TW201815602A - Fraud prevention device and fraud prevention unit - Google Patents

Abstract

A fraud prevention device used in a vehicle, provided with: a near field communication unit for performing near field communication with a wireless tag that is used in a vehicle and that transmits an identification code; a fraud determining unit for verifying the identification code received by the near field communication unit from the wireless tag and thereby determining whether or not a subject instrument has been fraudulently replaced, the subject instrument being an instrument to which the wireless tag is fixed or an instrument provided with the fraud prevention device; and a travel determining unit for determining whether or not the vehicle is travelling. The near field communication unit requests the wireless tag to transmit an identification code and causes an identification code to be transmitted from the wireless tag, and does not cause an identification code to be transmitted from the wireless tag until the travel determining unit determines that the vehicle is travelling.

Description

   Improper prevention device and improper prevention unit   

The present disclosure relates to an improper prevention device for preventing improper exchange of a device used in a vehicle, and an improper prevention unit including the improper prevention device. In particular, it is related to prevention of improper exchange of products mounted in positions that can be easily seen by users, such as ETC (Electronic Toll Collection, registered trademark).

Conventionally, a technology is known that uses near field communication (NFC) to prevent improper exchange of a machine used in a vehicle. For example, in Patent Document 1, an improper alteration detection system has been disclosed. The improper alteration detection system uses an ECU (Electronic Control Unit) to read ID information transmitted from an RFID (Radio Frequency IDentifier) installed in a water tank to detect Whether to assemble a formal water tank. In addition, in Patent Document 1, an improper modification detection system has been disclosed. The improper modification detection system is used in combination with RFID and also uses a non-contact temperature sensor and a contact temperature sensor. Installing RFID to deceive the ECU. In this improper modification of the detection system, the correlation between the temperature information of the non-contact temperature sensor and the contact temperature sensor, the ECU and the pre-recorded water tank surface temperature and the engine water temperature are compared to make the contact type The temperature sensor determines whether it is attached to the water tank as desired.

    [Prior technical literature]         [Patent Literature]    

[Patent Document 1] Japanese Patent Publication No. 2007-22467

The improperly modified detection system disclosed in Patent Document 1 is that even if the ID information returned from the RFID is intercepted so that the regular ID information is forged, as long as the regular temperature information is not forged, it can still be judged improper. However, the correlation between the surface temperature of the water tank and the water temperature of the engine varies depending on the vehicle, or the characteristics change due to the deterioration of the machine over time, so setting the correlation is difficult.

In the improperly modified detection system disclosed in Patent Document 1, it is difficult to design commonality. For example, if an improperly modified detection system developed in conjunction with a vehicle is applicable to another vehicle, the relationship between the surface temperature of the water tank and the engine water temperature needs to be readjusted in accordance with the vehicle, and adjusted to take into account environmental interference and degradation over time. The parameters under the influence of variation, it takes a lot of man-hours to design changes.

The present disclosure was created by the creator in view of the above disadvantages, and its purpose is to provide an improper prevention device and an improper prevention unit, which can prevent improper exchange of the equipment used in the vehicle, while using near field wireless communication, it is easier and More surely.

The improper prevention device according to the present disclosure is an improper prevention device, which is used in a vehicle, and includes short-range communication for performing short-range wireless communication with a wireless tag that is used in a vehicle and sends an identification code. By comparing the identification code received from the wireless tag in the short-range communication unit to determine the presence or absence of improper exchange of the target device, the target device is any of the device to which the wireless tag is fixed or the device with its own device One; and a driving determination unit (203) that determines whether the vehicle is driving; the short-range communication unit sends an identification code from the wireless tag when the wireless tag requires an identification code to be transmitted, and the driving determination unit determines that the vehicle is a vehicle No identification code will be sent from the wireless tag before driving.

According to the above-mentioned improper prevention device, the target device is fixed to the wireless tag or has an improper prevention device. Therefore, by comparing the identification code received by the improper prevention device from the wireless tag through short-range wireless communication, it is possible to determine the Is there an improper exchange? To falsify the identification code, consider intercepting the identification code sent from the wireless tag, but intercepting the identification code is difficult if the vehicle is not parked. On the other hand, according to the present disclosure, by making the driving determination unit determine that the vehicle does not send the identification code from the wireless tag before driving, it is possible to make it difficult to forge the identification code. As a result, it becomes possible to more easily and more surely prevent improper exchange of the equipment used in the vehicle while using the short-range wireless communication.

According to another aspect of the present disclosure, the improper prevention unit includes the aforementioned improper prevention device, and a wireless tag used in the same vehicle as the improper prevention device and provided with an identification code. According to this, since the above-mentioned improper prevention device is included, it becomes possible to more easily and more reliably prevent improper exchange of equipment used in a vehicle while using near-field wireless communication.

1‧‧‧Vehicle side unit

1a‧‧‧Vehicle side unit

2‧‧‧ Center

3‧‧‧vehicle system

3a‧‧‧Vehicle systems

10‧‧‧NFC tags

10a‧‧‧NFC Tag

20‧‧‧ On-board device

20a‧‧‧holding case

20b‧‧‧Main housing

20c‧‧‧arm

21‧‧‧ Improper prevention device

21a‧‧‧Improper prevention device

22‧‧‧Control device

22a‧‧‧control device

23‧‧‧ Gyro Sensor

23a‧‧‧Gyro sensor

24‧‧‧Acceleration sensor

24a‧‧‧Acceleration sensor

25‧‧‧Near Field Communication Equipment

25a‧‧‧Near Field Communication Equipment

26‧‧‧Center Communication Equipment

26a‧‧‧center communication equipment

27‧‧‧ positioning device

27a‧‧‧Positioning device

28‧‧‧ Display

28a‧‧‧Display

30‧‧‧Car device

200‧‧‧ Improper Prevention and Treatment Department

201‧‧‧Registration Department

202‧‧‧Vehicle position acquisition department

203‧‧‧Traffic Judgment Department

204‧‧‧Delivery Control Department

205‧‧‧yard acquisition department

206‧‧‧ Improper Judgment Department

207‧‧‧Notification Department

208‧‧‧Stop instruction

A‧‧‧ Vehicle

B‧‧‧ windshield

The above-mentioned object, other objects, features, and advantages of the present disclosure will be made clearer through the following detailed description with reference to the drawings. These drawings are: [Fig. 1] Fig. 1 is a diagram illustrating an example of a schematic configuration of a vehicle system, and [Fig. 2] Fig. 2 is an example of a schematic configuration of a vehicle-side unit. [Fig. 3] Fig. 3 is a diagram illustrating an example of a schematic configuration of an improper prevention processing unit. [Fig. 4] Fig. 4 is an example of improper judgment related processing by an improper prevention device An example of the flow chart is shown. [FIG. 5] FIG. 5 is a diagram for explaining an example of the configuration of a modified example. [FIG. 6] FIG. 6 is an example of a schematic configuration of a vehicle system. [Fig. 7] Fig. 7 is a diagram illustrating an example of a schematic configuration of a vehicle-side unit.

With reference to the drawings, a plurality of implementation forms and modification examples for disclosure will be described. In addition, for convenience of explanation, among a plurality of embodiments and modifications, parts having the same functions as those shown in the drawings used in the previous description may be denoted by the same reference numerals, and descriptions thereof will be omitted. Regarding the parts that are indicated by the same symbols, reference may be made to the description in other embodiments and / or modifications.

    (Embodiment 1)         (Schematic configuration of vehicle system 3)    

Hereinafter, the first embodiment of the present disclosure will be described using drawings. As shown in FIG. 1, the vehicle system 3 includes a vehicle-side unit 1 and a center 2 used in the vehicle A side. The vehicle-side unit 1 includes an NFC (Near Field Communication) tag 10 and an in-vehicle device 20. Details of the vehicle-side unit 1 will be described later. In this embodiment, although the vehicle A will be described as an example of the vehicle A, it is also applicable to vehicles such as motorcycles other than automobiles.

The center 2 is a server device such as a company, a store, or a public institution, and communicates with the in-vehicle device 20 via a public network and a base station, thereby providing a predetermined service to users who use the in-vehicle device 20. An example of the predetermined service includes a service that automatically performs settlement of road tolls and parking fees based on information such as the position of the vehicle A obtained from the in-vehicle device 20. In addition, the center 2 may include a plurality of server devices.

    (Schematic configuration of the vehicle-side unit 1)    

Next, the vehicle-side unit 1 will be described. The vehicle-side unit 1 includes the NFC tag 10 and the vehicle-mounted device 20 as described above. This NFC tag 10 corresponds to a wireless tag, and the in-vehicle device 20 corresponds to a target device.

The NFC tag 10 is a wireless tag fixed to the vehicle A to perform near field communication (NFC) with the vehicle-mounted device 20 existing in the communication range. The short-range wireless communication referred to here is communication in accordance with the NFC standard, and is limited to a communication distance of about 10 cm. Near-field wireless communication is also called near-field wireless communication.

Although the NFC tag 10 may be an active wireless tag or a passive wireless tag, in this embodiment, a passive wireless tag that converts radio waves from the in-vehicle device 20 into electricity and functions is used. As an example, the NFC tag 10 is attached to a glass, a body portion, and the like of a windshield of the vehicle A in a state that is difficult to remove. The difficult-to-remove state refers to a state in which it is difficult to remove without damage, and a state in which it is difficult to remove itself. In addition, the NFC tag 10 stores a unique password in a non-volatile memory, and transmits an identification code by short-range wireless communication only when a password consistent with this unique password is received. This password is equivalent to the authentication information.

The in-vehicle device 20 is installed near the NFC tag 10 as shown in FIG. 1, so that a short-range communication device 25 included in the in-vehicle device 20 described later can perform short-range wireless communication with the NFC tag 10. As an example, the in-vehicle device 20 may be configured as a support such as a bracket that is detachably mounted on a bracket fixed to the vehicle A. The schematic configuration of the in-vehicle device 20 itself is discussed below.

    (Schematic configuration of the in-vehicle device 20)    

Next, a schematic configuration of the in-vehicle device 20 will be described using FIG. 2. As shown in FIG. 2, the in-vehicle device 20 includes a control device 22, a gyro sensor 23, an acceleration sensor 24, a short-range communication device 25, a center communication device 26, a positioning device 27, and a display 28.

The gyro sensor 23 detects the angular velocity generated by the in-vehicle device 20. As an example, the gyro sensor 23 detects the rotational angular velocity of the vehicle A about a vertical axis while the vehicle-mounted device 20 is mounted on the vehicle A in a predetermined posture.

The acceleration sensor 24 is a three-axis acceleration sensor that detects accelerations acting in three orthogonal directions that are orthogonal to each other. For convenience, the three axis directions for acceleration detection are the X-axis, Y-axis, and Z-axis directions. This acceleration sensor 24 corresponds to an inertial sensor. The acceleration sensor 24 is provided in a housing of the vehicle-mounted device 20.

The short-range communication device 25 performs short-range wireless communication in accordance with the NFC standard. The short-range communication device 25 transmits a password unique to the NFC tag 10 through short-range wireless communication. When the identification code is transmitted from the NFC tag 10 by short-range wireless communication, the identification code is received. The short-range communication device 25 functions as a reader of the NFC tag 10. This short-range communication device 25 corresponds to a short-range communication unit. The center communication device 26 communicates with the center 2 via the public network and the base station.

The positioning device 27 is based on a positioning signal received by a GNSS receiver that receives positioning signals transmitted by positioning satellites constituting a GNSS (Global Navigation Satellite System), and uses the position of the vehicle A of the positioning device 27 (hereinafter, Vehicle position). The positioning device 27 may be configured to perform positioning on the vehicle position by using the measurement results under the gyro sensor 23 and the acceleration sensor 24 as well. The display 28 is a display such as a liquid crystal display and displays characters.

The control device 22 is provided with a processor, a volatile memory, a non-volatile memory, I / O, and a bus connected thereto, and performs various processes by executing a control program stored in the non-volatile memory. The control device 22 includes an improper prevention processing unit 200 that performs a process for preventing improper exchange of the in-vehicle device 20. The improper prevention processing unit 200, the acceleration sensor 24, and the short-range communication device 25 function as the improper prevention device 21. The configuration including the fraud prevention device 21 and the NFC tag 10 corresponds to a fraud prevention unit.

    (Schematic configuration of improper prevention processing unit 200)    

Next, a schematic configuration of the fraud prevention processing unit 200 will be described using FIG. 3. As shown in FIG. 3, the improper prevention processing unit 200 includes a registration unit 201, a vehicle position acquisition unit 202, a driving determination unit 203, a transmission control unit 204, a code acquisition unit 205, an improper determination unit 206, a notification unit 207, and a stop. Instructor 208.

The registration unit 201 is a non-volatile memory, and stores a password unique to the NFC tag 10 (hereinafter, simply referred to as a password), a regular identification code of the NFC tag 10, a vehicle registration number of the vehicle A, and the like. This vehicle registration number is equivalent to identification information. The vehicle position acquisition unit 202 sequentially acquires the vehicle position measured by the positioning device 27.

The driving determination unit 203 monitors the value of the acceleration detected by the acceleration sensor 24 to determine whether the vehicle A is driving. The driving determination unit 203 may be configured to determine that the vehicle A is driving when the acceleration sensor 24 detects acceleration of a certain value or more. The fixed value mentioned here may be a value that can be generated to the extent that the acceleration of the vehicle A is generated while the vehicle A is not stopped.

In addition, the driving determination unit 203 preferably determines that the vehicle A is driving when the acceleration sensor 24 detects acceleration (ie, motion) for a fixed period or more in a certain direction. This is to prevent misjudgment that vehicle A is driving due to acceleration caused by a person shaking vehicle A. As an example, the state in which the amount of deviation in the direction of the combined vector of accelerations in the three-axis direction detected by the acceleration sensor 24 falls within the threshold range may be continued, and it may be determined as a movement in a certain direction. In addition, the fixed period referred to herein may be set to be a period estimated to be a period in which a temporary movement in a certain direction due to a person shaking the vehicle A and a continuous period in which the vehicle A continues to run in a certain direction Sexual movement in a certain direction is distinguished.

The transmission control unit 204 reads the password from the registration unit 201 when the driving determination unit 203 determines that the vehicle A is driving, and sends the password to the short-range communication device 25. On the other hand, when the driving determination unit 203 determines that the vehicle A is not driving, the driving determination unit 203 determines that the vehicle A does not send a password from the short-range communication device 25 before the vehicle A is driving.

In the case where the NFC tag 10 has transmitted a password from the short-range communication device 25, this password is received. The NFC tag 10 transmits an identification code when the received password matches the password stored in the non-volatile memory. Therefore, the transmission of the password from the transmission control unit 204 corresponds to the transmission of the request identification code. The code obtaining unit 205 obtains the identification code via the short-range communication device 25 when the identification code has been transmitted from the NFC tag 10.

The improper determination unit 206 compares the identification code obtained by the code acquisition unit 205 with the regular identification code stored in the registration unit 201. In addition, when the identification codes are consistent (that is, when the code comparison is established), it is determined that there is no improper exchange of the vehicle-mounted device 20. On the other hand, when the identification codes are not consistent, it is determined that the vehicle-mounted device 20 is present. Improper exchange.

The notification unit 207 reads the vehicle registration number of the vehicle A from the registration unit 201 when the improper determination unit 206 determines that there is an improper exchange of the in-vehicle device 20, and sends the vehicle registration number from the center communication device 26 to the center 2 . In the center 2, based on the fact that the vehicle registration number is sent from the in-vehicle device 20, the vehicle A having the improper exchange of the in-vehicle device 20 is specified. In addition, the notification unit 207 may be configured to transmit the vehicle position of the vehicle A acquired by the vehicle position acquisition unit 202 when the vehicle registration number of the vehicle A is transmitted from the center communication device 26 to the center 2. At the center 2, based on the fact that the vehicle position of the vehicle A is sent from the in-vehicle device 20, the position of the vehicle A having the improper exchange of the in-vehicle device 20 is specified. In addition, the public institution may be configured to ban the vehicle A having an inappropriate exchange based on the information of the vehicle A and the location of the vehicle A specified in the center 2 as inappropriate.

In addition, the notification unit 207 may be configured to display on the display 28 that the improper exchange of the in-vehicle device 20 is the main point when the improper determination unit 206 determines that there is an improper exchange of the in-vehicle device 20. In addition, the notification unit 207 may be configured to display, on the meter of the vehicle A or the like, a display focusing on an improper exchange with the in-vehicle device 20.

The stop instruction unit 208 stops the function of the in-vehicle device 20 when the improper determination unit 206 determines that there is an improper exchange of the in-vehicle device 20. For example, the stop instruction unit 208 may be configured to stop a function related to a service received by a user using the vehicle-mounted device 20 via the vehicle-mounted device 20 among the functions of the vehicle-mounted device 20. In addition, it may be comprised so that the full function of the vehicle-mounted device 20 may be stopped. The in-vehicle device 20 that stops the function by the stop instruction unit 208 is preferably configured so that the function stop is not canceled by restarting after the power is turned off. For example, the in-vehicle device 20 whose function is stopped by the stop instruction unit 208 can be released from the stop of the function by a special operation at a service facility or the like recognized by a public institution or a vehicle manufacturer.

    (Improper judgment-related processing in the improper prevention device 21)    

Here, using the flowchart of FIG. 4, an example of a flow of a process (hereinafter, an inappropriate judgment-related process) related to the judgment of the improper exchange of the in-vehicle device 20 by the improper prevention device 21 will be described. The flowchart of FIG. 4 may be configured to start when the power of the vehicle-mounted device 20 is turned on. In addition, if the ignition source of the vehicle A is turned on, and the power source of the vehicle-mounted device 20 is also turned on, the flowchart of FIG. 4 is started when the ignition source of the vehicle A is turned on.

First, at S1, the driving determination unit 203 monitors the value of the acceleration detected by the acceleration sensor 24 to determine whether the vehicle A is driving. When it is determined that the vehicle A is driving (YES in S1), the system moves to S2. On the other hand, if it is determined that the vehicle A is not driving (NO in S1), the process proceeds to S7.

In S2, the transmission control unit 204 transmits the password from the short-range communication device 25. The password transmitted from the short-range communication device 25 is received by the NFC tag 10, and when the password stored in the NFC tag 10 matches, the identification code is transmitted from the NFC tag 10.

In S3, when the proximity code obtaining unit 205 has obtained the identification code transmitted from the NFC tag 10 by the short-range communication device 25 (YES in S3), the process proceeds to S4. On the other hand, if the code acquisition unit 205 fails to acquire the identification code (NO in S3), the process proceeds to S7. As an example, if the identification code is not obtained within the set time after the password is transmitted, it can be regarded as the failure to obtain the identification code.

In S4, the improper determination unit 206 compares the identification code obtained by the code acquisition unit 205 with the regular identification code stored in the registration unit 201. In S5, when the code comparison of S4 is established (YES in S5), the process proceeds to S6. On the other hand, if the code comparison in S4 does not hold (NO in S5), the system moves to S8.

In S6, the improper determination unit 206 determines that there is no improper exchange by the vehicle-mounted device 20. In S7, in a case where the improper determination-related processing ends (YES in S7), the improper determination-related processing is ended. On the other hand, if the timing of the end of the relevant process is not improperly determined (NO in S7), the process returns to S1 and the process is repeated. As an example of an end timing of the improper determination-related processing, a case where the power of the in-vehicle device 20 is turned off is mentioned.

In S8, which is a process performed when the code comparison in S4 is not established, the improper determination unit 206 determines that there is an improper exchange of the in-vehicle device 20. In S9, the notification unit 207 sends the vehicle registration number of the vehicle A read from the registration unit 201 and the vehicle position of the vehicle A obtained by the vehicle position acquisition unit 202 to the center 2 from the center communication device 26. In S10, the system stop instruction unit 208 stops the function of the in-vehicle device 20, and ends the improper determination related processing.

    (Summary of Embodiment 1)    

In the configuration according to the first embodiment, the improper prevention device 21 is provided in the in-vehicle device 20, and the identification code received by the improper prevention device 21 from the NFC tag 10 through short-range wireless communication is compared with the regular identification code registered in the device itself. . Therefore, the presence or absence of improper exchange of the in-vehicle device 20 can be determined based on the fact that the in-vehicle device 20 is improperly exchanged so that the comparison cannot be established.

Here, the method to be considered in the case of attempting to deceive such an improper prevention device 21 and perform improper exchange will be discussed. To improperly exchange the vehicle-mounted device 20, it is necessary to forge the NFC tag 10. To read the memory of the NFC tag 10 with a password as in this embodiment, the short-range communication device 25 sends the Read command and the password to the NFC tag 10 as a set. Therefore, to counterfeit the NFC tag 10 with a password, a so-called retransmission attack is considered. First, a device for intercepting wireless communication is provided near the NFC tag 10 to intercept communication content between the NFC tag 10 and the short-range communication device 25. Then, it writes another wireless tag or an electronic circuit that performs the same function as the NFC tag 10 by retransmitting the intercepted communication content, and finally fixes the fake wireless tag or electronic circuit to the vehicle-mounted device 20.

With regard to such an improper exchange attempt, according to the configuration of the first embodiment, if the password transmitted by the improper prevention device 21 through the short-range communication device 25 does not match the password stored in the NFC tag 10, the NFC tag 10 does not send an identification code. Therefore, it is difficult to improperly read a regular identification code from the NFC tag 10.

In addition, according to the configuration of the first embodiment, the driving determination unit 203 determines that the vehicle A does not send an identification code from the NFC tag 10 before driving, so that the NFC tag 10 and the short-range communication device 25 can be used only during driving of the vehicle. To communicate. While driving, a regular user (that is, a driver) is in the passenger compartment, so it is difficult to install a device for interception in the vehicle. Even if a device for interception is installed in the vehicle during a period when the regular user is not in the parking lot, it is easy for the regular user to perceive the device installed for interception when returning. Therefore, it is possible to prevent improper exchange by means such as removing the device for interception by a regular user. In addition, the NFC tag 10 and the short-range wireless device 25 do not communicate during parking, so interception cannot be performed.

As described above, in the configuration according to the first embodiment, by making the driving determination unit 203 determine that the vehicle A does not send an identification code from the NFC tag 10 before driving, it is easy to make it difficult to counterfeit a regular identification code. As a result, it becomes possible to prevent the improper exchange of the in-vehicle device 20 more easily and more reliably while using the short-range wireless communication.

Furthermore, according to the configuration of the first embodiment, the driving determination unit 203 determines whether the vehicle A is driving from the detection result obtained by using the acceleration sensor 24 provided in the in-vehicle device 20, so it becomes more difficult to disguise. Vehicle A is driving. The details are as follows. For example, when the ignition (hereinafter, IG) power supply of the vehicle A is on, and the driving determination unit 203 determines that the vehicle A is driving, the improper prevention device 21 may be connected to the IG power supply by disconnection. To other power sources to pretend that vehicle A is driving. In addition, if the driving determination unit 203 determines that the vehicle A is driving based on the output of the acceleration sensor of the vehicle A, the vehicle A may be disguised by inputting a false signal from the outside of the improper prevention device 21. Vehicle A is driving.

On the other hand, according to the configuration of the first embodiment, the driving determination unit 203 determines whether the vehicle A is driving by using a detection result obtained by using the acceleration sensor 24 provided in the in-vehicle device 20, making it impossible to do so. Disguise makes it more difficult for vehicle A to disguise. In addition, although the method of causing the improper prevention device 21 to erroneously determine the driving state can be considered as a method of applying acceleration to the vehicle, in this embodiment, if the acceleration is not a certain direction, it will not be determined as the driving state, so it is difficult to camouflage. .

    (Modification 1)    

In the first embodiment, the configuration of the single housing of the in-vehicle device 20 is shown, but it is not necessarily limited to this. For example, a structure in which the housing of the in-vehicle device 20 is plural (hereinafter, Modification 1) may be adopted. Here, an example of the structure of the modification 1 is demonstrated using FIG. 5. FIG. In FIG. 5, a case where a supporter such as a bracket fixed to a windshield (referenced to B in FIG. 5) of the vehicle A is detachably mounted is illustrated as an example.

As shown in Fig. 5, the housing of the vehicle-mounted device 20 may be divided into a holding case 20a and a main case 20b, and connected through an arm member 20c. As an example, the holding case 20a may be configured to include the functions of a gyro sensor 23, an acceleration sensor 24, a short-range communication device 25, a center communication device 26, and a positioning device 27, and functions as an improper prevention processing unit 200. Control device. The main casing 20b may be configured as a control device including a display 28 and control of the display 28. In addition, the arm member 20c may be, for example, a cylindrical flexible member, and may be configured as a flexible cable for internally connecting the electronic component holding the housing 20a and the electronic component of the main housing 20b. . In addition, the user may be configured to bend the flexible arm piece 20c so that the angle with respect to the main case 20b holding the case 20a can be changed.

    (Embodiment 2)    

In the first embodiment, the configuration for performing the improper determination-related processing on the target device (hereinafter, the target device) that determines the presence or absence of improper exchange is shown, but it is not necessarily limited to this. For example, it is also possible to adopt a configuration in which an improper determination-related process is performed on a device other than the target device (hereinafter, Embodiment 2).

    (Schematic configuration of the vehicle system 3a)    

Hereinafter, Embodiment 2 of this disclosure is demonstrated using drawing. As shown in FIG. 6, the vehicle system 3 a includes a vehicle-side unit 1 a and a center 2 used in the vehicle A side. The vehicle-side unit 1a includes an NFC tag 10a, a fraud prevention device 21a, a center communication device 26a, a positioning device 27a, a display 28a, and a vehicle-mounted device 30. Details of the vehicle-side unit 1a will be described later. The center 2 is the same as the center 2 of the first embodiment except that it communicates with the in-vehicle device 30 to provide a predetermined service to a user who uses the in-vehicle device 30. As for the predetermined services, as mentioned above, the services of automatic settlement of road tolls and parking fees are listed.

    (Schematic configuration of the vehicle-side unit 1a)    

Next, the vehicle-side unit 1a will be described using FIG. 7. The vehicle-side unit 1a includes the NFC tag 10a, the improper prevention device 21a, the center communication device 26a, the positioning device 27a, the display 28a, and the vehicle-mounted device 30 as described above. This NFC tag 10a corresponds to a wireless tag, and the in-vehicle device 30 corresponds to a target device.

The NFC tag 10a is the same as the NFC tag 10 except that it is fixed to the in-vehicle device 30 and performs short-range wireless communication with the improper prevention device 21a existing in the communication range. The NFC tag 10a is attached to the in-vehicle device 30 in a state where it is difficult to remove. The difficult-to-remove state refers to a state in which it is difficult to remove without damage, and a state in which it is difficult to remove itself. The improper prevention device 21a is configured to function similarly to the improper prevention device 21 of the first embodiment. The improper prevention device 21a may be configured to be fixed to the vehicle A, or may be configured to be mountable to the vehicle A. The details of the fraud prevention device 21a will be described later.

The central communication device 26a is the same as the central communication device 26 of the first embodiment except that the central communication device 26a is not provided in the target device and is connected to the improper prevention device 21a. The positioning device 27a is the same as the positioning device 27 of the first embodiment except that the positioning device 27a is not provided in the target device and is connected to the improper prevention device 21a. The display 28a is a display such as a liquid crystal display or the like provided on a meter of the vehicle A, and displays characters.

The in-vehicle device 30 is, for example, a support device that can be detachably attached to a bracket fixed to the vehicle A. In addition, as described above, the in-vehicle device 30 fixes the NFC tag 10a in a state where it is difficult to remove.

    (Schematic configuration of improper prevention device 21a)    

Next, a schematic configuration of the fraud prevention device 21a will be described using FIG. 7. As shown in FIG. 7, the improper prevention device 21a includes a control device 22a, a gyro sensor 23a, an acceleration sensor 24a, and a short-range communication device 25a.

The gyro sensor 23a detects the angular velocity generated by the improper prevention device 21a. As an example, the gyro sensor 23a detects the rotational angular velocity of the vehicle A about the vertical axis in a state where the improper prevention device 21a is mounted on the vehicle A in a predetermined posture. In addition, it may be configured to include a gyro sensor 23a in the fraud prevention device 21a. The acceleration sensor 24a is the same as the acceleration sensor 24 of the first embodiment except that it is provided in the housing of the fraud prevention device 21a. This acceleration sensor 24a is also equivalent to an inertial sensor. The short-range communication device 25a is the same as the short-range communication device 25 of the first embodiment, except that the short-range communication device 25a is not provided in the target device but is provided in the improper prevention device 21a. This short-range communication device 25a also corresponds to a short-range communication section.

The control device 22a includes a processor, a volatile memory, a non-volatile memory, an I / O, and a bus connected thereto, and executes various processes by executing a control program stored in the non-volatile memory. The control device 22a is provided with the improper prevention processing unit 200 similar to that of the first embodiment, and uses the short-range wireless communication between the NFC 10a and the short-range communication device 25a to perform the same processing as the improper determination related to the first embodiment and perform vehicle-mounted Prevention of improper exchange of the processor 30 is related to the processing.

The improper prevention device 21a compares the identification code of the NFC 10a obtained by the improper determination unit 206 in the code acquisition unit 205 with the regular identification code stored in the registration unit 201. If the identification codes do not match, it is determined There is an improper exchange with the vehicle-mounted device 30. The stop instruction unit 208 may be configured to instruct the stop of the functions of the vehicle-mounted device 30 via the wireless or wired communication with the vehicle-mounted device 30 when the improper determination unit 206 determines that there is an improper exchange of the vehicle-mounted device 30. The communication module for communication is transmitted to the vehicle-mounted device 30, and the function of the vehicle-mounted device 30 is stopped in the same manner as in the first embodiment.

When the configuration of the second embodiment is adopted, the driving determination unit 203 determines that the vehicle A does not send an identification code from the NFC tag 10a before driving, so that it is easier and more convenient to use near-field wireless communication. Prevention of improper exchange of the in-vehicle device 30 is surely performed.

    (Modification 2)    

In the aforementioned embodiment, a configuration using a three-axis acceleration sensor as the acceleration sensors 24 and 24a is shown, but it is not necessarily limited to this. For example, if the in-vehicle device 20 is used in the vehicle A and the inappropriate prevention device 21a is used so that the detection axes of the acceleration sensors 24 and 24a coincide with the front-rear direction of the vehicle A, the sensor may be a 2-axis acceleration sensor. It can also be a 1-axis acceleration sensor.

    (Modification 3)    

In the aforementioned embodiment, the driving determination unit 203 determines the detection results obtained by using the acceleration sensor 24 provided in the vehicle-mounted device 20 and the acceleration sensor 24a provided in the improper prevention device 21a. The constitution of whether the vehicle A is driving or not is not necessarily limited to this. For example, the driving determination unit 203 may determine whether the vehicle A is driving from the detection result obtained by using the gyro sensor 23 provided in the in-vehicle device 20 and the gyro sensor 23a provided in the improper prevention device 21a. Medium (hereinafter, modification 3). In the case of adopting the configuration of Modification Example 3, it may be configured to determine that the vehicle A is traveling when the gyro sensors 23 and 23a detect the angular velocity of a certain value or more. In addition, in order to prevent erroneous determination that vehicle A is driving due to the angular velocity caused by a person shaking the vehicle A, it may also be configured to detect rotations in a certain direction for more than a fixed period when the gyro sensors 23 and 23a ( That is, in the case of sports), it is determined that the vehicle A is driving. The gyro sensors 23 and 23a also correspond to inertial sensors. In the case where the modification 3 is adopted in the second embodiment, the improper prevention device 21a may not be provided with the acceleration sensor 24a.

    (Modification 4)    

In addition, the driving determination unit 203 corresponding to the on / off of the IG power supply of the vehicle A may be configured to determine whether the vehicle A is driving, or may be configured to determine the vehicle A based on a signal obtained from a signal line of the vehicle A. Are you driving? Examples of a signal obtained from a signal line of the vehicle A include a signal from an acceleration sensor, a signal from a vehicle speed sensor, and the like.

    (Modification 5)    

In the foregoing embodiment, the configuration in which the NFC 10 and 10a do not transmit the identification code is shown when the password transmitted from the improper prevention devices 21 and 21a does not match the password stored in the NFC 10 and 10a, but it is not necessarily limited to this. For example, the NFC 10 and 10a may be configured to transmit the identification code when the NFC 10 and 10a receive the transmission request of the identification code from the improper prevention devices 21 and 21a. In this case, the improper prevention devices 21 and 21a may be constituted so that the short-distance communication device 25 or 25a sends a transmission request for an identification code instead of a password.

    (Modification 6)    

In the aforementioned embodiment, it is shown that the improper prevention unit 21 or 21a notifies the center 2 of the function of the in-vehicle devices 20 and 30 when the improper determination unit 206 determines that the in-vehicle devices 20 and 30 are improperly exchanged. The composition of the stop is not necessarily limited to this. For example, it may be configured to prevent the devices 21 and 21a from notifying the center 2 without stopping the functions of the vehicle-mounted devices 20 and 30, or may be configured not to notify the center 2 but stopping the functions of the vehicle-mounted devices 20 and 30 .

    (Modification 7)    

In addition, the in-vehicle devices 20 and 30 can also be configured as a roadside unit that provides a predetermined service and a communication module that performs wireless communication (that is, road-to-vehicle communication). Users using the in-vehicle devices 20 and 30 provide services. As an example of the service in this case, there are automatic settlement at the available speed, automatic settlement of parking fees at a toll parking lot, support for crossing traffic, provision of congestion information, and the like. For example, the road-to-vehicle communication between the in-vehicle devices 20 and 30 and the roadside unit may be configured to utilize wireless communication based on the specifications of WAVE (Wireless Access in Vehicular Environment).

Although the present disclosure is described based on the embodiment, it should be understood that the present disclosure is not limited to the embodiment and the structure. The present disclosure also includes various modification examples, deformations within an equal range, and the like. In addition, various combinations and forms, and even other combinations and forms that include one element, above or below, also fall into the scope and ideological scope of this disclosure.

Claims (10)

    An improper prevention device for use in a vehicle, comprising: a short-range communication unit (25, 25a) that performs short-range wireless communication with a wireless tag (10, 10a) used for transmitting the identification code in the vehicle; An improper determination unit (206) for determining the presence or absence of improper exchange of a target device by comparing the identification code received from the wireless tag in the short-range communication unit, the target device is a device (30) to which the wireless tag is fixed or has Any one of the device (20) installed by itself; and a driving determination section (203) for determining whether the vehicle is driving; wherein the short-range communication section requests the wireless tag to send the identification code and gives The identification code is transmitted from the wireless tag, and the identification code is not transmitted from the wireless tag until the driving determination unit determines that the vehicle is driving.         For example, the improper prevention device in the first scope of the patent application, which further includes an inertial sensor (23, 23a, 24, 24a), and the driving determination unit is based on a detection result obtained by using the inertial sensor. , And determine whether the aforementioned vehicle is driving.         For example, the improper prevention device in the second scope of the patent application, wherein the inertial sensor is an acceleration sensor (24, 24a), and the driving determination unit is a fixed period in which the acceleration sensor detects a certain direction. In the case of the above movement, it is determined that the aforementioned vehicle is driving.         For example, the improper prevention device of any one of claims 1 to 3, further includes a stop instruction unit (208). The stop instruction unit is determined by the improper determination unit to have an improper exchange of the target device. Then, the function of the target device is stopped.         An improper prevention unit, comprising: an improper prevention device (21, 21a) such as any one of claims 1 to 3 in the scope of patent application; and a wireless device that transmits and uses an identification code for the same vehicle as the one using the aforementioned improper prevention device Label (10, 10a).         For example, the improper prevention unit in the scope of application for a patent, in which the aforementioned target device is a device (30) used for the aforementioned vehicle and having the aforementioned wireless tag (10a) fixed.         For example, the improper prevention unit in the fifth scope of the patent application, wherein the wireless tag (10) is fixed to the vehicle, and the target machine is used in the vehicle, and the machine (20) is provided with the improper prevention device (21). ).         For example, the improper prevention unit of the fifth scope of the application for a patent, wherein the short-distance communication unit of the improper prevention device is a request for transmitting the identification code on the wireless tag, and sends an authentication using the wireless tag. For the authentication information used in the above aspect, the wireless tag sends the identification code when the authentication is established through the authentication information sent from the short-range communication unit.         For example, the improper prevention unit in the scope of application for patent No. 5 further includes a central communication device (26, 26a) for communicating with the center. The central communication device is determined by the improper judgment section of the improper prevention device as having the aforementioned In the case of improper exchange of the target device, identification information for identifying the vehicle is sent to the center.         For example, the improper prevention unit in the ninth scope of the patent application, which further includes a positioning device (27, 27a) for measuring the position of the vehicle, and the central communication device is determined by the improper determination unit of the improper prevention device as When there is an improper exchange of the target device, the position of the vehicle measured by the positioning device is also sent to the center.