JP6935732B2 - vehicle - Google Patents

Description

The present invention relates to a system for locking and unlocking a vehicle.

A technique for delivering a delivered item in the trunk of a consignment vehicle designated by the recipient as a delivery destination has been proposed (see, for example, Patent Document 1). According to this technology, the recipient can receive the delivery even when he / she is absent by designating the vehicle he / she owns as the delivery destination without installing a delivery locker or the like for receiving the delivery. Can be done.

Japanese Unexamined Patent Publication No. 2006-206225

In the system described above, when the vehicle is unlocked, all the doors of the vehicle can be opened and closed. That is, doors other than the trunk and the rear gate, which do not need to be opened and closed when delivering luggage (for example, the door of the driver's seat) can be freely opened and closed, which poses a problem in terms of security and privacy.

The present invention has been made in consideration of the above problems, and an object of the present invention is to suppress the opening of a door that is not permitted to be opened in a system in which a vehicle can be locked and unlocked by a mobile terminal.

The vehicle according to the present invention
The receiving means for receiving the first authentication information for unlocking the door of the vehicle from the mobile terminal and the second authentication information corresponding to the first authentication information are opened among the plurality of doors of the vehicle. A storage means for storing the door in association with the authorized door identifier, an unlocking means for unlocking the door based on the result of collating the first and second authentication information, and the unlocking were performed. It is characterized by having an alarm means for issuing an alarm when it is later detected that a door other than the door indicated by the identifier has been opened.

The vehicle according to the present invention communicates with a mobile terminal to acquire the first authentication information, and the door is applied based on the result of collating the first authentication information with the second authentication information stored in advance. It has a function to lock. The first authentication information can be acquired by the receiving means, for example, via short-range wireless communication. Further, the storage means stores the second authentication information for collating with the first authentication information. Further, the second authentication information is stored in association with the information for identifying the door that is permitted to be opened among the plurality of doors of the vehicle. That is, the vehicle can identify the door that may be opened at the timing of unlocking.

If the unlocking means cannot control the unlocking of the doors individually, all the doors may be unlocked and the unintended doors may be opened. Further, even if the unlocking of the door can be controlled individually, there is a possibility that the unintended door can be opened by performing the unlocking operation from inside the vehicle.
In response to this, in the present invention, the alarm means detects that a door that is not permitted to be opened has been opened and issues an alarm. The alarm may be given by voice or by sending a notification to another device. For example, an alert may be sent to a wirelessly connected mobile terminal, or an alert may be sent to a device that manages the system.
According to such a configuration, in a system in which a vehicle can be unlocked by using a mobile terminal, it is possible to suppress the opening of a door that is not permitted to be opened.

The present invention can be specified as a vehicle including at least a part of the above means. It can also be specified as a locking / unlocking system that includes the vehicle. It can also be specified as a method performed by the system or vehicle. The above processes and means can be freely combined and carried out as long as there is no technical contradiction.

According to the present invention, in a system in which a vehicle can be locked and unlocked by a mobile terminal, it is possible to suppress the opening of a door that is not permitted to be opened.

The system block diagram of the delivery system which concerns on embodiment. The block diagram which showed the component which the delivery system which concerns on embodiment has. The figure explaining the door which the vehicle 10 has. The figure which shows the relationship between the device authentication information and permission door information. The figure explaining the data flow in an embodiment. The figure explaining the data flow in an embodiment. The flowchart of the process of monitoring a door.

<System overview>
The outline of the delivery system according to the present embodiment will be described with reference to FIG. The delivery system according to the present embodiment includes a locking / unlocking device 100, a mobile terminal 200, a delivery management server 300, and a key management server 400.
In the delivery system according to the present embodiment, the locking / unlocking device 100 mounted on the vehicle 10 wirelessly communicates with the mobile terminal 200 outside the vehicle, and locks / unlocks the vehicle 10 based on the result of the communication. That is, the user of the system can lock and unlock the vehicle 10 using only the mobile terminal 200 without using a physical key.

The key management server 400 is a server device that issues information (authentication information) for the locking / unlocking device 100 to authenticate the mobile terminal 200. The key management server 400 issues the first authentication information to the mobile terminal 200 via the delivery management server 300, and similarly issues the second authentication information to the locking / unlocking device 100 via the delivery management server 300. do. The locking / unlocking device 100 authenticates that the mobile terminal 200 is legitimate by collating these authentication information.

The delivery management server 300 is a server device that manages a plurality of mobile terminals 200 possessed by a delivery person. Although FIG. 1 shows one mobile terminal 200 and one vehicle 10, there may be a plurality of mobile terminals 200 managed by the delivery management server 300. Further, the number of vehicles 10 that can be accessed by the mobile terminal 200 may be plural.

<System configuration>
The components of the system will be described in detail.
FIG. 2 is a block diagram schematically showing an example of the configuration of the locking / unlocking device 100, the mobile terminal 200, the delivery management server 300, and the key management server 400 shown in FIG. Of these, the locking / unlocking device 100 is mounted on the vehicle 10 that is the target of locking / unlocking (locking and unlocking).

The locking / unlocking device 100 is a device for locking / unlocking a vehicle door. Specifically, the door of the vehicle 10 is locked and unlocked according to the lock signal and the unlock signal transmitted from the electronic key (portable device) possessed by the user of the vehicle via radio waves in the high frequency band.
In the present embodiment, in addition to the above-mentioned functions, the locking / unlocking device 100 has a function of locking / unlocking the door based on the result of communication with the mobile terminal 200.

The locking / unlocking device 100 includes a short-range communication unit 101, a collation ECU 102, a body ECU 103, a door lock motor 104, and a communication unit 105. The locking / unlocking device 100 operates on electric power supplied from an auxiliary battery (not shown) mounted on the vehicle 10. In this example, the means for communicating with the electronic key is not shown.

The short-range communication unit 101 is a module that communicates with the mobile terminal 200 owned by the user. The short-range communication unit 101 uses a predetermined wireless communication standard to perform communication at a short distance (to the extent that communication can be performed inside and outside the vehicle interior).

In the present embodiment, the short-range communication unit 101 performs data communication according to the Bluetooth (registered trademark) Low Energy standard (hereinafter referred to as BLE). BLE is a low-power communication standard by Bluetooth, and has a feature that communication can be started immediately by detecting the other party without requiring pairing between devices.
Although BLE is illustrated in this embodiment, other wireless communication standards can also be used. For example, NFC (Near Field Communication), UWB (Ultra Wideband), WiFi (registered trademark) and the like can also be used.

The collation ECU 102 performs short-range wireless communication with the mobile terminal 200 via the short-range communication unit 101 to authenticate the mobile terminal 200, and locks and unlocks the door of the vehicle 10 based on the result of the authentication. Is a computer that does. The collation ECU 102 is composed of, for example, a microcomputer.
In the following description, the lock signal and the unlock signal are collectively referred to as a lock / unlock signal. The term locking / unlocking signal refers to at least one of a locking / unlocking signal.

The collation ECU 102 has a communication processing unit 1021, an authentication unit 1022, a key control unit 1023, and a door monitoring unit 1024 as functional modules. Each functional module uses a CPU (Central Processing) to store a program stored in a storage means such as a ROM (Read Only Memory).
It may be realized by executing by Unit) (both are not shown).

The communication processing unit 1021 processes the communication with the mobile terminal 200 performed via the short-range communication unit 101. Specifically, a lock / unlock request (hereinafter collectively referred to as a lock / unlock request) is received from the mobile terminal 200, and a lock / unlock signal is generated in response to the received request.
The generated lock / unlock signal is temporarily stored, and is output at the timing when the authentication unit 1022, which will be described later, succeeds in authenticating the mobile terminal 200.

The authentication unit 1022 authenticates the mobile terminal 200 based on the authentication information included in the lock / unlock request transmitted from the mobile terminal 200. Specifically, the authentication information stored in the storage means (not shown) is compared with the authentication information transmitted from the mobile terminal 200, and if they match, it is determined that the authentication is successful. If both authentication information does not match, it is judged that the authentication has failed. When the authentication unit 1022 succeeds in authenticating the mobile terminal 200, the lock / unlock signal generated by the communication processing unit 1021 is transmitted to the key control unit 1023 described later.
The authentication method performed by the authentication unit 1022 may be a method of simply comparing authentication information with each other to verify the identity, or a method using asymmetric encryption. The above-mentioned "match" means that it is only necessary to confirm that the two authentication information correspond to each other, and the two authentication information do not necessarily have to be the same.
Hereinafter, as necessary for explanation, the authentication information stored in the locking / unlocking device 100 is the device authentication information (second authentication information) , and the authentication information transmitted from the mobile terminal 200 is the terminal authentication information (first authentication information). ) . When it is not necessary to distinguish between the two, it is simply referred to as authentication information.
The device authentication information stored in the authentication unit 1022 is generated by the key management server 400, which will be described later, and is received and stored via the network.

The key control unit 1023 transmits an unlock command or a lock command to the body ECU 103, which will be described later, based on the result of the authentication performed by the authentication unit 1022. The signal is transmitted via an in-vehicle network such as CAN (Controller Area Network).

The door monitoring unit 1024 refers to the authentication information used for locking / unlocking, identifies the doors that are permitted to be opened and the doors that are not permitted to be opened, and then determines the open state of the plurality of doors that the vehicle 10 has. Monitor and alert when unauthorized doors are opened. The specific method will be described later.

The body ECU 103 is a computer that controls the body of the vehicle. The body ECU 103 has a function of unlocking and locking the door of the vehicle by controlling the door lock motor 104 described later based on the received unlocking command or locking command. The body ECU 103 may further have a function of controlling components related to the vehicle body, such as power window control, seat adjustment, anti-theft, seatbelt control, and headlight control.

The door lock motor 104 is an actuator that locks and unlocks the door of the vehicle 10 (including the entrance / exit door, the rear gate, and the trunk). The door lock motor 104 operates based on the signal transmitted from the body ECU 103.

The communication unit 105 is a communication interface for connecting the locking / unlocking device 100 to the network. In the present embodiment, it is possible to communicate with another device via a network by using a mobile communication service such as 3G or LTE.

Next, the mobile terminal 200 will be described.
The mobile terminal 200 is a small computer such as a smartphone, a mobile phone, a tablet computer, a personal information terminal, a notebook computer, or a wearable computer (smart watch or the like). The mobile terminal 200 includes a short-range communication unit 201, a communication unit 202, and a control unit 203.

The short-range communication unit 201 is a means for communicating with the locking / unlocking device 100 according to the same communication standard as the short-range communication unit 101.
The communication unit 202 is a communication interface for making a network connection, similar to the communication unit 105.

The control unit 203 is a means for controlling the mobile terminal 200. The control unit 203 performs, for example, a process of generating a lock / unlock request, a process of acquiring the terminal authentication information described above, a process of transmitting the lock / unlock request and the terminal authentication information to the lock / unlock device 100, and the like. The control unit 203 is composed of, for example, a microcomputer. The control unit 203 may realize these functions by executing a program stored in a storage means (ROM or the like) by a CPU (all not shown).

The control unit 203 is connected to an input / output unit (not shown) that interacts with the user. The input / output unit is composed of, for example, a touch panel and its control means, a liquid crystal display and its control means. The touch panel and the liquid crystal display are composed of one touch panel display in the present embodiment.

The control unit 203 displays an operation screen via the input / output unit, and generates an unlock request or a lock request based on the operation performed by the user. For example, the control unit 203 outputs an icon for unlocking, an icon for locking, and the like to the touch panel display, and generates an unlocking request or a locking request based on an operation performed by the user.
The operation performed by the user is not limited to that via the touch panel display. For example, it may be due to a hardware switch or the like.

Further, the control unit 203 performs a process of acquiring the terminal authentication information. In the present embodiment, the terminal authentication information is generated in the key management server 400 described later and transmitted to the mobile terminal 200 via the delivery management server 300 described later.
If the mobile terminal 200 does not have the terminal authentication information, the locking operation and the unlocking operation from the operation screen are impossible.

The terminal authentication information acquired by the mobile terminal 200 may be an immutable key or a one-time key. In either case, the device authentication information corresponding to the terminal authentication information is stored in the locking / unlocking device 100 in advance.

Next, the delivery management server 300 will be described.
The delivery management server 300 is a server device that manages a package to be delivered and a mobile terminal 200 owned by a plurality of delivery personnel. The delivery management server 300 stores the delivery information of the target package, and when the vehicle 10 is designated as the delivery location, the terminal authentication information for locking and unlocking the vehicle 10 accommodating the package is used. It is acquired from the key management server 400 and transferred to the mobile terminal 200. Further, the device authentication information corresponding to the vehicle 10 (locking / unlocking device 100) is acquired from the key management server 400 and transferred to the locking / unlocking device 100. The process is performed starting from a request from the mobile terminal 200 possessed by the person in charge of delivery.
The delivery management server 300 includes a communication unit 301 and a control unit 302.

The communication unit 301 is a communication interface for making a network connection, similar to the communication unit 105.
The control unit 302 is a means for controlling the delivery management server 300. The control unit 302 is composed of, for example, a CPU.
The control unit 302 has a delivery management unit 3021 as a functional module. The functional module may be realized by executing a program stored in a storage means such as a ROM by a CPU (all not shown).

The delivery management unit 3021 is a means for storing and managing information regarding a user who is a consignee, a vehicle 10 which is under the control of the user and is a delivery destination, a package associated with the user, and the like.
When the delivery management unit 3021 receives the information regarding the package to be delivered from the mobile terminal 200, the delivery management unit 3021 identifies the vehicle 10 to be the delivery destination, and issues the terminal authentication information and the device authentication information for locking and unlocking the vehicle 10 as the key. Ask the management server 400. Further, the terminal authentication information issued by the key management server 400 is transferred to the mobile terminal 200, and the device authentication information is transferred to the locking / unlocking device 100.

Next, the key management server 400 will be described.
The key management server 400 is a device that issues terminal authentication information used by the mobile terminal 200 and device authentication information used by the locking / unlocking device 100 in response to a request from the delivery management server 300. The key management server 400 includes a communication unit 401, a control unit 402, and a storage unit 403.

The communication unit 401 is a communication interface for making a network connection, similar to the communication unit 301.

The control unit 402 is a means for controlling the key management server 400. The control unit 402 is composed of, for example, a CPU.
The control unit 402 has a key issuing unit 4021 as a functional module. Each functional module may be realized by executing a program stored in a storage means such as a ROM by a CPU (all not shown).

The key issuing unit 4021 issues terminal authentication information and device authentication information in response to a request from the delivery management server 300. As described above, the terminal authentication information is the authentication information for the mobile terminal 200 to lock and unlock the vehicle 10 via the locking / unlocking device 100. Further, the device authentication information is authentication information paired with the terminal authentication information.

The terminal authentication information and the device authentication information may be acquired in advance or may be dynamically generated. For example, it is possible to generate authentication information that is valid only in a predetermined time zone, authentication information that specifies the number of times of use, authentication information that can be used only in a predetermined mobile terminal 200, and the like.
When the vehicle 10 has a plurality of independently lockable and unlockable areas such as a passenger compartment and a trunk, authentication information that can lock and unlock only one of the areas may be generated.

Further, the device authentication information is associated with information regarding the door that is permitted to be opened. This will be described with reference to FIG.
The vehicle 10 is provided with a plurality of doors that can be opened and closed independently. In this specification, the trunk hatch is also referred to as a door for convenience.
In the present embodiment, as shown in FIG. 4, information for identifying a door for which opening is permitted (hereinafter, permitted door) (hereinafter, permitted door information) is added to the device authentication information issued by the key issuing unit 4021. The permitted door information may be generated by using, for example, information preset by the owner of the vehicle 10.

In addition to the device authentication information, the same permission door information may be added to the terminal authentication information. According to such a form, the user of the mobile terminal 200 can be notified of which door is permitted.

The storage unit 403 is a means for storing information, and is composed of a storage medium such as a RAM, a magnetic disk, or a flash memory. The storage unit 403 stores device authentication information corresponding to the locking / unlocking device 100, terminal authentication information paired with the device authentication information, and various data for generating these authentication information.

<System operation>
Next, the processing performed by each of the above-mentioned components will be described. The processing is a phase in which the mobile terminal 200 acquires terminal authentication information (first phase) and a phase in which the mobile terminal 200 accesses the locking / unlocking device 100 using the acquired terminal authentication information to lock / unlock the vehicle (phase). It can be divided into the second phase). FIG. 5 is a diagram showing the data flow in the first phase, and FIG. 6 is a diagram showing the data flow in the second phase.

The first phase will be described with reference to FIG. The processes of steps S11 to S17 are executed when there is a request for issuing terminal authentication information from the mobile terminal 200.
First, in step S11, the mobile terminal 200 requests the delivery management server 300 to issue terminal authentication information. In this step, information for identifying the mobile terminal 200 and information for identifying the package (hereinafter, package information, for example, a slip number) are simultaneously transmitted as an authentication information request.

In step S12, the delivery management server 300 (delivery management unit 3021) identifies the vehicle 10 to be the delivery destination based on the acquired package information and the information stored in advance. Next, the identifier of the vehicle 10 is added to the authentication information request and transmitted to the key management server 400 (step S13).

In step S14, the key issuing unit 4021 generates (or acquires) terminal authentication information and device authentication information unique to the mobile terminal 200 and the vehicle 10 (the locking / unlocking device 100 mounted on the vehicle 10).

Next, in step S15, the generated terminal authentication information and device authentication information are transmitted to the delivery management server 300 (step S15). Further, the delivery management server 300 transfers the terminal authentication information to the mobile terminal 200 (step S16). Further, the device authentication information is transferred to the locking / unlocking device 100 (step S17). As a result, the operation of unlocking the vehicle 10 becomes possible on the mobile terminal 200.
In this example, the terminal authentication information and the device authentication information are transferred via the delivery management server 300, but the terminal authentication information is transferred from the key management server 400 to the mobile terminal 200, and the device authentication is performed from the key management server 400 to the locking / unlocking device 100. The information may be transmitted directly.

Since the processes of steps S11 to S17 are preparatory processes for locking and unlocking, it is preferable to perform the processes in advance. For example, it may be executed in the preparation stage of delivery.

The second phase will be described with reference to FIG. Steps S21 to S24 are processes for unlocking the vehicle 10 using the mobile terminal 200.
When the user of the mobile terminal 200 (that is, the person in charge of delivery) performs an operation of unlocking the vehicle 10 via the input / output unit, a link by BLE is established between the mobile terminal 200 and the locking / unlocking device 100, and a step is taken. In S21, the mobile terminal 200 transmits an unlock request and terminal authentication information to the locking / unlocking device 100.

When the mobile terminal 200 has the permitted door information (that is, when the terminal authentication information includes the permitted door information), the user (delivery person) opens the door at this timing. May be notified to. For example, the position of the door may be notified via the input / output unit.

In step S22, the authentication unit 1022 of the locking / unlocking device 100 collates the terminal authentication information transmitted from the mobile terminal 200 with the device authentication information stored in advance, and performs the authentication process. If the authentication is successful, the key control unit 1023 unlocks the door of the vehicle 10.

Steps S31 to S34 are processes for locking the vehicle 10 using the mobile terminal 200.
When the user of the mobile terminal 200 performs an operation of locking the vehicle 10 via the input / output unit, the mobile terminal 200 transmits a locking request and terminal authentication information to the locking / unlocking device 100 in step S31.

In step S32, the authentication unit 1022 of the locking / unlocking device 100 collates the terminal authentication information transmitted from the mobile terminal 200 with the device authentication information stored in advance, and performs the authentication process. If the authentication is successful, the key control unit 1023 locks the door of the vehicle 10.

Further, the communication processing unit 1031 included in the locking / unlocking device 100 transmits a notification (locking notification) to the mobile terminal 200 that the locking is completed after the locking is performed (step S33). As a result, a notification that the locking is completed is output on the touch panel screen of the mobile terminal 200. If the terminal authentication information is a one-time key, the one-time key may be invalidated at the timing of step S33. Finally, the mobile terminal 200 transmits a lock notification to the delivery management server 300 (step S34).

Next, the process of monitoring the opening / closing of the door will be described.
FIG. 7 is a flowchart of a process in which the locking / unlocking device 100 mounted on the vehicle 10 monitors the opening / closing of the door of the own vehicle. The process shown in FIG. 7 is started by the door monitoring unit 1024 at the timing when the locking / unlocking device 100 unlocks by the mobile terminal 200.

First, in step S41, the permission door information associated with the device authentication information used for unlocking the vehicle 10 is acquired.
Next, in step S42, it is determined whether or not the door is newly opened. Here, if a new door is opened while the vehicle 10 is unlocked by the mobile terminal 200, the process proceeds to step S43.

In step S43, it is determined whether or not the opened door is a door that is permitted to be opened (that is, whether or not the door matches the permitted door information). As a result, if the door is not allowed to be opened, the process proceeds to step S44 and an alert is generated.

The alert may be output via the body ECU 103. For example, a security alarm provided in the vehicle may be sounded, or a voice indicating that a door that is not permitted to be opened may be sounded.

The alert may also be sent via a communication channel or network. For example, the mobile terminal 200 may be notified via short-range wireless communication that the door that is not permitted to be opened has been opened, and the mobile terminal 200 that has received the notification may notify the user. For example, the notification may be given via voice reproduction, vibration, screen display, or the like. In addition to this, the notification may be sent to the device managed by the system administrator.

As described above, according to the present embodiment, in the system for unlocking the vehicle 10 using the mobile terminal 200, the doors that are permitted to be opened are set in advance, and an alarm is issued when the doors that are not permitted to be opened are opened. Or you can give a notification.

(Modification example)
The above embodiment is merely an example, and the present invention can be appropriately modified and implemented without departing from the gist thereof.

For example, in the example of FIG. 7, one type of alarm is used, but two or more types of alarms may be used. For example, a first alarm may be generated and a second alarm may be generated when the target door remains open after a lapse of a predetermined time. Further, the notification method or notification destination may be changed between the first alarm and the second alarm. For example, the first alarm may be "notification to the mobile terminal 200" and the second alarm may be "ringing of a security alarm". Also, the alarm level (for example, volume) may be different.

Further, in the description of the embodiment, the permitted door is defined, but if the door that is permitted to be opened and the door that is not permitted to be opened can be distinguished, the definition may be performed in another form. For example, you may define a door that prohibits opening.

Further, in the example of FIG. 4, the permission door is defined for each vehicle, but the permission door may be defined by using other information as a key. For example, a permit door may be defined for each vehicle owner. Further, when a plurality of packages are delivered, the permission door may be different for each package delivery. By doing so, for example, the luggage arriving first can be stored in the trunk, and the luggage arriving later can be stored in the passenger compartment.

In addition, a process of changing the predefined permission door after the fact may be performed. For example, when the permission door is a trunk hatch and a large cargo is delivered, the permission door may be changed to a passenger compartment door. The processing may be automatically performed by the delivery management server 300 and the key management server 400, or may be performed based on a request transmitted by the delivery person via the mobile terminal 200. Further, when changing the permission door, the permission request may be sent to the terminal owned by the owner of the vehicle. Further, the key management server 400 may automatically issue the change permission based on the information set in advance. Further, when the permitted door is changed, the terminal owned by the owner of the vehicle may be notified to that effect.
When the permission door is changed, information about the changed permission door is transmitted to the locking / unlocking device 100 via the network.

Further, in the description of the embodiment, the passenger compartment and the trunk of an automobile are exemplified as areas where luggage can be stored and locked / unlocked, but the present invention is not necessarily limited to these. The present invention can be applied to other than automobiles such as facilities and storage devices as long as it has an area that can be locked and unlocked using a mobile terminal.

10 ... Vehicle 100 ... Locking / unlocking device 101, 201 ... Short-range communication unit 102 ... Matching ECU
103 ... Body ECU
104 ... Door lock motor 105, 202, 301, 401 ... Communication unit 200 ... Mobile terminal 203, 302, 402 ... Control unit 300 ... Delivery management server 400 ... Key management server 403・ ・ ・ Memory

Claims (1)

A receiving means for receiving the first authentication information for unlocking the vehicle door from the mobile terminal,
A storage means for storing the second authentication information corresponding to the first authentication information in association with the information for identifying the door that is permitted to be opened among the plurality of doors of the vehicle.
An unlocking means for unlocking the door based on the result of collating the first and second authentication information.
After the unlocking is performed, an alarm means for issuing an alarm when it is detected that a door other than the door for which the opening is permitted has been opened, and an alarm means.
Has a vehicle.

Images