KR20180078655A - IoT security apparatus for retrieving vehicle in smart car, method thereof and computer recordable medium storing program to perform the method - Google Patents

Abstract

The present invention provides an IoT security apparatus for retrieving a vehicle in a smart car, a method thereof and a computer readable recording medium recorded with a program to perform the method. The IoT security apparatus for retrieving a vehicle when the vehicle is stolen includes: an independent power supply for periodically supplying power to a security memory and a security processor; and a security module including the security memory and the security processor which is activated from an inactive state when the power is supplied thereto from the independent power supply to determine whether the vehicle is stolen and controls the vehicle to autonomously travel to a predetermined place when it is determined that the vehicle is stolen. The present invention can move the stolen vehicle to a safe public place through autonomous running, thereby safely retrieving the vehicle.

Description

TECHNICAL FIELD The present invention relates to an IoT security device for recovering a vehicle from a smart car, a method for the same, and a computer readable recording medium storing a program for performing the method. perform the method}

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a vehicle recovery technology, and more particularly, to a smart car, that is, an IoT security device for recovering a vehicle when the vehicle is stolen, a method therefor and a program for performing the method are recorded And a computer readable recording medium.

Currently, automobiles are developed with connected cars, smart cars and so on, providing drivers with various convenience functions. However, as user convenience is provided, various problems such as car theft and hacking are occurring. Among the information communication technologies provided for the convenience of the driver, there is a smart key that provides various functions such as remote vehicle door opening and remote start. In addition, it provides a function to start the car by pressing only the start button to start the car. Because there is no technical means to distinguish the owner of a vehicle from such a smart key or vehicle, access to a third party, not the owner, may be lost or stolen, leading to crime and vehicle accidents. Moreover, such damage can lead to damage to the owner of the vehicle.

Korean Patent Laid-Open Publication No. 2016-0063938 Published on June 07, 2016 (name: door open control method for vehicle)

SUMMARY OF THE INVENTION It is an object of the present invention to provide an apparatus for moving a stolen vehicle to a safe public place through an autonomous running and safely recovering the vehicle, a method therefor and a computer readable recording medium on which a program for performing the method is recorded .

According to another aspect of the present invention, there is provided a vehicle device for recovering a stolen vehicle, the vehicle device comprising: an independent power source for periodically supplying power to a security memory and a security processor; And the security processor controlling the vehicle so as to move to a predetermined guidance point when the vehicle is determined to have been stolen, when the vehicle is determined to have been stolen Security module.

And the security processor controls the autonomous running to start when the position and the speed of the vehicle satisfy an induced running condition.

Wherein the secure memory stores an induction start speed for starting a preset induction run according to an electronic map and roads to which a plurality of induction points are mapped and stored, And when the speed of the vehicle is less than the induction start speed, control is performed to start the autonomous travel.

The security processor reconfirms the function, time, and location of the previously authenticated access authority to determine whether the vehicle is using an unauthorized function, is not at a time when access is permitted, , It is determined that the vehicle is stolen.

The vehicle apparatus further includes a position information receiving unit for receiving the position information of the vehicle, a position sensor unit for measuring the position of the vehicle, and a communication unit for communicating with the user apparatus. Here, the security processor acquires the position of the vehicle through at least one of the position information receiving unit and the position sensor unit, collects a function currently operating by the vehicle, The time and the position of the vehicle are transmitted to the user device, and then the vehicle is stolen from the user device through the communication unit to determine whether or not the vehicle is stolen.

The vehicle apparatus further includes a camera section for photographing at least one of the inside and the outside of the vehicle, and a communication section for communication. If it is determined that the vehicle is stolen, the security processor may capture at least one of the inside and the outside of the vehicle through the camera unit, and transmit the photographed image through the communication unit to the photographed image And transmits the data to the device.

According to another aspect of the present invention, there is provided a method for recovering a stolen vehicle of a vehicle device, the method comprising: determining whether a security processor has stolen a vehicle; And if so, controlling the vehicle such that the vehicle autonomously travels to a predetermined guidance point.

Wherein the step of controlling the vehicle includes the steps of: when the position of the vehicle is within a predetermined distance from any one of the plurality of guidance points, and if the speed of the vehicle is less than the induction start speed, .

A computer-readable recording medium on which a program for performing a method for retrieving a stolen vehicle of a vehicle apparatus according to the preferred embodiment of the present invention described above is recorded.

Since the access control method according to the present invention judges whether the vehicle is stolen through a module having an independent power source and a process, it can recognize that a stolen vehicle has occurred even when a vehicle device such as a TRIP computer is hacked. Furthermore, when a theft occurs, the stolen vehicle is moved to an induction point through autonomous driving, so that the vehicle can be safely recovered and the possibility of being used for a crime can be reduced.

1 and 2 are views for explaining a system for vehicle access control according to an embodiment of the present invention.
3 is a block diagram illustrating a configuration of a vehicle apparatus according to an embodiment of the present invention.
4 is a block diagram illustrating a configuration of an authentication apparatus according to an embodiment of the present invention.
5 is a block diagram illustrating a configuration of a temporary apparatus according to an embodiment of the present invention.
6 is a block diagram illustrating a configuration of an authentication server according to an embodiment of the present invention.
7 is a flowchart illustrating a method of setting access authority for vehicle access control according to an embodiment of the present invention.
FIG. 8 is an exemplary screen for explaining a method for setting an access right for vehicle access control according to an embodiment of the present invention.
FIG. 9 is an exemplary screen for explaining a method of setting an access right for vehicle access control according to another embodiment of the present invention.
10 is a flowchart illustrating a method for vehicle access control according to an embodiment of the present invention.
11 is a flowchart illustrating a method for vehicle access control according to an embodiment of the present invention.
12 is a block diagram illustrating a configuration of a security module for recovering a stolen vehicle according to an embodiment of the present invention.
13 is a flowchart illustrating a method for determining whether a vehicle is stolen according to an embodiment of the present invention.
14 is a flowchart illustrating a method for recovering a stolen vehicle according to an embodiment of the present invention.

Prior to the detailed description of the present invention, the terms or words used in the present specification and claims should not be construed as limited to ordinary or dictionary meanings, and the inventor shall design his own invention in the best way It should be construed in accordance with the technical idea of the present invention based on the principle that it can be appropriately defined as a concept of a term to describe it. Therefore, the embodiments described in the present specification and the configurations shown in the drawings are merely the most preferred embodiments of the present invention, and are not intended to represent all of the technical ideas of the present invention. Therefore, various equivalents It should be understood that water and variations may be present.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. Note that, in the drawings, the same components are denoted by the same reference symbols as possible. Further, the detailed description of known functions and configurations that may obscure the gist of the present invention will be omitted. For the same reason, some of the elements in the accompanying drawings are exaggerated, omitted, or schematically shown, and the size of each element does not entirely reflect the actual size.

First, a system for vehicle access control according to an embodiment of the present invention will be described. 1 and 2 are views for explaining a system for vehicle access control according to an embodiment of the present invention. 1 and 2, reference numeral 10 denotes a vehicle, and the vehicle 10 may represent a connected car, a smart car, and the like representatively. A vehicle access control system according to an embodiment of the present invention includes a vehicle apparatus 100, a user apparatus 200, a temporary apparatus 300, and an authentication server 400. [

Vehicle apparatus 100 is an apparatus that is mounted in vehicle 10, and typically can illustrate a TRIP computer. The user device 200 is a device carried by a car of the vehicle 10, and typically can exemplify a smart phone. The temporary apparatus 300 is a device carried by the borrower, and may be, for example, a smart key, a wearable device, or the like. The authentication server 400 is a server implemented as an entity on a network in order to provide a temporary service according to an embodiment of the present invention. The vehicle device 100 and the authentication server 400 and the user device 200 and the authentication server 400 are connected to each other through a core network via a connection network including a base station and an access point (AP) can do. Also, the vehicle apparatus 100, the user apparatus 200, and the temporary apparatus 300 can communicate directly with each other using, for example, an ISM band (Industry-Science-Medical BAND).

The present invention assumes a situation in which a car owner temporarily leaves the car 10 to someone else for, for example, valet parking, car wash, maintenance, and the like. Although the embodiment described below will be described on the assumption that valet parking is performed, the present invention can be applied to various situations other than valet parking. In particular, the present invention provides an access control method for allowing a person to use the vehicle 10 for another purpose without the approval of the user in a situation where the vehicle 10 is left to another person. According to an embodiment of the present invention, in accordance with an embodiment of the present invention, a user device 200 may be provided with a temporary device (not shown) to access the vehicle 10 according to the purpose of leaving the vehicle 10, The time and the position at which the vehicle 300 can access the vehicle 10. [ The " approach " of the temporary device 300 to the vehicle 10 in the embodiment of the present invention allows the vehicle device 100 to perform the functions provided by the vehicle 10 at the request of the temporary device 300 . In other words, this means that the person carrying the temporary apparatus 300 can operate the temporary apparatus 300 to use the function of the vehicle 10. [

In an embodiment of the present invention, the access rights include at least one of the functions, time and location with which the temporary apparatus 300 can access the vehicle 10. [ In this way, after the access right to the temporary apparatus 300 is set, the user can provide the temporary apparatus 300 to the other person so that the other person can access the vehicle 10 through the temporary apparatus 300. According to the present invention, since the temporary apparatus 300 can access the vehicle 10 with restrictions on function, time, and position, the other person can use the vehicle 10 for the purpose other than the purpose of leaving the vehicle 10 by the user ) Can not be used.

The vehicle apparatus 100, the user apparatus 200, the temporary apparatus 300, and the authentication server 400 will now be described in more detail. First, a vehicle device 100 according to an embodiment of the present invention will be described. 3 is a block diagram illustrating a configuration of a vehicle apparatus according to an embodiment of the present invention. The vehicle apparatus 100 is installed inside the vehicle 10, and typically can illustrate a trip computer. The vehicle device 100 is for controlling various functions of the vehicle 10. [ To this end, the vehicle apparatus 100 includes a communication unit 110, a position information receiving unit 120, a position sensor unit 130, an input unit 140, a display unit 150, a storage unit 160, and a control unit 170 do. In addition, the vehicle apparatus 100 further includes a camera section 180. The vehicle device 100 may further include a security module 500.

The communication unit 110 is for communicating with the temporary apparatus 300 and the authentication server 400. The communication unit 110 can communicate with the temporary apparatus 300 using a communication method such as Near Field Communication (NFC), Bluetooth, ZigBee, or IrDA (Infrared Data Association). The communication unit 110 can also communicate with the authentication server 400 via another vehicle device via the V2V communication network or via the V2I communication network. The communication unit 110 may include an RF (Radio Frequency) transmitter Tx for up-converting and amplifying the frequency of a transmitted signal, and an RF receiver Rx for low-noise amplifying the received signal and down-converting the frequency. The communication unit 110 may include a modem for modulating the transmitted signal and demodulating the received signal.

The position information receiving unit 120 is for receiving position information, for example, a GPS signal. For example, the position information receiving unit 120 may continuously receive the position information (GPS signal) from the satellite (satellite) and transmit the received position information to the controller 170. Then, the controller 170 can confirm the location information of the vehicle through the received location information. Such location information may be coordinates such as latitude, longitude, and altitude.

The position sensor unit 130 may include at least one sensor. Such a sensor can be implemented by MEMS (Micro Electro-Mechanical Systems). For example, the sensor may include inertial sensors such as an accelerometer, a gyroscope, and the like. The position sensor unit 130 measures the position of the vehicle 10 using at least one sensor. The position measured by the position sensor unit 130 may be a displacement from any one reference position.

The input unit 140 receives a user's key operation for controlling the vehicle apparatus 100, generates an input signal, and transmits the input signal to the controller 170. The input unit 140 may include various kinds of keys for controlling the vehicle. In the case where the display unit 150 is a touch screen, the input unit 140 may perform functions of the respective kinds of keys on the display unit 150. If the input unit 140 can perform all the functions only by the touch screen, It is possible.

The display unit 150 visually provides menus of the vehicle apparatus 100, input data, function setting information, and various other information to the user. The display unit 150 functions to output a screen such as a boot screen, a standby screen, a menu screen, and the like of the vehicle apparatus 100. In particular, the display unit 150 performs a function of outputting a thermal image according to an embodiment of the present invention to a screen. The display unit 150 may be formed of a liquid crystal display (LCD), an organic light emitting diode (OLED), an active matrix organic light emitting diode (AMOLED), or the like. Meanwhile, the display unit 150 may be implemented as a touch screen. In this case, the display unit 150 includes a touch sensor. The touch sensor senses the user's touch input. The touch sensor may be constituted by a touch sensing sensor such as a capacitive overlay, a pressure type, a resistive overlay, or an infrared beam, or may be constituted by a pressure sensor . In addition to the above sensors, all kinds of sensor devices capable of sensing contact or pressure of an object can be used as the touch sensor of the present invention. The touch sensor senses the touch input of the user, generates a sensing signal, and transmits the sensing signal to the controller 170. [ Particularly, when the display unit 150 is a touch screen, some or all of the functions of the input unit 140 may be performed through the display unit 150.

The storage unit 160 stores programs and data necessary for the operation of the vehicle apparatus 100. In particular, the storage unit 160 is an area in which user data generated according to use of the vehicle device 100 is stored. Each kind of data stored in the storage unit 160 can be deleted, changed or added according to a user's operation.

The camera unit 180 photographs the inside or outside 10 of the vehicle 10 and provides the photographed image to the control unit 170. The camera unit 180 may include a lens, an actuator, a filter, an image sensor, and an image processor (ISP). In addition, the camera unit 180 controls the actuator through an AF (Auto Focus) and / or an OIS (Optical Image Stabilization) driver to perform automatic focusing (AF) and / or shake correction Can be performed.

The control unit 170 can perform a data processing function of controlling the overall operation of the vehicle device 100 and the signal flow between the internal blocks of the vehicle device 100 and processing the data. In addition, the control unit 170 basically serves as an ECU (Electronic Control Unit) for controlling various functions of the vehicle 10. [ For example, the control unit 170 can control all parts of the vehicle such as the automatic transmission control, the drive system, the braking system, and the steering system. The controller 170 may be a central processing unit (CPU), a digital signal processor (DSP), or the like. The operation of the controller 170 will be described in more detail below. Also, the unexplained security module 500 determines whether the vehicle 10 is stolen and performs a process for recovering the stolen vehicle 10 through autonomous driving. Such a security module 500 will be described in more detail below.

Vehicle device 100 includes a plurality of sensors for sensing the speed, position, and the like of other vehicles around the vehicle 10 for autonomous driving of the vehicle 10. [ The control unit 170 and the security module 500 of the vehicle apparatus 100 can control the speed of another vehicle around the vehicle 10 through the plurality of sensors during the autonomous running of the vehicle 10, And the like.

Next, a description will be given of a user device 200 according to an embodiment of the present invention. 4 is a block diagram illustrating a configuration of an authentication apparatus according to an embodiment of the present invention. 4, a user device 200 according to an exemplary embodiment of the present invention includes a communication module 210, a camera module 220, an input module 230, a display module 240, a storage module 250, Module 260, as shown in FIG.

The communication module 210 is for communicating with the vehicle device 100, the temporary device 300, the temporary device 300 and the authentication server 400. The communication unit 110 communicates with the vehicle device 100, the temporary device 300, the temporary device 300, and the temporary device 300 using a communication method such as NFC (Near Field Communication), Bluetooth, ZigBee, And can communicate with the device 300. The communication module 210 may communicate with the authentication server 400 by accessing the authentication server 400 through the broadband mobile communication network. The communication module 210 may include an RF (Radio Frequency) transmitter (Tx) for up-converting and amplifying the frequency of a transmitted signal, and an RF receiver (Rx) for low-noise amplifying the received signal and down-converting the frequency . The communication module 210 may include a modem for modulating the transmitted signal and demodulating the received signal.

The location information module 220 is for receiving GPS signals. For example, the location information module 220 may continuously receive a GPS signal from a GPS satellite or the like and transmit the received GPS signal to the control module 260. The control module 260 may then extract the location information from the GPS signal. Such location information may be coordinates such as latitude, longitude, and altitude.

The input module 230 receives a user's key operation for controlling various functions, operations, and the like of the user device 200, generates an input signal, and transmits the input signal to the control module 260. The input module 230 may include various keys such as a character key, a numeric key, and a direction key for a specific input to the user device 200, as well as a power key for turning on and off the power. The function of the input module 230 may be performed by the display module 240 when the display module 240 is implemented as a touch screen and may be performed by the input module 230 ) May be omitted.

The display module 240 may receive data for screen display from the control module 260 and display the received data on a screen. The display module 240 can visually provide menus, data, function setting information, and various other information of the user device 200 to the user. When the display module 240 is formed of a touch screen, some or all of the functions of the input module 230 may be performed instead. The display module 240 may be formed of a liquid crystal display (LCD), an organic light emitting diode (OLED), an active matrix organic light emitting diode (AMOLED), or the like.

The storage module 250 stores each kind of data required for the operation of the user device 200, an application, and each kind of data generated according to the operation of the user device 200. Such storage module 250 may be storage, memory, or the like. In particular, the storage module 250 may optionally include an operating system (OS) for booting and operation of the user device 200, access to the vehicle device 100 according to an embodiment of the present invention, Lt; RTI ID = 0.0 > a < / RTI > Each kind of data stored in the storage module 250 can be deleted, changed, or added according to a user's operation.

The control module 260 may perform a data processing function to control the overall operation of the user device 200 and the signal flow between the internal blocks of the user device 200 and to process the data. The control module 260 may be a central processing unit (CPU), an application processor, a GPU (Graphic Processing Unit), or the like. The operation of this control module 260 will be described in more detail below.

Next, the temporary apparatus 300 according to the embodiment of the present invention will be described. 5 is a block diagram illustrating a configuration of a temporary apparatus according to an embodiment of the present invention. Referring to FIG. 5, the temporary apparatus 300 according to the embodiment of the present invention may be a smart key or a wearable apparatus. For example, the temporary apparatus 300 may be a smart band, a smart ring, a smart glass, or the like. The temporary apparatus 300 includes a communication means 310, an input means 320, a sensor means 330, a storage means 340 and a control means 350.

The communication means 310 is for communicating with the vehicle device 100, the user device 200, and the temporary device 300. The communication unit 310 may be a communication unit for communicating with a vehicle device (e.g., a cellular phone) using a communication method such as NFC (Near Field Communication), Bluetooth, ZigBee, IrDA (Infrared Data Association), or WAVE 100 and the user device 200. [ However, the communication formula of the communication means 310 is not limited to the aforementioned communication method. The communication unit 310 may include an RF (Radio Frequency) transmitter Tx for up-converting and amplifying the frequency of a transmitted signal, and an RF receiver Rx for low-noise amplifying and down-converting the frequency of a received signal have. The communication unit 310 may include a modem for modulating the transmitted signal and demodulating the received signal.

The input unit 320 receives a user's key operation for controlling various functions of the temporary apparatus 300, generates an input signal, and transmits the input signal to the control unit 350.

The bio-signal collection means 430 is for collecting a user's bio-signal. For example, when the temporary device 300 is a smart band, the bio-signal collecting means 430 may measure the user's heart rate through the blood flow observed in the blood vessel of the user's wrist (wrist) portion. As another example, when the temporary device 300 is a smart glass, the bio-signal acquisition means 430 may be a camera module for capturing an iris image of a user to acquire an iris image. In addition, the bio-signal collecting means 430 can measure various bio-signals according to the part where the temporary device 300 is worn. The bio-signal acquisition means 430 transmits the collected bio-signals to the control means 350.

The storage unit 340 may store various kinds of data required for the operation of the temporary apparatus 300. For example, the storage means 340 may store the device identifier of the temporary device 300 itself. The storage means 340 is preferably a memory. Each kind of data stored in the storage means 340 can be deleted, changed or added according to the user's operation.

The control means 350 can perform a data processing function for controlling the overall operation of the temporary apparatus 300 and the signal flow between the internal blocks of the temporary apparatus 300 and processing the data. The control unit 350 may be a central processing unit (CPU), an application processor, a digital signal processor (DSP), or the like. The operation of this control means 350 will be described in more detail below.

Next, an authentication server 400 according to an embodiment of the present invention will be described. 6 is a block diagram illustrating a configuration of an authentication server according to an embodiment of the present invention. Referring to FIG. 6, the authentication server 400 according to the embodiment of the present invention includes an interface unit 410, a storage unit 420, and a process unit 430.

The interface unit 410 is for communication with the vehicle apparatus 100. The interface unit 410 can communicate with the authentication server 400 via a network, for example. The interface unit 410 may include a modem for modulating signals to be transmitted and received through the network and for demodulating received signals. The interface unit 410 may transmit the received data to the process unit 430. [ Also, the data received from the process unit 530 can be transmitted through the network.

The storage unit 420 stores programs and data necessary for the operation of the authentication server 400. In particular, the storage unit 420 may store an access right according to an embodiment of the present invention. Each kind of data stored in the storage unit 420 can be registered, deleted, changed, or added according to a user's operation.

The processing unit 430 may control the overall operation of the authentication server 400 and the signal flow between the internal blocks of the authentication server 400 and may perform a data processing function of processing the data. The processing unit 430 may be a central processing unit (CPU), a digital signal processor (DSP), or the like. The operation of this process unit 430 will be described in more detail below.

Hereinafter, a method for setting an access right to temporarily control access to the vehicle 10 using the above-described devices will be described. 7 is a flowchart illustrating a method of setting access authority for vehicle access control according to an embodiment of the present invention. FIG. 8 is an exemplary screen for explaining a method for setting an access right for vehicle access control according to an embodiment of the present invention. FIG. 9 is an exemplary screen for explaining a method of setting an access right for vehicle access control according to another embodiment of the present invention. In FIG. 7, a user, that is, a carer, who temporarily carries the temporary apparatus 300 via the user apparatus 200, for example, a parking person, temporarily accesses the vehicle 10 of the user. The storage unit 420 of the authentication server 400 stores a vehicle identifier which is an identifier of the vehicle device 100 and a user identifier which is an identifier of the user device 200 that can set access authority to the vehicle device 100 Is stored. Also, it is assumed that the user device 200 has stored therein the bio-signal of the borrower itself, which can be acquired through the provisional device 300. [

Referring to FIG. 7, in response to a user's operation, the user device 200 authenticates the temporary device 300 in step S110. The step S110 will be described in more detail as follows. The control means 350 of the temporary apparatus 300 acquires the user's biometric signal through the sensor means 330 and transmits a temporary authentication request signal for requesting the authentication of the temporary apparatus 200 via the communication means 310 do. This temporary authentication request signal includes a temporary device identifier capable of identifying the temporary device 300 with another device, and the bio-signal of the user obtained earlier. When the control module 260 of the user device 200 receives the temporary authentication request signal through the communication module 210, the control module 260 compares the biometric signal included in the temporary authentication request signal with the biometric signal stored in the storage module 250 Authentication is performed. Such authentication is to judge whether the bio-signals are the same or not. This authentication is to authenticate that the temporary apparatus 300 is a device currently carried by the user himself or herself and is located at a position close to the current user apparatus 200 within a predetermined range. If the temporary device authentication is successful, the control module 260 of the user device 200 stores the authentication device identifier of the authentication device 300. The control module 260 of the user device 200 transmits the user identifier to the temporary device 300 through the communication module 210. The control means 350 of the temporary apparatus 300 then receives the user identifier via the communication means 310 and stores the received user identifier in the storage means 340. [

When the authentication device 200 is authenticated, the control module 260 of the user device 200 sets an access right so that the temporary device 300 can access the vehicle 10 in step S120 according to the user's operation. At this time, the control module 260 sets the access authority including at least one of the time, the location, and the function by which the temporary device 300 can access the vehicle 10. [

The time, location, and function of the temporary apparatus 300 to access the vehicle 10 will be described in more detail as follows. First, the vehicle 10 has a plurality of functions, and setting a function among the access rights means setting a function that the temporary apparatus 300 can access among a plurality of functions. For example, the following Table 1 is intended to illustrate the function of access rights according to an embodiment of the present invention.

function Start Driver's seat
door Passenger door Cargo doors ... Autonomous driving setting Set theft behavior Access authority O O X X ... X O

As shown in Table 1, the vehicle 10 provides various functions, and according to the embodiment of the present invention, the vehicle apparatus 100 is provided with a plurality of functions, (O) is performed, and the function X that is not performed can be prevented from being performed.

The temporary device 300 is intended to temporarily allow access to the vehicle 10 and setting the time of the access right means to allow the temporary device 300 to access the vehicle only for a set time . Table 2 below is for explaining time among access rights according to the embodiment of the present invention.

example Set time end After 20 minutes from the current time setting access rights I 14: 10-14: 30

As shown in Table 2, according to the embodiment of the present invention, the control module 260 sets a certain time (20 minutes) based on a specific time (current time) as the time of the access right, 10 minutes to 14:30) can be set.

Setting the time of the access right means that the temporary apparatus 300 can access the vehicle 10 only within the set position. In other words, the vehicle device 100 permits access of the temporary apparatus 300 only when the vehicle 10 is within the position set by the access authority.

example Set One 30m radius around the present location 2 Range of location (latitude, longitude, and altitude range) 3 The maximum moving distance (100 m) of the vehicle 10 at the present position

Referring to Example 1 of Table 3, the control module 260 can set a predetermined range (radius 30 m) around a specific position (current position) as a position of the access right. A screen example of the example 1 is shown in Fig. As shown, the storage module 250 of the user device 200 may store an electronic map 80. The control module 260 of the user device 200 confirms the current position P1 through the position information module 220 and sets the current position P1 of the electronic map 80 stored in the storage module 250, The display module 240 displays the electronic map 80 of the peripheral area including the display area P1. The user can set the predetermined radius R1 as the position of the access right around the current position P1 as shown in FIG. 8 through the input module 230 or the display module 240 have.

According to example 2, the control module 260 may set the range of the location (latitude, longitude, and altitude range) to its location among the access rights. In the case of Example 2, it is difficult for the user to input latitude, longitude and altitude. Accordingly, the user device 200 allows the user to easily set the position of the access right through the following procedure. The storage module 250 of the user device 200 stores an electronic map 80 which is displayed on the building 81 and a parking lot 85, respectively. The control module 260 of the user device 200 confirms the current position P2 through the position information module 220 and sets the current position P2 through the electronic map 80 stored in the storage module 250, At least one building 81 located within a predetermined range in the location P2 and a parking lot 85 attached to the building 81 are displayed through the display module 240. [ The user can select the building 81 or the parking lot 85 displayed through the input module 230 or the display module 240. [ Then, the control module 260 derives the range (latitude, longitude, and altitude range) of the area of the building 81 or the parking lot 85 from the electronic map 80 and determines the location of the access authority A position at which the vehicle can be accessed).

In the case of Example 3, the control module 260 can set the distance at which the vehicle 10 can move to the maximum without directly setting the position. When the vehicle 10 is set to the maximum distance to be moved, the temporary device 300 is allowed to be accessed only before the vehicle 10 moves a predetermined distance.

On the other hand, as described above, it may be cumbersome to individually set each of the function, time, and location with the access authority. Accordingly, according to the alternative embodiment of the present invention, the function, time and position of the access authority can be automatically set for each menu according to the purpose of temporarily setting the access authority. Table 4 below is for explaining this setting method.

menu function time location Errands of things Door opening / closing Time to get back and forth on foot Vehicle parking location car wash Start-up, driver's door opening and closing Car wash time
(E.g., 3 hours) car wash Maintenance Start-up, driver's door opening and closing Maintenance Time
(E.g., 2 days) Workshop Restaurant Valet Start-up, driver's door opening and closing Meal Time
(E.g., 2 hours) Restaurant Parking Accommodation Valet Start-up, driver's door opening and closing Accommodation
(Until 14:00 the next day) Hotel parking

The control module 260 of the user device 200 presents the menu shown in Table 4 through the display module 240 and allows the user to select the menu. Then, the user can select any one of the plurality of menus. The control module 260 senses the user's selection through the input module 230 or the display module 240 and automatically sets the function, time and position of the access right according to the menu selected by the user.

For example, if the purpose of setting temporary access is to errand to bring the item left in the vehicle, the user can select the item errand menu in Table 1. Then, the user device 200 sets access authority according to the following procedure. First, the control module 260 of the user device 200 sets the function of the access authority so as to open and close the door only. The control module 260 obtains the location of the current user device 200 through the location information module 220. The control module 260 then communicates with the vehicle device 100 via the communication module 210 to request the location of the vehicle 10. The control unit 170 of the vehicle device 100 receives the location of the current vehicle device 100, that is, the location of the vehicle 10, through the location information receiving unit 120, To the device (200). The control module 260 of the user device 200 that has received the position of the vehicle 10 determines the walking round trip time based on the person's walking speed of the predetermined speed from the position of the user device 200 to the position of the vehicle 10 And sets the time of the access right by summing up the calculated travel time of the walk and the time of taking out the predetermined object. Next, the control module 260 sets the position of the access authority to maintain the position of the current vehicle 10.

As another example, if the purpose of temporarily setting access rights is a valet parking at the time of arrival at a hotel, for example, a hotel, the user may select the lodging valet menu of Table 1. Then, the user device 200 sets access authority according to the following procedure. First, the control module 260 of the user device 200 sets the function of the access authority so as to open and close the driver's seat. Normally, the hotel guest will be picked up when checking out the next day based on their overnight stay. Accordingly, the control module 260 sets the time of the access right to a predetermined accommodation time (for example, until 14:00 the next day). The control module 260 may then set the location of the access rights in the manner described with reference to FIG. 8 or FIG.

As described above, after setting the access authority, the control module 260 generates a registration request message including the set access authority, and transmits a registration request message including access authority through the communication module 210 in step S130 To the authentication server 400. The access authority is set for the authorized temporary apparatus 300 to the user of the vehicle 10, that is, the user apparatus 200 of the borrower, and the time for which the temporary apparatus 300 can access the vehicle 10, Location, and function of the system. Accordingly, the access right includes at least one of a vehicle identifier, a user identifier, a temporary device identifier, and a time, location, and function of the temporary device 300 when the vehicle 10 is accessible.

When the process unit 430 of the authentication server 400 receives the registration request message through the interface unit 410, it registers the access right included in the registration request message in step S140. That is, the process unit 430 stores the access right included in the registration request message in the storage unit 420 and performs registration.

As described above, if the user, i.e., the borrower, sets the access right to the temporary apparatus 300 via the user apparatus 200, and the borrower hands the temporary apparatus 300 to the parking agent, The vehicle 10 can be used to access the vehicle 10 through the device 300. [ That is, the parking agent may, for example, park a valet parking. Such a method will be described. 10 is a flowchart illustrating a method for vehicle access control according to an embodiment of the present invention. 10, when the temporary apparatus 300 enters the range in which the temporary apparatus 300 can communicate with the vehicle apparatus 100 of the vehicle 10, the control means 350 of the temporary apparatus 300, in step S210, And transmits the access request message. The access request message includes a temporary device identifier and a user identifier. Here, the user identifier is stored in step S110 described above.

Upon receiving the access request message through the communication unit 110, the control unit 170 of the vehicle device 100 extracts the temporary device identifier and the user identifier from the access request message and transmits the temporary device identifier and the user identifier including the temporary device identifier, And generates an authentication request message. Then, the controller 170 transmits an authentication request message to the authentication server 400 in step S220.

When the process unit 430 of the authentication server 400 receives the authentication request message through the interface unit 410, the process unit 430 performs authentication using the temporary device identifier, the user identifier, and the vehicle identifier of the authentication request message in step S230. That is, the process unit 430 authenticates the access right of the temporary apparatus 300 when access authority including the temporary apparatus identifier, the user identifier, and the vehicle identifier is present in the storage unit 420. [

If the authentication is successful according to the above-described procedure, the processor unit 430 of the authentication server 400 transmits an authentication response message including the access right to the vehicle device 100 in step S240. That is, the authentication response message includes the previously registered access authority. After transmitting the access right through the authentication response message, the processor unit 430 deactivates the access right registered in the storage unit 420 in step S250.

After receiving the authentication response message through the communication unit 110, the controller 170 of the vehicle device 100 performs access control of the vehicle according to the access right included in the authentication response message in step S260. That is, the control unit 170 permits access in the case of a function designated by an access right among a plurality of functions. In addition, the control unit 170 permits access when the current time is the time allowed for access according to the access right. The control unit 170 permits access when the current position is a position where access is permitted according to the access right.

As described above, the user, that is, the borrower, can leave the vehicle 10 and then ask the parking agent to bring the vehicle to a place entrusted by the parking person. This procedure will be described. 11 is a flowchart illustrating a method for vehicle access control according to an embodiment of the present invention. 11 assumes a situation in which the parking agent parks the vehicle 10 and then returns to the parking spot again at the request of the user, that is, the driver, to return the vehicle 10 by operating.

11, when the temporary apparatus 300 enters the range in which the temporary apparatus 300 can communicate with the vehicle apparatus 100 of the vehicle 10, the control means 350 of the temporary apparatus 300, at step S310, And transmits a re-access request message. The re-access request message includes a temporary device identifier and a user identifier. Here, the user identifier is stored in step S110 described above.

Upon receipt of the re-access request message through the communication unit 110, the control unit 170 of the vehicle apparatus 100 extracts the temporary apparatus identifier and the user identifier from the re-access request message, and stores the temporary apparatus identifier, the user identifier, Access request message including the re-access request message. Then, the controller 170 transmits a re-access request message to the authentication server 400 in step S320.

Upon receiving the re-access request message through the interface unit 410, the process unit 430 of the authentication server 400 requests the re-access request message including the temporary device identifier, the user identifier, and the vehicle identifier of the re- Withdraw access authority. At this time, the access authority is inactivated (refer to step S250). If the access right is disabled, the process unit 430 transmits a re-access request message to the user device 200 through the communication module 210 in step S340. The re-access request message includes a vehicle identifier, a temporary device identifier, and a user identifier.

When the control module 260 of the user device 200 receives the re-access request message through the communication module 210, the control module 260 displays a re-access request through the display module 240 in step S350. The user confirms this and, when he / she requests the collection of the vehicle (10), inputs it to accept the re-access. Accordingly, when the control module 260 detects an input accepting the user's access again through the input module 230 or the display module 240 in step S350, the control module 260 generates a re-access acceptance message in step S360. At this time, the access authority can be selectively set again. Since resetting these access privileges is the same as setting access privileges, a detailed description thereof is omitted.

Next, the control module 260 transmits the re-access acceptance message generated in step S360 to the authentication server 400 through the communication module 210. [ The re-access admission message may include a vehicle identifier, a user identifier, and a temporary device identifier. Here, the re-access admission message may further include at least one of a time, a location, and a function for allowing the temporary apparatus 300 newly set to access the vehicle 10 to advance (S350).

When the process unit 430 of the authentication server 400 receives the re-access acceptance message through the interface unit 410, the process unit 430 transmits the re-access acceptance message received in step S370 to the vehicle device 100. [ This re-access acceptance message includes the existing access authority when the newly set access authority is included, the new access authority is included, and there is no difference from the previously registered access authority (see step S140) Be careful.

After receiving the authentication response message through the communication unit 110, the control unit 170 of the vehicle device 100 performs access control of the vehicle according to the access right included in the authentication response message in step S380. That is, the control unit 170 permits access in the case of a function designated by an access right among a plurality of functions. In addition, the control unit 170 permits access when the current time is the time allowed for access according to the access right. The control unit 170 permits access when the current position is a position where access is permitted according to the access right.

The access control method according to the present invention can temporarily and restrictively access the vehicle 10 through the temporary device 300, so that the vehicle 10 can be temporarily stored for valet parking, car wash, maintenance, It is possible to prevent the other person from doing anything other than the action corresponding to the vehicle 10. [ In order to allow the temporary apparatus 300 to be authenticated by the user apparatus 200 when setting the access authority, the temporary apparatus 300 can access the user apparatus 200 at a time when the temporary apparatus 300 desires to set the access authority, And the user device 200 must store the temporary device identifier of the temporary device 300 in advance. It provides a high level of security because it meets all three requirements: time, space, and data. Further, since the present invention compares both the information transmitted by the vehicle apparatus 100 and the information transmitted by the user apparatus 200 in terms of security, the present invention provides higher security than authentication through unidirectional information transmission.

Hereinafter, it is assumed that the vehicle 10 is stolen despite the fact that the access authority is set as described above. According to the embodiment of the present invention, in this theft, a security module 500 that operates in a power and process independent of the vehicle device 100 is used to recover the vehicle. 12 is a block diagram illustrating a configuration of a security module for recovering a stolen vehicle according to an embodiment of the present invention. Referring to FIG. 12, the security module 500 includes an independent power source 510, a security memory 520, and a security processor 530.

The independent power source 510 is not connected to the outside but independently to provide power for the security memory 520 and the security processor 530 to operate. The independent power source 510 is activated according to a predetermined period to provide power to the secure memory 520 and the secure processor 530. In particular, the independent power source 510 may be a secondary battery having a predetermined capacity.

The security memory 520 stores programs and data necessary for the operation of the security module 500. In particular, the security memory 520 stores various kinds of data and applications for determining whether the vehicle 10 is stolen, and when the vehicle 10 is determined to have been stolen, Lt; RTI ID = 0.0 > and applications. ≪ / RTI >

The security processor 530 may control the overall operation of the security module 500 and the signal flow between the internal blocks of the security module 500 and may perform a data processing function for processing the data. In addition, the security processor 530 can control all the control functions of the control unit 170. [ That is, it can perform all the functions of the control unit 170 or control the control unit 170. In particular, the security processor 530 serves as an ECU (Electronic Control Unit) for controlling various functions of the vehicle 10 of the control unit 170. [ Accordingly, the security processor 530 can control all parts of the vehicle such as the driving system of the vehicle 10, the braking system, and the steering system, including the automatic transmission control, directly or through the control unit 170. The security processor 530 may be a central processing unit (CPU), a digital signal processor (DSP), or the like. The operation of this secure processor 530 will be described in more detail below.

A method of determining whether or not the vehicle is stolen by the security module 500 will now be described. 13 is a flowchart illustrating a method for determining whether a vehicle is stolen according to an embodiment of the present invention.

Referring to FIG. 13, as in step S410, the security module 500 is in a disabled state. The inactive state means that the independent power source 510 does not supply power. In this disabled state, the independent power source 510 supplies power to the secure memory 520 and the secure processor 530 when the check time periodically occurs as in step S420. If it is not a check time, it remains inactive.

Accordingly, after the security processor 530 is activated in step S430, the security processor 530 checks whether the vehicle 10 is stolen. The security processor 530 determines whether or not the vehicle 10 is stolen in step S440 according to this check.

In one example of steps S430 and S440, the secure processor 530 may perform procedures to re-verify the function, time, and location of the already authorized access authority. The procedure for reconfirming the function, time and location of the access authority is the same as the procedure for authenticating the access authority described above, except that the subject of the authentication procedure is the security processor 530. [ In accordance with this reaffirmation procedure, the security processor 530 may determine that the current vehicle 10 is using an unauthorized function, is not at an allowed time, , It is determined that the vehicle 10 is stolen if the position of the vehicle 10 is not the position permitted by the access right.

In another example of steps S430 and S440, the security processor 530 acquires the position of the vehicle 10 through at least one of the position information receiving unit 120 and the position sensor unit 130, Connect with the accessories to collect the functions that the vehicle is currently operating. The security processor 530 then transmits the function currently operating in the vehicle 10 via the communication unit 110 and the current time and the location of the vehicle 10 to the contact of the carer stored in the secure memory 520, To the user device 200 of the mobile terminal 200, and then request confirmation. The control module 260 of the user device 200 controls the communication module 210 to display the function currently operating in the vehicle 10 and the current time and the position of the vehicle 10 through the display module 240 do. Then, the user can know whether the vehicle 10 has been stolen or not, and can input an input signal to select whether the vehicle 10 is stolen through the input module 230 or the display module 240. The control module 260 of the user device 200 transmits the theft of the vehicle 10 to the vehicle device 100 through the communication module 210. [ Then, the security processor 530 receives the vehicle stolen via the communication unit 110, and determines whether the vehicle is stolen.

If it is determined that the vehicle has been stolen, the security module 500 performs the vehicle recovery process in step S450. Such a method will be described.

The vehicle recovery process in step S450 includes the following two operations. First, the control unit 170 photographs the inside and the outside of the vehicle 10 through the camera unit 180 in step S450, and transmits the photographed images to the authentication server 400, the user device 100, (E.g., a police agency server, etc.) capable of transmitting an image photographed through a preset contact. Accordingly, the vehicle 10 can collect evidence of theft. Second, the controller 170 performs a procedure for moving the vehicle 10 to a safe place through the autonomous driving function of the vehicle 100 in step S450. This procedure will be described in more detail. 14 is a flowchart illustrating a method for recovering a stolen vehicle according to an embodiment of the present invention. FIG. 14 is for explaining step S450 in more detail. Here, the security memory 520 stores an electronic map, an induction running start speed, and a guidance point. 14, the security processor 530 detects the speed and position of the vehicle 10 through at least one of the position information receiving unit 120 and the position sensor unit 130 in step S510, To the induction running start speed and the induction point stored in the induction motor.

According to the above-described comparison, the security processor 530 determines whether the position and the speed of the vehicle satisfy the induced driving condition in step S520. The induction driving condition is such that the current position of the vehicle 10 should be located within a predetermined distance from any one of the plurality of induction points and that the speed of the current vehicle 10 is lower than the induction It should be less than the start speed. The secure memory 520 maps and stores a plurality of guidance points on an electronic map. It is preferable that the guidance point does not interfere with the passage of the other vehicle when the stolen vehicle 10 is parked, and is a public place with a lot of public attention. For example, when the guidance point is an expressway national road, it may be a vehicle shelter, a resting place, a drowsy driving shelter, and the like. In addition, the guidance point may be a public parking lot including a public parking lot, a fire department, a city hall, an eavesdropping, a police station, and the like. In addition, the security memory 520 stores the induced starting speed, which is the speed of the vehicle that can start the induced driving according to the type of road. Table 5 below shows an example of this induction start speed.

Type of road speed highway 80 km / h Motorway 60 km / h Provincial road 50 km / h try 40 km / h ... ...

As shown in Table 5, the induction start speed is set according to the type of road. As a result of the determination in step S520, if the position and the speed of the vehicle satisfy the guided driving condition, the security processor 530 controls the vehicle 10 so that the vehicle 10 autonomously moves to the guiding point in step S530. The security processor 530 of the security module 500 detects the speed of another vehicle around the vehicle 10 through the plurality of sensors and the distance of the other vehicle to the vehicle 10 during autonomous driving of the vehicle 10 The driving system, the braking system and the steering system of the vehicle 10 are controlled to move the vehicle 10 to the guidance point.

As described above, according to the embodiment of the present invention, when the vehicle 10 is positioned within a predetermined distance to any one of the plurality of guidance points and has a velocity lower than the induction start velocity, Start an induction run to drive. According to the embodiment of the present invention, when the vehicle is positioned within a predetermined distance from the guidance point, the induction run starts to minimize the distance of the induction run. Further, according to the embodiment of the present invention, when the speed of the vehicle 10 is less than the predetermined speed, it starts the induction running to minimize the degree of the accidental accident.

During the induction running, the security processor 530 determines whether or not the guiding point has arrived at the guiding point continuously at step S540, and stops the vehicle at step S550 when it arrives at the guiding point. After the start of the vehicle is stopped, the security processor 530 reads the current position of the vehicle 10 through at least one of the position information receiving unit 120 and the position sensor unit 130, and transmits the current position to the communication unit 110 To the user device 200 and the preset theft report number. Here, the theft report number may be a telephone number of a police station or the like.

Meanwhile, the various methods according to the embodiments of the present invention described above can be implemented in a form of a program readable by various computer means and recorded on a computer-readable recording medium. Here, the recording medium may include program commands, data files, data structures, and the like, alone or in combination. Program instructions to be recorded on a recording medium may be those specially designed and constructed for the present invention or may be available to those skilled in the art of computer software. For example, the recording medium may be a magnetic medium such as a hard disk, a floppy disk and a magnetic tape, an optical medium such as a CD-ROM or a DVD, a magneto-optical medium such as a floppy disk magneto-optical media, and hardware devices that are specially configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions may include machine language wires such as those produced by a compiler, as well as high-level language wires that may be executed by a computer using an interpreter or the like. Such a hardware device may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

While the present invention has been described with reference to several preferred embodiments, these embodiments are illustrative and not restrictive. It will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit of the invention and the scope of the appended claims.

100: vehicle device
200: User device
300: Temporary device
400: authentication server

Claims (9)

A vehicle apparatus for recovering a vehicle, comprising:
An independent power source for periodically supplying power to the secure memory and the secure processor,
The secure memory,
And controlling the vehicle to move to a predetermined guidance point when the vehicle is determined to be stolen if the vehicle is stolen by activating when the power is supplied from the independent power source in an inactive state, And a security module including a security processor. ≪ RTI ID = 0.0 > 11. < / RTI > The method according to claim 1,
The security processor
And controls to start the autonomous running if the position and the speed of the vehicle satisfy an induced running condition. The method of claim 3,
The security memory stores an induction start speed for starting a preset induction run according to an electronic map and roads to which a plurality of induction points are mapped and stored,
Characterized in that the security processor controls to start the autonomous running if the position of the vehicle is located within a predetermined distance from any one of the plurality of guidance points and the speed of the vehicle is less than the induction start speed And the vehicle. The method according to claim 1,
The security processor
If the vehicle is using an unauthorized function, is not at an allowed time of access, or the position of the vehicle is not a position permitted by the access right, And judges that the vehicle has been stolen. The method according to claim 1,
The vehicle device
A position information receiving unit for receiving position information of the vehicle;
A position sensor unit for measuring a position of the vehicle; And
And a communication unit for communicating with the user device,
Wherein the security processor acquires the position of the vehicle through at least one of the position information receiving unit and the position sensor unit, collects a function currently operating by the vehicle, And transmitting the position of the vehicle to the user device, receiving the vehicle stolen from the user device through the communication unit, and determining whether the vehicle is stolen. The method according to claim 1,
The vehicle device
A camera unit for photographing at least one of the inside and outside of the vehicle; And
And a communication unit for communication,
Wherein the security processor is adapted to photograph at least one of the inside and the outside of the vehicle through the camera unit when it is determined that the vehicle is stolen, and to transmit the photographed image through the communication unit to a device To the vehicle. ≪ RTI ID = 0.0 > 15. < / RTI > A method for recovering a stolen vehicle of a vehicle apparatus,
The security processor determining whether the vehicle is stolen; And
And if the security processor determines that the vehicle has been stolen, controlling the vehicle such that the vehicle autonomously travels to a predetermined guidance point. The method according to claim 6,
The step of controlling the vehicle
The secure processor controls to start the autonomous travel if the position of the vehicle is located within a predetermined distance from any one of the plurality of guidance points and the speed of the vehicle is less than the induction start speed Of the stolen vehicle. A computer-readable recording medium on which a program for performing a method for retrieving a stolen vehicle of a vehicle apparatus according to any one of claims 7 to 8 is recorded.

Images