JP6958509B2 - Portable devices, vehicle controls, and control systems - Google Patents

Description

The present invention relates to a portable device or the like that transmits a signal to a vehicle control device that operates according to a control request included in a legitimate signal.

Conventionally, vehicles equipped with a keyless entry (RKE) system have been developed. The keyless entry system consists of a remote controller owned by the user, a vehicle control device, and a vehicle lock mechanism. The vehicle control device receives a signal (keyless signal) from the remote controller and controls (unlocks or locks) the locking mechanism according to the request contained in the signal. The keyless signal contains various codes for authentication, and the vehicle control device operates only according to the unlock request or the lock request of the signal that is authenticated based on the code.

However, in recent years, a crime (so-called "roll jam") of illegally unlocking the lock mechanism of a vehicle equipped with the RKE system and stealing the vehicle has occurred. And various techniques have been developed as a measure against roll jam.

For example, in Patent Document 1, the rolling code on the portable device side is updated by the first value at the time of collating the code in the in-vehicle device (first collation), and the second collation at the time of starting the engine after the completion of the first collation is also collated. Describes a technique for updating only a second value larger than the first value when is satisfied. Further, in Patent Document 2, when the door lock device is unlocked or locked due to a factor different from the output of the control signal related to the RKE system, the order of the codes held by the vehicle control device is advanced. As a result, when an illegally acquired authentication information is received later, a technique for determining that the information is not valid is described.

Japanese Unexamined Patent Publication No. 2017-145569 (published on August 24, 2017) Japanese Unexamined Patent Publication No. 2017-128913 (published on July 27, 2017)

Unauthorized acquisition of a keyless signal by roll jam can occur in any situation where the user operates the remote controller. However, the inventions described in Patent Documents 1 and 2 are effective preventive measures only in a limited number of situations in which roll jam can occur.

For example, the invention described in Patent Document 1 has a problem that roll jam cannot be prevented when the vehicle is unlocked and locked only by the RKE system. In the invention described in Patent Document 1, it is premised that after locking using the RKE system, unlocking or locking control different from that of the RKE system is performed, such as unlocking with a physical key or locking with an auto lock. Because it is.

Further, for example, the invention described in Patent Document 2 has a problem that it cannot cope with a roll jam when a user locks a car door. This is because the invention described in Patent Document 2 performs a second collation triggered by depressing the brake pedal or the like after unlocking the vehicle, and updates the code included in the keyless signal when the second collation is established. ..

One aspect of the present invention is in view of the above problems, and an object of the present invention is to realize a portable device or the like capable of preventing the vehicle control device from being illegally operated by an external tool.

In order to solve the above-mentioned problems, in the portable device according to one aspect of the present invention, the received signal is valid based on a numerical value or an identification code including a code string selected from a plurality of code strings in which an order is determined. It is a vehicle control device that determines whether or not a signal is transmitted to a vehicle control device that performs predetermined control according to a control request included in a legitimate signal, and is a portable device that transmits a signal according to a user input operation. A first transmission unit that transmits a first signal including the identification code and the control request to the vehicle control device, and after the first transmission unit transmits the first signal, the identification code is included. A second transmission unit that transmits a second signal that does not include the control request to the vehicle control device, each time the first signal is transmitted, and each time the second signal is transmitted, the numerical value is increased. It is provided with an identification code changing unit, which changes the code string to a code string whose order is later than that of the code string.

According to one aspect of the present invention, it is possible to prevent the vehicle control device from being tampered with by an external tool.

FIG. 5 is a block diagram showing a main configuration of a portable device and a vehicle control device included in the control system according to the first embodiment of the present invention. It is a figure which shows an example of the data structure of a signal. It is a flowchart which shows the processing flow of the portable device. It is a flowchart which shows the process flow of the vehicle control device. It is a flowchart which shows the flow of the authentication process in the said vehicle control device. It is a sequence diagram which shows the flow of sending and receiving of a signal between the portable device and the vehicle control device. It is a figure which shows the technique of the roll jam when a user locks a car door.

[Embodiment 1]
(Overview of control system)
Hereinafter, one embodiment of the present invention will be described in detail. The control system according to the present invention is at least a vehicle load, a vehicle control device that controls the vehicle load, and a portable device that wirelessly communicates with the vehicle control device, and gives an instruction (request) to the vehicle control device. Includes portable devices and.

The control system according to the present invention can be applied to, for example, a keyless entry (RKE) system of a car lock mechanism. In recent years, a crime called roll jam has occurred in which the lock mechanism of a vehicle corresponding to the RKE system is illegally unlocked by taking advantage of the operation of the RKE system.

FIG. 7 is a diagram showing a method of roll jam when a user locks a car door. FIG. 7A shows the operation of each device when the user parks the vehicle in a parking lot or the like and then operates the remote controller once toward the vehicle. In response to the user's remote control operation, the remote control transmits a keyless signal (first time) to the vehicle (more precisely, the vehicle control device inside the vehicle). A criminal trying to steal a vehicle uses an external tool to illegally obtain this first keyless signal.

More specifically, the external tool interferes with the reception of the keyless signal in the vehicle control device by transmitting jamming radio waves. In addition, the external tool acquires and stores the keyless signal as well as transmitting the jamming radio wave. As a result, the external tool is in a state where the first keyless signal is stored. Of course, the vehicle is not locked because the vehicle controller has not received the keyless signal. Since the unauthorized acquisition of the keyless signal is not apparent, the user does not notice that the keyless signal has been illegally acquired, and operates the remote controller again to try to lock the vehicle.

FIG. 7B shows the operation of each device when the user operates the remote controller again. As shown in the figure, the external tool also transmits the jamming radio wave for the second keyless signal and acquires the second keyless signal. Then, the external tool transmits the first keyless signal acquired last time to the vehicle instead of the second keyless signal. The vehicle control device receives the first keyless signal. Since the keyless signal itself is a legitimate signal originally transmitted from the portable device 1, the vehicle control device authenticates the keyless signal and locks the vehicle according to the keyless signal. As a result, the vehicle appears to be locked in response to the second remote control operation by the user. Therefore, the user leaves the vehicle without noticing that the second keyless signal has been illegally acquired.

FIG. 7C shows the operation of each device after the user leaves the vicinity of the vehicle. After the user leaves, the criminal performs a predetermined operation on an external tool (for example, pressing a button instructing keyless signal transmission). When the external tool accepts the operation, it transmits the stored second keyless signal. The vehicle control device receives the second keyless signal and unlocks the locking mechanism. As a result, the vehicle key can be illegally unlocked in the absence of the user.

The control system according to the present invention is particularly effective in preventing unauthorized unlocking and locking of a vehicle due to this roll jam. Hereinafter, the configurations and processes of various devices according to the embodiment of the present invention will be described with reference to FIGS. 1 to 6.

(Main part composition)
FIG. 1 is a block diagram showing a main configuration of a portable device 1 and a vehicle control device 2 included in the control system 500 according to the present embodiment. In the figure, the lock mechanism 3 is also shown as an example of the vehicle load.

(Main part configuration of portable device 1)
The portable device 1 is a device that transmits a signal to the vehicle control device 2. Specific examples of the portable device 1 include a terminal device that can be carried by a user, such as a remote controller, a mobile phone, a smartphone, and a tablet PC (personal computer). The portable device 1 includes a control unit 10, an input unit 20, a storage unit 30, and a communication unit 40.

The input unit 20 accepts a user's input operation. The input unit 20 is realized by, for example, a physical button or a touch panel of the portable device 1. The portable device 1 may include a plurality of input units 20 according to the content of instructions to the vehicle control device 2. For example, the portable device 1 may include a lock button, which is a button for instructing locking, and an unlock button, which is a button for instructing unlocking, as the input unit 20. The input unit 20 transmits the user's input operation to the control unit 10.

The storage unit 30 stores various data used by the portable device 1. The storage unit 30 stores at least the rolling code (identification code) 31. The rolling code 31 includes a numerical value or a code string selected from a plurality of code strings in a predetermined order.

For example, the rolling code 31 may be a numerical value having a predetermined number of digits, or may be a code string selected from a list (code string list) in which a predetermined number of code strings composed of numbers, symbols, and characters are ordered. There may be. Further, the rolling code 31 may be a randomly generated random code to which the numerical value or the code string is attached. When the rolling code 31 includes the code string, the storage unit 30 also stores the code string list.

In addition to the rolling code 31, the storage unit 30 may store data necessary for generating various signals. For example, the storage unit 30 may store synchronization codes, function codes, and authentication data of various signals. These data will be described in detail later.

The control unit 10 comprehensively controls the portable device 1. The control unit 10 specifies an instruction content (for example, a lock instruction or an unlock instruction) for the user's input operation transmitted from the input unit 20, and controls each unit of the portable device 1 according to the instruction. The control unit 10 includes a first signal generation unit (first transmission unit) 11, a second signal generation unit (second transmission unit) 12, and a code update unit (identification code change unit) 13.

The first signal generation unit 11 generates and transmits the first signal. When the input operation transmitted from the input unit 20 by the control unit 10 is a predetermined input operation (for example, pressing a predetermined button), the control unit 10 instructs the first signal generation unit 11 to generate a signal. The first signal generation unit 11 reads the rolling code 31 and various data necessary for generating the first signal from the storage unit 30 to generate the first signal. The first signal generation unit 11 transmits the generated signal to the vehicle control device 2 via the communication unit 40.

The code update unit 13 updates the numerical value or the code string of the rolling code 31. When the code update unit 13 is notified that the signal has been transmitted from the first signal generation unit 11 or the second signal generation unit 12, the code update unit 13 transmits the rolling code 31 (or a numerical value or a code string of a part of the rolling code 31). A large number or the order in the code string list is changed to a later code string. Hereinafter, changing the numerical value or code string of the rolling code (rolling code 31 or rolling code 71 described later) to a larger numerical value or the order in the code string list to a later code string means that the rolling code is incremented (increased). To do. "

In other words, the code update unit 13 increments the rolling code 31 each time the first signal generation unit 11 transmits the first signal and each time the second signal generation unit 12 transmits the second signal. When the increment of the rolling code 31 is completed, the code update unit 13 notifies the second signal generation unit 12 that the increment is completed.

The second signal generation unit 12 generates and transmits the second signal. When the code update unit 13 notifies the completion of the increment, the second signal generation unit 12 receives the rolling code 31 (that is, the rolling code after the increment) and various data necessary for generating the second signal from the storage unit 30. Is read out to generate a second signal. The second signal generation unit 12 transmits the generated second signal to the vehicle control device 2 via the communication unit 40. The second signal generation unit 12 repeats the generation and transmission of the second signal a predetermined number of times.

The communication unit 40 transmits the first signal received from the first signal generation unit 11 and the second signal received from the second signal generation unit 12 to the vehicle control device 2 by wireless communication. The band and method of wireless communication are not particularly limited, but wireless communication can be performed in, for example, a UHF (Ultra High Frequency) band.

(Signal data structure)
Next, the data structures of the first signal and the second signal will be described with reference to FIG. FIG. 2 is a diagram showing an example of a signal data structure. FIG. 2A shows an example of the data structure of the first signal. On the other hand, FIG. 2B shows an example of the data structure of the second signal.

The first signal includes, for example, a synchronization code, a function code, authentication data, and a rolling code. On the other hand, the second signal includes data other than the function code among various data included in the first signal.

The synchronization code is a code string for synchronizing communication between the portable device 1 and the vehicle control device 2. An external tool may start an attempt to transmit jamming radio waves and illegally acquire a keyless signal by using the detection of a synchronization code as a trigger. The function code is a code string indicating a control request (control request) for the portable device 1.

The external tool may detect the synchronization code of the keyless signal and then further detect whether or not the keyless signal contains the function code. For example, if the keyless signal contains a function code, the transmission of jamming radio waves and the attempt to illegally acquire the keyless signal are continued, and if the function code is not included, the jamming radio wave is transmitted and the keyless signal is illegally acquired. There may be external tools that continue the trial. Examples of the function code include a lock request and an unlock request. The authentication data indicates that the portable device 1 is a legitimate portable device, such as the identifier of the portable device 1 (device ID, etc.) and the calculation result of the code agreed between the portable device 1 and the vehicle control device 2. It is data for confirmation. The rolling code is a rolling code read from the storage unit 30.

(Main part configuration of vehicle control device 2)
The vehicle control device 2 is a device that determines whether or not the received signal from the portable device 1 is correct or not. Further, when the function code is included in the signal determined to be valid, the vehicle control device 2 operates according to the function code. The vehicle control device 2 in the present embodiment is an in-vehicle device mounted on the vehicle 100. Further, the lock mechanism 3 to be controlled by the vehicle control device 2 is a lock mechanism for the door of the vehicle 100. The vehicle control device 2 includes a communication unit 50, a control unit 60, and a storage unit 70.

The communication unit (reception unit) 50 receives the first signal and the second signal transmitted by the communication unit 40 of the portable device 1. As will be described in detail later, the communication unit 50 may also receive the first signal and the second signal transmitted by a device other than the portable device 1 (for example, an external tool).

The control unit 60 comprehensively controls the vehicle control device 2. The control unit 60 includes an authentication unit (correctness determination unit) 61, a code update unit 62, and a lock mechanism control unit (control execution unit) 63.

The authentication unit 61 determines whether or not the received signal is a legitimate signal, and if it is a legitimate signal, authenticates the signal. Specifically, when the rolling code included in the received signal has a larger numerical value than the rolling code 71 stored in the storage unit 70, or the order of the code strings is later, the authentication unit 61 will perform the authentication unit 61. , The signal is determined to be a legitimate signal. On the other hand, if the rolling code included in the received signal has a smaller numerical value than the rolling code 71 or the order of the codes is earlier, the authentication unit 61 determines that the signal is an invalid signal. .. The authentication unit 61 notifies the code update unit 62 and the lock mechanism control unit 63 of the determination result (that is, whether or not the authentication is possible).

The code update unit 62 updates the rolling code 71 of the storage unit 70 when the signal is authenticated. More specifically, the code update unit 62 rewrites the rolling code 71 with the rolling code included in the authenticated signal. As described above, the rolling code contained in the authenticated signal has at least a larger numerical value than the rolling code 71, or the order of the code strings is later. Therefore, the code update unit 62 increments the rolling code 71 by updating the rolling code 71.

The lock mechanism control unit 63 determines whether or not the authenticated signal includes a function code, and if the function code is included, controls the lock mechanism 3 according to the function code. For example, when the function code indicates a locking request, the locking mechanism control unit 63 locks the locking mechanism 3. Further, for example, when the function code indicates an unlock request, the lock mechanism control unit 63 unlocks the lock mechanism 3.

The storage unit 70 stores various data used by the vehicle control device 2. The storage unit 70 stores at least a rolling code (identification code) 71. The rolling code 71 has the same format as the rolling code 31. The rolling code (rolling code 31) included in the signal that was previously determined to be valid and authenticated is stored in the storage unit 70 as the rolling code 71. When the rolling code 71 includes a code string selected from the code string list as in the rolling code 31, the storage unit 70 stores the same code string list as the storage unit 30.

(Flow of processing of portable device)
FIG. 3 is a flowchart showing a processing flow of the portable device 1. The figure shows the flow of processing when the user performs an input operation (for example, pressing a button) once on the portable device 1. When the input unit 20 of the portable device 1 accepts the user's input operation (YES in S10), the first signal generation unit 11 generates the first signal. The first signal generation unit 11 transmits the generated first signal to the vehicle control device 2 via the communication unit 40 (S12).

The first signal generation unit 11 notifies the code update unit 13 that the first signal has been transmitted. Upon receiving the notification from the first signal generation unit 11, the code update unit 13 increments the rolling code 31 of the storage unit 30 (S14). The code update unit 13 notifies the second signal generation unit 12 that the increment of the rolling code 31 is completed.

Upon receiving the notification from the code update unit 13, the second signal generation unit 12 determines whether or not the second signal has been transmitted a predetermined number of times, counting from the transmission of the first signal in S12 (S16). Immediately after the transmission of the first signal, the second signal is not transmitted (NO in S16). In this case, the second signal generation unit 12 generates the second signal. The second signal generation unit 12 transmits the generated second signal to the vehicle control device 2 via the communication unit 40 (S18). The second signal generation unit 12 notifies the code update unit 13 that the second signal has been transmitted.

Upon receiving the notification from the second signal generation unit 12, the code update unit 13 increments the rolling code 31 (S20). The code update unit 13 notifies the second signal generation unit 12 that the increment of the rolling code 31 is completed.

Upon receiving the notification from the code update unit 13, the second signal generation unit 12 determines S16 again. Hereinafter, the second signal generation unit 12 and the code update unit 13 repeat the processes of S16 to S20 until the second signal is transmitted a predetermined number of times. When the second signal is transmitted a predetermined number of times (YES in S16), the second signal generation unit 12 ends the transmission of the second signal, and the process in the portable device 1 is completed.

(Flow of processing of vehicle control device)
FIG. 4 is a flowchart showing a processing flow of the vehicle control device 2. The figure shows the flow of processing when the vehicle control device 2 receives a signal (first signal or second signal) once. When the communication unit 50 of the vehicle control device 2 receives the signal (S40), the authentication unit 61 of the control unit 60 executes the authentication process (S42).

When the received signal is authenticated (authentication is OK) as a result of the authentication process (YES in S44), the code update unit 62 of the control unit 60 increments the rolling code 71 of the storage unit 70 (S46). Further, the lock mechanism control unit 63 of the control unit 60 determines whether or not the authenticated signal includes a function code (S48).

When the authenticated signal is the first signal, the signal includes a function code (YES in S48). In this case, the lock mechanism control unit 63 controls the lock mechanism according to the function code (S50). On the other hand, when the authenticated signal is the second signal, the signal does not include the function code (NO in S48). In this case, the lock mechanism control unit 63 does not control the lock mechanism 3. Further, the vehicle control device 2 does not perform the subsequent processing and ends the processing. Further, even if the received signal is not authenticated (authentication is NG) (NO in S44), the vehicle control device 2 does not perform the subsequent processing and ends the processing.

(Authentication processing)
FIG. 5 is a flowchart showing the flow of the authentication process (S42 in FIG. 4) in the vehicle control device 2. When the communication unit 50 receives the signal, the authentication unit 61 determines whether or not the authentication data and the function code of the signal are correct (S60). For example, the authentication unit 61 confirms the identifier included in the authentication data, and determines that the authentication code is correct when the identifier is the identifier of the portable device 1 supported by the vehicle control device 2. Further, for example, the authentication unit 61 determines that the function code is correct when the code string of the function code is in a format that can be read and executed by the vehicle control device 2.

When the signal authentication data and the function code are correct (YES in S60), the authentication unit 61 further receives the rolling code 71 (that is, the previous reception) in which the rolling code of the received signal is stored in the storage unit 70 of the own device. It is determined whether or not it is equal to or higher than the rolling code included in the signal (S62). When the rolling code of the received signal is the rolling code 71 or more (YES in S62), the authentication unit 61 further determines whether or not the difference between the rolling code of the received signal and the rolling code 71 is equal to or less than a predetermined value. (S63). When the difference between the rolling code of the received signal and the rolling code 71 is equal to or less than a predetermined value (YES in S63), the authentication unit 61 determines that the received signal is a legitimate signal and authenticates the signal (YES in S63). Authentication OK, S64).

On the other hand, if the signal authentication data and function code are incorrect (NO in S60), the rolling code of the received signal is smaller than the rolling code 71 (NO in S62), or the rolling code of the received signal and rolling. When the difference from the code 71 is larger than the predetermined value (NO in S63), the authentication unit 61 determines that the received signal is an invalid signal and does not authenticate the signal (authentication NG, S66).

(Signal transmission / reception and rolling code update)
FIG. 6 is a sequence diagram showing a flow of transmitting and receiving signals between the portable device 1 and the vehicle control device 2. In the following sequence diagram, the rolling code 31 of the portable device 1 starts from a predetermined integer K. Further, in the following sequence diagram, the rolling code 71 of the vehicle control device 2 starts from K-1, which is one smaller than the starting value of the rolling code 31. Further, in the following sequence diagrams, the rolling code is also simply referred to as a "code".

When the portable device 1 receives a predetermined input operation (S100), it transmits a first signal (rolling code: K) (S102). The vehicle control device 2 receives the signal (S104), and the authentication unit 61 performs an authentication process. Since the rolling code of the received signal is K, which is larger than the value of the rolling code 71, the authentication unit 61 authenticates the signal (S106). Then, the lock mechanism control unit 63 controls the lock of the lock mechanism 3 according to the function code of the authenticated first signal (S108).

By the way, in the portable device 1, after the transmission of the first signal, the second signal is generated and transmitted a predetermined number of times (n times in the illustrated example), and the vehicle control device 2 performs authentication processing for each second signal. (S110 to S120). Further, the code update unit 13 of the portable device 1 increments the rolling code 31 each time a signal is transmitted. Further, the code update unit 62 of the vehicle control device 2 increments the rolling code 71 each time the signal is authenticated.

Therefore, the rolling code 31 after transmitting the second signal n times becomes K + (n + 1). Further, the rolling code 71 after receiving and authenticating the second signal n times becomes K + n. Even if the reception of any of the second signals among the second signals transmitted n times fails, the rolling code 31 always has a larger value than the rolling code 71. Therefore, the first signal and the second signal transmitted from the portable device 1 do not become authentication NG in normal operation.

The time from the transmission of the first signal (S102) to the transmission of the second signal (S110) in the portable device 1 is preferably as short as possible. That is, it is desirable that the portable device 1 according to the present embodiment transmits the first second signal without delay immediately after the transmission of the first signal. The time from S102 to S110 is set to be at least shorter than the time during which the user can leave the vicinity of the vehicle 100 after operating the portable device 1.

The number of times the second signal is generated and transmitted is preferably two or more. In a place where the communication environment is poor or the like, the vehicle control device 2 may not be able to receive the second signal transmitted for the first time. By transmitting the second signal a plurality of times, the portable device 1 can surely make the vehicle control device 2 receive the second signal. Further, as will be described in detail later, the second signal transmitted for the first time may be interfered with reception by an external tool or the like. By transmitting the second signal a plurality of times, it is possible to improve the possibility that any of the second signals reaches and is received by the vehicle control device 2. That is, the second signal can be more reliably received by the vehicle control device 2.

Further, it is preferable that the transmission interval of the second signal is short. For example, it is desirable that the transmission interval of the second signal is 1 second or less. By shortening the transmission interval of the second signal, even if the vehicle control device 2 cannot receive the second signal transmitted for the first time, before the user holding the portable device 1 leaves the vicinity of the vehicle 100. The second second signal can be transmitted to the vehicle control device 2.

Summarizing the above, it can be said that it is desirable that the portable device 1 continuously transmits the second signal after the transmission of the first signal.

(Processing when roll jam is received 1)
Next, the operations of the portable device 1 and the vehicle control device 2 when roll jam is attempted by an external tool will be described. As described above, in the roll jam method, it is common to try to unlock the vehicle by temporarily storing the keyless signal acquired by an external tool and then transmitting it to the vehicle control device 2 later. be. That is, it can be said that there is a certain amount of time between the time when the external tool illegally acquires the keyless signal and the time when the keyless signal is retransmitted to the vehicle control device 2. According to the control system 500 according to the present invention, the rolling cords of the portable device 1 and the vehicle control device 2 can be increased or advanced during this time lag, so that roll jam by an external tool can be prevented.

The external tool may identify the type of the keyless signal by checking the synchronization code or the like, and selectively and illegally acquire the keyless signal. First, a case where the external tool has a structure for selectively and illegally acquiring either the first signal or the second signal will be described.

For example, assume that the external tool has a structure in which the first signal is selectively and illegally acquired. In this case, the vehicle control device 2 cannot receive the first signal due to the jamming radio waves transmitted by the external tool. However, the vehicle control device 2 can receive the second signal transmitted after the first signal. That is, when the first signal is illegally acquired by the external tool, the reception order of the first signal and the second signal in the vehicle control device 2 is changed.

Since the vehicle control device 2 increments the rolling code 71 according to the received second signal, when the first signal is received later, the rolling code 71 becomes larger than the rolling code of the received signal (FIG. FIG. NO in S62 of 5. Therefore, the vehicle control device 2 determines that the first signal is an invalid signal and does not authenticate it.

In this way, the vehicle control device 2 receives the first signal transmitted later when the original signal reception order is changed based on the comparison between the rolling code of the received signal and its own rolling code 71. You can prevent authentication. As a result, the portable device 1 and the vehicle control device 2 can prevent the vehicle control device 2 from being tampered with by an external tool.

The control unit 10 of the portable device 1 determines the number of times the second signal is transmitted when the predetermined input operation is performed again by the time the second signal generation unit 12 finishes transmitting the second signal by a predetermined number of times. At the same time as resetting, the transmission of the second signal may be terminated in the middle (before reaching a predetermined number of times). Then, after the first signal is transmitted by the first signal generation unit 11, the second signal may be transmitted again for a predetermined number of times from the first time.

For example, when the user continuously performs an input operation on the portable device 1, the first signal may be transmitted twice or more in succession. In such a case, the control unit 10 can surely increase the rolling code in the vehicle control device 2 by transmitting the second signal a predetermined number of times after the first signal is transmitted. Therefore, even if any of the first signals is illegally acquired by an external tool, the vehicle control device 2 can prevent the first signal from being authenticated.

(Processing when roll jam is received 2)
Further, for example, it is assumed that the external tool has a structure for selectively and illegally acquiring the second signal. In this case, since the second signal does not include the function code in the first place, the vehicle control device 2 does not operate even if the illegally acquired second signal is retransmitted to the vehicle control device 2. That is, the lock mechanism 3 cannot be unlocked or locked at the second signal. Therefore, roll jam is not successful.

(Processing when roll jam is received 3)
The control system 500 according to the present embodiment is effective even when the external tool interferes with and illegally acquires both the first signal and the second signal.

As described above, the first second signal is automatically transmitted after the transmission of the first signal. Therefore, when the external tool illegally acquires both the first signal and the second signal, the external tool can stock only the second signal. This is because a general external tool used for roll jam can store only one signal, and if a new signal is illegally acquired, the previously acquired signal is transmitted by the extrusion method and disappears. ..

It is not apparent whether the portable device 1 is currently transmitting the first signal or the second signal. Therefore, the user of the external tool cannot specify the timing of the trial end of the illegal acquisition of the signal to the external tool. Therefore, even if the external tool once acquires the first signal, it subsequently acquires and acquires the second signal, and the first signal cannot be stored in the memory of the own device. As described above, the vehicle control device 2 receives the second signal and authenticates it, but the lock mechanism 3 does not operate because the signal does not include the function code. Therefore, roll jam is not successful.

In such a case, it can be said that the second signal functions as a dummy signal of the first signal including the function code. Therefore, the portable device 1 and the vehicle control device 2 can prevent the vehicle control device 2 from operating illegally by the external tool even when the external tool interferes with and illegally acquires the signal regardless of the synchronization code.

[Modification example]
In the above-described embodiment, prevention of roll jam in a scene where the locking mechanism 3 is locked has been described. However, the control system 500 can also prevent roll jam in the scene of unlocking the locking mechanism 3.

For example, the user operates the portable device 1 when using the vehicle 100. The portable device 1 transmits a first signal for unlocking to the vehicle control device 2 of the vehicle 100. If the external tool illegally acquires this first signal (and the second first signal transmitted by the subsequent re-operation), the user of the external tool has an opportunity to unlock the vehicle illegally. Usually, this is when the user locks and leaves the unlocked vehicle after using it.

That is, a time elapses from the illegal acquisition of the first signal to the attempt to unlock illegally using the signal. Since the portable device 1 transmits the second signal to the vehicle control device 2 at least once during this period, the rolling code 71 on the vehicle control device 2 side is larger than the rolling code of the signal held by the external tool. growing. Therefore, the signal held by the external tool is not authenticated even if it is transmitted to the vehicle control device 2, and therefore cannot be unlocked illegally.

In the above-described embodiment, the case where the function code (unlocking request) for unlocking the locking mechanism 3 and the function code (locking request) for locking the locking mechanism 3 are the same has been described. However, the first signal generation unit 11 and the second signal generation unit 12 of the portable device 1 according to the control system 500 create and transmit different function codes depending on whether the lock mechanism 3 is unlocked or locked. You may.

In this way, even when the function code is different between unlocking and locking, the roll jam method can be used. For example, when a user attempts to unlock a stopped and locked vehicle by using the portable device 1, a signal including the function code of the unlock request may be illegally acquired by an external tool. When the signal including the unlock request is illegally acquired, the user recognizes that the unlocking has not been successful, and operates the portable device 1 again to try to unlock the device. In the conventional RKE system, when the second signal is also illegally acquired, the vehicle is unlocked while the unlock request is held by the external tool. Therefore, if the user locks the vehicle after using the unlocked vehicle and then leaves the vehicle, the user of the external tool can unlock the vehicle later.

On the other hand, since the vehicle control device 2 according to the control system 500 increments the rolling code 71 with the rolling code of the authenticated signal, even if a signal including a small rolling code is received later, the signal is not authenticated. Therefore, as described above, even if the signal including the unlock request is illegally acquired, it is possible to prevent the vehicle control device 2 from being illegally operated.

The applications of the vehicle control device 2 and the lock mechanism 3 are not limited to the above-described embodiment. For example, the vehicle control device 2 and the lock mechanism 3 do not have to be in-vehicle devices. For example, the lock mechanism 3 may be a lock mechanism for a building door. It may be a mechanism for controlling the on / off of the power of the electronic device. The vehicle control device 2 may be a device that controls these mechanisms.

Further, the vehicle control device 2 may control a vehicle load other than the lock mechanism 3. For example, the vehicle control device 2 may control the opening / closing mechanism of the vehicle door. In this case, the function code included in the first signal includes a request for a control operation to open or close the door. Further, for example, the vehicle control device 2 may control the operation and stop of the engine of the vehicle. In this case, the function code included in the first signal includes a request for a control operation to start or stop the engine. Further, for example, the vehicle control device 2 may control the on / off of the welcome light of the vehicle. In this case, the function code included in the first signal includes a request for a control operation for turning on or off the welcome light.

〔summary〕
In the portable device (portable device 1) according to the first aspect of the present invention, the received signal is valid based on a numerical value or an identification code (rolling code) including a code string selected from a plurality of code strings in which an order is determined. It is a vehicle control device (vehicle control device 2) that determines whether or not it is, and is a portable device that transmits a signal to a vehicle control device that performs predetermined control according to a control request (function code) included in a legitimate signal. The first transmission unit (first signal generation unit 11) that transmits the first signal including the identification code and the control request to the vehicle control device according to the input operation of the user, and the first signal generation unit 11 After the transmission unit transmits the first signal, a second transmission unit (second signal generation unit 12) that transmits a second signal including the identification code but not the control request to the vehicle control device, and the above. Identification code change unit that changes the numerical value to a larger numerical value or changes the code string to a code string that is later in the order each time the first signal is transmitted and each time the second signal is transmitted. (Code update unit 13).

An external tool for illegally acquiring a signal including a control request has been conventionally known. The user of the external tool attempts to illegally acquire the signal by operating the external tool after seeing the user's intention to get off and board the vehicle. The user was able to illegally operate the vehicle control device by transmitting the signal illegally acquired by the external tool to the vehicle control device later.

On the other hand, according to the above configuration, each time the portable device transmits a signal, the identification code of the signal is changed to a large numerical value or an identification code whose permutation is later. In other words, the identification code indicates the order in which signals are transmitted from the portable device. Further, the portable device automatically transmits the second signal after the transmission of the first signal.

When the first signal is illegally acquired by an external tool, there is a time from the illegal acquisition until the first signal is retransmitted. Therefore, when the first signal is illegally acquired, the reception order of the first signal and the second signal in the vehicle control device is changed. The vehicle control device detects this change in the reception order based on the identification code, and if the change occurs, it can determine that the signal is invalid. Therefore, according to the above configuration, it is possible to prevent the vehicle control device from being tampered with by an external tool.

Further, even if the second signal is illegally acquired by an external tool, the second signal does not include a control request. Therefore, even if the illegally acquired second signal is retransmitted to the vehicle control device, the vehicle control device does not operate. Therefore, according to the above configuration, it is possible to prevent the vehicle control device from being tampered with by an external tool.

In the portable device according to the second aspect of the present invention, in the first aspect, the predetermined control transmits the second signal two or more times in succession after the first transmission unit transmits the first signal. You may.

According to the above configuration, the vehicle control device can more reliably receive the second signal.

In the vehicle control device according to the third aspect of the present invention, in the first aspect or the second aspect, the predetermined control is unlocking or locking the lock mechanism of the door of the vehicle, and the first transmission unit relates to the lock mechanism. The first signal including the unlocking or locking request as the control request may be transmitted.

There has been a crime (so-called roll jam) in which an external tool is used to illegally obtain a signal including a request for unlocking or locking an in-vehicle device, and the signal is used to illegally unlock the vehicle door. do. According to the above configuration, the crime can be prevented.

In the vehicle control device according to the fourth aspect of the present invention, the receiving unit (communication unit 40) that receives a signal from the portable device according to any one of the first to third aspects and the signal received by the receiving unit are When the correctness determination unit (authentication unit 61) for determining whether or not the signal is valid and the correctness determination unit determines that the first signal is valid, a predetermined value is determined according to the control request included in the first signal. A control execution unit (locking mechanism control unit 63) for performing control is provided, and the correctness / rejection determination unit is a signal for which the identification code included in the signal received by the reception unit is determined to be valid last time. If the numerical value is smaller than the included identification code, or if the identification code is in the order of the code strings, it is determined that the received signal is an invalid signal. According to the above configuration, the same effect as that of the portable device in the first aspect is obtained.

The control system (control system 500) according to the fifth aspect of the present invention includes the portable device (portable device 1) according to any one of the first to third aspects and the vehicle control device (vehicle) according to the fourth aspect. It includes a control device 2) and a vehicle load (locking mechanism 3) controlled by the vehicle control device. According to the above configuration, the same effect as that of the portable device in the first aspect is obtained.

[Example of realization by software]
The control blocks (particularly the control unit 10 and the control unit 60) of the portable device 1 and the vehicle control device 2 may be realized by a logic circuit (hardware) formed in an integrated circuit (IC chip) or the like, or by software. It may be realized.

In the latter case, the portable device 1 and the vehicle control device 2 include a computer that executes instructions of a program that is software that realizes each function. The computer includes, for example, one or more processors and a computer-readable recording medium that stores the program. Then, in the computer, the object of the present invention is achieved by the processor reading the program from the recording medium and executing the program. As the processor, for example, a CPU (Central Processing Unit) can be used. As the recording medium, a "non-temporary tangible medium", for example, a ROM (Read Only Memory) or the like, a tape, a disk, a card, a semiconductor memory, a programmable logic circuit, or the like can be used. Further, a RAM (Random Access Memory) for expanding the program may be further provided. Further, the program may be supplied to the computer via an arbitrary transmission medium (communication network, broadcast wave, etc.) capable of transmitting the program. It should be noted that one aspect of the present invention can also be realized in the form of a data signal embedded in a carrier wave, in which the program is embodied by electronic transmission.

The present invention is not limited to the above-described embodiments, and various modifications can be made within the scope of the claims, and the embodiments obtained by appropriately combining the technical means disclosed in the different embodiments. Is also included in the technical scope of the present invention.

1 Portable device, 10 Control unit, 11 1st signal generation unit (1st transmission unit), 12 2nd signal generation unit (2nd transmission unit), 13 Code update unit (identification code change unit), 20 Input unit, 30 Storage unit, 31 rolling code (identification code), 40 communication unit, 2 vehicle control device, 50 communication unit (reception unit), 60 control unit, 61 authentication unit (correctness judgment unit), 62 code update unit (control execution unit) , 63 lock mechanism control unit, 70 storage unit, 71 rolling code (identification code), 3 lock mechanism (vehicle load), 100 vehicles, 500 control system

Claims (5)

A vehicle control device that determines whether a received signal is valid or not based on an identification code including a numerical value or a code string selected from a plurality of code strings in a predetermined order, and is a control request included in the legitimate signal. A portable device that transmits a signal to a vehicle control device that performs predetermined control according to the above.
A first transmission unit that transmits a first signal including the identification code and the control request to the vehicle control device in response to a user input operation.
After the first transmission unit transmits the first signal, a second transmission unit that includes the identification code but does not include the control request is transmitted to the vehicle control device.
Each time the first signal is transmitted and each time the second signal is transmitted, the numerical value is changed to a large numerical value, or the code string is changed to a code string whose order is later, the identification code is changed. A portable device characterized by having a section and. The portable device according to claim 1, wherein the second transmission unit transmits the second signal two or more times in succession after the first transmission unit transmits the first signal. The predetermined control is the unlocking or locking of the vehicle door locking mechanism.
The portable device according to claim 1 or 2, wherein the first transmission unit transmits the first signal including a request for unlocking or locking the locking mechanism as the control request. A receiving unit that receives a signal from the portable device according to any one of claims 1 to 3.
A correct / reject judgment unit that determines whether or not the signal received by the reception unit is valid,
When the correctness determination unit determines that the first signal is valid, it includes a control execution unit that performs predetermined control in response to the control request included in the first signal.
In the correctness / rejection determination unit, the identification code included in the signal received by the reception unit is smaller in numerical value than the identification code included in the signal determined to be valid last time, or the code string A vehicle control device comprising determining that the received signal is an invalid signal when the order is an earlier identification code. The portable device according to any one of claims 1 to 3 and
The vehicle control device according to claim 4,
A control system that includes a vehicle load controlled by the vehicle control device.

Images