use the vehicle 10 by the rental company.

  The portable terminal 110 transmits the received ID to the reservation server 210 via the network line 120 (S302).

  The reservation server 210 checks whether the received ID matches the reserved ID (S303).

  If the received ID does not match the reserved ID (S304: NO), the reservation server 210 ends the process as it is because the vehicle 10 corresponding to the ID is not reserved. Do. On the other hand, if the received ID matches the reserved ID (S304: YES), the reservation server 210 transmits the reserved ID to the control data generation unit 134 of the control server 130. There are various methods for the operation of the reservation server, but any of the methods currently implemented may be used.

  The control data generation unit 134 adds an unlock command to the generated OTP to generate control data as shown in FIG. The encryption unit 136 encrypts the generated control data using a common key encryption method such as AES (S305).

  The wireless communication unit 138 transmits the encrypted control data to the portable terminal 110 via the network line 120 (S306). Since the control data is entirely encrypted and the encrypted control data includes the OTP, reuse of the control data is impossible even if it is intercepted. In addition, even if the secret key of the AES leaks, it is difficult to generate correct control data.

The portable terminal 110 transmits the received control data as it is to the control device 140 installed in the vehicle of the vehicle 10 by near-field wireless communication using Bluetooth (registered trademark) or the like. The wireless communication unit 142 of the control device 140 receives the encrypted control data via the portable terminal 110 (S307). Communication between the portable terminal 110 and the control device 140 is performed by near field communication using Bluetooth (registered trademark) or the like. Therefore, if the distance between the portable terminal 110 and the vehicle 10 is close enough to be visible, control data will not be received, and the lock of the vehicle 10 can be prevented from being unlocked by a hacker or the like.

  The decryption unit 144 decrypts the received control data using a common key encryption method such as AES (S308).

  The collation unit 146 generates an OTP using the time T and the secret key stored in the ID / secret key storage unit 145. Further, the collation unit 146 takes out the OTP included in the control data, and collates the generated OTP with the OTP of the control data transmitted (S309).

The collation unit 146 determines whether the generated OTP matches the OTP of the control data transmitted (S310). If both OTP match (S310: YES), the lock / unlock control unit 147 executes the commands contained in the control data, to unlock the lock of the vehicle 10. Further, the power control unit 149 turns on the power of the control device 140 (S311). On the other hand, if the two OTPs do not match (S310: NO), the process ends without executing the command included in the control data.

Thus, when the user attempts to unlock the lock of the vehicle 10, only approaching the vehicle 10 with the portable terminal 110, it is possible to unlock the lock of the vehicle. Therefore, when renting the vehicle 10, there is no need to hand over keys or cards between the user and the rental company.

Also in this embodiment, the flowchart of FIG. 9 is executed as in the first embodiment. Therefore, if it is not started the engine of the vehicle 10 even after tablets predetermined time by unlocking of the vehicle 10, or, with the control device 140 after the engine is started and the mobile terminal 110 When the short range wireless communication connection is disconnected, the lock of the vehicle 10 is locked. Also, after the engine is started, the start of the engine is notified to the portable terminal 110, and the portable terminal 110 requests the control server 130 for a lock command, and the lock is transmitted by the lock command transmitted from the control server 130 via the portable terminal 110. Set to standby mode. Furthermore, the control device 140 can lock the lock of the vehicle 10 when the short distance wireless communication connection is disconnected between the control device 140 and the portable terminal 110 in the lock standby state.

Thus, in the case of the vehicle control system of the present invention, the lock of the vehicle 10 is automatically unlocked only by the user of the vehicle 10 approaching the vehicle 10. In addition, when the engine is started, the lock standby state is established, and when the connection of the short distance wireless communication is disconnected between the control device 140 and the portable terminal 110, the lock of the vehicle 10 is locked. Therefore, the user of the vehicle can use the vehicle 10 simply by approaching the vehicle 10 with the portable terminal. Also, when the vehicle 10 is returned, it is automatically locked simply by leaving the vehicle. Therefore, a highly convenient vehicle control system 200 can be constructed.

Further, since the key unit 60 left behind in the vehicle is turned off together with the lock / unlock of the lock of the vehicle 10, the key unit 60 is separated from the vehicle 10 when viewed from the vehicle. The key unit 60 can be placed in the vehicle 10 to be rented, and the rental can be performed without delivering keys or cards.

  Furthermore, since the controller 140 does not need to communicate directly with the control server 130, the number of components of the controller 140 can be reduced, and the controller 140 can be manufactured inexpensively. In addition, the control device 140 can be miniaturized.

  The vehicle control system of the present invention can easily convert the existing vehicle 10 into a vehicle 10 for car sharing. Therefore, it is very effective, for example, when conducting a car sharing and car rental business in an emerging country where a large number of used Japanese cars such as Africa are used.

  The technical scope of the present invention is not limited to the above embodiment, and it goes without saying that various modifications are possible within the scope included in the technical scope.

  For example, the method of creating and attaching the control device 140 is not limited to the method shown in FIG. 1, and the user or service provider may perform all steps, or any part to a third party May be commissioned.

  Moreover, the instruction | indication which the control apparatus 140 can transmit with respect to the board | substrate 40 is not limited to a lock / unlock, The instruction | indication regarding various operation | movements, such as ringing of a horn, can be transmitted.

100, 200 control system,
110 mobile terminals,
120 network lines,
130 control server,
132 ID / secret key storage unit,
134 control data generator,
136 encryption unit,
138 wireless communication unit,
140 control target device (key device),
142 wireless communication unit,
144 decoder,
145 ID / secret key storage unit,
146 Matching Unit,
148 command execution unit,
210 Reservation server.

Claims (7)

Capable of communicating control server through a communication line with the user of the portable terminal of the vehicle, and a control unit for controlling the operation of the vehicle the substrate control to the remote control key for locking / unlocking the lock of the vehicle Have
The control server is
A storage unit storing an ID of the vehicle and a secret key associated with the ID;
Control data for generating an one-time password based on the secret key corresponding to the ID of the vehicle and a time or a counter value, adding the command of the vehicle to the generated one-time password, and controlling the operation of the vehicle A control data generation unit that generates
An encryption unit that encrypts the control data;
A communication unit for transmitting the encrypted control data to the mobile terminal;
The portable terminal is
The encrypted control data transmitted by the communication unit can be transmitted to the control device using near field communication,
The controller is
A wireless communication unit provided in the vehicle and capable of near field communication with the mobile terminal, and receiving the encrypted control data transmitted from the mobile terminal from the mobile terminal;
A decryption unit that decrypts the encrypted control data;
A storage unit for storing the ID of the vehicle and the secret key;
A collating unit that collates the one-time password generated by the secret key which the storage unit of the one-time password included in the control data after decoding and the control unit has stored,
The included in the control data when said one-time password the storage unit of the one-time password included in the control data after decoding and the control device is generated by the secret key stored match A vehicle control system comprising: a command execution unit that executes a command and does not execute the command when there is no match. Said control device, the power-on to be supplied to said substrate to output a command of the locking / unlocking of the lock connected to said substrate in the substrate of the remote control key to the lock to lock / unlock the vehicle A key connection device that outputs an on / off command,
Connected to said key connection apparatus having a vehicle connecting device for executing the locking / unlocking of the lock to the key connection device, a vehicle control system according to claim 1. The command execution unit
And a lock / unlock control unit for controlling the locking / unlocking of the lock,
A power control unit that controls on / off of power supplied to the substrate;
The vehicle control system according to claim 2, comprising: The control device transmits the ID of the vehicle within a predetermined range using the near field communication.
When the portable terminal acquires the ID of the vehicle, the portable terminal is connected to the control device that transmits the ID, and the ID of the vehicle acquired from the control device is transmitted to the control server via the communication line. The vehicle control system according to any one of claims 1 to 3, which is transmitted. Wherein the controller, when even after the elapse of a predetermined time the lock of the vehicle from by unlocking the engine of the vehicle has not been started, or the control device and the portable terminal after the engine is started The vehicle control system according to any one of claims 1 to 4, wherein the lock of the vehicle is locked when the connection of the near field communication is disconnected.   The control device reports start of the engine to the control server via the mobile terminal after the engine is started, and the lock standby is performed by a lock command transmitted from the control server via the mobile terminal. The vehicle control system according to claim 5, wherein the vehicle control system is set to a state. The control device according to claim 6, wherein the lock of the vehicle is locked when the short-distance wireless communication connection is disconnected between the control device and the portable terminal in the lock standby state. Vehicle control system.