JP6997557B2 - Valet parking system, program - Google Patents

Description

The present invention relates to a valet parking system and a program.

Conventionally, there is known a valet parking service in which a staff member parks a vehicle of a customer who has entered the premises of a hotel or a restaurant on behalf of the customer (for example, Non-Patent Document 1).

Nippon Parking Development Co., Ltd., "Japan Parking Development Valley Parking Service", [online], Nippon Parking Development Co., Ltd., [Search on July 5, 2017], Internet <URL: http: //www.npd .co.jp/solution/valet/>

Conventionally, there has been no example of realizing the above-mentioned valet parking by automatic driving control, and how to realize this has not been sufficiently studied. If valet parking by automatic driving control is realized, the computer on the facility side will send commands directly to the vehicle, so driving by staff will not be necessary. However, if the customer's vehicle can be controlled indefinitely by instructions from a computer or the like on the facility side, a security problem may occur. For example, a device impersonating a computer on the facility side may remotely control a customer's vehicle and steal it. Alternatively, the electronic key information for controlling the customer's vehicle recorded on the computer of the facility side may be stolen and misused later.

Therefore, an object of the present invention is to provide a valet parking system with improved safety in valet parking by an automatic driving control method.

The valet parking system of the present invention includes a terminal device, a key management server device, a server device, and an automobile.

The terminal device has a key request receiving unit that receives a temporary key request from the server device, an ID transmitting unit that transmits the ID of the terminal device and the temporary key request to the key management server device when the temporary key request is received, and key management. It includes a temporary key receiver that receives a temporary key from a server device and a temporary key transmitter that sends a temporary key to a server device.

The key management server device includes a temporary key generation unit that generates a temporary key when an ID and a temporary key request are received, and a temporary key transmission unit that transmits the temporary key to the terminal device.

The server device receives a temporary key, a key request generator that generates a temporary key request, a key request transmitter that sends a temporary key request to the terminal device, a temporary key receiver that receives a temporary key from the terminal device, and a temporary key receiver. In some cases, it includes an operation plan generation unit that generates an operation plan, and a key / plan transmission unit that transmits a temporary key and an operation plan to the automobile.

The automobile includes a key / plan receiving unit that receives a temporary key and an operation plan from a server device, and an automatic driving control unit that executes automatic driving control according to the driving plan.

According to the valet parking system of the present invention, it is possible to improve the safety of valet parking by the automatic driving control method.

The schematic diagram of the system of Example 1. The schematic diagram of the system of Example 1. The block diagram which shows the structure of each apparatus of the system of Example 1. FIG. The sequence diagram which shows the operation of each apparatus of the system of Example 1. FIG. The sequence diagram which shows the operation of each apparatus of the system of Example 1. FIG. The sequence diagram which shows the operation of each apparatus of the system of Example 1. FIG. The block diagram which shows the structure of each apparatus of the system of the modification 1. The sequence diagram which shows the operation of each apparatus of the system of the modification 1. The block diagram which shows the structure of each apparatus of the system of the modification 2. The sequence diagram which shows the operation of each apparatus of the system of the modification 2. The block diagram which shows the structure of each apparatus of the system of the modification 3. The sequence diagram which shows the operation of each apparatus of the system of the modification 3. The block diagram which shows the structure of each apparatus of the system of the modification 4. The sequence diagram which shows the operation of each apparatus of the system of the modification 4. The block diagram which shows the structure of each apparatus of the system of the modification 5. The sequence diagram which shows the operation of each apparatus of the system of the modification 5. The block diagram which shows the structure of each apparatus of the system of the modification 6. The sequence diagram which shows the operation of each apparatus of the system of the modification 6. The schematic diagram of the system of Example 2. The block diagram which shows the structure of each apparatus of the system of Example 2. FIG. The sequence diagram which shows the operation of each apparatus of the system of Example 2. FIG. The block diagram which shows the structure of each apparatus of the system of the modification 7. The sequence diagram which shows the operation of each apparatus of the system of the modification 7. The schematic diagram of the system of the modification 8. The block diagram which shows the structure of each apparatus of the system of the modification 8. The sequence diagram which shows the operation of each apparatus of the system of the modification 8.

Hereinafter, embodiments of the present invention will be described in detail. The components having the same function are given the same number, and duplicate explanations are omitted.

Hereinafter, an outline of the configuration and operation of the valet parking system of the first embodiment will be described with reference to FIG. The valet parking system 1 of this embodiment has a configuration including a terminal device 11, an automobile 12, a server device 13, a TTP server device 14, and a key management server device 15.

The terminal device 11 may be a device having a communication function and may be a device that stores authentication information (hereinafter, also referred to as an ID) of the owner of the terminal device 11. It is assumed that the terminal device 11 can communicate with the automobile 12. The terminal device 11 and the automobile 12 may transmit and receive data by, for example, a short-range wireless communication function (broken line in the figure), or a network 9 (for example, a wireless LAN, a mobile communication network, an internet line, an in-vehicle V2X communication, etc.). Data may be transmitted and received via a communication path that combines these). The terminal device 11 and the server device 13, and the terminal device 11 and the key management server device 15 also need to be able to communicate with each other. The terminal device 11 and the server device 13, and the terminal device 11 and the key management server device 15 communicate with each other via a network 9 (for example, a wireless LAN, a mobile communication network, an Internet line, an in-vehicle V2X communication, and a communication path combining these). It is assumed that they are connected as possible. The terminal device 11 may be, for example, a smartphone, a tablet terminal, or the like. For example, the terminal device 11 may be an electronic key terminal for an automobile in which the owner's authentication information is stored and a communication function is added.

The automobile 12 has an automatic driving function. When the automobile 12 receives a control command related to automatic driving control from an external device or the like, if the control command is genuine, the automobile 12 can execute the driving control according to the control command. It is assumed that the automobile 12 can communicate with at least the terminal device 11, the server device 13, and the TTP server device 14. It is assumed that the automobile 12 and the server device 13 and the automobile 12 and the TTP server device 14 are communicably connected to each other via the network 9 and can transmit and receive data.

The server device 13 is a device for remotely controlling the automobile 12 and parking it at a suitable position on the premises. It is assumed that the server device 13 is managed and controlled by the facility that provides the valet parking service. For example, the server device 13 may be a device managed and controlled by a hotel or restaurant that provides a valet parking service. Alternatively, the server device 13 may be a device managed and controlled by a parking lot management company contracted with a hotel or restaurant that provides the service.

The TTP server device 14 is a device that transmits map information having a predetermined meaning of an effective section to the automobile 12 (details will be described later). The TTP server device 14 is a device managed and controlled by a trusted third party (TTP). For example, as a reliable third party (TTP), an administrative agency related to autonomous driving control and a specialized public institution dealing with surveying, for example, a related organization of the Ministry of Land, Infrastructure, Transport and Tourism (such as the Geographical Survey Institute) can be considered. In addition, it is a business company established by any of a public organization, an automobile manufacturer, a company whose main business is cartography, or a business company jointly established by these companies, and is used for self-driving vehicles. It may be done by a business company that is officially authorized to create maps and surveys. However, the trusted third party (TTP) is not limited to the above.

The key management server device 15 is a device that collectively manages an electronic key 7, which is electronic information that gives authority to control the operation of the automobile 12, and a temporary key 8 that functions as an electronic key 7 with an expiration condition. It is desirable that the key management server device 15 is a device managed and controlled by a reliable organization. For example, as a reliable institution, an automobile manufacturer's alliance or an organization authorized by the automobile manufacturer's alliance can be considered.

As shown in FIG. 1, the key management server device 15 stores the electronic key 7 of the automobile 12 in the key management server device 15, and causes the automobile 12 to execute automatic driving by performing authentication using the electronic key 7. Can be done. The electronic key 7 is information that is continuously used and will not expire except in special cases such as when it is stolen. Therefore, it is not preferable to unnecessarily transmit the electronic key 7 to an external device or the like because of a security problem. Therefore, in this embodiment, the temporary key 8 that functions as a key instead of the electronic key 7 is generated only while the valet parking service is being provided. With the temporary key 8, the owner can be authenticated in the same manner as the electronic key 7, and the automobile 12 can be made to execute automatic driving. However, the temporary key 8 is assumed to expire under different conditions from the electronic key 7, and the safety of the valet parking system 1 is ensured by appropriately expiring the temporary key 8.

As shown in FIG. 1, the key management server device 15 receives the ID 4 and the temporary key request from the terminal device 11, generates the temporary key 8 when the temporary key request is genuine, and generates the temporary key. 8 is transmitted to the terminal device 11. The terminal device 11 transmits the received temporary key 8 to the server device 13. The server device 13 transmits the received temporary key 8 and the operation plan 6 to the automobile 12. The automobile 12 starts automatic driving control according to the received driving plan 6 only when the temporary key 8 received from the server device 13 is genuine. The automobile 12 may have a function of periodically determining the expiration date of the temporary key 8. If the temporary key 8 has expired, the temporary key 8 expires and the automobile 12 stops the automatic driving control. Further, as shown in FIG. 2, the automobile 12 receives from the TTP server device 14 effective section information 5, which is map information recording the sections (effective sections) in which the temporary key 8 can be effectively used, and receives from the server device 13. It may be determined whether or not the operation plan 6 is within the range of the effective section specified by the effective section information 5 or within the range of the predetermined section determined based on the effective section. If the driving plan 6 is outside the effective section or the range of the predetermined section, the temporary key 8 expires and the automobile 12 stops the automatic driving control.

Hereinafter, the details of the configuration of each device of the valet parking system 1 of this embodiment will be described with reference to FIG. As shown in FIG. 3, the terminal device 11 of this embodiment temporarily includes an application transmission unit 111, a key request reception unit 112, a signature verification unit 113, an ID / request generation unit 114, and an ID transmission unit 115. The configuration includes a key receiving unit 116, a temporary key transmitting unit 117, a revocation command generation unit 118, and a revocation command transmission unit 119. The automobile 12 of this embodiment includes a key / plan receiving unit 120, a temporary key verification unit 121, an expiration date determination unit 122, a division request generation unit 123, a division request transmission unit 124, and an effective division reception unit 125. , The effective section determination unit 126, the automatic operation control unit 127, the revocation command receiving unit 128, and the key revocation unit 129 are included. The server device 13 includes an application receiving unit 131, a key request generation unit 132, a signature generation unit 133, a key request transmission unit 134, a temporary key reception unit 135, an operation plan generation unit 136, and a key / plan transmission unit. It is a configuration including 137. The TTP server device 14 includes a partition request receiving unit 141, an effective partition search unit 142, and an effective partition transmitting unit 143. The key management server device 15 includes an ID receiving unit 151, an ID verification unit 152, a temporary key generation unit 153, and a temporary key transmission unit 154.

Next, the details of the operation of each device of the valet parking system 1 of this embodiment will be described with reference to FIG.

As shown in FIG. 4, first, the application transmission unit 111 of the terminal device 11 transmits the valet parking application to the server device 13 (S111). It is preferable that the valet parking application includes the address, identifier, and the like of the automobile 12. The valet parking application transmitted in step S111 may be stored in a storage unit (not shown).

The application receiving unit 131 of the server device 13 receives the valet parking application (S131). The key request generation unit 132 of the server device 13 generates a temporary key request (S132). The signature generation unit 133 of the server device 13 signs the temporary key request generated in step S132 (S133). The key request transmission unit 134 of the server device 13 transmits a signed temporary key request to the terminal device 11 (S134). In this embodiment, the temporary key request is signed so that it can be determined whether or not the temporary key request is genuine. However, since the authenticity determination of the temporary key request can be realized by other methods, the present invention is not limited to the above method. The valet parking application received in step S131 and the signed temporary key request transmitted in step S134 may be stored in a storage unit (not shown).

The key request receiving unit 112 of the terminal device 11 receives a signed temporary key request from the server device 13 (S112). The signature verification unit 113 of the terminal device 11 verifies the signature attached to the temporary key request and verifies whether or not the temporary key request is authentic (S113). By executing step S113, the terminal device 11 can confirm that the server device 13 is not a spoofing device but a legitimate device. The ID / request generation unit 114 of the terminal device 11 generates an ID / request that is a set of the ID of the terminal device 11 and the temporary key request when the temporary key request is genuine (S114). The ID transmission unit 115 of the terminal device 11 transmits the generated ID / request to the key management server device 15 (S115).

The ID receiving unit 151 of the key management server device 15 receives an ID / request (ID and temporary key request) from the terminal device 11 (S151). The ID verification unit 152 of the key management server device 15 verifies the ID received as a set with the temporary key request, and verifies whether or not the ID is authentic (S152). It is assumed that the key management server device 15 has a database of IDs of the terminal device 11 prepared in advance (not shown). Necessary IDs such as the terminal device 11, the automobile 12, and the corresponding electronic keys 7 are additionally registered in this database at the time of purchase, replacement, purchase, replacement, etc. of the terminal device 11. It may be the specification to be done. For example, the key management server device 15 may treat the ID to be verified as authentic when the ID to be verified exists in the database. When an ID is specified in the database, the key management server device 15 can uniquely identify the automobile 12 and its electronic key 7 corresponding to the specified ID. The temporary key generation unit 153 of the key management server device 15 generates the temporary key 8 when the ID is genuine (S153). The temporary key transmission unit 154 of the key management server device 15 transmits the generated temporary key 8 to the terminal device 11 (S154).

The primary key receiving unit 116 of the terminal device 11 receives the temporary key 8 from the key management server device 15 (S116). The temporary key transmission unit 117 of the terminal device 11 transmits the temporary key 8 to the server device 13 (S117). The signed temporary key request received in step S112 and the temporary key 8 transmitted in step S117 may be stored in a storage unit (not shown).

The temporary key receiving unit 135 of the server device 13 receives the temporary key 8 from the terminal device 11 (S135). The operation plan generation unit 136 generates an operation plan 6 when the temporary key 8 is received from the terminal device 11 (S136). The driving plan 6 is command information for driving and controlling the automobile 12, and includes a wide range of concepts. For example, the driving plan 6 can be a command in which the timing of straight-ahead, right-turn, left-turn, and backward movement of the automobile 12, the traveling speed, and the prohibited items for automatic driving are specified in chronological order in detail. On the other hand, the driving plan 6 may be a command that specifies only the prohibited items such as the current location, the destination (vehicle compartment), the lane, and the traveling prohibited area of the automobile 12. Various variations can be considered for the specific contents of the operation plan 6 depending on the control method for the automobile 12. For example, the driving plan 6 may be information that summarizes a plurality of control commands for the automobile 12, or may be information that includes only a single control command for the automobile 12. When the operation plan 6 is a single control command, a plurality of operation plans 6 are generated according to the execution order thereof and are sequentially transmitted to the automobile 12 in chronological order. The key / plan transmission unit 137 of the server device 13 transmits the temporary key 8 and the operation plan 6 to the automobile 12 (S137). As described above, the operation plan 6 may be divided into a plurality of parts and transmitted a plurality of times, or may be transmitted at a timing different from that of the temporary key 8. The temporary key 8 received in step S135 and the operation plan 6 transmitted in step S137 may be stored in a storage unit (not shown).

The key / plan receiving unit 120 of the automobile 12 receives the temporary key 8 and the operation plan 6 from the server device 13 (S120). The temporary key verification unit 121 of the automobile 12 verifies whether or not the temporary key 8 received from the server device 13 is authentic (S121). The temporary key 8 and the operation plan 6 received in step S120 may be stored in a storage unit (not shown).

As shown in FIG. 5, the expiration date determination unit 122 of the automobile 12 determines the expiration date of the temporary key 8 (S122). The expiration date of the temporary key 8 may be set based on, for example, the generation date and time of the temporary key 8. For example, the expiration date may be one hour after the temporary key 8 is generated. Alternatively, the expiration date may be 24 hours after the temporary key 8 is generated. In this case, the temporary key 8 needs to include the time stamp information of the generation date and time. Further, for example, the expiration date of the temporary key 8 may be set based on the time when the automobile 12 receives the temporary key 8. For example, the expiration date may be one hour after the time when the automobile 12 receives the temporary key 8. The automatic operation control unit 126 stops the automatic operation control according to the operation plan 6 when the determination result of the expiration date becomes a predetermined result (expiration date). Next, the division request generation unit 123 of the automobile 12 acquires the current position of the automobile 12 by, for example, a GPS function, and generates an effective division information request including the current position information (S123). The section request transmission unit 124 of the automobile 12 transmits the valid section information request generated in step S123 to the TTP server device 14 (S124). The effective partition information request transmitted in step S124 may be stored in a storage unit (not shown).

The partition request receiving unit 141 of the TTP server device 14 receives an effective partition information request from the automobile 12 (S141). The effective area search unit 142 refers to the current position information included in the effective area information request, and searches for the effective area information around the current position information by using the coordinates indicated by the current position information as a search query (S142). It is assumed that the effective partition information has been stored in advance in a database (not shown). As described above, the valid section information is map information in which the section (effective section) in which the temporary key 8 can be effectively used is recorded. Effective parcel information is prepared in advance by a trusted third party (TTP). For example, a trusted third party (TTP) has previously investigated areas where autonomous driving control services are in operation (eg, valet parking areas such as commercial facilities, hotels, restaurants, etc.) and is concerned with these areas. Coordinate information and the like may be updated to the latest information at any time. Also, a trusted third party (TTP) may have previously researched information about the boundary between public roads and private land, and may keep this information up-to-date at any time. The method of determining the effective section is arbitrary, but for example, only the area where the service by the above-mentioned automatic operation control is operating may be set as the effective section. Of these effective sections, areas recognized as public roads may be excluded from the effective sections. The effective division transmission unit 143 of the TTP server device 14 transmits the effective division information searched in step S142 to the automobile 12 (S143).

The effective section receiving unit 125 of the automobile 12 receives the effective section information from the TTP server device 14 (S125). The effective section determination unit 126 determines whether or not the operation plan 6 is within the range of the effective section (S126). The automatic operation control unit 127 stops the automatic operation control according to the operation plan 6 when the determination result of the effective area becomes a predetermined result (a part or all of the operation plan 6 is outside the effective area). By executing step S126, it is possible to prevent the automobile 12 from going out of the facility according to the fake driving plan 6. This improves the crime prevention performance. The effective partition information received in step S125 may be stored in a storage unit (not shown).

In this embodiment, the automatic operation control unit 127 follows the operation plan 6 only when all of the above-mentioned verification (S121), expiration date determination (S122), and effective division determination (S126) of the temporary key 8 are true. Automatic operation control is started (S127). However, the expiration date determination (S122) and the effective division determination (S126) may be omitted depending on the case, and if step S126 is omitted, the TTP server device 14 is also unnecessary. The expiration condition set for the temporary key 8 may be a condition other than the above-mentioned deadline or division. For example, a limit may be set on the number of times the temporary key 8 can be used, and the temporary key 8 may be revoked when the number of times of use is exceeded.

When the warehousing command according to the operation plan 6 is received, the automobile 12 autonomously travels to the vehicle room desired by the facility side, autonomously enters the warehousing room, and waits in the vehicle room until the next command is given. When the delivery command according to the operation plan 6 is received, the vehicle 12 autonomously leaves the vehicle compartment and, for example, autonomously travels to the porte-cochère where the owner waits.

Next, with reference to FIG. 6, a method for forcibly revoking the temporary key 8 by the terminal device 11 will be described. If, for some reason, the automatic driving control of the automobile 12 is to be canceled immediately, the revocation command generation unit 118 of the terminal device 11 revokes the revocation command based on a predetermined rule (for example, when the owner makes a predetermined request). Is generated (S118). The revocation command transmission unit 119 of the terminal device 11 transmits the revocation command generated in step S118 to the automobile 12 (S119). The revocation command receiving unit 128 of the automobile 12 receives the revocation command from the terminal device 11 (S128). The key revocation unit 129 revokes the temporary key 8 according to the revocation command received in step S128 (S129). The temporary key revocation function in steps S118 and 119 may be a function of the key management server device 15. In this case, the revocation command generation unit 118 and the revocation command transmission unit 119 may be added to the key management server device 15.

As described above, according to the valet parking system 1 of the present embodiment, the safety of the valet parking by the automatic driving control method can be improved.

<< Modification 1 >>
Hereinafter, the valet parking system 1A of the first modification will be described with reference to FIGS. 7 and 8. This modification is a modification in which a part of the function of the terminal device 11 in the first embodiment is transferred to the automobile 12. That is, as shown in FIG. 7, the temporary key receiving unit 116 and the temporary key transmitting unit 117, which were the constituent requirements of the terminal device 11 in the first embodiment, were moved to the automobile 12, and they were designated as the terminal device 11A and the automobile 12A, respectively. As shown in FIG. 8, the automobile 12A is configured to execute step S116 and step S117. Therefore, in this modification, the temporary key transmission unit 154 of the key management server device 15 transmits the temporary key 8 to the automobile 12A. Other operations are the same as in the first embodiment.

<< Modification 2 >>
Hereinafter, the valet parking system 1B of the second modification will be described with reference to FIGS. 9 and 10. This modification is a modification in which the temporary key 8 is delivered directly from the key management server device 15 to the server device 13. That is, as shown in FIG. 9, the temporary key receiving unit 116 and the temporary key transmitting unit 117, which are the constituent requirements of the terminal device 11 in the first embodiment, are omitted to be the terminal device 11B, and the key management server is used as shown in FIG. The device 15 is configured to directly transmit the temporary key 8 to the server device 13 in step S154. Other operations are the same as in the first embodiment.

<< Modification 3 >>
Hereinafter, the valet parking system 1C of the modification 3 will be described with reference to FIGS. 11 and 12. This modification is a modification in which the terminal device 11 in the first embodiment is integrated into the automobile 12. That is, as shown in FIG. 11, the terminal device 11 is omitted, and all the constituent requirements (excluding the revocation command generation unit 118 and the revocation command transmission unit 119) included in the terminal device 11 are integrated into the vehicle 12 and the vehicle 12C. And said. As shown in FIG. 12, the automobile 12C is configured to execute steps S111, S112, S113, S114, S115, S116, and S117. Therefore, in this modification, the key request transmission unit 134 of the server device 13 transmits a temporary key request to the automobile 12C. Further, in the present modification, the temporary key transmission unit 154 of the key management server device 15 transmits the temporary key to the automobile 12C. Other operations are the same as those in the first embodiment except that the ID of the automobile 12C is transmitted instead of the ID of the terminal device 11 in step S115.

<< Modification 4 >>
Hereinafter, the valet parking system 1D of the modified example 4 will be described with reference to FIGS. 13 and 14. This modification is a modification of the modification 3 in which the temporary key 8 is delivered directly from the key management server device 15 to the server device 13. That is, as shown in FIG. 13, the temporary key receiving unit 116 and the temporary key transmitting unit 117, which were the constituent requirements of the automobile 12C in the modified example 3, are omitted to form the automobile 12D, and the key management server device 15 is shown in FIG. In step S154, the temporary key 8 is directly transmitted to the server device 13. Other operations are the same as in the modified example 3.

<< Modification 5 >>
Hereinafter, the valet parking system 1E of the modified example 5 will be described with reference to FIGS. 15 and 16. This modification is a modification in which the valet parking application transmitted to the server device 13 in the first embodiment is transmitted to the key management server device 15, and some processing is omitted accordingly. That is, as shown in FIG. 15, the terminal device 11E omits the key request receiving unit 112, the signature verification unit 113, the ID / request generation unit 114, and the ID transmitting unit 115, which are the constituent requirements of the terminal device 11 in the first embodiment. The server device 13E is defined by omitting the application receiving unit 131, the key request generation unit 132, the signature generation unit 133, and the key request transmission unit 134, which are the constituent requirements of the server device 13 in the first embodiment. As shown in FIG. 16, in step S111, the application transmission unit 111 of the terminal device 11E attaches the ID of the terminal device 11E to the valet parking application and transmits it to the key management server device 15, and the key management server device 15 The ID receiving unit 151 receives the valet parking application and the ID (S151), and the ID verification unit 152 of the key management server device 15 verifies the ID attached to the valet parking application and determines whether the ID is authentic or not. (S152), and when the ID is genuine, the temporary key generation unit 153 of the key management server device 15 generates a temporary key (S153). Other operations are the same as in the first embodiment.

<< Modification 6 >>
Hereinafter, the valet parking system 1F of the modification 6 will be described with reference to FIGS. 17 and 18. This modification is a modification in which the modification 5 is further modified so that the temporary key 8 is delivered directly from the key management server device 15 to the server device 13E. That is, as shown in FIG. 17, the temporary key receiving unit 116 and the temporary key transmitting unit 117, which are the constituent requirements of the terminal device 11E in the modified example 5, are omitted to be the terminal device 11F, and the key management server is used as shown in FIG. The device 15 is configured to directly transmit the temporary key 8 to the server device 13E in step S154. Other operations are the same as in the modified example 5.

Hereinafter, the valet parking system 2 of the second embodiment will be described with reference to FIGS. 19, 20, and 21. This embodiment is an example in which the functions of the key management server device 15 appearing in the first embodiment and its modifications are integrated into an automobile. That is, as shown in FIG. 19, the valet parking system 2 of this embodiment has the same terminal device 11 as that of the first embodiment, the server device 13, the TTP server device 14, and the key management server device 15 that existed in the first embodiment. The key management server device 15 is omitted in the present embodiment because the configuration includes the automobile 22 in which the functions of the above are integrated.

That is, as shown in FIG. 20, all the constituent requirements of the key management server device 15 are integrated into the automobile 12 to form the automobile 22. As shown in FIG. 21, the automobile 22 executes steps S151, S152, S153, and S154. Therefore, in this embodiment, the ID transmission unit 115 of the terminal device 11 transmits an ID / request (ID and temporary key request) to the automobile 22. Other operations are the same as in the first embodiment.

<< Modification 7 >>
Hereinafter, the valet parking system 2A of the modification 7 will be described with reference to FIGS. 22 and 23. This modification is a modification in which the second embodiment is modified so that the temporary key 8 is delivered directly from the automobile 22 to the server device 13. That is, as shown in FIG. 22, the temporary key receiving unit 116 and the temporary key transmitting unit 117, which were the constituent requirements of the terminal device 11 in the second embodiment, are omitted to form the terminal device 11B, and the automobile 22 is shown in FIG. 23. In step S154, the temporary key 8 is directly transmitted to the server device 13. Other operations are the same as in the second embodiment.

<< Modification 8 >>
Hereinafter, the valet parking system 2B of the modified example 8 will be described with reference to FIGS. 24, 25, and 26. This modification is a modification further modified by integrating the functions of the terminal device 11B that appeared in the modification 7 into the automobile 22. That is, as shown in FIG. 24, the valet parking system 2B of the present modification integrates the functions of the same server device 13 as that of the first embodiment, the TTP server device 14, and the terminal device 11B existing in the modification 7 into the automobile 22. In this modification, the terminal device 11B is omitted.

That is, as shown in FIG. 25, the ID / request generation unit 114, the ID transmission unit 115, the revocation command generation unit 118, and the revocation command transmission unit 119 of the terminal device 11B are omitted, and other configuration requirements of the terminal device 11B are obtained. All of them were integrated into the automobile 22, and the ID receiving unit 151 and the ID verification unit 152 of the automobile 22 were omitted to form the automobile 22B. As shown in FIG. 26, the automobile 22B executes steps S111, S112, and S113. Therefore, in this modification, the key request transmission unit 134 of the server device 13 transmits a temporary key request to the automobile 22B. Steps S114, S115, S151, and S152 are omitted, and in step S153, the temporary key generation unit 153 generates a temporary key when the temporary key request is genuine. Other operations are the same as in the modified example 7.

<Supplementary note>
The device of the present invention is, for example, as a single hardware entity, an input unit to which a keyboard or the like can be connected, an output unit to which a liquid crystal display or the like can be connected, and a communication device (for example, a communication cable) capable of communicating outside the hardware entity. Communication unit, CPU (Central Processing Unit, cache memory, registers, etc.) to which can be connected, RAM and ROM as memory, external storage device as hard hardware, and input, output, and communication units of these. , CPU, RAM, ROM, has a bus connecting so that data can be exchanged between external storage devices. Further, if necessary, a device (drive) or the like capable of reading and writing a recording medium such as a CD-ROM may be provided in the hardware entity. As a physical entity equipped with such hardware resources, there is a general-purpose computer or the like.

The external storage device of the hardware entity stores a program required to realize the above-mentioned functions and data required for processing of this program (not limited to the external storage device, for example, reading a program). It may be stored in a ROM, which is a dedicated storage device). Further, the data obtained by the processing of these programs is appropriately stored in a RAM, an external storage device, or the like.

In the hardware entity, each program stored in the external storage device (or ROM, etc.) and the data required for processing of each program are read into the memory as needed, and are appropriately interpreted and executed and processed by the CPU. .. As a result, the CPU realizes a predetermined function (each configuration requirement represented by the above, ... Department, ... means, etc.).

The present invention is not limited to the above-described embodiment, and can be appropriately modified without departing from the spirit of the present invention. Further, the processes described in the above-described embodiment are not only executed in chronological order according to the order described, but may also be executed in parallel or individually as required by the processing capacity of the device that executes the processes. ..

As described above, when the processing function in the hardware entity (device of the present invention) described in the above embodiment is realized by the computer, the processing content of the function that the hardware entity should have is described by the program. Then, by executing this program on the computer, the processing function in the above hardware entity is realized on the computer.

The program describing the processing content can be recorded on a computer-readable recording medium. The recording medium that can be read by a computer may be, for example, a magnetic recording device, an optical disk, a photomagnetic recording medium, a semiconductor memory, or the like. Specifically, for example, a hard disk device, a flexible disk, a magnetic tape or the like as a magnetic recording device, and a DVD (Digital Versatile Disc), a DVD-RAM (Random Access Memory), a CD-ROM (Compact Disc Read Only) as an optical disk. Memory), CD-R (Recordable) / RW (ReWritable), etc., MO (Magneto-Optical disc), etc. as a magneto-optical recording medium, EEP-ROM (Electronically Erasable and Programmable-Read Only Memory), etc. as a semiconductor memory. Can be used.

Further, the distribution of this program is performed, for example, by selling, transferring, renting, or the like a portable recording medium such as a DVD or a CD-ROM in which the program is recorded. Further, the program may be stored in the storage device of the server computer, and the program may be distributed by transferring the program from the server computer to another computer via the network.

A computer that executes such a program first temporarily stores, for example, a program recorded on a portable recording medium or a program transferred from a server computer in its own storage device. Then, when the process is executed, the computer reads the program stored in its own recording medium and executes the process according to the read program. Further, as another execution form of this program, a computer may read the program directly from a portable recording medium and execute processing according to the program, and further, the program is transferred from the server computer to this computer. You may execute the process according to the received program one by one each time. In addition, the above-mentioned processing is executed by a so-called ASP (Application Service Provider) type service that realizes the processing function only by the execution instruction and the result acquisition without transferring the program from the server computer to this computer. May be. The program in this embodiment includes information to be used for processing by a computer and equivalent to the program (data that is not a direct command to the computer but has a property that regulates the processing of the computer, etc.).

Further, in this form, the hardware entity is configured by executing a predetermined program on the computer, but at least a part of these processing contents may be realized in terms of hardware.

Claims (13)

A valet parking system that includes a terminal device, a key management server device, a server device, a car , and a TTP server device under the control of a trusted third party .
The terminal device is
A key request receiving unit that receives a temporary key request from the server device,
An ID transmission unit that transmits the ID of the terminal device and the temporary key request to the key management server device when the temporary key request is received.
A temporary key receiver that receives a temporary key from the key management server device,
Includes a temporary key transmitter that transmits the temporary key to the server device.
The key management server device is
A temporary key generator that generates the temporary key when the ID and the temporary key request are received.
Includes a temporary key transmitter that transmits the temporary key to the terminal device.
The server device is
The key request generator that generates the temporary key request and
A key request transmission unit that transmits the temporary key request to the terminal device,
A temporary key receiving unit that receives the temporary key from the terminal device,
An operation plan generation unit that generates an operation plan when the temporary key is received,
Includes the temporary key and the key / plan transmitter for transmitting the driving plan to the vehicle.
The car
A key / plan receiving unit that receives the temporary key and the operation plan from the server device,
An effective partition receiving unit that receives valid partition information, which is information about the valid partition of the temporary key, from the TTP server device.
An effective section determination unit that determines whether or not the operation plan is within the range of the effective section,
A valet parking system including an automatic driving control unit that executes automatic driving control according to the driving plan and stops automatic driving control according to the driving plan when the determination result of the effective section is a predetermined result . A valet parking system that includes a terminal device, a key management server device, a server device, a car , and a TTP server device under the control of a trusted third party .
The terminal device is
A key request receiving unit that receives a temporary key request from the server device,
The ID transmission unit that transmits the ID of the terminal device and the temporary key request to the key management server device when the temporary key request is received is included.
The key management server device is
A temporary key generator that generates a temporary key when the ID and the temporary key request are received.
Includes a temporary key transmitter that transmits the temporary key to the vehicle.
The car
A temporary key receiving unit that receives the temporary key from the key management server device, and
A temporary key transmission unit that transmits the temporary key to the server device,
A key / plan receiving unit that receives the temporary key and the operation plan from the server device,
An effective partition receiving unit that receives valid partition information, which is information about the valid partition of the temporary key, from the TTP server device.
An effective section determination unit that determines whether or not the operation plan is within the range of the effective section,
It includes an automatic operation control unit that executes automatic operation control according to the operation plan and stops the automatic operation control according to the operation plan when the determination result of the effective section becomes a predetermined result .
The server device is
The key request generator that generates the temporary key request and
A key request transmission unit that transmits the temporary key request to the terminal device,
A temporary key receiver that receives the temporary key from the automobile,
When the temporary key is received, the operation plan generation unit that generates the operation plan and the operation plan generation unit
A valet parking system including a key / plan transmission unit that transmits the temporary key and the operation plan to the automobile. A valet parking system that includes a terminal device, a key management server device, a server device, a car , and a TTP server device under the control of a trusted third party .
The terminal device is
A key request receiving unit that receives a temporary key request from the server device,
The ID transmission unit that transmits the ID of the terminal device and the temporary key request to the key management server device when the temporary key request is received is included.
The key management server device is
A temporary key generator that generates a temporary key when the ID and the temporary key request are received.
Includes a temporary key transmitter that transmits the temporary key to the server device.
The server device is
The key request generator that generates the temporary key request and
A key request transmission unit that transmits the temporary key request to the terminal device,
A temporary key receiving unit that receives the temporary key from the key management server device, and
An operation plan generation unit that generates an operation plan when the temporary key is received,
Includes the temporary key and the key / plan transmitter for transmitting the driving plan to the vehicle.
The car
A key / plan receiving unit that receives the temporary key and the operation plan from the server device,
An effective partition receiving unit that receives valid partition information, which is information about the valid partition of the temporary key, from the TTP server device.
An effective section determination unit that determines whether or not the operation plan is within the range of the effective section,
A valet parking system including an automatic driving control unit that executes automatic driving control according to the driving plan and stops automatic driving control according to the driving plan when the determination result of the effective section is a predetermined result . A valet parking system that includes a car, a key management server device, a server device , and a TTP server device under the control of a trusted third party .
The car
A key request receiving unit that receives a temporary key request from the server device,
An ID transmission unit that transmits the ID of the vehicle and the temporary key request to the key management server device when the temporary key request is received.
A temporary key receiver that receives a temporary key from the key management server device,
A temporary key transmission unit that transmits the temporary key to the server device,
A key / plan receiving unit that receives the temporary key and the operation plan from the server device,
An effective partition receiving unit that receives valid partition information, which is information about the valid partition of the temporary key, from the TTP server device.
An effective section determination unit that determines whether or not the operation plan is within the range of the effective section,
It includes an automatic operation control unit that executes automatic operation control according to the operation plan and stops the automatic operation control according to the operation plan when the determination result of the effective section becomes a predetermined result .
The key management server device is
A temporary key generator that generates the temporary key when the ID and the temporary key request are received.
Includes a temporary key transmitter that transmits the temporary key to the vehicle.
The server device is
The key request generator that generates the temporary key request and
A key request transmission unit that transmits the temporary key request to the automobile,
A temporary key receiver that receives the temporary key from the automobile,
When the temporary key is received, the operation plan generation unit that generates the operation plan and the operation plan generation unit
A valet parking system including a key / plan transmission unit that transmits the temporary key and the operation plan to the automobile. A valet parking system that includes a car, a key management server device, a server device , and a TTP server device under the control of a trusted third party .
The car
A key request receiving unit that receives a temporary key request from the server device,
An ID transmission unit that transmits the ID of the vehicle and the temporary key request to the key management server device when the temporary key request is received.
A key / plan receiving unit that receives a temporary key and an operation plan from the server device,
An effective partition receiving unit that receives valid partition information, which is information about the valid partition of the temporary key, from the TTP server device.
An effective section determination unit that determines whether or not the operation plan is within the range of the effective section,
It includes an automatic operation control unit that executes automatic operation control according to the operation plan and stops the automatic operation control according to the operation plan when the determination result of the effective section becomes a predetermined result .
The key management server device is
A temporary key generator that generates the temporary key when the ID and the temporary key request are received.
Includes a temporary key transmitter that transmits the temporary key to the server device.
The server device is
The key request generator that generates the temporary key request and
A key request transmission unit that transmits the temporary key request to the automobile,
A temporary key receiving unit that receives the temporary key from the key management server device, and
When the temporary key is received, the operation plan generation unit that generates the operation plan and the operation plan generation unit
A valet parking system including a key / plan transmission unit that transmits the temporary key and the operation plan to the automobile. A valet parking system that includes a terminal device, a key management server device, a server device, a car , and a TTP server device under the control of a trusted third party .
The terminal device is
An application transmission unit that transmits the ID of the terminal device and the valet parking application to the key management server device, and
A temporary key receiver that receives a temporary key from the key management server device,
Includes a temporary key transmitter that transmits the temporary key to the server device.
The key management server device is
When the ID and the valet parking application are received, the temporary key generation unit that generates the temporary key and the temporary key generation unit
Includes a temporary key transmitter that transmits the temporary key to the terminal device.
The server device is
A temporary key receiving unit that receives the temporary key from the terminal device,
An operation plan generation unit that generates an operation plan when the temporary key is received,
Includes the temporary key and the key / plan transmitter for transmitting the driving plan to the vehicle.
The car
A key / plan receiving unit that receives the temporary key and the operation plan from the server device,
An effective partition receiving unit that receives valid partition information, which is information about the valid partition of the temporary key, from the TTP server device.
An effective section determination unit that determines whether or not the operation plan is within the range of the effective section,
A valet parking system including an automatic driving control unit that executes automatic driving control according to the driving plan and stops automatic driving control according to the driving plan when the determination result of the effective section is a predetermined result . A valet parking system that includes a terminal device, a key management server device, a server device, a car , and a TTP server device under the control of a trusted third party .
The terminal device is
The application transmission unit for transmitting the ID of the terminal device and the valet parking application to the key management server device is included.
The key management server device is
A temporary key generator that generates a temporary key when the ID and the valet parking application are received, and
Includes a temporary key transmitter that transmits the temporary key to the server device.
The server device is
A temporary key receiving unit that receives the temporary key from the key management server device, and
An operation plan generation unit that generates an operation plan when the temporary key is received,
Includes the temporary key and the key / plan transmitter for transmitting the driving plan to the vehicle.
The car
A key / plan receiving unit that receives the temporary key and the operation plan from the server device,
An effective partition receiving unit that receives valid partition information, which is information about the valid partition of the temporary key, from the TTP server device.
An effective section determination unit that determines whether or not the operation plan is within the range of the effective section,
A valet parking system including an automatic driving control unit that executes automatic driving control according to the driving plan and stops automatic driving control according to the driving plan when the determination result of the effective section is a predetermined result . A valet parking system that includes a terminal device, a car, a server device , and a TTP server device under the control of a trusted third party .
The terminal device is
A key request receiving unit that receives a temporary key request from the server device,
An ID of the terminal device when the temporary key request is received, an ID transmission unit that transmits the temporary key request to the automobile, and an ID transmission unit.
A temporary key receiver that receives a temporary key from the automobile,
Includes a temporary key transmitter that transmits the temporary key to the server device.
The car
A temporary key generator that generates the temporary key when the ID and the temporary key request are received.
A temporary key transmission unit that transmits the temporary key to the terminal device,
A key / plan receiving unit that receives the temporary key and the operation plan from the server device,
An effective partition receiving unit that receives valid partition information, which is information about the valid partition of the temporary key, from the TTP server device.
An effective section determination unit that determines whether or not the operation plan is within the range of the effective section,
It includes an automatic operation control unit that executes automatic operation control according to the operation plan and stops the automatic operation control according to the operation plan when the determination result of the effective section becomes a predetermined result .
The server device is
The key request generator that generates the temporary key request and
A key request transmission unit that transmits the temporary key request to the terminal device,
A temporary key receiving unit that receives the temporary key from the terminal device,
When the temporary key is received, the operation plan generation unit that generates the operation plan and the operation plan generation unit
A valet parking system including a key / plan transmission unit that transmits the temporary key and the operation plan to the automobile. A valet parking system that includes a terminal device, a car, a server device , and a TTP server device under the control of a trusted third party .
The terminal device is
A key request receiving unit that receives a temporary key request from the server device,
Includes an ID of the terminal device when the temporary key request is received and an ID transmission unit that transmits the temporary key request to the automobile.
The car
A temporary key generator that generates a temporary key when the ID and the temporary key request are received.
A temporary key transmission unit that transmits the temporary key to the server device,
A key / plan receiving unit that receives the temporary key and the operation plan from the server device,
An effective partition receiving unit that receives valid partition information, which is information about the valid partition of the temporary key, from the TTP server device.
An effective section determination unit that determines whether or not the operation plan is within the range of the effective section,
It includes an automatic operation control unit that executes automatic operation control according to the operation plan and stops the automatic operation control according to the operation plan when the determination result of the effective section becomes a predetermined result .
The server device is
The key request generator that generates the temporary key request and
A key request transmission unit that transmits the temporary key request to the terminal device,
A temporary key receiver that receives the temporary key from the automobile,
When the temporary key is received, the operation plan generation unit that generates the operation plan and the operation plan generation unit
A valet parking system including a key / plan transmission unit that transmits the temporary key and the operation plan to the automobile. A valet parking system that includes a car, a server device , and a TTP server device under the control of a trusted third party .
The car
A key request receiving unit that receives a temporary key request from the server device,
A temporary key generator that generates a temporary key when the temporary key request is received,
A temporary key transmission unit that transmits the temporary key to the server device,
A key / plan receiving unit that receives the temporary key and the operation plan from the server device,
An effective partition receiving unit that receives valid partition information, which is information about the valid partition of the temporary key, from the TTP server device.
An effective section determination unit that determines whether or not the operation plan is within the range of the effective section,
It includes an automatic operation control unit that executes automatic operation control according to the operation plan and stops the automatic operation control according to the operation plan when the determination result of the effective section becomes a predetermined result .
The server device is
The key request generator that generates the temporary key request and
A key request transmission unit that transmits the temporary key request to the automobile,
A temporary key receiver that receives the temporary key from the automobile,
When the temporary key is received, the operation plan generation unit that generates the operation plan and the operation plan generation unit
A valet parking system including a key / plan transmission unit that transmits the temporary key and the operation plan to the automobile. The valet parking system according to any one of claims 1 to 10.
The car
Further includes an expiration date determination unit for determining the expiration date of the received temporary key.
The automatic operation control unit is
A valet parking system that stops automatic driving control according to the driving plan when the determination result of the expiration date is a predetermined result. The valet parking system according to any one of claims 1 to 3 or 6 to 9 .
The car
A revocation command receiving unit that receives a revocation command, which is a command for revoking the temporary key, from the terminal device .
A valet parking system including a key revocation unit that revokes the received temporary key when the revocation command is received. A program that causes a computer to function as a server device included in the valet parking system according to any one of claims 1 to 10.

Images